Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File:                     FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier:          pRZr6xjlkqEzHXL3+1s5xS7+TdW9qcDVGo29uOEj0o4=
Subject key identifier:   E6:D3:B3:AC:E3:FB:31:5D:F4:B3:67:B8:A8:1C:E6:8B:3F:83:92:04
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer:       /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial:       0197586D89B58D5EEEB4B4D8A19C54C3C052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number:          156E
Signing time:             Tue 10 Jun 2025 06:01:02 +0000
Manifest this update:     Tue 10 Jun 2025 06:01:02 +0000
Manifest next update:     Wed 11 Jun 2025 06:01:02 +0000
Files and hashes:         1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: GRWZ7RrJ0qsdWxjxTmHVWkRBWQHD0rP1QUe0/B1mQ2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:89:b5:8d:5e:ee:b4:b4:d8:a1:9c:54:c3:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15894575555cde14c770cbb183da5535d144b540
        Validity
            Not Before: Jun 10 06:01:02 2025 GMT
            Not After : Jun 11 06:01:02 2025 GMT
        Subject: CN=e6d3b3ace3fb315df4b367b8a81ce68b3f839204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:26:ec:9c:71:5e:cf:23:4f:01:7c:0d:c5:
                    77:ad:c0:23:7a:7c:dc:17:b2:6d:e6:b1:51:46:a1:
                    fd:11:31:6e:b2:a9:05:ea:2f:86:e3:d1:62:dc:66:
                    e6:25:38:82:92:6a:9c:20:27:eb:3a:8a:b9:a9:66:
                    00:c6:b0:94:f4:c1:29:ad:80:b7:77:5f:e7:6c:07:
                    6d:e1:bb:a2:63:af:57:2c:68:3f:45:bb:cd:d8:b8:
                    9a:2d:ca:7c:0e:5d:1e:c2:a0:ba:1f:2d:8d:30:e2:
                    7c:22:df:ea:71:d7:ce:a7:a2:9e:d6:5a:52:fe:d2:
                    9a:f5:5d:d2:5f:b1:00:34:6d:e0:7c:61:ee:78:0b:
                    11:54:b4:5e:ee:3f:3d:66:d2:12:6e:b4:86:cd:bc:
                    ea:89:c0:2e:44:16:b5:9d:a7:1b:49:3a:0c:58:70:
                    d2:33:aa:c7:3d:c6:06:a6:04:1e:07:7e:51:7d:74:
                    d8:07:33:c3:70:84:e0:7d:db:33:45:ac:bb:37:c7:
                    bf:1b:bb:f6:2f:a8:1d:41:ae:90:3e:9b:a6:3e:2a:
                    86:a4:9a:11:16:87:41:88:ee:ca:d9:56:bd:f4:5f:
                    47:75:f9:a3:d9:68:76:e5:3e:8b:c1:db:c9:ce:01:
                    bc:2e:1c:a0:55:9d:74:35:46:de:fd:d9:ea:d4:14:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:B3:AC:E3:FB:31:5D:F4:B3:67:B8:A8:1C:E6:8B:3F:83:92:04
            X509v3 Authority Key Identifier:
                keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:7b:17:ec:da:d0:9a:4e:35:92:8a:60:c2:38:ee:79:85:5f:
         f2:a1:8f:71:41:e5:55:fe:32:44:8e:0c:54:81:79:a4:f1:57:
         3c:16:fe:14:6c:5d:0d:b9:80:a1:2c:9c:bf:b2:af:1c:51:f5:
         91:c5:bb:7f:90:9f:e1:f1:61:5c:90:6a:77:e8:be:3f:61:44:
         e3:29:dc:9c:08:70:f8:26:c4:7f:bc:0f:be:ca:6c:a0:8d:af:
         07:aa:54:b1:16:64:1c:be:26:1b:b3:3b:01:fa:a0:fe:4c:81:
         93:4e:cd:a3:46:0c:59:30:f4:4f:e8:d8:2e:89:39:be:50:35:
         31:01:27:f2:01:fb:28:33:0e:f4:59:8f:e7:06:08:45:8b:7d:
         9a:d0:22:7e:c5:4c:86:1b:41:e6:87:af:c3:6a:f2:e6:f4:3f:
         66:b1:a9:1f:dd:fa:bb:36:91:23:29:ac:ac:86:d3:79:86:f5:
         15:47:f4:45:94:0b:10:1c:88:f6:32:d2:61:4d:05:90:14:45:
         b3:2d:13:26:e4:e8:28:40:24:89:51:7c:92:5d:c8:29:6e:ff:
         fa:27:f4:08:63:66:57:a1:98:bd:18:bb:7f:d6:f9:13:4a:6b:
         4d:9c:2b:68:c6:53:9a:4c:da:19:f5:93:65:5f:97:68:20:7e:
         a9:42:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:22:18 2025 by rpki-client