Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          DLKcTr6nkWQznV755c823C5HkiIEqvbhMsrpjblSkIw=
Subject key identifier:   14:2D:AB:6F:8B:B8:0C:C3:3B:1C:CD:90:81:48:A6:D7:FA:B0:C7:D8
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       01974666C76B0EDD600DFE6B0D98E412B3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          1576
Signing time:             Fri 06 Jun 2025 18:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:30 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: ALZ/9eNRXyOOrGzx0MaMx+n7gEWrBbFMgQ+vbwgmLwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:c7:6b:0e:dd:60:0d:fe:6b:0d:98:e4:12:b3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Jun  6 18:00:30 2025 GMT
            Not After : Jun  7 18:00:30 2025 GMT
        Subject: CN=142dab6f8bb80cc33b1ccd908148a6d7fab0c7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:01:db:7c:7e:8e:e9:4b:45:2c:b3:fc:fb:3e:
                    7c:fb:e1:92:ee:69:11:1c:65:43:21:71:09:4f:7b:
                    f3:4b:91:4b:6d:d5:d5:95:8a:dc:d6:08:e3:31:94:
                    e3:51:a4:d4:86:30:e7:c8:c2:36:c2:4e:8b:c9:c2:
                    51:35:2e:48:b3:63:a8:f8:02:17:b8:07:c8:65:ab:
                    67:e6:fc:57:78:91:8b:5d:66:15:78:11:3c:7a:f8:
                    66:11:f4:45:d8:ec:62:98:fa:1b:41:e3:9b:d5:8c:
                    27:73:57:f8:3e:25:0e:04:a5:ed:f8:ab:3e:87:c4:
                    5e:64:4f:5b:88:13:1b:a7:8d:81:aa:7f:c1:d5:67:
                    0a:b9:30:fe:35:3a:db:b1:6f:42:9f:f4:99:5a:17:
                    ad:5e:9d:4c:63:93:cb:5d:fc:df:af:4d:65:cb:e2:
                    ac:b2:6b:b0:34:18:e8:12:f5:c6:13:33:05:ad:67:
                    33:8e:d1:d1:49:88:02:b4:bf:59:0a:af:73:0f:a3:
                    2e:66:c7:da:66:b6:d6:00:20:0d:4a:f9:06:2b:a6:
                    a4:c4:d8:aa:2d:85:c8:93:92:5a:44:98:d4:b5:e8:
                    fd:6f:e4:3f:80:6f:b1:37:e2:b2:52:ab:17:52:ee:
                    0c:8b:97:b1:91:fb:70:64:8f:4d:63:d7:d2:27:af:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:AB:6F:8B:B8:0C:C3:3B:1C:CD:90:81:48:A6:D7:FA:B0:C7:D8
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0f:bf:8e:4e:43:dc:c7:41:4c:1c:72:f7:0f:3f:5b:a7:97:
         6b:52:f6:c5:2d:87:8f:61:ec:32:35:83:f0:10:3a:2a:5f:b3:
         39:7a:39:b6:2f:50:13:55:12:59:d4:45:e7:13:2c:c2:22:61:
         75:ca:68:2c:9e:66:bc:cc:06:3f:14:36:f3:52:17:d1:2c:06:
         59:4f:c7:c9:ec:d3:83:ac:41:fa:d2:34:b1:cc:7b:77:78:4a:
         01:e7:16:91:98:44:53:26:0a:a4:1e:5c:24:d6:46:3c:51:3a:
         b7:7a:d2:05:eb:ae:97:18:8c:e8:1f:f0:f9:c5:6b:a2:31:c8:
         98:1e:76:40:d6:fb:e2:44:a1:63:1e:5d:61:cf:0a:9e:f8:f8:
         b1:24:bf:5b:02:86:31:77:8e:41:f0:f8:fe:6f:ce:c5:62:fa:
         09:bb:14:15:ac:6d:e5:fd:59:77:91:b5:7e:0d:ca:cd:c9:27:
         94:9a:fe:5e:65:2a:4b:e3:df:29:4f:ac:dd:82:08:e9:ff:43:
         77:b3:5e:18:89:88:ba:be:f3:7a:50:b4:44:1f:2d:86:a6:de:
         17:44:0c:76:44:c7:17:2c:30:8a:26:7a:5a:03:c5:71:95:78:
         a9:ea:fe:44:b6:d8:25:e8:f3:05:5a:1b:c3:ba:ba:e2:34:7e:
         13:b9:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:05 2025 by rpki-client