Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          M5uwKXUNGaHA7N5di1cBBxVhL7ixqq/rwtar/bLVXyM=
Subject key identifier:   6C:04:B1:77:E5:65:0B:FC:83:57:73:37:53:A1:9F:5E:D6:86:1E:C7
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       01983A2952E0234F7842AF66B19812D860B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          15FA
Signing time:             Thu 24 Jul 2025 02:00:43 +0000
Manifest this update:     Thu 24 Jul 2025 02:00:43 +0000
Manifest next update:     Fri 25 Jul 2025 02:00:43 +0000
Files and hashes:         1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
                          2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
                          3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
                          4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: fi9pygkhVW6456vHxKdKNIaM//cFHT1xiUqMghNVj4s=)
                          5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:29:52:e0:23:4f:78:42:af:66:b1:98:12:d8:60:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Jul 24 02:00:43 2025 GMT
            Not After : Jul 25 02:00:43 2025 GMT
        Subject: CN=6c04b177e5650bfc8357733753a19f5ed6861ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:93:1d:66:c6:15:91:6e:d2:0c:98:3a:00:
                    81:4f:f3:6c:b2:b5:f7:37:e7:b3:18:0b:ba:b6:fb:
                    8a:86:38:e0:db:40:2d:7d:ad:22:9e:37:22:33:a3:
                    1f:62:ad:87:dd:24:f4:7f:5d:06:87:c1:80:d9:a6:
                    82:e8:d4:88:ac:98:4c:51:9c:b0:e7:85:18:27:cf:
                    98:dd:4e:8d:63:19:ba:a2:7f:7c:b9:4a:22:c1:e8:
                    8a:a8:ce:69:02:59:ad:d9:63:99:7d:44:73:ca:71:
                    2e:ce:df:e5:53:d9:e2:29:50:27:52:2e:9c:1f:b8:
                    c4:6d:d9:8e:56:76:af:d4:4d:18:20:a2:f1:eb:1e:
                    c9:05:62:71:d5:54:5a:79:57:dd:b5:ce:96:0d:dc:
                    34:38:86:34:4a:18:f6:92:97:15:be:31:88:fb:a3:
                    81:c4:19:84:f2:dc:12:d3:84:e2:31:89:35:55:13:
                    b0:2d:de:65:12:e6:5c:ca:44:78:71:36:75:4f:be:
                    c6:fb:b1:a0:4e:5d:d2:0d:82:8d:ce:af:f2:7a:fe:
                    2b:9f:c6:2f:a9:24:11:3d:e2:7a:3f:93:b5:90:7e:
                    e4:88:ad:56:be:fe:5f:58:d8:37:48:c9:4a:a3:47:
                    d7:75:3e:c3:b8:ab:2a:a2:40:2b:28:1b:bc:92:d4:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:B1:77:E5:65:0B:FC:83:57:73:37:53:A1:9F:5E:D6:86:1E:C7
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:c0:16:82:cd:97:72:3a:14:6e:16:83:2b:80:ec:98:29:
         b2:b5:16:dc:26:fc:65:1c:51:bd:ec:68:e5:e3:d0:be:8b:36:
         6c:c7:de:47:04:d0:c1:9d:41:81:82:af:40:70:e0:a9:9f:45:
         b3:a7:a5:e1:14:dd:a7:a0:fe:8f:4a:3d:e3:95:85:4c:89:86:
         36:1d:e3:ae:34:34:ef:e8:0f:ae:fd:3f:77:51:33:61:49:c0:
         60:7f:38:b4:a0:d7:8b:4d:65:88:aa:03:df:8b:a9:df:25:c1:
         f1:c1:da:9c:cc:f3:1f:3f:27:1b:e8:9f:2a:20:c5:4d:a4:87:
         f1:33:8a:9c:57:39:f6:ad:3c:e1:57:fd:47:ae:38:be:fb:e4:
         ab:eb:63:6e:a1:71:d6:3a:7e:99:2d:5c:48:c6:b8:8c:45:bf:
         97:68:3c:54:ef:c2:83:5b:28:39:0d:f5:f6:e2:5b:0a:be:b3:
         e8:23:00:07:fa:59:25:d6:51:99:0d:0f:35:62:7c:98:9b:d5:
         80:9a:b7:a0:2a:57:fa:75:f0:04:27:f5:f3:31:a9:4e:32:03:
         f4:a5:58:24:1e:fc:39:72:f4:70:bc:f8:96:db:47:a9:18:e5:
         1b:a7:bb:38:e4:4d:df:f5:3b:83:9a:24:06:89:bd:f3:d8:51:
         4e:e7:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:28:43 2025 by rpki-client