Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          QgHUqz/0W+xcBwh+AApox57BvwMvltZXxoVkqTHuwFQ=
Subject key identifier:   3C:72:BA:C8:B0:D7:CF:85:61:90:84:A1:2C:99:D8:B5:D1:62:D4:BE
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       019764A85C5B955F1A1ABF53C79902E4D096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          1587
Signing time:             Thu 12 Jun 2025 15:00:44 +0000
Manifest this update:     Thu 12 Jun 2025 15:00:44 +0000
Manifest next update:     Fri 13 Jun 2025 15:00:44 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: k6qMFatvqOmU4HxEeHZtQCdNy+d5IxnjeGsBBMAw9vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:a8:5c:5b:95:5f:1a:1a:bf:53:c7:99:02:e4:d0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Jun 12 15:00:44 2025 GMT
            Not After : Jun 13 15:00:44 2025 GMT
        Subject: CN=3c72bac8b0d7cf85619084a12c99d8b5d162d4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:bd:32:c8:1d:84:66:e1:a9:a6:46:95:6d:
                    93:94:39:f3:c0:38:98:13:7e:4c:a5:89:34:23:9b:
                    03:14:75:81:a2:f9:ea:66:c0:0e:95:46:93:52:87:
                    c5:e8:b3:12:ed:07:ab:4b:a1:5c:50:47:e4:09:a8:
                    fd:d5:42:66:60:5b:14:d6:80:b3:44:31:e5:0c:c7:
                    68:1f:e5:0c:37:61:32:a4:50:31:cb:71:65:10:3f:
                    b3:1d:35:24:d0:ab:22:f0:aa:22:ba:85:ba:fa:20:
                    24:0c:a9:b9:93:11:c1:ac:f2:7a:28:90:53:28:66:
                    49:e0:d8:1b:77:ac:84:8a:84:6c:e8:f4:37:6d:e7:
                    64:a1:58:db:07:90:01:f0:55:eb:29:1e:ce:d5:51:
                    24:af:e4:cd:2a:7a:05:95:a7:46:2b:60:8e:9b:a8:
                    ea:de:cc:db:d6:49:45:04:98:da:16:c0:50:4d:c3:
                    42:f2:e4:b2:a1:e2:f9:59:9d:81:fc:f2:62:04:a4:
                    a7:43:93:40:08:9b:6b:fe:7b:60:c1:2b:05:e4:c2:
                    81:59:04:7e:6f:57:c6:74:db:3f:d5:7a:a8:22:a7:
                    11:59:94:d5:ef:fd:86:45:24:60:fa:01:d1:90:b4:
                    17:81:a9:40:8d:d7:15:ad:5e:c7:01:90:ae:66:2b:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:72:BA:C8:B0:D7:CF:85:61:90:84:A1:2C:99:D8:B5:D1:62:D4:BE
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:0e:bd:a0:fe:ba:b7:5e:1b:1b:d0:56:c7:cf:46:5d:ce:
         5f:64:23:f3:03:57:89:ca:c9:89:6e:3a:d5:51:a3:7f:ed:51:
         99:0c:a8:24:4a:19:b3:8e:7c:49:a5:04:c0:04:90:35:b1:33:
         ab:30:f7:4d:dc:36:aa:1f:3a:54:5f:89:a8:20:c0:41:b5:8b:
         06:17:e8:21:44:de:dd:72:66:8b:6e:09:fb:e3:63:09:e4:42:
         a8:c6:64:f1:ae:00:d8:b5:2e:0a:4d:93:2f:39:02:bb:2f:21:
         fa:6a:c5:2b:f6:58:3c:32:97:8c:d9:7b:26:ed:49:e2:1b:c8:
         72:14:bb:99:b5:de:46:60:f4:f5:9a:b1:c0:80:25:56:8a:53:
         8b:de:b9:06:a9:15:36:9b:a5:b3:8f:5c:e7:1a:14:63:15:f4:
         3e:b9:15:17:23:66:a5:69:02:9a:56:c2:a1:6b:6e:0f:24:20:
         27:46:0e:88:1f:1d:6a:3e:1a:15:eb:98:15:87:d3:4f:ca:c7:
         f3:09:71:9a:ad:80:3a:1b:47:73:03:a0:52:d6:a0:85:67:25:
         37:cc:1b:ff:ab:ff:af:e4:44:32:3d:81:66:ab:fd:06:54:f9:
         32:86:0a:d8:dc:ea:15:bd:82:28:3a:35:7f:d8:fa:47:80:32:
         23:d4:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:43:33 2025 by rpki-client