Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File:                     _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier:          CLc1PlDTiS1iDgjSr2D3K9r1USayrM4oiBwxwXbYHfc=
Subject key identifier:   47:75:AF:E7:9C:23:AD:C5:A9:88:59:49:FF:27:A3:37:35:12:3A:1E
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer:       /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial:       01976D3E39C7B6F825DD2844D2A1C4501C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number:          02FB
Signing time:             Sat 14 Jun 2025 07:01:23 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:23 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:23 +0000
Files and hashes:         1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
                          2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
                          3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: zVgMSQfWQ4Dzt8Gpz6ghyJvjlLDwQwnl0B7CtqrlMK4=)
                          4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
                          5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
                          6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
                          7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:39:c7:b6:f8:25:dd:28:44:d2:a1:c4:50:1c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
        Validity
            Not Before: Jun 14 07:01:23 2025 GMT
            Not After : Jun 15 07:01:23 2025 GMT
        Subject: CN=4775afe79c23adc5a9885949ff27a33735123a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:c5:d0:3c:8c:34:a1:95:9d:e6:f9:a4:8d:
                    aa:f7:97:9d:ac:c6:88:02:96:cd:6d:52:6f:b8:a0:
                    82:18:92:0e:93:b4:dd:99:49:19:19:58:4c:4c:56:
                    46:90:b1:1d:93:a6:bc:37:ee:3c:85:ae:82:ee:12:
                    f7:8c:82:69:82:a5:8f:11:ec:bc:3a:55:50:14:5a:
                    f4:a5:b9:77:19:81:a7:23:62:2d:e2:ec:e2:b9:b8:
                    18:69:e9:68:40:97:fa:90:b3:93:e5:fa:07:72:ad:
                    04:96:ff:f8:ee:06:9b:52:dc:f5:c3:93:61:0d:ab:
                    23:79:7f:43:03:58:7d:3d:ab:ba:4b:06:12:9f:88:
                    dd:db:bf:08:58:40:e0:4b:da:af:35:2c:ab:9d:d5:
                    e7:a2:22:da:07:69:c3:c8:8d:03:d8:61:36:b8:f7:
                    70:21:a4:92:61:5f:21:54:07:d0:f6:67:39:5f:3b:
                    ab:21:02:00:b5:ec:c0:68:96:2e:fc:d8:fc:97:60:
                    cb:b0:f5:9a:83:f7:b0:98:91:94:40:9b:82:66:a6:
                    99:d3:c2:3a:d8:de:8e:2d:fa:6c:c1:bc:41:5f:7b:
                    09:eb:92:81:fd:ef:d9:aa:a4:6e:62:5f:f8:af:f7:
                    18:37:a4:50:d0:ed:44:80:73:40:57:0c:6d:d3:ff:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:75:AF:E7:9C:23:AD:C5:A9:88:59:49:FF:27:A3:37:35:12:3A:1E
            X509v3 Authority Key Identifier:
                keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:65:99:84:71:3d:0b:57:69:90:91:8c:60:f6:7c:33:40:c5:
         2f:32:29:c8:7b:45:6c:16:47:23:e0:54:69:d6:74:de:39:58:
         1a:3a:3a:b0:30:57:8c:13:27:28:0d:ce:6f:0f:28:ba:87:92:
         2d:37:8a:4f:67:17:3f:0f:96:03:67:ca:b7:a3:17:c5:2e:f8:
         27:0a:14:21:80:10:96:56:f9:6e:05:23:fd:88:ac:6e:44:94:
         6f:25:69:fc:08:bc:3e:fd:b0:af:4d:db:fd:34:1b:4d:95:82:
         26:c1:98:c6:0b:9e:9d:6e:00:1e:bf:90:b5:4f:9f:36:c2:16:
         4a:c0:96:46:9f:a6:14:76:8c:21:45:6d:06:9c:aa:08:bf:65:
         5b:53:92:3e:b7:b8:e2:c9:66:c2:2e:bf:1e:6f:b1:b0:d2:6a:
         67:06:03:3f:7b:8d:18:14:56:2e:cf:ae:6d:ab:cf:cf:7b:40:
         76:cf:4f:2d:0f:72:ae:70:7a:92:52:7a:69:e0:61:7e:0b:46:
         ef:8b:68:c8:be:9e:27:03:4d:2c:67:92:4a:e4:1d:e8:98:ac:
         68:51:4c:2d:6e:a6:c4:63:f7:e4:21:b6:69:b2:ed:e8:67:6e:
         d9:e5:3f:a5:85:08:e7:7a:e0:81:6e:31:b6:d6:c2:76:96:18:
         c3:aa:6b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:15 2025 by rpki-client