Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File:                     fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier:          zjFFYnOQnCxR8AP/ZfosExlbHABcspP45y+pUlWge1Y=
Subject key identifier:   A3:1E:E4:06:C0:51:6F:BF:0F:C7:19:D2:BF:AD:20:24:DA:EA:0C:9F
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer:       /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial:       01974C69D1515B4FC076B8B99EE430EA9543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 22:01:32 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:32 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:32 +0000
Files and hashes:         1: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: N+SeRharx2cfWN/B13VqVst2t/Q0MiYQqnCwvAtkFRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:d1:51:5b:4f:c0:76:b8:b9:9e:e4:30:ea:95:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
        Validity
            Not Before: Jun  7 22:01:32 2025 GMT
            Not After : Jun  8 22:01:32 2025 GMT
        Subject: CN=a31ee406c0516fbf0fc719d2bfad2024daea0c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:71:dc:66:e3:8f:21:72:10:f4:e6:27:e9:
                    24:cc:23:4b:19:73:04:1f:2f:69:28:5d:98:53:56:
                    45:46:d7:01:c3:5b:d9:9e:79:0e:f9:4d:4a:8a:e0:
                    06:44:ee:33:ca:69:82:22:7e:32:fd:d9:20:9e:e3:
                    1c:cf:6e:42:f3:7d:eb:01:e5:8e:2b:e6:38:0f:9d:
                    16:46:86:89:31:40:8d:8a:52:73:f1:2e:34:ee:49:
                    2b:22:34:5f:c9:42:ee:e3:22:bb:d6:e7:c3:17:3b:
                    46:01:f0:92:c3:6f:90:f3:23:c8:1d:78:4d:9c:97:
                    1c:c5:2c:bd:dc:cd:74:5a:98:ff:58:64:cd:af:dd:
                    48:d7:5d:4f:ac:d6:4c:b7:83:ae:49:fa:70:de:e6:
                    a2:5a:0c:60:76:b7:fe:7e:b9:ca:53:e1:7d:88:27:
                    12:a6:6f:0a:c6:4b:8f:64:8c:28:e8:c6:32:30:8a:
                    a3:07:83:cf:32:60:84:db:29:1f:1a:52:8e:0e:11:
                    fc:4e:9b:1e:9d:86:5c:f1:f9:da:6d:90:f1:fb:b1:
                    ad:65:f1:fd:41:be:7f:d3:80:e5:33:23:34:ab:9b:
                    61:57:ff:b8:96:2c:4c:9d:8a:bd:03:06:69:f0:08:
                    a8:4d:cc:a9:c9:67:81:0b:52:68:83:5b:af:02:ea:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1E:E4:06:C0:51:6F:BF:0F:C7:19:D2:BF:AD:20:24:DA:EA:0C:9F
            X509v3 Authority Key Identifier:
                keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:46:82:e0:00:69:08:9e:9e:ef:9b:ef:e3:a8:20:b1:04:
         ab:23:d3:21:f4:d5:1f:d4:9d:84:c3:37:8c:9f:1a:5c:a2:21:
         8c:86:e0:9c:91:0f:9d:95:d5:cc:ad:26:c9:71:21:e7:03:95:
         2e:c1:9b:0a:f9:0c:75:e5:8b:35:f1:4d:43:4e:c3:56:e3:9f:
         3d:ae:6f:57:2a:10:e9:40:9c:7e:5f:16:01:e5:86:d1:08:27:
         1a:71:ad:b5:92:e6:a9:73:84:0e:fa:fe:ca:2a:e4:73:2b:25:
         f1:b3:33:29:bc:2e:df:44:eb:42:74:10:4f:ff:db:85:e3:96:
         58:e2:ef:f0:86:07:69:48:34:79:3f:5e:76:4a:ee:1b:40:9b:
         3d:b9:85:18:5c:8f:df:80:66:a2:16:ee:89:fa:88:22:21:d4:
         a5:46:c7:02:bd:e7:8b:fb:cd:c0:f0:74:9e:7c:cf:48:79:0a:
         7d:8b:e6:66:52:3f:07:7e:ab:02:79:ac:4d:57:e9:7c:74:d2:
         e2:3e:2b:ae:04:04:68:31:33:86:bc:e5:ed:c5:0c:1f:3b:d1:
         70:cb:77:f0:55:c1:1c:20:39:02:da:35:94:39:0a:e2:51:62:
         97:5f:13:11:11:db:bb:65:fe:f4:9b:e8:6f:d7:56:44:52:61:
         8c:f2:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:24 2025 by rpki-client