Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File:                     FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier:          WOIVw5QNXEACXNzDnb/N7BJr3dPWSwy/ACTu+8zR8fI=
Subject key identifier:   25:E5:05:F4:7D:AC:94:29:D1:3A:E2:41:38:42:F1:A0:9C:7F:1C:9E
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer:       /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial:       019747E7DA22376896FD190147AF32AB377F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number:          14E7
Signing time:             Sat 07 Jun 2025 01:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:06 +0000
Files and hashes:         1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: 57d0nJIIh30gPkaAIftIwqXyQAv+xBgoMr2R6KJuBX8=)
                          2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:da:22:37:68:96:fd:19:01:47:af:32:ab:37:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
        Validity
            Not Before: Jun  7 01:01:06 2025 GMT
            Not After : Jun  8 01:01:06 2025 GMT
        Subject: CN=25e505f47dac9429d13ae2413842f1a09c7f1c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:1a:c4:12:53:b6:3f:61:50:b2:c0:65:c3:
                    65:e1:48:05:86:11:1b:04:54:07:9f:00:80:d4:ac:
                    47:50:23:17:07:3e:3c:71:1f:b0:a4:38:f3:1c:60:
                    43:a8:e5:b8:cc:b9:3d:e6:fc:ed:b7:0e:4a:cd:e1:
                    93:b9:4f:d7:69:1b:b7:6d:62:f4:5c:06:50:ab:2e:
                    e0:ba:d5:62:73:38:0f:5c:52:a2:cd:47:ca:36:75:
                    d7:21:6f:87:7c:f9:45:cf:c3:f0:54:7d:e9:6b:60:
                    5d:f4:32:70:02:98:b0:bb:72:67:36:f2:06:37:82:
                    2a:96:b3:ff:25:f8:c3:22:bc:15:27:1b:52:3e:03:
                    bf:52:03:83:cb:fe:12:66:6e:58:56:4c:26:69:f5:
                    95:f2:66:a0:ce:9a:49:1e:2c:7a:cd:ae:87:55:ec:
                    20:e7:96:68:1a:9a:52:82:e2:fa:e9:c6:aa:1e:90:
                    33:14:73:c4:5d:90:7b:c2:34:00:11:ed:07:1e:55:
                    fd:61:30:5e:2a:7a:82:e9:e2:62:48:e4:d8:f5:fe:
                    08:45:50:8f:b3:7f:73:73:19:8e:e6:99:52:54:f7:
                    5c:9e:47:e4:b5:1a:5c:6d:ff:6c:5e:c7:45:36:bb:
                    87:48:34:19:bb:c6:51:0d:f0:0b:b8:c2:21:1d:89:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E5:05:F4:7D:AC:94:29:D1:3A:E2:41:38:42:F1:A0:9C:7F:1C:9E
            X509v3 Authority Key Identifier:
                keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:da:f1:b7:9f:83:55:4e:3d:e5:8c:5d:8d:48:c3:01:7d:5a:
         2e:20:ec:ea:34:07:5d:4e:65:32:5f:a3:3b:47:db:a9:9c:83:
         60:a5:ed:f4:1c:4d:81:71:82:34:6c:76:3c:dd:ad:50:95:f7:
         19:73:82:ae:17:d2:45:5a:a1:ab:ee:bc:61:36:74:34:90:c8:
         24:c9:2e:fa:ab:e6:54:6b:97:51:a5:66:36:f6:e5:70:53:6a:
         1d:bb:3c:51:22:44:c9:ea:63:b4:bb:fe:3c:14:36:b8:84:f9:
         8f:f4:56:8d:68:a7:bd:2a:6a:0d:1e:17:83:91:46:d9:13:6f:
         75:9e:eb:5c:d3:ae:8e:9e:38:e2:2b:99:7f:14:bd:47:2a:3e:
         07:3f:eb:16:db:ef:38:3b:10:44:f4:11:65:e7:ee:7d:de:45:
         c4:4d:36:d1:25:01:9b:63:18:f4:70:cf:ad:d6:db:1f:5f:28:
         a0:94:d1:c9:f6:dd:33:37:91:da:a8:8f:ca:e6:3a:7b:29:8d:
         76:c0:9e:35:9b:c0:df:cd:96:f8:fc:54:71:90:ea:a0:52:e6:
         cc:80:d7:1c:da:3e:6e:99:61:5b:5f:42:9f:a2:91:13:4b:8f:
         40:56:c7:84:fe:6b:f6:bc:b1:b2:f2:32:dd:28:df:c1:2a:b6:
         3d:e1:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:35 2025 by rpki-client