Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File:                     FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier:          eeDuII/9uIE/LeRRt9O8ZDGHSxOm7WIRO67YkpVy2O0=
Subject key identifier:   8A:1B:68:7B:CD:BD:6A:17:32:83:59:CD:43:34:BA:27:F0:69:32:72
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer:       /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial:       01976403F9AB75F9761FA7CA7168C3509EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number:          1574
Signing time:             Thu 12 Jun 2025 12:01:11 +0000
Manifest this update:     Thu 12 Jun 2025 12:01:11 +0000
Manifest next update:     Fri 13 Jun 2025 12:01:11 +0000
Files and hashes:         1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: GirXSIougbfkDqLCBfKcHiBqr6MfpHiklooe6kdlWpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:03:f9:ab:75:f9:76:1f:a7:ca:71:68:c3:50:9e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15894575555cde14c770cbb183da5535d144b540
        Validity
            Not Before: Jun 12 12:01:11 2025 GMT
            Not After : Jun 13 12:01:11 2025 GMT
        Subject: CN=8a1b687bcdbd6a17328359cd4334ba27f0693272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:29:18:cb:2c:e0:e2:04:07:d1:4e:5a:51:
                    48:a6:1c:6b:34:eb:e6:43:22:aa:53:67:22:9e:a6:
                    44:4b:91:26:1d:03:96:b4:a6:71:c1:d8:fa:1d:62:
                    b6:02:34:46:60:1a:68:c4:ec:8b:67:80:31:58:c5:
                    7a:2f:fe:0a:4e:af:5c:26:98:1f:91:f2:db:5c:df:
                    bc:59:49:95:af:b9:96:b9:04:59:34:81:49:ec:33:
                    3e:15:ab:6b:9a:00:59:6d:4d:a2:91:17:e8:ba:f3:
                    fd:26:df:3f:98:88:3d:60:c0:50:8e:84:16:bf:b3:
                    66:55:08:79:da:d7:c8:11:83:65:2b:52:bc:00:61:
                    53:c8:d6:17:59:27:b3:d7:65:6e:60:a5:64:b9:72:
                    8c:e7:43:3b:cc:3b:64:d9:8f:38:71:53:b7:22:c7:
                    81:4e:64:2b:28:72:ba:f2:20:c1:4a:f4:fd:2a:3e:
                    32:bc:44:4c:bf:c1:be:7e:d5:3c:95:be:ae:5a:62:
                    a6:e7:df:56:83:71:a4:0a:92:e1:ee:d0:70:24:d0:
                    9d:87:2a:3b:f4:a1:d2:0e:6f:43:fc:12:29:b7:a9:
                    7e:00:a4:ee:b6:da:b3:32:db:b5:fd:50:4e:9e:3e:
                    dd:75:a2:2a:f4:1c:cf:d0:7f:09:e3:11:c8:e0:a9:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1B:68:7B:CD:BD:6A:17:32:83:59:CD:43:34:BA:27:F0:69:32:72
            X509v3 Authority Key Identifier:
                keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:78:a6:37:54:9f:f8:43:6b:63:45:f3:e9:17:2a:a7:26:
         2b:eb:0c:d7:38:86:3a:34:e8:ac:9b:3f:f2:82:0d:7e:65:4b:
         63:dc:03:0a:c1:05:71:65:bb:5e:46:a7:db:f8:12:8e:98:4e:
         10:ba:9b:53:ad:dd:85:13:81:97:b2:34:fa:3b:99:64:32:74:
         e8:5f:9b:bc:6f:e9:a4:ff:a1:aa:0e:73:c5:49:11:b9:6d:52:
         e7:73:3c:ec:93:e2:f9:7a:06:11:ac:a9:9a:e3:52:f9:6c:af:
         48:c6:38:46:29:fe:c4:f0:db:44:4a:93:5d:c8:0c:64:3b:ba:
         ce:11:07:98:8d:28:44:e6:28:2d:a1:58:3a:65:77:dd:8e:fc:
         36:17:98:e5:cd:6d:a9:be:4f:4b:c2:19:03:da:91:ff:b8:5a:
         60:77:f7:33:31:b4:20:70:7a:dd:29:98:eb:1a:fa:47:45:99:
         95:15:1e:73:d8:cc:a4:0c:b6:bf:84:bf:42:d6:0c:fd:0f:a3:
         c0:7c:53:0c:39:02:9e:eb:ef:ee:78:03:0d:43:83:28:34:33:
         19:d4:9d:cd:ed:97:27:ec:17:06:98:08:1e:20:c8:68:0e:10:
         6a:32:ec:42:0c:06:93:f7:e8:4a:70:c2:a2:74:d0:43:b5:71:
         74:cf:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:42:09 2025 by rpki-client