Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File:                     Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier:          QcVXRrm3SrNvG5EbC7CbzH3Kfl2Rg4Enk4txW85TR4o=
Subject key identifier:   11:63:93:12:08:0E:E5:3B:64:96:81:01:B5:36:9A:E4:B4:90:87:9E
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer:       /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial:       01975800030CDA10FBCEEE0C9741C5AB69E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number:          1580
Signing time:             Tue 10 Jun 2025 04:01:25 +0000
Manifest this update:     Tue 10 Jun 2025 04:01:25 +0000
Manifest next update:     Wed 11 Jun 2025 04:01:25 +0000
Files and hashes:         1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: iryBgZJUb3nmQqI3PQwgsTbMZYBSAjH3tqu09MpHamo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:00:03:0c:da:10:fb:ce:ee:0c:97:41:c5:ab:69:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
        Validity
            Not Before: Jun 10 04:01:25 2025 GMT
            Not After : Jun 11 04:01:25 2025 GMT
        Subject: CN=11639312080ee53b64968101b5369ae4b490879e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:34:7b:4a:97:af:e9:b1:f8:8f:37:ac:b1:
                    0d:83:68:1b:89:7f:20:6d:b5:5a:95:b2:a6:88:62:
                    f5:2e:e2:fa:6f:49:c9:59:b5:58:40:e2:f6:dc:b4:
                    58:f3:64:16:51:39:1e:b9:13:32:4b:67:68:48:c8:
                    78:47:39:06:fe:9c:8a:2c:e2:e5:db:21:04:47:c0:
                    cc:dd:04:bf:2d:ae:87:e2:5c:a3:22:2b:a2:d6:33:
                    9e:89:b0:32:b5:1b:47:08:c5:8a:76:68:a6:c7:30:
                    6b:cb:84:39:c3:c2:2a:d4:a7:31:10:65:40:bb:19:
                    89:56:ae:bc:96:79:9f:79:29:c8:71:8d:3e:ae:a8:
                    83:f8:e8:bd:ed:17:bb:41:60:55:00:15:20:d8:a2:
                    1c:f4:fe:7e:c0:ba:37:ab:24:50:7b:7d:1e:f4:58:
                    89:23:93:69:44:39:e5:41:3d:86:c0:33:5d:66:b5:
                    8f:a5:d5:e9:92:18:7d:fc:4a:0c:b4:d0:e3:96:5e:
                    d3:b1:f0:9b:47:ee:6f:84:1a:a4:80:2d:2a:75:14:
                    2e:36:43:44:02:00:4f:66:08:16:8f:08:3d:73:cc:
                    58:dd:28:22:a5:ed:42:8e:80:00:ad:26:9d:6a:08:
                    0a:fc:21:4f:11:e5:26:65:85:54:53:72:c8:3c:7c:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:93:12:08:0E:E5:3B:64:96:81:01:B5:36:9A:E4:B4:90:87:9E
            X509v3 Authority Key Identifier:
                keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:50:4c:f2:c6:62:d8:36:67:2f:36:cf:b7:ca:e2:14:e6:e1:
         ae:6d:e8:f2:1e:de:4c:2a:bd:e3:2f:97:f6:7c:fd:ef:26:d4:
         23:d9:e5:f1:20:df:1e:79:62:a8:a6:5f:44:67:bf:71:8b:db:
         8c:eb:5e:12:cd:0b:39:03:5d:2c:ef:45:70:9f:94:c5:7e:15:
         a9:db:bb:2e:86:c5:58:24:53:eb:2b:80:89:f3:3c:e4:ca:2d:
         a1:4a:89:d4:fa:d3:53:02:4e:a9:93:df:49:e3:22:eb:99:7e:
         24:0e:33:78:f4:0b:a1:8c:51:1c:2d:c5:3e:72:34:c9:c9:c0:
         4a:01:f0:a2:dc:7b:3d:c4:62:fa:21:b3:a8:57:f8:ba:16:cd:
         ac:bb:fd:cc:5a:7f:70:a8:67:f7:67:61:90:97:94:47:1b:50:
         e8:81:3a:97:9f:05:8a:32:0a:84:c5:f7:25:4e:d5:dd:0f:e7:
         d2:43:fd:76:c2:40:89:d5:34:8b:f7:57:8a:4a:46:c8:d5:92:
         72:5a:3b:f4:c2:03:51:db:b7:6c:07:61:37:50:0c:9b:95:16:
         eb:21:b5:a0:47:8f:2b:17:6c:18:59:6c:f7:57:14:1b:42:39:
         bf:94:98:5b:76:e3:75:9a:dc:18:18:f4:77:78:f7:83:31:47:
         8a:d0:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:20:03 2025 by rpki-client