Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File:                     Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier:          jIsUbcE39z6FZwtl7dmXcRFdU/DOmDDbTk5b3HC7VLM=
Subject key identifier:   E3:70:CB:25:27:E9:22:2C:F4:B9:53:39:C6:42:14:A0:AC:F5:87:B4
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer:       /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial:       01976B4F2BDBBC6901CE581EED96A39588A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number:          0503
Signing time:             Fri 13 Jun 2025 22:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 22:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 22:00:39 +0000
Files and hashes:         1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: TyStWF43zJg3WMC1BBKshzfu6G5Wbodu2hmZvHH1Wd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:4f:2b:db:bc:69:01:ce:58:1e:ed:96:a3:95:88:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
        Validity
            Not Before: Jun 13 22:00:39 2025 GMT
            Not After : Jun 14 22:00:39 2025 GMT
        Subject: CN=e370cb2527e9222cf4b95339c64214a0acf587b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:d6:c5:89:33:25:4f:40:26:c7:74:df:fd:
                    30:1b:a1:4f:21:d1:1a:cc:00:38:a8:11:6b:74:14:
                    15:d4:75:4e:23:fb:7b:d9:98:86:ec:ca:ab:c6:1b:
                    bc:15:dc:4e:ae:5b:e1:8b:92:3c:9d:7a:ba:94:0f:
                    b9:cc:91:1a:2d:64:e3:2e:a4:61:39:e2:6a:74:6f:
                    cd:6c:49:2b:c6:27:fe:46:b3:89:90:bf:b4:e8:9d:
                    9a:0b:f5:9b:38:5c:1b:71:e0:72:d7:0e:1f:e0:58:
                    36:05:c4:c5:ac:cd:4d:bd:5d:de:af:d9:39:bb:93:
                    e8:29:eb:0d:88:d0:4a:08:2d:7e:86:5f:ca:72:45:
                    cd:e7:b1:ed:77:bc:0f:15:83:f5:0f:24:3a:14:b2:
                    7a:72:c8:ab:62:7e:0a:f4:1f:ab:93:96:14:ce:77:
                    3d:2e:85:06:a1:c4:e7:03:35:58:20:78:a8:34:0b:
                    a3:5b:4f:f6:d3:d7:15:c6:a4:69:e8:73:40:5d:e1:
                    90:83:41:b8:0a:2b:ab:d0:93:dd:d8:dd:6f:30:be:
                    cd:29:7f:d8:b7:89:51:d2:f7:36:96:8f:61:9e:ed:
                    64:db:4a:b4:62:c4:62:8c:ce:9d:96:55:28:fe:8f:
                    6f:69:8c:8d:ee:56:10:9a:ed:93:42:8c:72:d6:1a:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:70:CB:25:27:E9:22:2C:F4:B9:53:39:C6:42:14:A0:AC:F5:87:B4
            X509v3 Authority Key Identifier:
                keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:cf:38:c1:64:2b:cd:5b:a4:c4:45:3f:db:70:24:ed:53:
         63:77:5d:5b:83:0f:ba:0b:03:0f:9b:c6:b2:46:39:e0:5c:7e:
         b4:5c:b1:31:b3:ed:9a:24:19:7f:04:a4:dc:ca:b2:08:f7:2e:
         46:de:09:93:25:4c:eb:12:3c:c5:74:63:55:33:d0:85:7a:01:
         ae:e4:56:bb:f4:e9:69:e9:b4:f4:a5:66:7e:31:1e:e1:56:35:
         87:eb:d1:fa:ca:4b:55:af:5f:e9:50:b6:6d:9a:19:aa:59:32:
         8c:17:da:1c:a0:99:6c:29:24:08:14:20:1c:ca:aa:05:50:c5:
         64:ed:ad:5f:a0:51:8c:45:8e:2c:90:b6:d1:ca:27:8a:5f:84:
         36:7f:ef:c3:2c:ab:ad:32:9b:3f:a8:cb:8f:7d:a0:c8:90:7c:
         9b:fa:af:1a:eb:79:e1:c6:ab:fc:22:36:d5:b7:e6:fd:4b:90:
         ae:e8:b7:58:26:69:51:9b:97:a4:95:60:67:55:b7:27:33:1c:
         1c:b0:6c:b5:83:85:81:82:67:c4:70:f6:8f:da:a0:45:7f:9f:
         18:b4:80:37:0c:ae:ba:b2:28:be:03:ac:9c:46:d0:5d:96:39:
         48:92:df:15:2c:51:47:aa:90:59:7b:3e:0a:a0:6f:9c:f1:bb:
         3b:41:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:41:41 2025 by rpki-client