Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File:                     FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier:          UxtKJZTxBlxId4r6hyexXcNu5NPf1FZoIQeFXm4Cbew=
Subject key identifier:   B0:54:7F:70:0B:C3:5D:F4:E5:BE:F3:33:56:B3:B0:E1:75:98:69:73
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer:       /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial:       0196553761CB1EA505E587D61E81A67467C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number:          14FB
Signing time:             Sun 20 Apr 2025 22:00:14 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:14 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:14 +0000
Files and hashes:         1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: jhOrIz+aOeHMHLNbQaWhFtbfPp/4+UU07EWe92MhKjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:61:cb:1e:a5:05:e5:87:d6:1e:81:a6:74:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
        Validity
            Not Before: Apr 20 22:00:14 2025 GMT
            Not After : Apr 21 22:00:14 2025 GMT
        Subject: CN=b0547f700bc35df4e5bef33356b3b0e175986973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:2d:18:71:03:0e:d9:fd:90:5b:70:ba:0d:
                    a3:23:1a:35:f6:43:99:aa:4e:d9:ea:06:c3:98:97:
                    95:00:f0:85:a1:b4:e2:e8:a6:eb:0a:20:c6:e3:aa:
                    be:a9:15:e1:8b:f1:16:24:a9:7d:b9:f6:a5:41:d0:
                    45:9d:d5:df:20:1b:1d:88:51:b9:59:13:b3:98:3e:
                    87:3d:a4:45:86:d0:bc:06:52:31:92:9f:5d:66:fe:
                    26:10:ab:77:8f:bb:2b:16:75:19:3f:32:04:72:2b:
                    6d:3b:98:e4:6e:c4:e2:46:02:d3:55:4e:32:e3:3c:
                    bd:87:29:43:c0:2b:0a:fc:ba:22:21:60:9f:68:08:
                    be:e5:e9:a9:80:f6:bf:bf:57:b7:3b:da:69:d4:47:
                    d1:08:9f:58:9d:02:51:8d:e2:f9:bd:95:78:0c:9f:
                    b9:b9:4c:b2:8d:66:b4:e7:e2:e7:09:5e:65:9b:fd:
                    36:8a:e3:5b:d1:c4:8c:eb:23:a0:67:e1:08:33:1f:
                    86:f1:c8:cc:f7:98:a3:c5:4d:3f:97:0f:44:2e:f8:
                    a3:13:7c:df:2d:ee:bf:4f:fe:65:d9:d2:b8:1f:b4:
                    cf:80:51:99:39:1c:ba:ca:cf:48:e3:e8:55:51:fb:
                    5d:3d:ac:81:f2:91:a0:c3:3c:3d:b9:37:57:48:3a:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:54:7F:70:0B:C3:5D:F4:E5:BE:F3:33:56:B3:B0:E1:75:98:69:73
            X509v3 Authority Key Identifier:
                keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:40:81:31:01:d2:51:90:d9:8a:80:d6:24:2a:d9:89:e2:
         99:90:ad:bb:fa:44:cc:06:20:65:3e:41:9d:85:1f:89:17:fe:
         f8:6f:96:dc:b6:59:c7:6e:25:38:5a:1f:06:e2:37:af:d5:ca:
         64:c7:29:1c:4b:e8:ba:00:71:f3:24:ae:43:0a:2c:ad:0d:14:
         68:1b:04:14:10:58:9b:a7:a2:7f:ff:1f:5a:36:88:04:ab:ac:
         31:76:68:32:50:46:36:14:0d:de:27:b6:06:6a:80:a9:d2:a0:
         51:87:c9:72:5e:7d:ab:2b:82:2f:ae:2c:9d:5e:08:e3:fa:68:
         fc:c9:bd:10:6d:21:db:82:a8:95:9c:2c:28:3f:aa:0e:b1:6e:
         95:13:e9:84:78:34:35:01:fc:88:06:c3:1c:84:65:c8:d9:41:
         43:43:e0:f9:56:8a:dc:fe:00:c3:3f:27:9c:73:dd:2d:54:4c:
         dd:20:d8:b1:25:f5:3d:44:31:84:80:89:1f:e0:61:85:97:c1:
         41:79:a2:57:d1:fe:0f:7e:24:af:3d:f9:30:d2:3f:29:93:29:
         4c:3c:61:51:96:55:6e:cc:53:a3:d3:dd:77:24:59:b0:73:3f:
         34:6f:75:32:cb:9e:ae:58:b8:b8:ab:3b:66:2f:f5:b0:0b:5b:
         3a:a8:18:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:13 2025 by rpki-client