Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File:                     FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier:          +Y1roUhkcRvOw1qEG2QA25P5aca1HAM1PCiNroHl5nE=
Subject key identifier:   C5:BB:5A:C9:21:E1:D1:AE:F0:EB:6B:3D:97:D0:87:95:24:CC:40:C0
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer:       /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial:       01974A7B3E6456F9C20D05D756DED563C3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 13:01:20 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:20 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:20 +0000
Files and hashes:         1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: GD3oZQ9zmbX79YJAkR6EsmTM1Esi/fB0mqJ0qNzZdjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:3e:64:56:f9:c2:0d:05:d7:56:de:d5:63:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
        Validity
            Not Before: Jun  7 13:01:20 2025 GMT
            Not After : Jun  8 13:01:20 2025 GMT
        Subject: CN=c5bb5ac921e1d1aef0eb6b3d97d0879524cc40c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:d6:eb:9b:68:09:4e:a4:e8:d2:a4:9d:8f:
                    bd:27:e7:f7:bb:bf:02:d3:61:0f:e4:77:a2:ae:c3:
                    2e:73:07:6a:a7:11:0e:e5:55:64:bc:cd:cd:0f:94:
                    71:5f:02:39:16:7d:e7:56:dc:b7:65:a4:0d:51:76:
                    a8:70:e1:0c:d1:99:30:d6:1f:80:b9:af:cc:ee:5e:
                    9b:c9:db:28:70:7e:8a:99:54:53:81:2e:fc:26:24:
                    e8:ae:36:66:a7:d4:1b:5a:62:00:56:28:d6:fc:e7:
                    55:cf:52:31:94:2c:8c:97:51:22:3e:42:3c:12:ff:
                    15:bd:ab:fd:79:44:68:5f:40:20:a2:8f:28:5f:03:
                    58:4f:86:5f:da:40:fc:c2:03:62:36:76:dc:90:45:
                    13:83:3b:7c:9d:15:ff:ca:fa:5f:36:96:f8:c5:1e:
                    7b:9d:3a:f4:ef:e9:44:6f:c6:22:92:87:9f:bf:ef:
                    47:3a:78:d7:dd:47:81:7f:bc:69:43:36:4c:a9:e3:
                    57:87:5c:1b:7c:31:fa:cc:8a:54:57:1e:d4:84:ce:
                    d8:09:17:88:1e:45:4e:f4:e3:d8:01:51:d8:ac:87:
                    91:0e:2e:80:e9:1c:0c:ee:b1:e2:f7:b0:4b:4d:38:
                    d7:10:44:7a:6c:ce:0f:3c:68:3a:c1:a1:e7:ea:35:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BB:5A:C9:21:E1:D1:AE:F0:EB:6B:3D:97:D0:87:95:24:CC:40:C0
            X509v3 Authority Key Identifier:
                keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:2e:7c:e6:76:42:a8:a7:3f:b5:7c:a2:d9:c2:7b:bf:bf:
         30:64:80:4d:b1:eb:91:cb:9a:30:88:7e:c0:64:b5:ef:71:db:
         52:dd:75:ff:65:be:86:fe:b6:15:46:76:e3:77:7f:f8:f2:2b:
         0e:47:13:fd:4d:35:eb:a0:75:0c:22:8a:a8:ea:8b:66:89:74:
         6c:12:a9:4d:c5:96:a1:4a:86:65:7f:6a:75:0d:01:6e:91:2c:
         d1:a1:59:c0:78:eb:61:58:2b:3f:f3:b7:8c:52:96:8e:11:e1:
         ba:16:5a:12:fd:86:d5:02:0f:ed:52:aa:73:86:5c:a1:31:39:
         3c:5c:73:cf:78:27:78:ee:ed:c1:a3:02:9f:c0:95:a0:94:f9:
         09:82:f9:12:29:c0:68:26:17:a3:35:92:1e:57:a1:74:5e:be:
         d1:ad:e6:77:19:b8:67:f2:55:87:ee:a6:1a:04:5c:31:ee:1e:
         2c:ea:1f:2f:7a:38:7d:a3:9a:28:8e:1e:fe:05:da:05:c0:7b:
         f7:59:6b:db:3e:56:59:e7:05:97:98:b2:e8:28:a2:3a:51:b8:
         f6:ea:b9:a5:96:4c:c7:36:a2:08:40:74:6e:aa:b4:a4:02:ea:
         82:39:f8:ac:79:8a:35:fc:e6:11:ca:bf:3a:9a:f3:ac:3c:8b:
         15:d8:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:49 2025 by rpki-client