Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File:                     FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier:          my0l98t/WffbpEKsi1rkztqeTsbv5C3dByDckKDcDO4=
Subject key identifier:   B7:EF:01:BB:CD:43:84:A0:79:BC:9F:9C:9A:1F:50:88:8A:70:45:64
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer:       /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial:       019752A2BF9647C21A45665C35EBE3061E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number:          156B
Signing time:             Mon 09 Jun 2025 03:01:26 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:26 +0000
Manifest next update:     Tue 10 Jun 2025 03:01:26 +0000
Files and hashes:         1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: /cjcOq8cg9v+Nq6l+W93BYypJ2htRqhkkYgCZ4jrkAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:bf:96:47:c2:1a:45:66:5c:35:eb:e3:06:1e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15894575555cde14c770cbb183da5535d144b540
        Validity
            Not Before: Jun  9 03:01:26 2025 GMT
            Not After : Jun 10 03:01:26 2025 GMT
        Subject: CN=b7ef01bbcd4384a079bc9f9c9a1f50888a704564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:af:16:e3:6a:53:ce:c9:29:df:26:d8:5a:
                    7c:b5:c0:92:2a:d0:a1:b1:99:99:ef:cc:1f:a7:55:
                    f5:8b:56:6e:56:8d:ee:29:91:17:98:cd:26:bf:da:
                    8d:98:7a:e2:86:34:d2:2b:a9:f8:91:9e:f8:33:e3:
                    61:76:91:06:78:61:5e:8b:fa:14:33:fb:14:bf:42:
                    65:56:4d:a9:49:3c:22:4a:46:fc:7a:79:31:da:2a:
                    33:db:32:23:91:e1:4e:76:e1:b0:ef:9c:cb:5d:95:
                    04:2a:bb:29:b7:13:f5:9f:00:61:e0:d0:75:e1:c8:
                    73:36:8f:bb:e5:fa:5f:bc:4c:ee:77:6b:bc:92:dc:
                    5c:be:24:21:cd:eb:35:11:e8:e4:11:1e:7a:03:c3:
                    79:b0:df:01:c5:74:5f:c5:d6:d0:10:0d:06:7c:64:
                    a4:e7:87:f4:4e:8c:54:28:81:a4:12:5f:46:e1:b9:
                    3c:a7:81:da:f2:09:70:cc:30:78:f1:51:77:86:fc:
                    cc:b5:49:99:33:0a:e2:bd:06:05:39:91:27:5a:aa:
                    68:58:3e:cb:9e:bb:ad:57:be:5d:ad:4d:45:21:9c:
                    79:79:ff:e1:6f:e1:81:d4:1f:49:02:f9:fc:0b:99:
                    bd:b3:6f:84:b3:ff:43:79:41:c9:f3:3b:cd:2a:81:
                    32:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:01:BB:CD:43:84:A0:79:BC:9F:9C:9A:1F:50:88:8A:70:45:64
            X509v3 Authority Key Identifier:
                keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:6d:e8:66:ae:f7:ff:97:a4:9b:be:1a:97:25:67:4f:13:
         ae:bc:05:4e:3e:17:f3:f0:60:56:0c:22:4b:fe:98:87:14:89:
         8a:a2:bd:de:ce:5c:a3:1a:df:e0:d0:71:d5:c7:c4:e2:99:7e:
         1b:e9:e7:45:f0:2e:32:8f:84:0e:85:af:50:1e:17:bb:f2:e2:
         cf:06:82:ca:21:d0:d7:9c:f7:3c:bd:9e:38:25:23:b5:7d:f2:
         a0:74:eb:b1:d8:11:59:a5:ea:88:17:b8:89:5a:9d:f2:ab:36:
         b6:04:22:69:e0:4c:cd:5a:cc:bc:a3:76:89:bf:76:ea:d6:10:
         46:05:8c:18:75:d8:91:8f:14:87:64:1f:97:40:e5:e5:5d:b7:
         8c:c4:bb:a5:68:99:ca:8a:be:46:a0:7b:c1:45:8c:5a:a8:76:
         64:16:9e:f9:61:91:7d:fa:a3:77:93:61:90:bb:b2:a1:84:3b:
         52:65:b2:43:b5:47:82:fa:43:40:d7:5f:ba:87:d5:36:12:8b:
         62:26:1b:53:f3:85:3d:57:ee:bc:cc:6e:52:49:fc:90:93:2d:
         9b:3d:44:2f:5e:29:95:19:e5:cd:06:1f:59:ae:95:e3:53:72:
         08:0a:29:40:32:3d:d2:cb:8e:7e:36:72:33:61:be:0c:94:0e:
         08:94:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:44:54 2025 by rpki-client