Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File:                     frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier:          uo+AU2V9R1wC83u68276L0ifZvJaqcRqqdnPNV4tNNQ=
Subject key identifier:   D3:22:67:D4:58:B1:85:BE:86:76:BF:A0:4E:B8:10:2B:4A:A2:7B:0F
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer:       /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial:       019758DB4E3136CC2BE886AE000023423054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number:          0566
Signing time:             Tue 10 Jun 2025 08:00:56 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:56 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:56 +0000
Files and hashes:         1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: d63erSMS66M/cJjup1/vsfwnKt0l/SnP7MFILJczq4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:db:4e:31:36:cc:2b:e8:86:ae:00:00:23:42:30:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
        Validity
            Not Before: Jun 10 08:00:56 2025 GMT
            Not After : Jun 11 08:00:56 2025 GMT
        Subject: CN=d32267d458b185be8676bfa04eb8102b4aa27b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:39:10:29:b6:80:00:20:fd:7c:29:a4:a3:
                    ed:31:4a:43:4f:31:5c:9b:13:9c:2b:a3:2f:b8:6d:
                    dc:31:03:f1:58:1d:91:44:53:68:62:33:f5:7c:3c:
                    45:36:1f:4b:8d:c8:8b:f4:20:ab:0c:1e:0e:34:a7:
                    d4:0d:32:aa:43:77:84:cf:7f:20:bf:bb:28:06:fd:
                    c7:e5:8a:c9:81:f9:42:10:4e:8d:4a:6c:da:d7:d6:
                    06:3e:9a:53:50:fd:ee:47:96:e6:0d:38:ac:80:c2:
                    0a:a4:ae:51:9f:8c:36:74:d2:f3:1e:7c:07:89:a6:
                    ee:db:19:4e:75:ef:37:3a:78:86:9b:79:96:d1:9c:
                    85:77:77:d4:c2:2c:73:e2:05:97:42:81:11:f8:c2:
                    1d:1e:e2:49:62:99:76:9b:46:12:fb:a9:45:45:10:
                    d6:8e:27:65:25:d9:c0:16:4d:95:4f:03:68:e5:33:
                    22:e9:4b:a1:b6:37:c8:58:b9:de:c1:3e:b7:74:94:
                    e3:9a:7e:b1:36:b0:ec:e8:03:ad:8e:ea:34:75:25:
                    82:61:12:48:b0:bd:0a:df:1e:83:fc:c4:5f:e8:1a:
                    9e:57:7e:0c:03:8c:7d:01:8b:ff:16:32:1f:28:4a:
                    c2:fa:6d:fb:fb:21:4f:fe:59:c3:7e:a7:14:e3:4b:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:67:D4:58:B1:85:BE:86:76:BF:A0:4E:B8:10:2B:4A:A2:7B:0F
            X509v3 Authority Key Identifier:
                keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:b6:1f:72:5a:06:ed:92:6d:57:41:2c:e0:25:06:f7:f9:
         ce:13:83:a5:95:33:45:1a:9b:28:87:0b:c4:9e:05:ea:91:b5:
         7c:90:5c:1e:e3:bd:d0:f9:58:73:e6:ab:26:09:11:a9:5b:54:
         7d:91:a1:91:2c:38:6f:41:03:3a:48:0c:ab:86:fe:53:89:01:
         56:bc:1e:d2:5d:18:7a:6d:ed:02:d0:23:f7:f0:7a:2a:b5:8d:
         1d:10:ae:dd:72:ac:08:ff:64:ed:a5:20:3b:34:72:5b:d6:20:
         fc:a2:27:40:09:d4:57:1c:be:f4:ae:70:18:bb:5c:b9:eb:70:
         0b:b6:68:05:1d:75:b8:d3:34:d9:fe:8e:17:35:ff:59:ee:76:
         9d:8e:b7:4e:ec:55:99:ec:8e:15:68:3e:d0:7f:d6:18:a4:f5:
         5a:73:e4:21:dd:3a:6d:be:7b:d5:01:65:89:2a:23:97:31:b1:
         ca:b8:88:45:f3:b0:50:98:37:5a:2b:58:48:7f:d0:46:a6:d2:
         20:0f:54:a9:18:8f:aa:39:a7:6e:c8:3b:a9:fe:5f:a3:37:6a:
         39:5a:ba:3f:20:28:37:11:82:37:55:2a:72:95:2d:14:f8:26:
         3d:df:29:05:71:a3:47:34:a8:2a:30:9e:7c:d9:8e:80:14:c9:
         1d:c4:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:26:50 2025 by rpki-client