Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
File:                     FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft (raw, json)
Hash identifier:          VJxNujyXSiGchXcIm0cQ5ddqx6qXZMxnLh6kA1bTJSw=
Subject key identifier:   79:5E:F6:28:F2:8B:62:F5:6C:3C:88:B1:8B:AB:31:CA:84:73:8C:9C
Authority key identifier: 14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
Certificate issuer:       /CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Certificate serial:       01974BC470253D12976722A2EC5AF94FD947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
Manifest number:          1194
Signing time:             Sat 07 Jun 2025 19:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:54 +0000
Files and hashes:         1: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl (hash: j+hopqKlZIeLNps+JDOk25v36nMqUi7FZ3Q3mJoWA6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:70:25:3d:12:97:67:22:a2:ec:5a:f9:4f:d9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bb6fac6919d900a2febb781d197f4d8134e05b
        Validity
            Not Before: Jun  7 19:00:54 2025 GMT
            Not After : Jun  8 19:00:54 2025 GMT
        Subject: CN=795ef628f28b62f56c3c88b18bab31ca84738c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:ab:6a:97:a0:2d:0a:dc:0c:f5:b3:6d:ac:
                    0f:7b:1d:81:75:b9:6c:2d:b2:15:a3:a1:35:9c:38:
                    03:3b:f3:3b:c0:36:9c:39:32:c6:9d:f4:38:00:b4:
                    ab:57:7b:c3:5f:eb:c4:6e:99:02:90:7a:22:fd:0e:
                    5d:7c:d6:c8:97:ce:24:c7:95:d5:34:b5:d6:71:50:
                    a2:e0:e9:b9:4c:37:6b:59:c6:e3:88:06:fe:fa:a7:
                    90:92:5f:80:ed:89:7a:27:ee:4e:40:38:2b:b3:bf:
                    7a:fa:52:ca:9d:fd:02:f7:4d:a3:2f:cd:97:72:94:
                    63:d1:e9:39:66:bd:24:24:c3:1d:56:46:5f:29:26:
                    a3:2e:21:0c:b8:67:fe:fd:63:75:88:4e:fd:c7:3e:
                    1d:09:4a:d3:f9:17:d2:74:9f:89:a9:4f:ed:2d:35:
                    30:ee:bc:fe:31:0c:c1:fb:80:a2:a5:60:6c:43:e0:
                    6c:c3:7f:1c:a3:96:28:de:be:98:08:11:cd:a4:dc:
                    18:14:e7:06:ac:93:30:cf:31:58:4f:88:5f:dc:ec:
                    77:b1:c7:c1:42:57:85:13:f3:3f:ca:2d:46:48:07:
                    c7:f2:fe:05:c5:f4:5c:28:0c:4c:ed:1b:fd:2a:7b:
                    27:f6:8d:17:fc:40:0c:e3:4e:cb:a4:07:24:c6:1b:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5E:F6:28:F2:8B:62:F5:6C:3C:88:B1:8B:AB:31:CA:84:73:8C:9C
            X509v3 Authority Key Identifier:
                keyid:14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:40:7b:28:e0:e1:65:e8:10:53:b5:cd:23:11:d1:75:a7:
         8e:65:05:bf:d0:e3:fa:d1:88:7c:0a:f3:c8:88:d1:fb:40:2c:
         d3:f7:d8:26:0e:6a:23:34:26:1c:4d:b2:d8:4c:98:44:de:ed:
         25:5a:20:1e:d4:69:ec:45:ab:98:67:4c:b2:00:5f:c2:67:d1:
         05:5c:66:f7:7e:b5:3b:99:64:07:d6:b7:4e:83:86:80:38:4c:
         2c:a5:b7:73:15:cf:72:c9:38:b7:f6:77:19:fd:8d:3b:60:45:
         ee:41:63:40:5d:21:11:51:5e:be:56:3a:1f:b9:ef:38:a8:8c:
         50:79:30:92:cc:2e:a6:52:ab:bc:9b:b7:ca:d6:7c:3b:2d:a1:
         c2:8e:99:2a:91:bf:b0:7d:4e:d9:13:0b:47:a0:08:c0:ff:a8:
         c4:ec:b7:03:38:b6:76:a6:91:67:f1:13:d9:a4:9b:b9:63:30:
         07:7b:18:e1:17:2e:19:93:ad:66:12:09:ad:93:3f:6e:04:43:
         33:12:f3:b6:8c:b1:f6:0f:2d:74:3d:95:91:01:5f:a0:5f:f4:
         c3:0e:cc:52:ed:52:a0:4e:97:11:41:bd:1a:c0:06:a4:da:a3:
         a3:85:92:2c:66:1d:4f:2b:b5:0e:f6:0c:e3:8f:a9:36:02:7f:
         a9:a3:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:27:37 2025 by rpki-client