Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          EPjs1mUA4iu0K8jZTiAdsURREx1TW6b+qbcQE/DESSY=
Subject key identifier:   50:FD:3D:BB:C0:89:15:58:71:B4:26:7F:62:78:BD:20:80:F1:AA:41
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       019766CD5025F7A8AA0EE74FF057FB110B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          0292
Signing time:             Fri 13 Jun 2025 01:00:20 +0000
Manifest this update:     Fri 13 Jun 2025 01:00:20 +0000
Manifest next update:     Sat 14 Jun 2025 01:00:20 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: RChX5ALdmWvalrFOq0rxPKg8rI+F6AMLY3zQouZ+Zck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:cd:50:25:f7:a8:aa:0e:e7:4f:f0:57:fb:11:0b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Jun 13 01:00:20 2025 GMT
            Not After : Jun 14 01:00:20 2025 GMT
        Subject: CN=50fd3dbbc089155871b4267f6278bd2080f1aa41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:3d:f7:40:a1:71:d4:a0:85:fb:5b:90:e1:
                    27:6f:72:25:43:07:59:8d:df:55:6e:0c:99:f0:b2:
                    36:12:b6:28:79:b3:21:40:86:d1:c8:e2:4b:23:9f:
                    ba:2d:b2:2b:25:da:ad:47:5b:88:fb:34:67:2f:2a:
                    38:97:a8:cb:6d:34:d6:46:e1:59:b9:9c:3d:55:9b:
                    27:98:a8:38:7b:ba:3c:2b:21:42:54:94:17:a3:4d:
                    c5:be:ca:e6:29:b8:e5:36:17:af:ea:2c:ce:5c:57:
                    f7:5d:67:f2:1f:da:d3:47:0d:64:2a:64:97:b2:08:
                    cc:a4:f3:9e:f8:e1:8f:ac:53:83:a8:b0:81:20:e2:
                    a0:9a:95:72:37:cd:e9:10:d4:46:76:6e:71:d2:35:
                    d4:5a:cb:a5:b4:3c:d1:78:ac:c1:8e:56:5e:c8:3b:
                    29:20:38:17:84:bc:bf:c0:2c:4e:59:5a:fc:c5:16:
                    97:65:15:dc:ca:ab:bf:16:d9:7c:23:ec:7a:18:97:
                    05:44:5e:85:74:44:10:74:fe:89:85:e0:d2:45:cd:
                    69:6d:78:da:10:92:b3:26:d2:ac:ac:3b:d9:7c:3e:
                    bd:b0:12:2b:2c:7f:40:52:7f:44:ca:f5:f5:ae:df:
                    ca:06:da:16:9a:07:27:2a:bb:f1:bf:e0:2e:ab:99:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FD:3D:BB:C0:89:15:58:71:B4:26:7F:62:78:BD:20:80:F1:AA:41
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9b:93:61:fc:fe:51:b0:5c:44:c2:07:c8:e8:40:db:30:86:
         60:d5:0a:ca:ae:4f:7a:2a:2b:ad:c0:93:a1:9d:13:44:75:61:
         83:84:52:59:22:76:1f:88:3c:70:76:74:f6:d0:8c:50:16:9c:
         03:77:50:87:46:94:03:d7:ab:35:5d:ac:a0:0a:bc:99:d9:c3:
         13:25:b4:52:d7:d7:3e:21:4f:dd:63:ce:ab:a9:6b:db:43:4a:
         7b:7e:1b:ed:c5:5b:38:bd:fc:f9:3c:6d:8b:ed:16:98:38:a7:
         9b:3a:3d:ac:c8:18:41:93:f7:42:1a:6a:ed:f4:64:05:c1:c9:
         47:6c:81:37:56:bc:ef:c5:d5:e6:b6:51:8f:2c:7a:69:74:5f:
         10:af:2b:54:12:d9:26:35:48:d2:78:bd:20:f7:72:e6:94:cc:
         9f:15:b1:b9:65:c6:39:12:01:ab:53:14:15:33:80:40:e2:42:
         75:d5:d0:ae:66:0e:c2:9f:9a:9b:d8:6b:ab:ee:15:33:8e:0e:
         36:fd:a7:d8:76:22:df:06:a8:cf:0f:79:38:89:c6:ab:44:95:
         23:9e:3b:2e:a1:1a:1c:c9:8a:9c:63:2e:21:9b:23:b8:9a:6b:
         bf:cd:67:c8:aa:b8:16:dc:9e:d9:ab:0d:28:7f:db:7d:24:32:
         7c:99:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:08:40 2025 by rpki-client