Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          WsnN8f1qANJqRCjW3JJtMQvFA46ZLurxpAoEERQve2U=
Subject key identifier:   E7:99:F5:D6:54:BD:0D:4D:9E:7C:6B:38:96:32:34:2A:DF:51:C7:97
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       0197775383DEFEA52708CFE7A04DC8798ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          1098
Signing time:             Mon 16 Jun 2025 06:00:51 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:51 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:51 +0000
Files and hashes:         1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
                          2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
                          3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
                          4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
                          5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: h24la3QpcM5tLbZrWhSa7hGescG1O0L+uKkdM9W145c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:83:de:fe:a5:27:08:cf:e7:a0:4d:c8:79:8a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Jun 16 06:00:51 2025 GMT
            Not After : Jun 17 06:00:51 2025 GMT
        Subject: CN=e799f5d654bd0d4d9e7c6b389632342adf51c797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:7f:7e:f7:9f:8e:c1:fd:b8:52:80:3e:1b:
                    17:7d:23:18:56:4a:81:d5:96:1d:5f:88:8c:85:66:
                    61:2c:cb:80:92:22:32:dd:13:fa:36:30:d4:75:c6:
                    42:b2:77:9e:d1:1f:80:eb:6e:89:9f:f4:2f:8e:3a:
                    1b:3e:c5:be:aa:0a:37:14:8a:f7:93:54:a0:23:d9:
                    31:f3:0e:17:6b:ce:7a:7f:c2:49:1a:1f:f0:92:38:
                    ba:e9:31:9d:37:9b:d7:f5:e8:b0:72:4d:dc:d0:a0:
                    a1:00:59:43:9d:b4:94:71:1f:c8:d1:96:e4:94:60:
                    39:da:c5:bb:5f:b8:fc:48:a0:e1:8b:23:0a:aa:78:
                    55:cd:10:2c:30:1e:da:30:75:40:e8:e5:b3:d4:92:
                    c5:77:ce:d8:3c:e2:be:4a:19:9e:e7:e0:21:11:a8:
                    a7:e5:46:15:fb:9b:3b:e4:8f:45:3e:0b:08:dc:86:
                    31:16:be:ab:90:d5:92:b5:92:be:a3:e4:db:16:30:
                    de:7d:fa:4c:5a:77:4a:13:53:68:86:6b:20:71:97:
                    88:fa:90:5f:e4:05:57:cb:98:b9:d0:8e:60:25:fa:
                    ff:4d:f4:6c:20:33:33:8d:ad:40:c1:b5:39:fc:d0:
                    61:57:de:20:aa:05:f7:ec:f3:3b:52:16:63:88:4d:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:F5:D6:54:BD:0D:4D:9E:7C:6B:38:96:32:34:2A:DF:51:C7:97
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:c9:8d:df:ea:85:13:f1:65:84:b5:c0:56:5f:fd:fb:12:
         d5:84:17:68:b0:46:05:72:44:d7:ad:bc:fd:86:25:bb:c6:9c:
         1c:e0:e4:d7:ec:5e:17:cc:95:0f:b4:ad:87:fe:20:be:bd:d0:
         84:bd:27:47:08:e2:ee:55:db:98:65:c7:a0:a7:d5:79:92:c6:
         b5:11:95:d8:9a:0a:69:72:be:05:84:ed:62:39:2c:90:21:5e:
         83:87:d6:b2:76:09:93:8b:21:35:ea:0c:a1:df:cc:ad:1e:60:
         37:b4:5c:ac:d3:f9:33:65:a8:c5:83:19:66:ae:91:ed:53:9c:
         cf:db:44:58:db:00:45:ce:83:93:c5:8a:59:be:af:cd:b9:9c:
         6d:2d:d2:38:6c:2d:83:c5:e6:25:ce:d9:bd:f1:f2:53:3f:e5:
         89:84:fe:50:0e:c5:a5:06:86:a3:d1:e0:c4:0e:6c:eb:66:9f:
         89:07:93:be:6c:4f:81:dc:00:50:d1:ad:5f:f2:71:7d:13:7d:
         53:5b:0b:bf:54:27:6c:11:6f:62:af:0e:b4:f0:88:72:8a:27:
         3a:2d:90:0d:e1:c5:aa:77:16:82:6e:f4:a4:2b:80:56:18:40:
         c4:bb:1b:dc:12:0b:f1:24:51:c1:ed:85:5c:d6:cb:99:23:69:
         8e:2b:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:17:56 2025 by rpki-client