Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File:                     fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier:          Rr2GYXciev3gcA0D4wm0qU9NPwlhy5pMcUGJLDou4iQ=
Subject key identifier:   B7:7A:CA:2C:5B:FF:79:3F:17:6B:33:AC:DA:5D:44:9A:29:C3:54:AA
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer:       /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial:       019765BAC7DF4A5543313FABAF23501922C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number:          151D
Signing time:             Thu 12 Jun 2025 20:00:29 +0000
Manifest this update:     Thu 12 Jun 2025 20:00:29 +0000
Manifest next update:     Fri 13 Jun 2025 20:00:29 +0000
Files and hashes:         1: UkqG3VMYAz9uABWF42sKAydGWoA.roa (hash: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=)
                          2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: hm2pd4ol9DVZUju27uhZrZ93pSIFDsDxYoJiKAto0Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:ba:c7:df:4a:55:43:31:3f:ab:af:23:50:19:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
        Validity
            Not Before: Jun 12 20:00:29 2025 GMT
            Not After : Jun 13 20:00:29 2025 GMT
        Subject: CN=b77aca2c5bff793f176b33acda5d449a29c354aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:a9:63:c5:b6:bd:1e:56:6d:1a:58:9d:f6:
                    43:83:fa:a0:2d:8d:32:e3:8f:e6:e4:fd:43:4c:44:
                    20:f5:5b:95:c9:be:e0:65:7d:e2:22:de:e2:a8:40:
                    da:7e:a1:02:02:35:68:95:39:47:51:f8:b3:f3:f6:
                    ae:0c:87:e0:90:d8:b9:6d:8e:49:07:79:90:4f:d9:
                    5e:e1:61:fd:14:a0:dd:67:59:75:7f:e4:48:d6:88:
                    dc:1c:fd:b2:6d:3c:ba:9d:92:58:63:be:40:05:a6:
                    8b:cb:cc:7b:03:31:85:93:0b:78:ee:59:bc:b9:1d:
                    a7:7f:74:18:c0:c6:44:25:c6:c0:53:85:be:30:ff:
                    e2:9d:5d:c8:eb:4a:9c:f5:a9:b8:b0:71:c0:f2:ee:
                    9c:d4:c7:61:c0:02:19:9b:b4:fb:35:7d:13:e1:49:
                    e8:78:7f:55:0e:8e:cf:6d:5e:91:01:1c:43:b8:34:
                    71:72:5f:73:8a:94:ff:79:42:25:61:ab:c7:c6:29:
                    2f:f0:df:eb:f9:90:4e:d5:1e:5f:22:a7:bf:20:69:
                    ae:9e:60:50:cc:46:f7:ed:4d:28:02:27:79:64:d7:
                    73:4e:3f:5d:55:10:c1:5c:2e:6d:e7:ec:7f:75:c9:
                    da:7a:22:5b:7a:2e:7b:49:5f:e5:4f:5a:8b:fb:b8:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7A:CA:2C:5B:FF:79:3F:17:6B:33:AC:DA:5D:44:9A:29:C3:54:AA
            X509v3 Authority Key Identifier:
                keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:85:b0:9c:4b:7f:5e:0b:41:4d:ea:e1:58:34:0c:7b:79:28:
         18:80:b3:4d:89:5a:89:33:2c:ab:36:16:aa:a3:f6:3e:47:38:
         3b:b3:ac:4e:37:c1:99:3d:ab:78:b4:f2:6a:68:e0:dc:0a:b2:
         6c:09:d2:6b:88:b0:61:3c:da:7f:f6:43:6a:86:c8:0a:95:88:
         d3:5b:3e:36:0c:59:55:78:5b:71:3a:4e:ab:c7:40:89:1b:84:
         61:43:e0:46:9f:2f:52:18:3a:c0:81:f8:cc:ce:de:0b:43:c9:
         2c:82:5a:35:a7:07:fa:a0:f9:0d:b2:da:9b:a2:13:96:e1:40:
         66:5a:b0:14:33:c5:2b:ba:83:ac:e9:42:9e:f2:68:b4:71:6c:
         18:1b:93:ae:62:04:6b:96:08:0f:b9:11:88:9a:09:e3:67:15:
         76:99:aa:c9:5e:f3:3a:08:fd:d2:d6:5b:50:29:5a:98:39:54:
         7b:15:3b:c7:21:1c:14:a3:89:6c:5f:e4:80:dc:23:80:ac:61:
         87:1f:7a:02:6d:56:0d:06:77:e4:26:dd:6f:ab:b4:6a:7a:f9:
         05:fd:a3:49:c6:f7:7b:64:89:ae:3b:1d:3a:8b:db:46:b2:0f:
         47:b3:25:c5:cb:c2:b7:4d:66:77:51:33:98:75:27:fc:f1:ad:
         13:b8:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:50:48 2025 by rpki-client