Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
File:                     FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json)
Hash identifier:          qU6rxaM9xx50cQomyNuteaFGWh/EwSRyiBw/wUEusHM=
Subject key identifier:   DA:F6:7D:A6:BB:43:CA:11:62:03:DF:C1:A3:19:12:2C:D5:A0:14:DE
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Certificate issuer:       /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial:       019748FABECDE29FDC5C6E285BB1E76F5FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
Manifest number:          03B1
Signing time:             Sat 07 Jun 2025 06:01:21 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:21 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:21 +0000
Files and hashes:         1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=)
                          2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: Tb88IvGCT5Q3XCKpPqcS+XzXHULkXbx7ad6vvlKw7J8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:be:cd:e2:9f:dc:5c:6e:28:5b:b1:e7:6f:5f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
        Validity
            Not Before: Jun  7 06:01:21 2025 GMT
            Not After : Jun  8 06:01:21 2025 GMT
        Subject: CN=daf67da6bb43ca116203dfc1a319122cd5a014de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ac:94:21:62:cb:ee:bc:fb:10:87:9f:de:80:
                    77:de:f2:0a:07:95:2a:41:20:00:b5:2f:f5:8f:18:
                    7d:15:c3:b7:96:b6:f2:db:56:91:d5:fa:94:fe:b3:
                    99:27:6a:65:e4:08:78:41:ba:a7:42:61:96:60:f8:
                    f8:80:62:12:59:26:85:43:fc:04:9a:b5:e9:23:c9:
                    71:23:f8:fb:fb:4f:38:c3:9a:b5:8d:85:47:fa:52:
                    f8:1d:dd:6b:a4:45:9c:28:4d:06:9f:2b:fa:a4:67:
                    f9:d9:cc:48:0f:19:1c:ef:2e:4c:62:4f:53:99:a0:
                    8d:52:ba:00:7a:42:96:cc:ee:cd:51:97:2f:29:d4:
                    7e:be:28:3d:ef:8a:64:27:e1:e3:06:20:00:24:fb:
                    1c:a1:17:d0:cc:32:28:c9:34:9a:9a:70:3d:d9:f1:
                    bd:fd:0d:8c:57:80:1c:bb:99:56:b1:cc:fc:a5:6c:
                    a3:38:55:f5:98:42:62:25:e6:65:00:09:30:08:15:
                    a9:48:5e:c7:8a:04:79:98:07:42:1c:a2:0d:9b:3c:
                    46:16:24:78:f6:d3:f3:73:07:e7:4c:76:25:1c:ce:
                    d0:24:03:a7:6a:57:e0:4f:ef:2f:4c:05:91:76:73:
                    f1:b7:fd:2e:70:48:15:36:6c:58:5f:85:04:e8:cd:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:7D:A6:BB:43:CA:11:62:03:DF:C1:A3:19:12:2C:D5:A0:14:DE
            X509v3 Authority Key Identifier:
                keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:3e:87:c3:97:e7:a7:4c:73:95:11:a8:b3:a1:00:c0:2a:
         89:aa:33:70:08:40:48:86:fa:95:c9:09:7d:c3:3e:5a:77:80:
         07:01:40:f3:94:d6:f9:b4:d2:3e:d3:49:01:34:af:41:fd:3a:
         d0:34:b5:84:af:49:b9:21:ac:b0:7c:01:c1:29:40:9d:68:e6:
         d7:ba:4b:71:22:bd:ac:65:e2:2c:98:bd:e7:c5:96:45:be:27:
         9e:9d:59:89:73:89:d3:ba:49:9d:d5:74:cc:67:e3:ed:ec:f0:
         86:46:5c:9a:a3:09:e8:cc:95:31:e4:9e:07:80:05:df:68:ba:
         fc:bc:08:04:3e:cd:d6:b3:27:99:5f:d2:8a:69:df:fe:9c:e7:
         0f:a5:81:a2:e3:3d:48:f9:0a:86:9b:28:7e:c6:fa:16:fd:93:
         cd:97:1b:e1:a3:81:e8:ba:ce:4a:ed:35:ff:9a:b7:91:12:88:
         1c:bf:63:f6:28:0d:55:b9:c0:9a:f4:3c:03:dd:51:ce:24:5e:
         d4:e9:f3:87:35:49:ab:c7:7d:a0:89:1d:c3:d0:23:b4:3d:a6:
         4c:74:10:06:22:fe:0c:e5:9d:63:ba:10:ee:48:86:68:0b:96:
         d0:46:0d:68:af:80:65:11:1a:b8:31:81:f3:88:1d:c1:7b:6a:
         0e:94:a1:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+r7N4p/cXG4oW7Hnb1+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWZhNmQ0ZmUwZWQwZTAxMmViM2JjZmZkZjJiZjllMWY3
NDc5NzIwHhcNMjUwNjA3MDYwMTIxWhcNMjUwNjA4MDYwMTIxWjAzMTEwLwYDVQQD
EyhkYWY2N2RhNmJiNDNjYTExNjIwM2RmYzFhMzE5MTIyY2Q1YTAxNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqyUIWLL7rz7EIef3oB33vIKB5Uq
QSAAtS/1jxh9FcO3lrby21aR1fqU/rOZJ2pl5Ah4QbqnQmGWYPj4gGISWSaFQ/wE
mrXpI8lxI/j7+084w5q1jYVH+lL4Hd1rpEWcKE0Gnyv6pGf52cxIDxkc7y5MYk9T
maCNUroAekKWzO7NUZcvKdR+vig974pkJ+HjBiAAJPscoRfQzDIoyTSamnA92fG9
/Q2MV4Acu5lWscz8pWyjOFX1mEJiJeZlAAkwCBWpSF7HigR5mAdCHKINmzxGFiR4
9tPzcwfnTHYlHM7QJAOnalfgT+8vTAWRdnPxt/0ucEgVNmxYX4UE6M2umQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr2faa7Q8oRYgPfwaMZEizVoBTeMB8GA1UdIwQY
MBaAFBSfptT+DtDgEus7z/3yv54fdHlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEt
NzM3ODQwZTI3ZWE2LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEtNzM3ODQwZTI3ZWE2
LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZs+h8OX
56dMc5URqLOhAMAqiaozcAhASIb6lckJfcM+WneABwFA85TW+bTSPtNJATSvQf06
0DS1hK9JuSGssHwBwSlAnWjm17pLcSK9rGXiLJi958WWRb4nnp1ZiXOJ07pJndV0
zGfj7ezwhkZcmqMJ6MyVMeSeB4AF32i6/LwIBD7N1rMnmV/Simnf/pznD6WBouM9
SPkKhpsofsb6Fv2TzZcb4aOB6LrOSu01/5q3kRKIHL9j9igNVbnAmvQ8A91RziRe
1OnzhzVJq8d9oIkdw9AjtD2mTHQQBiL+DOWdY7oQ7kiGaAuW0EYNaK+AZREauDGB
84gdwXtqDpShZg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:52:46 2025 by rpki-client