Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
File:                     FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json)
Hash identifier:          /oyVKQZzz11poIjfSW8x/tjJSEhiGf24fAGYL5A7Qlg=
Subject key identifier:   46:6F:69:96:B2:F7:C2:76:AF:91:9B:24:89:16:7A:E9:69:92:AF:A3
Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
Certificate issuer:       /CN=15cb436af64f8d06d2cc192d04800cb256284272
Certificate serial:       019748F9DA1D784E929E2B5AB4FAACC6C44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
Manifest number:          7B
Signing time:             Sat 07 Jun 2025 06:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:23 +0000
Files and hashes:         1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: ysxd1WymPnTTcZn4vCez4Jy0IKmDb6ib8RHW/Si0JPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:da:1d:78:4e:92:9e:2b:5a:b4:fa:ac:c6:c4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272
        Validity
            Not Before: Jun  7 06:00:23 2025 GMT
            Not After : Jun  8 06:00:23 2025 GMT
        Subject: CN=466f6996b2f7c276af919b2489167ae96992afa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:3c:c3:2b:83:b5:63:e4:d3:5f:61:8b:c8:
                    b4:8e:9b:53:98:5f:32:22:93:09:f7:90:9c:a2:71:
                    3d:0b:a8:e0:d0:f0:99:78:68:a4:eb:da:5a:ec:dc:
                    84:70:3b:19:8a:61:39:e5:a2:3f:be:ff:c6:9d:90:
                    b2:bf:11:26:26:cd:2b:51:1e:2f:b7:a5:0f:b5:b7:
                    78:b2:f6:82:e7:c8:01:44:8d:48:8e:ff:ac:fe:7a:
                    be:44:05:e7:f1:cb:ee:f9:e6:c1:40:3b:0e:fa:65:
                    b1:c4:9b:37:d4:47:9c:fc:69:be:03:73:c2:9a:9e:
                    5b:b3:65:4d:41:ed:1b:5d:63:41:38:6d:39:2f:af:
                    c4:2a:2d:4f:63:3d:76:6b:77:e9:05:b6:f2:a7:c9:
                    1b:4b:28:03:31:06:76:c0:83:06:90:05:45:48:be:
                    b1:63:b1:58:37:5b:4c:76:40:7e:7f:28:8d:44:a0:
                    b1:6c:aa:fe:69:61:7f:7d:68:ab:69:8d:a9:bd:16:
                    ef:f4:4f:71:0e:96:7d:a3:47:98:43:03:6b:30:ee:
                    06:0b:ba:a5:d9:c7:51:1e:63:e9:2e:a0:fc:8f:0e:
                    64:c5:b7:65:4b:bf:82:e2:54:ec:3e:5f:44:cd:45:
                    e3:b5:04:d4:6f:d0:1e:aa:5b:bb:25:aa:db:bf:e9:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:69:96:B2:F7:C2:76:AF:91:9B:24:89:16:7A:E9:69:92:AF:A3
            X509v3 Authority Key Identifier:
                keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:34:4d:df:83:eb:e5:7c:1a:cb:26:48:dd:17:2c:61:a7:53:
         3d:71:fb:f7:41:a7:4f:bf:65:d3:09:07:d0:21:3a:4b:b9:bc:
         95:ef:4d:21:f4:b2:a3:ca:2d:06:fe:aa:73:17:2b:68:28:50:
         f3:55:e4:ce:45:50:84:b1:50:82:94:ba:49:d9:84:22:bf:63:
         c1:4e:60:7e:31:6b:61:5d:66:86:e6:01:59:b2:1f:59:90:c1:
         ab:7c:ee:a2:c8:be:b4:4b:b5:ca:00:90:0d:97:5e:76:f9:38:
         78:ef:01:05:23:04:5e:b7:71:5e:23:9c:99:de:70:cb:33:03:
         1c:b8:72:86:05:44:cc:c9:87:ef:d5:d7:94:d0:5f:29:df:8e:
         40:6f:8d:99:61:67:8d:88:0f:a9:6b:db:05:6f:aa:88:28:e3:
         24:85:79:80:a5:5d:bb:e9:8b:00:c4:77:51:27:91:32:b2:48:
         51:30:e3:09:05:5a:3b:d7:64:ba:f7:6b:bb:3a:74:60:ec:34:
         4c:0e:99:3d:03:0d:d3:53:db:c1:48:da:3d:48:0b:ae:88:48:
         b0:2d:81:8b:6d:a6:76:94:aa:08:1f:89:d4:37:44:15:9f:70:
         ee:9d:af:be:50:31:fd:5b:bc:69:a1:24:21:8d:52:63:b7:d4:
         87:77:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:24 2025 by rpki-client