Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File:                     s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier:          F/8mwgH/LO0UUX+rCR0DYZIsxCTt/9m/nbkG5/c8PeE=
Subject key identifier:   FC:23:EA:30:AA:F0:1F:15:7B:11:88:ED:21:7C:A8:52:2C:BD:00:33
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer:       /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial:       0197469DE76BACB2DA223802AB8E8537B82C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 19:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:42 +0000
Files and hashes:         1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: A5pFVyFD5Fs9Ur+XzkUXlh4XOJY/0y3JBkx6MDDEYO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:e7:6b:ac:b2:da:22:38:02:ab:8e:85:37:b8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
        Validity
            Not Before: Jun  6 19:00:42 2025 GMT
            Not After : Jun  7 19:00:42 2025 GMT
        Subject: CN=fc23ea30aaf01f157b1188ed217ca8522cbd0033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:11:92:90:84:cb:6a:f5:e2:08:af:71:06:
                    9d:f9:13:3e:b9:7d:2a:38:8d:b2:62:b8:20:a1:3f:
                    b6:6b:2a:81:5e:9b:7e:e5:13:bd:77:f4:e2:d4:78:
                    f1:c7:55:d5:35:c6:88:88:c5:4e:c2:af:0f:b5:34:
                    06:10:ce:45:d4:fd:a3:0c:ed:42:cf:88:2a:7d:f2:
                    b1:07:89:fd:44:b4:ee:10:d8:4c:ef:4e:ed:7d:72:
                    a4:83:f5:82:f1:e6:46:f6:29:0e:3a:4b:02:06:e1:
                    88:be:dd:f6:1e:ee:c9:f8:67:4f:f8:23:c6:a1:18:
                    39:4b:ec:c0:3c:62:13:a2:25:77:fe:78:9e:0f:3a:
                    55:0f:32:fc:63:93:f5:98:89:f9:fc:6d:60:14:d5:
                    f1:47:14:fc:4c:6d:91:75:25:cc:48:5c:c7:61:3b:
                    bb:20:c7:e8:46:fe:8a:ec:b5:3a:75:94:52:91:73:
                    0b:5d:78:6c:fc:9f:49:86:25:9d:1a:6c:a2:44:5d:
                    a3:61:a0:63:84:52:83:f5:81:05:0e:76:b8:5c:81:
                    4d:83:5b:e2:e1:19:4e:db:53:6d:ab:bb:ca:dd:94:
                    e0:9d:b4:10:55:04:a8:c8:a4:3a:ae:e6:b4:b2:b4:
                    50:9a:bd:2b:61:96:c0:9d:e6:28:c0:00:80:fc:cf:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:23:EA:30:AA:F0:1F:15:7B:11:88:ED:21:7C:A8:52:2C:BD:00:33
            X509v3 Authority Key Identifier:
                keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:27:19:53:d5:5d:bd:5b:0a:38:dd:30:06:f8:c2:84:7f:8e:
         62:52:78:b4:ac:d6:80:b7:a3:8b:92:13:74:ab:82:2a:fa:7b:
         d2:bc:ac:b7:46:41:e1:0e:08:68:5c:41:0f:dd:3b:3a:18:2f:
         7c:7f:0a:50:87:a1:aa:98:9f:9f:b2:da:8b:df:a1:34:47:46:
         13:b1:b4:01:d8:0b:65:c0:3e:47:b3:b7:2e:11:f1:16:3a:45:
         e5:21:4a:db:87:67:32:1d:53:62:b8:9a:6c:7b:ee:1f:08:f1:
         73:24:ab:f4:6f:b2:32:04:e0:0d:aa:3d:f2:cf:77:ae:c1:31:
         c5:43:0a:02:07:64:ce:66:1e:db:bd:a5:9e:bb:d5:a5:88:ff:
         ab:42:54:33:4f:5e:a6:ab:bb:9a:f2:9a:d1:61:62:73:e5:0f:
         21:b6:93:6c:23:39:19:1d:2a:78:cf:0a:7a:f2:a0:23:55:d3:
         a8:b6:66:03:e1:db:d8:6d:90:f7:fe:56:89:82:c3:d9:de:57:
         82:da:ce:b4:b8:ea:78:a7:45:11:dc:5b:2e:33:26:c9:29:d0:
         80:97:17:c3:a4:09:83:9c:71:e9:bd:52:64:80:93:46:68:f1:
         56:ca:08:ba:a6:5f:d3:fc:de:7d:0b:9e:8b:08:ca:e3:e5:ff:
         e9:f3:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:14 2025 by rpki-client