Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File:                     FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier:          h+Iw8p78jDoYaVCGqxZ4UBGfFVP7a7vJ4nGz5nBzxCA=
Subject key identifier:   6F:F1:2F:0A:CD:0A:AF:7C:FC:65:88:6A:6C:7F:FD:5D:E7:4A:FC:01
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer:       /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial:       019747B07E40F257EF1749EC813B91DA5365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number:          148C
Signing time:             Sat 07 Jun 2025 00:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:38 +0000
Files and hashes:         1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: BLsSgHJ8HeMuYr6DwVI1vUd59yhf0fmum8l+gkdszrA=)
                          2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:7e:40:f2:57:ef:17:49:ec:81:3b:91:da:53:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
        Validity
            Not Before: Jun  7 00:00:38 2025 GMT
            Not After : Jun  8 00:00:38 2025 GMT
        Subject: CN=6ff12f0acd0aaf7cfc65886a6c7ffd5de74afc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:de:c0:79:98:f5:95:df:b1:55:0d:81:ec:
                    4c:6e:97:42:2f:b6:40:80:1c:2f:e3:05:f1:88:21:
                    cb:f5:91:34:46:61:12:60:39:6e:de:a0:de:83:09:
                    10:48:8e:b0:9a:93:dd:f2:65:0e:ee:3e:c2:51:ac:
                    42:c6:05:49:2d:ae:44:4a:ac:e2:7e:76:f5:c2:d0:
                    50:76:41:3a:4d:93:bd:95:fb:d9:44:e7:20:9a:01:
                    88:26:b1:c9:33:eb:00:4d:d2:70:2a:28:c0:dd:16:
                    d6:68:ea:3a:80:23:34:d5:45:8e:96:07:07:5e:69:
                    04:46:65:f9:c6:3c:5b:f0:16:b0:5a:48:92:ee:13:
                    b3:df:50:7c:0f:12:f9:66:51:18:b2:39:21:44:41:
                    97:7d:d4:19:4d:a1:7e:ed:01:fb:03:c3:4a:d7:c2:
                    82:30:42:76:6b:03:43:91:fb:11:8a:2d:f6:3d:e8:
                    a7:7f:8d:60:50:1e:ed:8e:cf:0b:d1:05:38:00:54:
                    de:83:ef:f3:fd:a9:89:58:a6:1b:84:01:6a:80:d7:
                    df:11:5b:98:b6:a4:4d:40:32:1d:36:32:1d:54:eb:
                    4f:da:e4:1d:b5:b7:d0:af:1b:79:92:92:ff:29:9d:
                    21:63:f7:40:67:7f:f4:35:5f:53:d8:a0:a6:d1:3f:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F1:2F:0A:CD:0A:AF:7C:FC:65:88:6A:6C:7F:FD:5D:E7:4A:FC:01
            X509v3 Authority Key Identifier:
                keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:07:bd:69:f7:c5:98:7c:26:e7:3f:9e:91:f4:4d:fe:1e:
         80:c0:f9:2a:d0:a9:d0:a2:ac:25:2b:e2:ba:c7:8f:29:5b:cb:
         63:f6:46:6d:73:60:21:2b:4e:f5:e9:96:34:c7:1b:8c:d5:1c:
         8e:58:ec:fb:0b:4b:7c:9f:d1:f6:08:0a:4b:b3:55:8a:b5:af:
         95:f8:8b:64:52:ed:d3:2c:3c:32:2a:38:e3:67:6d:75:2f:f6:
         8d:2d:38:6e:c5:03:6f:44:1b:b9:5c:47:de:ad:6f:06:27:a0:
         24:0c:10:53:f8:08:ad:2f:b7:87:f2:f2:be:f0:a5:7b:5f:e8:
         1f:21:bd:4a:3b:c6:0e:9a:36:eb:39:bb:b2:70:40:fe:f2:fb:
         0b:3e:68:48:63:ad:7d:28:3b:28:eb:39:7b:03:ba:2b:ec:93:
         17:15:7b:dc:71:0e:e8:63:6f:54:81:21:f8:62:cd:7b:fa:a6:
         01:b5:11:12:cd:93:a0:7c:5c:65:f3:87:0d:71:9c:88:2d:1f:
         2d:cd:7b:6b:26:63:6b:29:f5:5d:6a:3e:28:a2:36:20:1d:ff:
         fd:e5:cf:2e:63:38:10:ab:bc:f4:7b:01:9c:a5:49:87:b3:93:
         20:c1:33:91:da:71:8e:2f:b1:c3:b3:b3:ed:39:22:3d:e2:68:
         48:cd:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:43 2025 by rpki-client