Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File:                     4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier:          VmjNXurkKAeEqsCQpXWaJK++szaCcYIj1p9+HgADrLQ=
Subject key identifier:   FC:1B:95:AD:EB:A2:1C:45:6F:67:E8:53:38:8C:B9:F6:86:B2:C1:4B
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer:       /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial:       019748554300042F506C10E23A3F78511AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number:          37
Signing time:             Sat 07 Jun 2025 03:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:36 +0000
Files and hashes:         1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: fELVWthC5dsoNCjnnea0vqftUWGZHXY0vsRMaYUWdTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:43:00:04:2f:50:6c:10:e2:3a:3f:78:51:1a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
        Validity
            Not Before: Jun  7 03:00:36 2025 GMT
            Not After : Jun  8 03:00:36 2025 GMT
        Subject: CN=fc1b95adeba21c456f67e853388cb9f686b2c14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:59:49:52:d9:83:08:d8:c5:23:04:fb:c6:05:
                    d7:4f:a8:11:ce:36:02:db:d7:05:3e:a6:83:6c:27:
                    a2:74:5a:42:5f:1a:de:40:07:7a:09:70:6c:ad:f8:
                    78:ba:76:83:6a:31:7a:7f:a2:23:9f:58:f3:35:36:
                    54:1a:af:41:2f:04:28:14:78:11:7f:20:d0:b7:73:
                    c0:46:02:0c:be:0d:51:c8:d6:6e:e8:12:36:72:c2:
                    d7:a0:48:1b:e8:77:2f:32:71:9f:05:eb:6b:95:e8:
                    1a:cb:67:02:84:24:d8:44:77:a9:ed:d8:3f:04:18:
                    14:6b:a4:f0:01:46:ac:68:f4:76:73:f3:e6:05:04:
                    15:58:64:ba:2c:67:36:4c:7a:1f:8d:0d:22:54:69:
                    be:11:76:31:dc:46:8b:bb:12:83:cf:ef:49:6d:a0:
                    14:0d:b6:a6:5e:49:68:52:70:66:6c:04:26:a4:f0:
                    e4:d6:0c:b9:be:72:bb:4b:31:e9:da:67:df:00:9f:
                    ab:51:86:7b:ad:41:5e:b1:c8:dd:d7:45:cc:d6:00:
                    cd:f1:31:1f:cb:6a:f1:b7:85:1b:44:ad:0c:21:20:
                    ec:d1:c7:3d:cb:71:19:07:43:3b:f3:e0:e1:59:19:
                    af:a6:ee:f8:90:3e:80:2d:ef:ab:af:2c:2f:7b:11:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1B:95:AD:EB:A2:1C:45:6F:67:E8:53:38:8C:B9:F6:86:B2:C1:4B
            X509v3 Authority Key Identifier:
                keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:8d:78:47:b3:ef:a9:4b:ec:1e:7e:b6:a1:3e:94:94:93:
         63:6c:d9:88:25:3e:1b:27:2d:04:64:7e:6c:b0:23:35:6f:25:
         28:94:5e:8e:63:72:77:fd:33:9e:1f:0f:a7:2e:54:a7:5f:a2:
         25:96:25:b1:96:46:f4:2b:17:83:ab:8b:c8:71:9b:0b:da:9f:
         5e:fe:23:b7:d9:a8:6a:e0:38:05:f1:8f:c8:a0:9f:39:b5:2f:
         dc:2c:df:b1:d1:3d:19:6f:01:29:fb:04:df:d6:24:29:36:93:
         cb:8e:98:07:7a:e9:3f:39:13:52:70:5c:e6:9a:2d:3c:57:e0:
         4b:9d:05:d6:50:a6:31:38:37:a3:d6:12:e6:a6:f0:e4:95:5f:
         46:43:d3:9c:cb:d5:1c:27:99:9e:b5:28:67:25:40:49:ef:14:
         9f:7b:52:f2:82:3a:08:70:80:8e:fc:88:dd:cf:2b:38:9e:25:
         1b:a3:b2:15:9c:38:17:c7:c1:1b:b3:ce:84:4d:d5:15:e1:84:
         48:24:5b:2c:d9:e4:c6:61:04:e3:9b:00:e3:31:a7:2e:2f:5c:
         2f:81:08:94:0e:0f:19:70:4f:e5:9b:c9:f7:25:22:eb:c8:63:
         42:11:b2:cb:58:5d:25:53:1a:ba:3b:d1:95:5d:4a:e0:c2:bc:
         24:ef:34:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:07 2025 by rpki-client