Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File:                     fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier:          lhiNs358aijCd2RyenrzUuUcf+mAJ5X2qF770BU/mh8=
Subject key identifier:   A8:77:8E:61:B7:1F:36:72:1C:6F:CD:E5:DA:12:F5:5F:76:93:1E:87
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer:       /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial:       0196A164A5A0E2025CBD4D5BCB3EA29C1221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number:          0203
Signing time:             Mon 05 May 2025 17:00:49 +0000
Manifest this update:     Mon 05 May 2025 17:00:49 +0000
Manifest next update:     Tue 06 May 2025 17:00:49 +0000
Files and hashes:         1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
                          2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: 17wdE18biXyzoLhCZsyqsl6wVMHG9kQylyO1pF/CmqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:a5:a0:e2:02:5c:bd:4d:5b:cb:3e:a2:9c:12:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
        Validity
            Not Before: May  5 17:00:49 2025 GMT
            Not After : May  6 17:00:49 2025 GMT
        Subject: CN=a8778e61b71f36721c6fcde5da12f55f76931e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:97:e8:a2:49:9e:4a:d4:9e:15:8f:0e:cd:
                    c6:5e:08:fd:b9:b9:f0:f8:b3:bc:f5:e4:18:7f:9a:
                    80:56:a1:85:8d:4e:c1:0a:d6:9a:4c:dd:f1:d8:35:
                    74:bf:9a:09:97:20:fa:2f:b5:4a:0e:e9:0c:37:7a:
                    95:5e:28:3c:a1:80:f2:70:6b:e6:e6:44:72:80:f2:
                    9b:19:5b:80:c4:bc:28:5b:0c:0e:00:ed:45:10:15:
                    ee:a0:c6:43:b9:e4:e2:bd:ed:e6:df:68:52:db:ad:
                    46:f4:9d:0e:3e:95:65:88:6b:b8:a5:f0:fa:b2:5d:
                    5c:3f:94:18:88:2a:9c:96:75:20:34:15:b4:27:49:
                    81:dc:ed:6c:6e:ef:14:31:36:fa:65:40:85:35:9a:
                    0a:29:73:87:01:43:87:7c:84:6d:8b:d0:51:a9:e7:
                    15:f1:ab:96:72:a0:8a:3f:62:f5:be:ff:0b:22:55:
                    79:96:e9:68:2d:ad:6b:8c:56:fd:cb:ca:6d:52:8d:
                    b9:57:60:93:33:31:76:a1:b3:3b:62:47:02:1b:2c:
                    e3:31:9d:fb:f8:28:34:1d:f3:bd:ed:0c:34:b8:31:
                    aa:dc:36:f8:e9:78:ab:76:17:aa:1f:96:4b:5b:0d:
                    ca:ab:27:fe:46:7d:5a:36:5b:6d:4c:43:4e:d1:f8:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:77:8E:61:B7:1F:36:72:1C:6F:CD:E5:DA:12:F5:5F:76:93:1E:87
            X509v3 Authority Key Identifier:
                keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b0:ec:80:6b:ad:24:b5:c6:ac:fe:73:ed:86:06:c4:b5:59:
         bf:ce:33:86:cd:5c:ef:18:52:88:b9:8b:9a:2a:e9:44:a4:01:
         d5:4c:7b:30:4b:66:9a:4f:1e:28:1b:c2:21:0c:2f:02:a3:a4:
         d8:a9:da:5c:4a:a0:32:07:ef:c5:c5:7b:5e:6c:15:66:8e:44:
         e9:9d:81:82:41:e5:34:9c:bc:9d:11:15:79:5a:4f:64:fe:a5:
         e4:1c:3c:be:b3:83:ae:60:2c:9c:9b:07:50:71:ca:65:4d:3c:
         c9:be:96:0a:70:96:97:4a:50:32:82:29:d7:6b:2d:aa:91:a6:
         a9:e8:7b:4b:c0:c2:34:cd:c6:df:60:0b:43:74:03:86:89:b1:
         b9:15:4a:4b:5e:b3:27:b6:f9:ee:28:88:b4:7c:a5:ef:e3:3c:
         57:9a:f0:04:bb:75:c8:bd:4f:54:6d:5f:63:ad:fa:24:db:ae:
         1c:61:11:8c:f9:e6:06:04:3f:0d:d0:b0:9c:31:ef:3c:9e:ec:
         26:6d:8d:12:2f:e4:2e:fc:08:1a:03:ca:8a:89:5c:60:22:8e:
         75:87:b1:d2:23:b3:f2:25:4e:14:3c:72:94:f1:14:5b:df:d7:
         2d:f0:d1:35:f6:f8:55:d2:e9:a9:ef:3f:ad:bf:b9:16:04:16:
         9c:4a:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:58:48 2025 by rpki-client