Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File:                     FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier:          PE4xFQn13dxY6xe2eVq+whteE8Otrl4Acot4ELtIhZU=
Subject key identifier:   88:9C:F1:17:87:DB:31:09:72:1B:24:CF:BF:34:5E:5F:A2:E8:A3:E5
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer:       /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial:       01974779B1410E9D5D3A09FED32C771098F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number:          0886
Signing time:             Fri 06 Jun 2025 23:00:46 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:46 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:46 +0000
Files and hashes:         1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: Jb3PD8vxMbLno+QCS3zavjgEkgi7BGIDB05ntw5Ftzk=)
                          2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:b1:41:0e:9d:5d:3a:09:fe:d3:2c:77:10:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
        Validity
            Not Before: Jun  6 23:00:46 2025 GMT
            Not After : Jun  7 23:00:46 2025 GMT
        Subject: CN=889cf11787db3109721b24cfbf345e5fa2e8a3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:61:a5:e3:2a:da:41:ea:a7:7f:07:2f:a7:
                    9d:b2:e8:a5:5f:28:19:e4:2d:c1:c6:6e:22:b7:62:
                    bd:d0:14:6f:91:a4:9e:25:c1:6b:14:0f:41:26:4a:
                    71:ea:65:85:90:a0:7b:df:4e:9c:27:f5:38:78:5f:
                    05:3d:93:3d:f3:ff:65:00:ac:a9:60:ea:bb:4b:d9:
                    4c:99:59:82:98:ab:f0:12:6f:af:5c:b2:52:fc:c0:
                    c1:d2:7c:28:5e:48:d3:21:e3:8c:69:52:a4:7b:9b:
                    91:cd:b8:ec:9e:68:66:6f:23:5f:e9:c1:19:97:1a:
                    29:2d:1e:75:0c:31:b9:5d:eb:f6:4d:2e:aa:62:84:
                    af:9e:49:9e:d7:11:f1:2f:4e:40:7a:36:12:08:a5:
                    4d:ed:ed:f4:cb:9a:3f:b6:a5:06:f2:b1:1f:68:16:
                    2f:35:f9:4b:59:41:d1:dc:da:f6:39:10:3d:2a:70:
                    12:1c:51:b3:bf:93:6c:a7:f6:45:12:dd:be:90:58:
                    7e:bb:85:4c:a4:f6:6d:0c:7b:59:48:1a:7a:5a:aa:
                    9a:36:35:20:b3:c8:09:e3:2c:66:99:0a:16:3b:cd:
                    f2:c1:96:94:ca:0c:cf:b6:40:f0:a6:0c:17:a9:d8:
                    79:7e:c4:aa:72:ec:5c:ae:cd:95:67:8d:01:f5:62:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9C:F1:17:87:DB:31:09:72:1B:24:CF:BF:34:5E:5F:A2:E8:A3:E5
            X509v3 Authority Key Identifier:
                keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:c2:5f:ea:67:7d:23:eb:0d:da:39:53:9a:56:50:84:fc:
         85:72:ef:5f:26:72:26:8a:6e:b3:5a:1e:dd:64:ff:01:b3:38:
         b0:1f:bf:ca:7c:29:85:d8:be:98:31:dd:09:d6:31:ef:cf:80:
         c5:8f:2b:8d:95:0a:36:bb:f6:12:00:13:15:71:45:a1:bc:59:
         2c:2b:20:2d:21:64:eb:3a:e5:1b:65:46:c5:9b:d2:18:6a:6e:
         af:e4:0e:d5:d3:33:ff:92:5f:88:3c:ef:ef:82:51:62:d7:fd:
         40:0a:d5:8e:15:26:2b:29:f9:de:56:3e:45:49:b8:74:50:23:
         90:15:3f:25:50:27:5d:c8:a6:0e:a5:e4:16:19:f9:c6:ed:b6:
         33:c1:d9:b4:35:fc:be:a9:20:4e:a8:aa:3b:9b:7e:00:a1:3f:
         20:5e:7f:87:4c:79:34:6c:a4:bf:de:6a:4a:3d:37:3a:23:e9:
         59:a2:50:7e:bb:09:b8:1b:7f:86:ca:6f:a4:ab:b5:22:b7:ed:
         d5:ce:c1:b2:1d:1f:c0:c6:d0:09:2d:a3:9b:09:31:01:a6:14:
         5a:bb:e8:50:3a:ab:25:c2:eb:14:53:78:93:10:45:b3:d4:71:
         fe:c3:2b:8d:09:9f:29:27:5f:d2:c0:2d:7f:0f:ff:b6:4c:3f:
         5c:58:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:03 2025 by rpki-client