Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File:                     FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier:          DlErjmwzVcd0P4x6i1zXPZs0sVsdrxzQ0vWyLJlGqQ8=
Subject key identifier:   13:6D:7D:1C:E9:17:9B:24:13:BC:16:CA:B0:9C:50:E1:60:85:09:B5
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer:       /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial:       01976CCFEE6233B5BAC487FE0ACF7BB081CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 05:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:55 +0000
Files and hashes:         1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: SXtEQ+jHQcfDA7faAtsYKCiHME2je1U5NOiSm2ncvOU=)
                          2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:ee:62:33:b5:ba:c4:87:fe:0a:cf:7b:b0:81:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
        Validity
            Not Before: Jun 14 05:00:55 2025 GMT
            Not After : Jun 15 05:00:55 2025 GMT
        Subject: CN=136d7d1ce9179b2413bc16cab09c50e1608509b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:61:82:07:2f:2f:a0:00:49:95:92:67:68:
                    90:d7:15:d9:25:64:89:8f:37:03:27:ea:ea:2d:49:
                    3f:df:82:06:43:95:8e:1b:15:c9:9b:d1:47:8a:2c:
                    8a:44:00:23:91:0b:3b:10:65:8d:5c:14:f6:10:e2:
                    73:9c:7e:bb:b0:69:6f:6c:7f:55:90:f4:cc:d5:09:
                    dd:67:52:6c:a2:71:a0:f0:bb:68:05:ee:2c:9e:8b:
                    5e:ab:f4:90:73:fb:e9:2a:8f:a9:0b:f4:85:75:bf:
                    70:bf:d1:6e:2b:60:01:4e:34:d3:55:92:c0:88:4e:
                    e3:f7:94:b2:cc:04:c2:cc:78:62:ec:0b:e0:18:ad:
                    55:6d:c5:9b:6a:e3:4f:5f:11:f0:36:b6:f4:88:ba:
                    ec:56:78:e0:7d:c4:a0:e5:0b:9d:42:63:6f:dd:1f:
                    c2:c9:a9:1f:c1:91:6a:25:bf:80:6a:61:d7:40:eb:
                    41:70:17:fc:2f:63:3b:31:b4:01:83:76:f9:3e:1b:
                    66:ea:fe:f4:14:82:ab:99:75:34:51:72:8a:6d:6e:
                    e3:fb:6d:3e:a5:43:23:68:ad:a9:62:5e:d6:c5:28:
                    7d:88:73:a8:6a:93:64:b6:a0:b9:ac:bf:16:9b:e5:
                    39:6a:5b:e9:64:2b:c0:2f:b2:ef:ac:d8:bb:b7:ea:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6D:7D:1C:E9:17:9B:24:13:BC:16:CA:B0:9C:50:E1:60:85:09:B5
            X509v3 Authority Key Identifier:
                keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:94:46:38:cf:e5:47:40:dd:40:6c:08:fc:1a:f4:1f:64:
         e8:f5:bb:75:c7:9b:d3:82:4e:12:f7:69:e4:b9:1e:b1:d9:e0:
         17:75:41:82:96:df:6a:54:7e:12:4e:70:73:91:59:3a:63:fe:
         cb:e6:b8:01:3d:c6:17:48:c5:e6:c4:a2:a5:f8:ac:67:cc:be:
         bf:96:92:73:ee:01:2d:e2:68:2b:1e:fa:cc:78:64:f9:71:bc:
         42:ac:88:c1:4f:97:c4:11:46:aa:dd:6e:ac:7e:ab:ba:a9:7d:
         41:2b:67:34:f8:8e:29:d6:fe:e7:0a:0a:81:92:52:02:48:d7:
         a5:95:82:a0:e5:fd:7b:ac:39:8b:0b:cf:ce:4e:0a:00:ac:b3:
         48:bb:13:d1:68:c8:3b:78:2d:e6:70:d4:de:0a:60:6b:59:12:
         5b:98:1f:b3:60:6a:7e:47:ac:b1:9c:4d:49:3c:f4:7a:24:4c:
         6a:94:d9:c7:34:71:22:e7:9d:05:f0:39:f5:d5:49:f9:16:e6:
         97:db:c6:8e:ea:f2:6e:7f:64:b0:5d:c3:64:48:1e:38:40:65:
         10:8a:85:9d:ec:95:ec:37:5a:d9:f7:cb:c5:8e:bb:93:30:2a:
         4e:c8:ae:23:17:84:3f:c4:84:ff:f8:ab:74:a6:ff:99:e1:ae:
         6a:dd:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:30:15 2025 by rpki-client