Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          1lMo/9vlGcS5T8KB7dug96E/NHQCbZLMykyOInpGYzs=
Subject key identifier:   F3:0D:E7:8D:1F:48:1D:D4:59:CB:CE:87:AB:0A:F9:E5:1F:D7:D3:E4
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019745F8C24C194437F4BC68F1418C85ABC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 16:00:19 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:19 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:19 +0000
Files and hashes:         1: CbWOEpiwCrppRA8DVC4XzZMGIMo.roa (hash: PCw7t89Xuux83a7nB0OMpGHDzsoTVJA+nWtRPUVTD0g=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: 1EmqzxfufNxPGRkiDSHXQNso3frmdm/qotGV/10fx08=)
                          3: G7aptrRzlRJ8DBRVo4J_IAindWA.roa (hash: /KruVTSwaUIasJgr9QHP+KNfyw0nqXuPE6AH63Tq7a4=)
                          4: b6hTkKbNOfIbaG8yD7-BS_Yj6KI.roa (hash: vo3HwfgLG2dbcNhI9BKjmqquo/hk8biJHEghUjke/Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f8:c2:4c:19:44:37:f4:bc:68:f1:41:8c:85:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Jun  6 16:00:19 2025 GMT
            Not After : Jun  7 16:00:19 2025 GMT
        Subject: CN=f30de78d1f481dd459cbce87ab0af9e51fd7d3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:f7:cc:58:5b:6e:8d:a6:bf:78:e3:68:e3:
                    1c:91:6d:5b:3c:13:7e:b5:70:00:6c:93:2e:81:5a:
                    10:30:db:4e:e8:f0:d1:ff:e3:b3:98:33:14:e8:dc:
                    73:23:71:8a:72:26:8d:74:9e:2f:ee:84:99:9f:75:
                    9a:73:46:8a:42:da:cf:5b:ee:60:6a:ae:77:d0:43:
                    23:f7:a0:87:e6:fe:dd:ff:a0:da:c0:10:bc:bc:df:
                    db:61:82:28:20:9a:9c:ec:7b:58:43:4c:76:d8:07:
                    16:43:b4:d7:68:0d:cb:76:2a:96:56:54:0c:98:11:
                    c9:0c:31:1b:87:47:3a:ae:ac:a6:b3:b1:7b:62:37:
                    da:89:67:0e:b2:bd:f8:69:5c:fb:bd:d4:42:6d:c9:
                    5b:49:2f:c8:c0:76:0f:1b:11:58:63:05:d0:d4:69:
                    dd:2d:fd:3a:73:b7:84:f6:0d:95:db:ff:c3:c0:6c:
                    d2:86:1e:09:54:7d:9f:27:38:14:18:4f:65:f2:3b:
                    8a:74:89:91:70:26:73:e0:bd:fc:e9:f4:78:ea:a9:
                    86:eb:88:5e:fb:d5:15:61:48:4b:63:3d:8a:b0:2d:
                    90:07:89:e6:2e:e5:02:3a:46:52:88:fa:1c:dc:b9:
                    d1:32:fc:8f:ca:09:32:ef:08:35:ed:c4:f2:89:83:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:E7:8D:1F:48:1D:D4:59:CB:CE:87:AB:0A:F9:E5:1F:D7:D3:E4
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:29:2b:80:41:fd:e5:12:c7:b3:71:93:10:be:7d:18:e0:80:
         b7:58:d1:fa:3c:f5:01:ea:fd:ed:fa:95:df:31:20:b2:eb:ef:
         3e:39:55:52:d4:7a:e7:32:3f:44:d2:f4:4a:0f:38:59:2d:ca:
         2c:7d:f7:d3:1d:c2:e1:49:5d:97:2a:b0:0c:50:c4:71:e7:7a:
         35:f5:d1:10:b4:ee:a0:e7:e3:9f:52:b7:67:b0:b4:ec:2a:c0:
         f6:62:df:c8:d7:fc:43:bd:14:7b:10:00:36:ff:82:e2:2a:4a:
         99:84:35:6d:25:fc:47:db:94:cf:58:43:37:00:9c:96:ac:ea:
         90:7f:7d:49:e2:44:5e:98:5c:6c:b1:70:9a:69:5f:87:13:d2:
         df:28:5d:46:0c:f2:b9:df:14:f4:1c:9d:6e:d6:53:34:b6:56:
         57:9d:45:ce:dc:d1:33:dc:26:e9:46:e6:36:f0:88:2e:61:72:
         c1:30:78:b5:7d:17:fa:74:c3:cb:42:12:71:40:4a:a7:7e:26:
         9a:d0:5a:85:71:2e:d7:31:ca:ed:8c:15:aa:57:2c:4f:b8:81:
         cd:e3:3b:34:2c:f4:6d:71:83:88:02:b7:46:7e:83:a4:02:f8:
         fb:54:1f:22:2d:73:36:8c:1d:25:a2:42:24:82:c2:3f:b8:a1:
         11:fd:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:04 2025 by rpki-client