Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File:                     fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier:          34B9qmSV1JEfBBiBjjNkBsjM+XqxdC+bLt1ycFp7MRc=
Subject key identifier:   FF:5E:AD:44:A2:F9:1A:3F:80:ED:11:53:1B:2F:47:FA:73:32:D7:84
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer:       /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial:       01974C69AB2ED911EF0529A44B253C0CACDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 22:01:22 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:22 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:22 +0000
Files and hashes:         1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: nDLO9iLnZqCd3LH3VCV4wP+mn86XTNnDTsDf8kw8dwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:ab:2e:d9:11:ef:05:29:a4:4b:25:3c:0c:ac:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
        Validity
            Not Before: Jun  7 22:01:22 2025 GMT
            Not After : Jun  8 22:01:22 2025 GMT
        Subject: CN=ff5ead44a2f91a3f80ed11531b2f47fa7332d784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:b7:35:3d:f0:e0:5d:a1:40:1d:fe:53:eb:
                    64:f6:eb:6c:90:b6:33:22:d1:c7:23:64:48:80:73:
                    54:a4:99:98:76:fe:62:84:e5:bc:b3:c2:a8:0c:c8:
                    dd:75:e2:c9:64:d0:0a:ff:e4:cd:84:f7:66:bc:92:
                    88:cf:d8:c5:c8:ca:88:df:63:22:45:4f:00:19:60:
                    62:3c:82:98:8a:3c:e4:fc:2b:e8:d0:81:f6:f0:e0:
                    c5:f7:27:fb:f5:ff:10:b0:c2:e5:f2:fe:8b:56:c2:
                    9d:85:1e:91:a7:ca:fd:aa:c7:38:71:7e:5c:dc:01:
                    e6:f0:50:dd:b5:7b:b7:54:d3:31:79:de:0c:ab:99:
                    84:54:79:08:5c:4a:f8:f7:24:24:e8:8a:a6:49:13:
                    80:c0:d9:c8:50:dc:b6:8e:54:07:0c:7c:af:fb:cf:
                    cc:a6:39:f0:88:5b:7a:ae:47:85:d7:b9:ab:a8:64:
                    98:8e:43:c0:18:ca:04:fb:d3:13:c3:4d:61:dc:73:
                    27:e0:a3:8b:0b:91:34:5e:9c:3f:7f:df:8e:48:75:
                    5f:43:76:38:25:ef:89:fa:0f:2e:cd:e2:1e:bd:2b:
                    53:3c:0d:b7:db:ae:6d:d7:6b:00:76:9d:8b:03:a9:
                    a9:e7:a4:94:51:a9:c2:5a:db:ec:81:69:05:a9:e4:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:AD:44:A2:F9:1A:3F:80:ED:11:53:1B:2F:47:FA:73:32:D7:84
            X509v3 Authority Key Identifier:
                keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:18:6e:40:c6:ae:fa:38:05:36:5e:b7:5d:07:cc:ea:8d:
         35:de:72:25:25:ff:e6:5b:a0:e9:5a:df:29:1b:a9:11:29:ef:
         11:3d:73:56:ea:b5:a6:31:44:f1:bb:3c:bc:c4:66:9b:c2:13:
         84:5d:c8:d0:40:b3:69:aa:98:a0:5b:3e:52:e7:5b:5d:ea:94:
         55:a7:8e:d6:73:11:4b:0a:39:01:00:25:87:12:83:fb:6f:9f:
         5f:7e:86:7f:8e:ec:fc:97:71:8e:9c:85:98:db:72:3f:67:f9:
         da:ec:53:6a:17:48:f0:66:68:e9:93:23:b9:ff:17:c7:38:3d:
         d7:c2:2d:78:91:21:e7:c9:c9:73:2f:82:83:3f:e4:e9:7d:d0:
         d3:d4:e2:91:5d:dc:06:5a:20:4d:58:3b:ef:8f:5c:02:0d:ca:
         97:34:b1:e9:eb:7b:05:53:1d:42:2f:ad:9d:a3:d9:bf:55:9b:
         a5:7b:b8:1f:ae:d0:b1:8e:72:0f:1e:75:9e:b5:a0:97:20:0d:
         9d:c4:9d:3d:77:eb:c2:da:5d:8d:5e:5f:9f:bd:b6:65:66:ac:
         22:33:ee:0c:b9:4c:eb:0b:f4:85:04:c9:13:0d:9d:7e:20:ab:
         24:96:6c:a1:e4:8c:ed:37:b7:d6:ff:25:db:fd:7c:95:a1:b4:
         25:71:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:13 2025 by rpki-client