Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          Z56bPu+Szo3+rzVWtIClxm0PSWuvErPdqezXeWH+CLs=
Subject key identifier:   0E:03:2F:DC:4C:1A:88:D1:4A:64:45:F7:8E:43:93:D1:8F:E2:30:92
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       019933B778F49A0C964EAE14CE124740FFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          15DB
Signing time:             Wed 10 Sep 2025 13:01:25 +0000
Manifest this update:     Wed 10 Sep 2025 13:01:25 +0000
Manifest next update:     Thu 11 Sep 2025 13:01:25 +0000
Files and hashes:         1: DCNKSj1_5YHNKhsqvaqolZH_B60.roa (hash: TXy+j47cDCmczgpA/MrIE9kmjblkjLGkgY8O20y42aY=)
                          2: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: cQwnfgqtCZipT78piJyQTTBoEqmGdpoBLfZjxbjBxNg=)
                          3: JvuO5YaPjLFf0HZP4H-1yUabiMY.roa (hash: +Bx+7z+E11mxbukF+AWlKTGcSTRDPcpqMiJ/UPsOhzE=)
                          4: O-lMv2utgSL0sF15RsiGk9rGqhU.roa (hash: 4uJaHT6rWS3qzpOxWgNId7Ke0ps1U1qLVv6t8Kfw/Vs=)
                          5: O0m6rpxbshw5KyfbV3Df-u5gpAw.roa (hash: K3VIPCSpjhR1Ioq4yukkhoTaNVjKptpkSTwyxyPzC1Y=)
                          6: gJdvURE1CiuF2RTlrllA5EaJUA0.roa (hash: QQc8DdjtzLaI++nEpaA6R37pPd4UQFAmh/VqOKkxVE0=)
                          7: sPgmpLyF_PKafpXcgtR7FvsC9bY.roa (hash: sMp8sjJ9YjMshoV/D5bSKKVpPxzHt4F0frkmzXOCA3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:b7:78:f4:9a:0c:96:4e:ae:14:ce:12:47:40:ff:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Sep 10 13:01:25 2025 GMT
            Not After : Sep 11 13:01:25 2025 GMT
        Subject: CN=0e032fdc4c1a88d14a6445f78e4393d18fe23092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:4c:a3:79:8d:cf:6d:4c:1b:4a:15:51:ac:
                    50:42:63:e0:eb:d6:96:29:3d:bd:a7:22:52:1e:be:
                    e0:50:9c:c6:6c:08:47:f0:00:62:e1:c0:b6:13:0a:
                    01:55:9e:eb:87:54:f0:8b:08:e2:36:55:2b:f7:bd:
                    9c:a2:45:37:85:62:df:e1:e3:d1:37:d3:85:23:39:
                    97:fd:9f:67:7d:9f:86:79:fc:6e:1e:10:58:a7:86:
                    d7:4d:97:27:09:bd:48:17:fb:92:e4:46:3d:36:4a:
                    5e:71:a1:be:20:81:23:e6:d1:08:72:06:b6:5c:1b:
                    a9:74:ce:8f:61:b2:cf:d0:2c:e8:47:f0:e7:92:5b:
                    86:e8:56:fe:74:b0:20:97:a5:01:e3:79:6f:a7:8b:
                    e4:6c:99:ce:9c:0b:c9:a3:2a:a3:92:b4:a6:34:42:
                    da:fe:78:b9:63:8e:87:aa:25:5e:d2:e4:68:cb:48:
                    aa:43:37:9f:3a:91:eb:31:59:47:e6:3d:a8:3d:4c:
                    db:9d:03:52:89:3f:01:95:f2:cf:f3:6d:51:75:7e:
                    ff:ac:76:e2:5d:8d:b8:ed:7c:80:cd:f1:30:61:f8:
