Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
File:                     F3khM2kRpWiNeOk__l5HIRO7Gb4.mft (raw, json)
Hash identifier:          4xaCqEY6dVXbv+tFDNbOSFkXqriG3yIQqZ41c1wN68I=
Subject key identifier:   5B:EB:CC:6D:BA:B8:99:1D:C8:AB:F6:33:22:01:CF:DC:8E:B1:38:D9
Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
Certificate issuer:       /CN=177921336911a5688d78e93ffe5e472113bb19be
Certificate serial:       01976929B5742EDE9A528DF92EB11ABCC863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
Manifest number:          056E
Signing time:             Fri 13 Jun 2025 12:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:30 +0000
Files and hashes:         1: F3khM2kRpWiNeOk__l5HIRO7Gb4.crl (hash: qhugpyYnBk7cSNgZgftACjy8CRuFOfYfYMbmQI2gaW8=)
                          2: WN1QsY4J0xzhzXI37At9k24AG4s.roa (hash: aONG4etXL5aCmGtS97ulkTYk4UjXjlB6E7tpLdYeDEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:b5:74:2e:de:9a:52:8d:f9:2e:b1:1a:bc:c8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be
        Validity
            Not Before: Jun 13 12:00:30 2025 GMT
            Not After : Jun 14 12:00:30 2025 GMT
        Subject: CN=5bebcc6dbab8991dc8abf6332201cfdc8eb138d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:a7:b3:dc:a1:93:3e:a4:f2:b9:6f:0c:41:
                    df:b9:de:09:52:b7:98:22:2b:66:cd:9f:65:72:98:
                    a0:2c:66:f8:c6:90:13:35:38:75:71:90:35:e3:a8:
                    63:8b:9a:f3:a6:1e:b3:62:9b:56:37:46:1f:1e:af:
                    a9:f5:7d:7f:9c:50:8e:b7:11:9e:65:73:b9:2e:c0:
                    d7:5a:8d:51:c7:f7:ac:b0:bd:29:2b:05:6b:cf:45:
                    1b:c8:6f:e9:9b:f3:a3:65:01:a3:06:e6:12:aa:52:
                    87:82:9a:7e:5c:14:d5:8c:fc:0d:c0:cd:f0:08:a9:
                    c6:3a:e2:0e:10:3d:14:13:de:e4:d0:9f:70:62:72:
                    d4:b3:0b:bc:92:49:15:17:e3:60:b7:7c:f4:fc:48:
                    2d:7c:17:82:20:17:35:53:2c:a7:99:45:59:30:01:
                    ee:d5:d4:4e:54:be:db:3a:39:50:a2:1c:c4:1b:77:
                    5c:17:a1:3a:a5:f7:7b:9a:31:ed:77:02:3b:87:05:
                    38:f3:d0:65:65:fd:7c:b4:ff:3c:c6:1e:bf:20:0a:
                    95:4a:49:12:68:40:e9:b0:7d:1a:94:eb:88:fa:17:
                    e6:7f:5c:ab:6c:92:db:12:6a:ad:d7:0e:da:9f:6c:
                    56:26:f3:83:7e:8c:5c:6d:9d:49:27:4b:55:73:62:
                    75:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:CC:6D:BA:B8:99:1D:C8:AB:F6:33:22:01:CF:DC:8E:B1:38:D9
            X509v3 Authority Key Identifier:
                keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:f7:ba:a8:6e:76:88:44:b3:0e:0c:05:89:ab:b9:d1:21:
         52:aa:dc:7d:b7:46:8c:34:e8:fe:e8:fc:4e:97:df:5b:b1:cb:
         79:1d:38:c1:b7:b5:ec:81:d7:0b:84:1a:a4:6d:50:eb:68:94:
         a5:15:9e:ce:94:ea:8d:3d:ce:75:7d:9d:11:70:78:42:e1:54:
         38:a9:23:3c:a8:5f:7d:70:39:5e:cd:a6:36:17:f6:d2:2a:cc:
         a1:d9:2e:30:8a:78:8f:47:9c:9f:4d:25:be:95:1f:e4:1c:8f:
         af:c8:ef:7e:e7:15:95:de:67:12:c9:8b:5e:f4:69:84:6f:a0:
         91:d8:fa:59:f3:b7:cf:5d:87:eb:89:a0:4e:9d:97:26:60:cb:
         1d:62:07:a7:be:b8:91:bd:77:9e:e0:21:ab:d9:7a:a8:0f:0f:
         92:d6:69:41:2d:5b:14:a9:12:2f:5e:4c:fc:89:c4:ac:c4:29:
         be:88:27:5c:0e:5b:d4:5a:6e:2b:18:13:c1:b5:a5:fe:76:69:
         9f:cb:fd:cc:fc:9d:80:b4:7a:0e:82:25:d2:ef:17:ec:00:20:
         2b:d8:8b:41:9b:91:8d:8e:54:56:74:18:c4:53:c6:c0:2b:bf:
         08:2a:02:1f:e0:f0:2f:31:03:f1:04:19:2b:56:fe:77:e6:9b:
         8d:1c:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:04 2025 by rpki-client