Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File:                     flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier:          tq+jRgVd5F5MnlwI5ZyLOHwRagf4GyTdEYkYodrLKdM=
Subject key identifier:   34:ED:0D:1E:3F:CD:1A:86:8B:C0:60:74:75:59:D5:9A:2A:F3:55:FC
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer:       /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial:       01962BCED76313B9EC041EA82025FB329DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number:          14EB
Signing time:             Sat 12 Apr 2025 21:01:37 +0000
Manifest this update:     Sat 12 Apr 2025 21:01:37 +0000
Manifest next update:     Sun 13 Apr 2025 21:01:37 +0000
Files and hashes:         1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: sPFjlSaeYXxtm+FcwqVfLLi02FUyo2f/DXPay+x1Qyw=)
                          2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
                          3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:ce:d7:63:13:b9:ec:04:1e:a8:20:25:fb:32:9d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
        Validity
            Not Before: Apr 12 21:01:37 2025 GMT
            Not After : Apr 13 21:01:37 2025 GMT
        Subject: CN=34ed0d1e3fcd1a868bc060747559d59a2af355fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:e9:68:1d:25:3d:a7:14:23:3b:ed:d4:a9:
                    62:c8:7d:a9:54:41:56:62:c1:54:81:f1:65:e8:4d:
                    11:ae:3f:3d:d7:56:3c:9c:1c:a8:4a:4d:aa:79:c5:
                    07:24:46:25:78:f4:7b:29:5b:4f:46:b8:02:c4:0c:
                    92:b7:6b:1e:7e:97:05:ce:51:9a:e9:c0:80:2a:51:
                    37:91:6c:e8:16:f8:b3:27:29:80:7a:77:af:b5:1b:
                    13:0f:c6:2f:2c:45:e2:9b:75:13:4f:45:f1:6e:0e:
                    69:1f:94:5f:4f:8a:04:fe:43:5c:ec:9e:c0:a1:57:
                    38:70:b1:7c:13:bb:08:e1:00:ab:17:3a:b1:70:41:
                    b8:7e:15:60:0e:4d:8f:08:e1:ea:4f:a0:0d:13:cd:
                    0f:93:81:1d:94:08:c8:e2:3b:fa:73:6f:28:03:6a:
                    18:ee:85:fa:c7:87:48:51:86:39:7d:d4:d4:06:98:
                    88:17:4a:c2:32:1d:d6:77:53:59:39:7f:c8:92:9a:
                    c4:ab:5e:71:0f:7f:bd:8c:f6:eb:e2:7c:26:5a:55:
                    ec:6c:29:d9:d0:b0:e4:2b:af:4a:f3:da:d4:87:5f:
                    3b:7e:81:c4:3f:28:63:0c:2a:07:95:6c:eb:c2:10:
                    f9:12:0b:ed:ea:d9:fd:0a:c5:c4:9a:26:38:84:7c:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:ED:0D:1E:3F:CD:1A:86:8B:C0:60:74:75:59:D5:9A:2A:F3:55:FC
            X509v3 Authority Key Identifier:
                keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:28:5f:53:7f:6c:99:fd:90:8b:0d:f6:ff:d0:76:f7:6e:5d:
         e5:1f:5a:a8:3e:87:28:db:af:8d:07:71:ac:f2:ac:91:93:6d:
         34:24:46:21:f1:14:38:cd:36:34:6e:ce:a0:82:ae:0e:98:a8:
         9c:67:75:cd:5c:07:7a:e4:ce:bf:21:29:d2:42:14:7b:a2:14:
         84:ef:37:d3:71:0d:b1:10:53:4f:93:45:1d:ff:f4:86:d3:10:
         42:6a:71:06:1f:fc:c9:91:5b:a1:2a:e5:b9:fb:c7:0b:e5:7c:
         2b:9d:38:68:45:1e:b6:cf:47:f3:81:4b:f1:44:6b:d5:81:43:
         a0:6a:55:fb:31:b0:c7:71:26:71:b5:79:c7:53:16:c0:7b:86:
         b2:94:63:40:41:28:7b:31:b4:26:d0:cc:37:c5:5a:e4:36:03:
         d0:1a:ae:7f:92:b4:7c:d5:53:47:50:de:75:60:89:0b:23:dc:
         01:fb:73:8c:b2:41:00:bf:dc:70:e4:bd:30:00:aa:d6:a3:09:
         07:21:14:62:65:91:88:9b:1e:06:c9:19:11:ea:b9:0d:47:05:
         06:d0:20:bb:45:1b:6a:4f:e8:d9:4d:68:07:f7:fa:f9:e4:78:
         64:35:c2:a7:24:a4:ef:1a:49:c9:a3:bf:b6:e1:bc:19:77:7e:
         c5:b6:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:55:40 2025 by rpki-client