                    cb:ea:c5:e5:7c:17:1f:69:aa:70:ed:17:b9:6c:d5:
                    0e:eb:32:0c:d6:a5:fd:39:1f:a5:f5:42:a5:94:b1:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:2F:DC:4C:1A:88:D1:4A:64:45:F7:8E:43:93:D1:8F:E2:30:92
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:48:ec:cb:c5:28:7e:db:8c:02:52:8d:60:5f:14:b9:f0:7d:
         d9:1e:43:31:9c:ad:25:a6:88:72:18:91:bf:d5:00:8c:da:c5:
         94:ff:62:75:bf:9a:1c:0f:92:62:51:72:2d:0e:99:d4:a4:c6:
         95:b4:2f:76:ba:57:eb:bf:fa:4d:f6:bd:29:ba:a5:55:f3:e4:
         bb:bc:12:a9:d4:3a:93:7a:79:8d:b2:18:d6:45:97:1d:f2:8f:
         b2:a7:df:5e:e9:4d:19:bd:ba:d5:fd:f3:9f:48:62:57:8a:07:
         10:8a:39:08:76:61:0e:5c:42:de:7c:af:50:ce:cd:b4:60:d2:
         85:83:82:2a:41:b5:8f:72:b4:90:33:65:a7:3a:23:e4:38:d5:
         8f:7b:e5:9e:cb:21:e6:1d:3f:a3:5e:12:19:86:38:06:44:7d:
         2e:10:73:b1:22:0f:dd:90:a6:dc:fb:77:55:9a:22:2e:7e:84:
         df:ab:80:b9:31:d0:80:70:3c:a1:58:4a:8f:0d:55:46:08:11:
         d8:d1:fd:b7:56:a3:ea:9c:73:09:a9:a4:2b:53:c2:52:58:37:
         cc:31:1b:eb:0a:e0:fb:c8:84:a2:f8:2b:a6:5f:b6:f7:47:c5:
         16:dc:ff:e6:3c:8e:fe:4b:39:8a:cb:47:df:20:0f:59:62:01:
         9f:61:4e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzt3j0mgyWTq4UzhJHQP/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjJjZmQyNmVjY2YyODk3NTczOTljYzk5YzE3ZDFjYjQz
NTc1MzUwHhcNMjUwOTEwMTMwMTI1WhcNMjUwOTExMTMwMTI1WjAzMTEwLwYDVQQD
EygwZTAzMmZkYzRjMWE4OGQxNGE2NDQ1Zjc4ZTQzOTNkMThmZTIzMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqZMo3mNz21MG0oVUaxQQmPg69aW
KT29pyJSHr7gUJzGbAhH8ABi4cC2EwoBVZ7rh1TwiwjiNlUr972cokU3hWLf4ePR
N9OFIzmX/Z9nfZ+GefxuHhBYp4bXTZcnCb1IF/uS5EY9NkpecaG+IIEj5tEIcga2
XBupdM6PYbLP0CzoR/DnkluG6Fb+dLAgl6UB43lvp4vkbJnOnAvJoyqjkrSmNELa
/ni5Y46HqiVe0uRoy0iqQzefOpHrMVlH5j2oPUzbnQNSiT8BlfLP821RdX7/rHbi
XY247XyAzfEwYfjL6sXlfBcfaapw7Re5bNUO6zIM1qX9OR+l9UKllLFz5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4DL9xMGojRSmRF945Dk9GP4jCSMB8GA1UdIwQY
MBaAFBZiz9JuzPKJdXOZzJnBfRy0NXU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTIt
YjcyMzE5NDFmYzNhLzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTItYjcyMzE5NDFmYzNh
LzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0jsy8Uo
ftuMAlKNYF8UufB92R5DMZytJaaIchiRv9UAjNrFlP9idb+aHA+SYlFyLQ6Z1KTG
lbQvdrpX67/6Tfa9KbqlVfPku7wSqdQ6k3p5jbIY1kWXHfKPsqffXulNGb261f3z
n0hiV4oHEIo5CHZhDlxC3nyvUM7NtGDShYOCKkG1j3K0kDNlpzoj5DjVj3vlnssh
5h0/o14SGYY4BkR9LhBzsSIP3ZCm3Pt3VZoiLn6E36uAuTHQgHA8oVhKjw1VRggR
2NH9t1aj6pxzCamkK1PCUlg3zDEb6wrg+8iEovgrpl+290fFFtz/5jyO/ks5istH
3yAPWWIBn2FOhQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:30 2025 by rpki-client