Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File:                     FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier:          62rXg9vuLO3KzFTTa11W1yZjUwQx55meJr3KB3n/LRE=
Subject key identifier:   8D:96:F5:A6:9B:60:18:ED:46:55:22:7D:03:68:A9:1A:FE:72:CD:E9
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer:       /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial:       01976EF4D969071EEDE9D9FFC2860334E069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number:          0C85
Signing time:             Sat 14 Jun 2025 15:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:29 +0000
Files and hashes:         1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
                          2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: w79SX37/G4Mcgx/bBI3AAdwmbz6fyzN4fFZGtFJ/i78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:d9:69:07:1e:ed:e9:d9:ff:c2:86:03:34:e0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
        Validity
            Not Before: Jun 14 15:00:29 2025 GMT
            Not After : Jun 15 15:00:29 2025 GMT
        Subject: CN=8d96f5a69b6018ed4655227d0368a91afe72cde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:93:8f:f9:56:0a:e3:40:8a:0b:5a:8b:10:
                    7e:4c:2b:d1:7d:23:d1:f1:7f:39:85:48:4e:78:26:
                    44:be:a8:26:72:c6:a9:9b:0b:49:2b:c7:00:56:fb:
                    b2:0e:a5:93:2c:9a:79:ab:de:27:5b:4e:79:93:32:
                    8b:31:a5:05:e3:94:9e:a0:4f:f7:93:b5:2b:c1:39:
                    fc:7f:d4:0f:43:33:f1:36:9e:fa:4d:e0:d1:04:d5:
                    34:ce:1b:c5:a5:4c:74:61:f1:ee:45:25:5f:61:a5:
                    0e:e5:8d:40:1d:cf:2d:4e:2a:b5:e5:47:8d:f3:ec:
                    bb:87:c9:e0:24:bc:af:35:fc:b7:db:bc:56:b3:98:
                    3d:6e:3d:75:7d:37:15:bb:a3:e8:53:45:8c:e7:38:
                    4f:14:97:d3:e9:71:5d:5b:d7:1b:fd:2c:2d:6c:45:
                    81:24:ea:77:18:45:7a:d2:a6:9f:6f:6d:e0:44:13:
                    bf:27:59:c0:e2:3e:18:8b:bb:9a:0b:83:a4:4b:c0:
                    88:c0:71:32:e3:e9:07:aa:ea:25:23:65:6a:40:6c:
                    5c:26:bb:c7:8b:ca:3e:00:3f:39:96:ad:68:ad:e5:
                    41:c4:cf:df:8e:72:bc:a5:3c:ad:00:58:41:e4:4e:
                    8a:f8:f4:81:50:b7:db:1d:11:04:73:7d:fe:41:2e:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:96:F5:A6:9B:60:18:ED:46:55:22:7D:03:68:A9:1A:FE:72:CD:E9
            X509v3 Authority Key Identifier:
                keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cb:91:d5:4a:b7:07:77:d0:c2:67:60:d9:b0:46:cc:58:96:
         87:9d:0c:1a:f4:5a:a3:28:27:04:46:56:d7:f5:8c:fd:00:9e:
         ba:15:90:f8:d0:03:f6:30:20:52:1e:7f:15:a2:3d:36:01:65:
         c3:3a:30:bf:0e:1c:67:f1:d2:f4:b9:2b:b4:12:15:10:b4:69:
         66:75:4b:c6:de:b8:58:f7:99:af:a8:c6:3f:49:ca:70:9b:32:
         e4:6e:21:3d:3a:59:d3:c6:ca:bf:b9:77:7d:5a:7d:ad:1a:47:
         f3:65:57:1e:4b:1e:12:fd:05:5d:9d:ff:cd:b9:02:86:bb:01:
         52:c2:8c:63:94:42:41:a5:7f:b8:b1:fa:bb:43:b0:1d:27:8d:
         26:b1:a3:d2:0e:6e:99:cf:15:90:c3:81:78:b2:6d:25:7b:bf:
         45:ea:24:6a:76:bd:08:cf:d2:9d:7d:4f:33:14:87:62:07:7e:
         2f:64:16:56:21:3e:52:16:25:9c:db:d5:a1:47:78:d7:b1:08:
         49:d5:19:e6:69:ea:f0:67:d0:9f:af:a1:82:e0:2c:4f:a7:07:
         9c:59:fe:6b:4f:e7:ed:bd:b7:cd:98:4d:9f:83:c3:62:ca:69:
         b3:7a:e7:a3:89:68:79:ed:2e:c8:19:89:35:97:31:0d:e7:b9:
         a5:8d:75:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9NlpBx7t6dn/woYDNOBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjUxZTkwMzZjYTZlNzU2YTAxNjNjMzg3NzgyMGNkNWZj
ZTExYWUwHhcNMjUwNjE0MTUwMDI5WhcNMjUwNjE1MTUwMDI5WjAzMTEwLwYDVQQD
Eyg4ZDk2ZjVhNjliNjAxOGVkNDY1NTIyN2QwMzY4YTkxYWZlNzJjZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwKTj/lWCuNAigtaixB+TCvRfSPR
8X85hUhOeCZEvqgmcsapmwtJK8cAVvuyDqWTLJp5q94nW055kzKLMaUF45SeoE/3
k7UrwTn8f9QPQzPxNp76TeDRBNU0zhvFpUx0YfHuRSVfYaUO5Y1AHc8tTiq15UeN
8+y7h8ngJLyvNfy327xWs5g9bj11fTcVu6PoU0WM5zhPFJfT6XFdW9cb/SwtbEWB
JOp3GEV60qafb23gRBO/J1nA4j4Yi7uaC4OkS8CIwHEy4+kHquolI2VqQGxcJrvH
i8o+AD85lq1oreVBxM/fjnK8pTytAFhB5E6K+PSBULfbHREEc33+QS5lBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2W9aabYBjtRlUifQNoqRr+cs3pMB8GA1UdIwQY
MBaAFBa1HpA2ym51agFjw4d4IM1fzhGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4Yzgt
MmVjNDEyNGRkNDA5LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4YzgtMmVjNDEyNGRkNDA5
LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMuR1Uq3
B3fQwmdg2bBGzFiWh50MGvRaoygnBEZW1/WM/QCeuhWQ+NAD9jAgUh5/FaI9NgFl
wzowvw4cZ/HS9LkrtBIVELRpZnVLxt64WPeZr6jGP0nKcJsy5G4hPTpZ08bKv7l3
fVp9rRpH82VXHkseEv0FXZ3/zbkChrsBUsKMY5RCQaV/uLH6u0OwHSeNJrGj0g5u
mc8VkMOBeLJtJXu/Reokana9CM/SnX1PMxSHYgd+L2QWViE+UhYlnNvVoUd417EI
SdUZ5mnq8GfQn6+hguAsT6cHnFn+a0/n7b23zZhNn4PDYspps3rno4loee0uyBmJ
NZcxDee5pY11tg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:57 2025 by rpki-client