Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          N6yNt8npERBVdPPNv8AfFolIdj+v+CxFyeRXzoXaZvo=
Subject key identifier:   61:AE:8C:DE:CF:60:43:A8:5F:5E:7D:89:28:BA:51:43:60:47:15:F8
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       0197499F5D0823A55B06E79427AA3D9767B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0B73
Signing time:             Sat 07 Jun 2025 09:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:10 +0000
Files and hashes:         1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
                          2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
                          3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
                          4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: ULeW8L63imJs6U0SoKZ0DPQbnFerME2pnjyKEqxR20M=)
                          6: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:5d:08:23:a5:5b:06:e7:94:27:aa:3d:97:67:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Jun  7 09:01:10 2025 GMT
            Not After : Jun  8 09:01:10 2025 GMT
        Subject: CN=61ae8cdecf6043a85f5e7d8928ba5143604715f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:01:a5:48:d3:60:f7:04:0d:16:41:5b:ba:
                    e1:39:dc:d1:0e:7e:77:5b:f4:6f:90:d6:5d:64:27:
                    a6:5a:4a:a5:ad:4e:d2:78:0a:6f:6c:d9:db:ed:5b:
                    93:3a:8b:9d:14:cc:bc:4c:11:34:eb:b7:52:36:36:
                    25:2c:5f:ff:44:35:eb:88:5b:8f:63:c0:53:b4:ee:
                    5c:3d:85:88:d4:dc:82:43:f2:7c:30:58:32:bf:4a:
                    eb:cb:6a:7d:55:aa:ad:29:f0:6f:f6:05:3d:ac:9f:
                    14:4e:48:35:37:54:e2:9c:f3:e5:52:c4:43:69:3f:
                    34:57:1a:ba:b0:b2:3d:ee:45:15:0d:7c:b9:8f:6d:
                    7f:2d:92:fb:76:0c:a2:df:f9:a6:ed:d8:f7:8c:64:
                    0a:95:0f:dd:4c:90:dd:cf:0a:ee:ff:8b:bc:73:9b:
                    6c:49:60:1c:37:ce:47:e3:fc:0f:46:17:19:ca:53:
                    38:ea:62:1e:16:b1:ca:e2:a4:e5:76:43:e8:3a:76:
                    02:20:79:60:b6:1d:7b:38:49:d0:1a:45:ba:17:47:
                    73:af:d6:12:c1:2a:49:24:ab:aa:46:d4:19:9b:ea:
                    18:35:14:92:4c:d0:5a:35:7b:b0:ba:09:e6:2c:14:
                    2c:7e:dd:2f:a8:9b:69:12:50:1b:02:ae:0e:91:56:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AE:8C:DE:CF:60:43:A8:5F:5E:7D:89:28:BA:51:43:60:47:15:F8
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:1a:f9:fb:d0:f3:fe:79:2c:26:72:6c:3d:b9:d0:68:bb:
         50:22:63:4e:17:50:fe:b2:1c:9e:44:ba:7e:e9:6d:37:f2:3d:
         c3:e8:dc:25:c5:1f:f6:c9:5d:ad:49:f1:3c:54:e3:4e:49:78:
         dc:8d:3b:19:b3:bb:19:03:2e:af:1e:a4:7a:c8:b0:df:68:55:
         5d:eb:ef:5f:03:32:c8:08:79:8d:a6:cb:35:74:5b:9b:2c:78:
         93:23:63:d7:15:f5:da:f1:a3:14:26:e2:f9:27:6e:18:fa:61:
         00:00:12:21:97:4f:2b:ac:fc:3e:03:85:e2:9e:14:34:a3:c5:
         9c:7a:77:68:b6:4c:6e:28:96:a7:7b:bb:52:fc:7d:ef:fe:2d:
         30:07:12:f2:4a:ed:f0:9f:8f:b9:57:a7:be:82:90:6b:dc:89:
         07:b4:f6:ae:f7:1b:c4:f2:2e:f8:97:79:b4:12:f4:17:1a:8a:
         da:26:e7:6e:df:73:85:ed:06:67:4c:be:98:ea:8a:7b:2e:43:
         98:7d:7a:f4:e7:02:44:dc:84:81:1a:fd:4b:40:7a:03:85:d3:
         e8:18:4e:d3:b3:16:d6:a4:e6:42:dd:f3:c1:73:55:4f:37:d4:
         39:e0:c0:75:77:36:9e:5f:92:07:c1:ab:47:68:3d:cf:05:db:
         c3:c1:4a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn10II6VbBueUJ6o9l2e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjUwNjA3MDkwMTEwWhcNMjUwNjA4MDkwMTEwWjAzMTEwLwYDVQQD
Eyg2MWFlOGNkZWNmNjA0M2E4NWY1ZTdkODkyOGJhNTE0MzYwNDcxNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqMBpUjTYPcEDRZBW7rhOdzRDn53
W/RvkNZdZCemWkqlrU7SeApvbNnb7VuTOoudFMy8TBE067dSNjYlLF//RDXriFuP
Y8BTtO5cPYWI1NyCQ/J8MFgyv0rry2p9VaqtKfBv9gU9rJ8UTkg1N1TinPPlUsRD
aT80Vxq6sLI97kUVDXy5j21/LZL7dgyi3/mm7dj3jGQKlQ/dTJDdzwru/4u8c5ts
SWAcN85H4/wPRhcZylM46mIeFrHK4qTldkPoOnYCIHlgth17OEnQGkW6F0dzr9YS
wSpJJKuqRtQZm+oYNRSSTNBaNXuwugnmLBQsft0vqJtpElAbAq4OkVb3+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGujN7PYEOoX159iSi6UUNgRxX4MB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI0a+fvQ
8/55LCZybD250Gi7UCJjThdQ/rIcnkS6fultN/I9w+jcJcUf9sldrUnxPFTjTkl4
3I07GbO7GQMurx6kesiw32hVXevvXwMyyAh5jabLNXRbmyx4kyNj1xX12vGjFCbi
+SduGPphAAASIZdPK6z8PgOF4p4UNKPFnHp3aLZMbiiWp3u7Uvx97/4tMAcS8krt
8J+PuVenvoKQa9yJB7T2rvcbxPIu+Jd5tBL0FxqK2ibnbt9zhe0GZ0y+mOqKey5D
mH169OcCRNyEgRr9S0B6A4XT6BhO07MW1qTmQt3zwXNVTzfUOeDAdXc2nl+SB8Gr
R2g9zwXbw8FKgw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:04 2025 by rpki-client