Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          sp6MddIGuOYgvRDCdiA/BXs4xPtZYAgD+Cp6+TgRYZI=
Subject key identifier:   C4:84:FC:71:BF:3C:6B:C4:02:81:59:0C:35:25:6A:C2:88:DB:AA:C8
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       019759120BDF806E850EBEA950A48364FE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          1581
Signing time:             Tue 10 Jun 2025 09:00:44 +0000
Manifest this update:     Tue 10 Jun 2025 09:00:44 +0000
Manifest next update:     Wed 11 Jun 2025 09:00:44 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: 38AGNJ+ds3cTwwmd4IlHuQKH6TFrncut/LxIa6QLPtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:0b:df:80:6e:85:0e:be:a9:50:a4:83:64:fe:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Jun 10 09:00:44 2025 GMT
            Not After : Jun 11 09:00:44 2025 GMT
        Subject: CN=c484fc71bf3c6bc40281590c35256ac288dbaac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:75:6f:f5:6c:14:f1:05:83:51:0c:b3:28:
                    1a:b9:fd:b7:61:fc:ec:87:9a:7f:c3:57:4b:76:93:
                    66:75:63:17:90:c9:73:bb:b5:43:96:10:85:6c:98:
                    7f:af:d3:42:ce:12:b3:9c:39:03:bf:41:1c:df:cf:
                    77:08:9d:e0:94:fe:c4:39:42:0c:e9:b2:d5:12:fa:
                    37:fb:b4:5c:15:10:03:07:ec:6f:7d:2a:02:a8:03:
                    11:f6:47:fb:a5:a0:86:87:ed:8a:f7:75:0d:33:ad:
                    a9:f6:01:eb:a8:8e:98:f0:fe:8f:66:93:eb:ec:5a:
                    77:a1:d2:90:b6:8e:4c:6e:8b:cb:c4:bb:06:fb:60:
                    91:3d:9a:95:25:ed:04:e8:4a:6c:49:bc:d3:4d:ce:
                    30:d2:2d:59:e4:60:83:a7:79:76:f1:2e:a3:b6:46:
                    0f:69:63:5b:2a:36:5b:98:7f:57:04:2d:82:a5:93:
                    8b:d5:db:44:06:c6:11:2f:d2:a0:04:38:c5:8c:04:
                    cf:64:cd:52:dd:39:12:7f:36:16:15:f7:ed:5c:49:
                    ae:df:d5:6d:d0:06:6c:93:0e:df:09:0e:e3:ee:7e:
                    d4:ff:eb:2f:28:20:64:04:dd:63:d4:89:6d:2f:28:
                    0f:fd:49:d5:38:66:b7:0b:d8:62:79:8c:16:12:13:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:84:FC:71:BF:3C:6B:C4:02:81:59:0C:35:25:6A:C2:88:DB:AA:C8
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:20:ea:a5:46:7f:65:12:75:09:b2:dd:7a:00:4b:19:2d:5b:
         19:79:87:3e:f9:7c:2d:a6:db:66:d0:ab:91:77:31:8b:a7:7b:
         4a:b2:57:c8:b7:30:bb:c1:3e:90:5f:26:0c:32:db:9b:8f:0d:
         93:75:29:0e:1a:5a:ef:2a:a7:41:51:bd:18:71:9f:e3:d7:cc:
         77:ab:9b:b2:bf:64:4e:60:2d:f4:49:7e:1b:b4:fe:f6:78:12:
         2d:29:c1:f9:65:58:b9:fa:a8:6d:06:3a:71:39:7e:17:21:da:
         82:4e:9d:6d:1e:12:66:05:f4:91:71:99:c7:3a:2e:27:1e:f8:
         4e:47:16:fb:c0:10:ec:01:82:c0:82:f4:b7:93:da:bc:1d:cd:
         af:6d:c0:91:0b:9b:2f:8c:04:73:72:47:80:33:89:e1:9a:87:
         05:be:60:7a:66:d9:42:81:1b:c4:18:4e:c8:ac:9a:d4:6e:36:
         05:9d:3f:7f:ee:d8:3f:85:06:07:e2:a5:53:f1:e2:32:55:a8:
         f2:c9:31:8e:1e:65:4c:ef:9c:d2:8c:49:0d:0a:24:ff:c7:d5:
         cb:03:42:5f:6f:2f:91:cf:51:06:16:f8:16:72:8a:74:15:a7:
         92:0b:e2:8f:05:b7:d2:6d:70:1c:09:f5:c1:99:28:39:9e:69:
         34:f2:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:59:01 2025 by rpki-client