Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File:                     fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier:          CT4FXLeexxYXWsPWEwTl79ofUk4aLQX+dfPU1FBW8tw=
Subject key identifier:   FB:78:2D:DC:31:33:7B:FA:26:E2:A7:B3:B8:A4:0E:F3:6D:53:87:54
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer:       /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial:       01976C987A0D62EF764B011012A9B282D67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number:          0B42
Signing time:             Sat 14 Jun 2025 04:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:21 +0000
Files and hashes:         1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=)
                          2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: RKMC/Q5Klx7zCyn+3U3OnD/K0RNMeHJAyo+mTbU3k5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:7a:0d:62:ef:76:4b:01:10:12:a9:b2:82:d6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
        Validity
            Not Before: Jun 14 04:00:21 2025 GMT
            Not After : Jun 15 04:00:21 2025 GMT
        Subject: CN=fb782ddc31337bfa26e2a7b3b8a40ef36d538754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fa:43:e4:92:e2:b0:a8:03:14:2c:7b:9d:cd:
                    20:d8:94:15:b6:b4:ea:af:cc:0e:13:6a:d2:36:e9:
                    50:c5:19:98:04:b1:01:f9:10:53:ce:6c:66:d2:7d:
                    b9:9d:7b:a3:be:1a:d8:da:85:b2:a0:84:93:a3:aa:
                    d9:bc:9e:eb:b8:cd:c0:84:57:ac:4d:d0:c1:12:1e:
                    4b:84:cc:46:c4:17:b5:8c:e5:0d:00:2c:d0:bb:75:
                    f8:63:7b:96:57:fb:64:c5:10:87:e6:2a:86:0b:5c:
                    85:e1:54:05:90:fd:45:2f:75:1c:59:95:b0:c6:4d:
                    9e:79:dd:f1:ca:53:2d:81:99:29:33:ba:81:37:65:
                    40:4c:c9:bb:56:bc:0e:64:86:bd:91:dd:42:de:35:
                    56:4f:f8:0f:0c:a7:41:86:12:14:10:da:4f:7e:b6:
                    6a:ab:9d:e7:25:c2:84:a2:ac:0f:22:4d:de:08:d9:
                    07:a4:12:07:d9:08:d4:78:45:3f:bc:d8:ee:ea:2f:
                    20:08:a8:f0:1c:e0:06:a3:48:ae:6e:ee:ae:24:7e:
                    bb:d0:04:99:4a:15:bc:43:8c:e7:b4:80:68:92:8e:
                    67:a4:d3:8c:fc:c0:c7:a3:38:ed:48:a7:a6:c3:b6:
                    5e:56:8c:b5:da:be:ac:8e:f5:4f:c7:e8:22:88:f4:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:2D:DC:31:33:7B:FA:26:E2:A7:B3:B8:A4:0E:F3:6D:53:87:54
            X509v3 Authority Key Identifier:
                keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:84:99:b4:d6:b2:d6:c9:52:c3:ec:0e:4f:7b:74:99:d6:f0:
         96:c9:c0:cd:8a:25:70:bb:78:e1:86:1d:30:e6:bc:2d:03:9b:
         52:ef:13:6f:6a:5f:6a:cc:cd:12:b9:40:e3:2a:74:f2:ee:de:
         eb:ba:49:b3:c2:ea:a9:09:3e:10:10:b6:6c:0d:f7:34:94:4e:
         1e:ac:4a:d7:0f:cb:07:6c:4e:bc:7a:14:bb:f1:40:8b:30:3d:
         72:a9:5e:96:04:e8:03:65:1b:c8:ed:bc:93:92:a2:b6:d9:cb:
         7b:3e:3a:19:ae:40:b8:c8:74:e5:82:09:1f:d6:58:ff:4a:46:
         7d:f8:bf:1f:68:a7:55:e0:6d:d6:c8:cf:08:15:cd:c5:c8:9d:
         06:da:4d:3a:e3:b7:84:5e:79:d4:58:3e:a2:71:fd:7a:66:87:
         84:94:41:66:e4:59:9f:03:40:de:82:28:d7:26:16:34:3d:26:
         1e:22:88:49:4c:75:33:15:a2:ea:bc:f8:fc:a9:64:99:21:12:
         0d:a4:e0:e6:6d:e8:d9:a3:b0:fd:e3:03:c3:77:15:51:76:50:
         ec:c9:de:85:ad:1d:46:dc:d2:bc:fb:54:95:75:98:2b:0f:a0:
         ce:bc:84:41:55:0c:a9:06:f0:39:90:c9:a5:3b:60:ed:64:dc:
         61:a1:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:02:58 2025 by rpki-client