Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File:                     1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier:          LVKz4Vx1dQGnEHnZJ3CP6LbY2jsy1f4UNGIx2vGC2L4=
Subject key identifier:   67:99:BC:77:0B:4A:35:14:A8:D8:0F:1B:06:D1:DA:CA:00:AA:D4:F2
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer:       /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial:       01976D74671BEB0E9157AF66E3EDFCB7381D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number:          1523
Signing time:             Sat 14 Jun 2025 08:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:34 +0000
Files and hashes:         1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: zmM19FXG09Ykw12KF8eNrua2dV/IChKzu+A/5YrrZqU=)
                          2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:67:1b:eb:0e:91:57:af:66:e3:ed:fc:b7:38:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
        Validity
            Not Before: Jun 14 08:00:34 2025 GMT
            Not After : Jun 15 08:00:34 2025 GMT
        Subject: CN=6799bc770b4a3514a8d80f1b06d1daca00aad4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:12:86:20:78:b9:57:af:cc:2f:e9:e9:81:
                    80:f4:fb:e1:e3:eb:33:7f:7c:42:fe:33:9a:00:17:
                    95:6c:2e:0a:c5:df:f2:29:4d:8c:a2:fe:38:7e:c8:
                    88:74:f0:e9:da:6a:2c:0f:17:c5:17:b9:32:9d:7c:
                    b3:a5:b8:a2:da:62:7b:d3:c3:3b:7e:6b:20:61:a2:
                    2d:29:98:3f:93:83:0b:15:09:ac:06:2c:06:a9:92:
                    ff:cc:ee:9e:58:c4:e9:32:a7:0d:89:d0:c0:7f:14:
                    f5:30:26:fe:fa:24:83:32:7d:ba:91:1c:0f:69:21:
                    df:20:22:d1:50:52:88:04:94:1a:8d:c2:f8:50:77:
                    a4:30:d7:e8:39:5b:61:c7:a7:1d:eb:9b:f4:8c:bd:
                    e2:7a:13:e6:a4:aa:fd:e6:b2:5e:32:40:a3:34:a0:
                    a7:74:df:37:54:50:e5:4e:68:5f:ed:6f:cc:31:15:
                    98:dc:4a:c3:8a:be:91:bb:0b:3d:e5:51:d9:60:ff:
                    76:d6:09:64:bb:24:b7:71:34:16:53:12:9d:0f:d7:
                    28:ea:f2:a5:c8:e6:d5:a9:06:54:de:45:73:34:ce:
                    3e:9d:6c:f0:9f:5c:59:42:9a:65:54:82:5c:6a:05:
                    60:85:7c:e9:bf:84:cd:39:22:5d:34:47:f0:a3:2b:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:99:BC:77:0B:4A:35:14:A8:D8:0F:1B:06:D1:DA:CA:00:AA:D4:F2
            X509v3 Authority Key Identifier:
                keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:58:b9:38:cb:8f:8d:89:a2:20:50:ab:5d:c1:85:ec:e6:
         35:58:03:61:60:f5:60:46:68:1e:1c:3a:63:db:7d:05:73:4d:
         b0:0c:1d:e6:fa:c6:8e:9c:a1:8a:54:9a:74:17:f1:14:f1:da:
         3e:3b:34:73:7b:cb:5b:8b:44:e9:bc:d9:10:91:bd:cf:c4:e0:
         e7:b9:6c:b7:cb:2d:f1:45:1c:b3:16:65:da:b1:a3:91:2d:04:
         11:3f:6b:27:48:d8:55:33:a1:cb:34:f7:9c:25:4b:43:78:a1:
         ea:02:a7:11:60:bb:82:e6:db:a5:f6:68:f7:34:ed:80:25:18:
         bd:08:51:b5:10:97:05:5f:46:1d:54:b9:2b:1c:fa:86:08:64:
         9b:fa:b8:64:39:c8:81:04:12:ae:04:a8:53:7f:62:f6:53:91:
         1c:01:bd:54:cb:53:3f:72:6c:a1:e2:89:31:78:89:e5:11:46:
         09:0e:41:23:04:be:12:dc:96:38:4d:0d:f5:58:32:9c:3d:bb:
         19:de:84:60:cf:6d:c5:90:11:cc:51:97:5e:3b:96:e3:49:81:
         b6:6f:7f:c2:ea:de:2c:08:8f:9d:3d:6a:c1:ed:ff:e0:39:58:
         30:e3:97:1b:c7:60:93:62:28:17:ee:b9:fb:7c:11:e4:62:ad:
         13:4c:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:20 2025 by rpki-client