Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File:                     fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier:          7kEVY6hVBIg+CmnOxdU7lTMrXLbS8uqnXrGs0l5vmoQ=
Subject key identifier:   13:31:01:5C:62:D9:8E:C8:B2:C0:FB:6C:8C:65:20:DE:90:C6:FE:60
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer:       /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial:       0197469DEC552EB25C98DEDEC7E05CD01C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 19:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:44 +0000
Files and hashes:         1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: 64hMAb9PTiEan0IFQtrIiQn6aMw0Nm5qNiLumdY5Nas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:ec:55:2e:b2:5c:98:de:de:c7:e0:5c:d0:1c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
        Validity
            Not Before: Jun  6 19:00:44 2025 GMT
            Not After : Jun  7 19:00:44 2025 GMT
        Subject: CN=1331015c62d98ec8b2c0fb6c8c6520de90c6fe60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:59:2c:72:c4:ab:47:65:cf:e5:07:38:22:
                    be:49:42:5d:8e:9b:b0:a8:5a:39:dd:4d:2d:f6:a5:
                    e9:2e:a9:ce:18:76:77:e8:44:21:33:6d:ea:50:c2:
                    71:7e:c1:15:e7:2a:5b:12:8d:50:52:a0:22:3c:ee:
                    95:99:55:c6:88:98:9a:db:d2:f4:90:65:f5:30:a1:
                    a3:c0:0e:04:a2:52:74:32:fe:ba:e8:73:4c:6c:ec:
                    01:3c:9e:99:2c:ff:dc:b7:71:c0:b3:4a:11:7f:d2:
                    8e:9a:ba:66:61:3c:4d:8f:47:6b:6f:56:99:79:7b:
                    4f:32:36:ef:89:ca:55:81:f8:5c:3c:44:b1:b2:2e:
                    a4:db:d4:9d:4b:98:81:ed:24:89:52:55:2d:43:8c:
                    18:3e:15:19:4b:e6:da:f1:24:42:b3:1f:bd:4d:ac:
                    f1:67:63:bf:fa:9b:b3:13:de:ec:b9:b3:68:1a:e5:
                    bf:94:16:31:64:71:ce:1f:06:28:d6:83:ae:82:d5:
                    97:cf:64:63:21:89:5c:0b:e8:79:c8:7d:f3:88:be:
                    20:aa:7c:74:ae:74:2f:47:cd:0d:f8:19:67:d2:cb:
                    21:be:bd:bd:91:8e:3d:d0:56:04:eb:81:8b:ea:b7:
                    c6:4c:e6:ea:a1:72:26:aa:52:5b:0d:11:e2:5b:46:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:31:01:5C:62:D9:8E:C8:B2:C0:FB:6C:8C:65:20:DE:90:C6:FE:60
            X509v3 Authority Key Identifier:
                keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:58:42:06:02:d6:e8:be:f0:a5:10:fe:2d:5e:69:1d:97:
         68:75:03:8a:9b:6e:af:71:a9:a2:c0:86:a0:96:d8:db:0c:d8:
         7a:1a:3f:ba:b6:40:e1:69:65:ee:d1:b6:f9:45:af:32:09:e9:
         74:ac:e7:1d:49:69:84:69:e5:80:9f:1d:d2:96:e2:5b:0c:01:
         e5:e7:0b:97:b8:1b:ae:3a:d7:f5:77:a0:aa:20:b3:da:e6:5c:
         55:de:c5:a0:6a:da:92:c0:e8:78:8f:84:0b:41:19:42:c3:67:
         d3:98:df:5a:33:70:dc:c8:69:da:aa:fc:6e:6c:15:18:10:8e:
         0d:4f:f7:a0:78:3d:a2:d6:31:87:58:27:b2:cb:dd:7b:69:a6:
         cd:44:5e:a9:15:19:a7:53:8c:1d:9c:1d:5c:4c:ac:a6:c9:7e:
         11:05:7b:45:2f:47:f9:97:38:b8:12:3e:be:c9:d9:08:c3:39:
         a6:9c:4d:a6:2d:a0:b2:8e:b0:78:d0:4c:c9:a2:56:b9:fd:14:
         7e:5c:94:da:1d:0b:57:e6:f6:cb:df:17:64:e9:fe:3e:6d:5b:
         c8:cf:d9:92:d1:af:99:e8:84:0b:e4:87:29:ee:0f:32:f9:70:
         ed:e2:c1:77:5b:2e:ce:20:ba:0c:a6:ab:18:f6:bd:45:cd:3d:
         ac:ff:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:46 2025 by rpki-client