Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          0cRZUM/vZjOcpFKqbzKHkU939Wfw1/xutdj7T1aT5Tc=
Subject key identifier:   6C:56:06:14:F7:D0:E1:3A:7D:1C:C2:FA:19:07:19:A4:5B:96:3B:D8
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       019745C25DE5C8D8CE4EF5891248A5487CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          016E
Signing time:             Fri 06 Jun 2025 15:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:55 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: JFaVg7CeVVXEyEbsJ6TBH8rwn1nH22WU5QwkGUHNPkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:5d:e5:c8:d8:ce:4e:f5:89:12:48:a5:48:7c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Jun  6 15:00:55 2025 GMT
            Not After : Jun  7 15:00:55 2025 GMT
        Subject: CN=6c560614f7d0e13a7d1cc2fa190719a45b963bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:d7:d1:7e:19:0b:e3:cb:9a:58:8f:15:f3:
                    f9:f7:24:b8:95:33:eb:f9:19:03:68:bf:af:f3:a1:
                    9d:18:ad:26:14:51:11:f1:ae:7a:5a:26:7b:d7:8a:
                    d3:d3:fe:95:d1:9d:f6:cf:1e:68:7a:14:51:fc:c7:
                    3f:a8:a9:77:f9:be:32:84:3b:3a:42:33:8e:8e:cb:
                    52:49:e3:c0:07:f3:24:29:df:bd:a4:70:bf:74:57:
                    85:d4:9b:90:49:de:33:23:5c:56:55:65:4a:60:82:
                    7a:b6:66:4f:cd:1f:4d:eb:97:2c:32:2b:ef:c8:3e:
                    d8:c1:6b:b2:42:c8:d4:02:db:67:bd:97:46:b2:5e:
                    1d:df:45:bf:60:08:f8:56:ac:43:cb:b2:cd:61:a7:
                    2d:1e:4e:99:58:62:b1:b1:a3:60:a9:89:f6:53:7f:
                    af:c1:c5:1b:47:f5:d0:c2:f7:8c:7e:ca:aa:ce:3e:
                    b5:5b:58:55:51:68:2f:16:d7:d5:72:20:d2:60:b5:
                    5a:06:11:f5:94:d9:e9:36:ef:87:87:9b:ee:49:12:
                    ab:c9:6f:b6:fd:d2:20:21:38:fb:25:2b:3d:e5:56:
                    1a:e0:5e:be:d6:46:ff:44:13:1d:90:71:2e:3c:31:
                    10:19:e5:09:62:e3:01:0a:98:45:15:7c:95:fe:c5:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:56:06:14:F7:D0:E1:3A:7D:1C:C2:FA:19:07:19:A4:5B:96:3B:D8
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:89:58:7c:f4:40:22:40:49:27:0f:75:49:8e:51:2c:a0:43:
         3c:13:c5:01:e2:c5:21:c7:2a:ed:33:08:a6:c1:06:20:03:fe:
         76:41:7c:27:5b:ab:69:fd:81:2d:df:a8:aa:bd:c6:0b:96:11:
         95:db:4c:a7:5c:cd:f3:13:f4:e1:cb:51:89:de:a7:d5:fb:40:
         df:8a:48:04:9b:04:ea:be:59:96:3f:55:61:31:9c:2a:9b:31:
         72:da:8c:25:db:b9:db:b5:a2:e5:a2:cc:68:f0:4d:10:7e:1b:
         6d:e4:1d:86:df:d4:a6:6c:50:ab:89:0b:75:db:fb:db:6c:9e:
         64:86:a9:cf:e2:19:dc:57:81:af:d7:c2:d6:9b:03:a2:e2:ba:
         26:d5:79:5b:81:2b:f6:b2:6b:3e:67:a0:ee:c6:39:bf:dc:f2:
         72:2f:91:5c:9f:8d:ed:b5:2e:bd:08:e2:f1:4f:d6:bf:56:b3:
         54:8e:ec:2e:cd:ab:86:42:97:8d:42:a7:20:79:d3:ae:63:70:
         6e:32:1a:76:72:aa:1c:69:d7:30:c3:aa:c7:9f:da:8c:9d:78:
         21:6e:98:e1:e7:4a:b1:cd:3b:2c:0d:50:c0:72:56:3c:99:fd:
         7c:7b:df:14:6d:6f:da:c8:56:3c:9d:e1:dc:f3:74:27:de:ba:
         6e:a1:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:47 2025 by rpki-client