Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File:                     FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier:          +sgqSYJse4guggIIOKtjV6Dfw6tufWCVRm5iiADmv8c=
Subject key identifier:   F9:20:EB:F0:28:B6:F7:25:F4:39:E2:BC:79:99:43:39:69:C9:63:29
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer:       /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial:       01974967F718FBF70F02B0F075E888EFB51E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number:          08DB
Signing time:             Sat 07 Jun 2025 08:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:39 +0000
Files and hashes:         1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: gyby1ueX6VehJ4Jh87UnOUXX5RA12nMpBh7uQjoi9hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f7:18:fb:f7:0f:02:b0:f0:75:e8:88:ef:b5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
        Validity
            Not Before: Jun  7 08:00:39 2025 GMT
            Not After : Jun  8 08:00:39 2025 GMT
        Subject: CN=f920ebf028b6f725f439e2bc7999433969c96329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:c5:22:08:cd:c2:f5:f0:23:ff:fb:3b:b4:
                    a3:34:ba:98:86:ee:51:10:27:6c:39:53:ce:a6:66:
                    bf:82:a3:2d:53:e3:66:d9:1d:9b:c4:33:77:bf:ee:
                    be:eb:27:c6:e4:5a:2d:43:02:c2:24:c4:2a:2f:c6:
                    7e:8d:1e:9a:75:61:cd:01:7c:69:7a:a1:1d:e8:4d:
                    bf:a4:62:85:93:ad:49:6b:be:c6:5e:59:18:f1:17:
                    29:c5:b1:e7:0f:e6:e2:c3:f6:d9:36:17:02:0d:bd:
                    e5:bb:2b:76:4e:ef:28:6c:1e:a6:b3:c2:81:fe:e2:
                    e0:4d:58:2c:56:09:16:1e:b9:cf:2b:5b:29:fc:ca:
                    d6:48:5a:ff:99:45:6b:4d:54:a8:00:62:16:23:1a:
                    59:77:d1:f8:08:ef:c2:cb:1d:46:43:31:0e:74:94:
                    71:3d:80:1f:5c:b4:57:b2:46:1d:0c:9c:47:c5:a1:
                    8e:68:ed:5c:08:98:67:76:c0:ac:fd:d8:a3:16:f2:
                    1e:75:74:aa:19:26:b7:fa:ce:b4:80:e1:fb:05:93:
                    95:1b:45:c2:be:8c:f3:5f:9d:84:8f:d8:c1:3d:2f:
                    56:bb:52:8a:de:fd:5d:3f:9c:9c:ff:b9:6d:c2:05:
                    1c:c7:08:1a:d1:3d:23:fb:17:cc:23:74:9c:a9:63:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:20:EB:F0:28:B6:F7:25:F4:39:E2:BC:79:99:43:39:69:C9:63:29
            X509v3 Authority Key Identifier:
                keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:8e:19:96:6a:2f:74:ff:d9:80:fa:2d:b7:76:ed:72:39:
         7a:a1:8d:c9:c2:e4:45:e5:4e:0b:23:43:67:cc:36:8b:40:12:
         b2:35:a5:53:f0:17:fc:e6:19:ec:8f:d2:a0:62:5e:b0:4d:69:
         26:c7:41:55:00:2d:55:17:a2:c8:e0:37:0d:fa:2e:49:e8:c7:
         83:e9:d7:ec:41:c6:04:e8:4e:23:c7:a5:9c:05:ce:53:e8:83:
         da:c8:22:d1:70:6f:08:52:e5:9f:c5:09:a5:35:0a:09:5d:a0:
         3b:ce:59:84:2b:b9:1c:7f:c9:e8:ce:d7:33:17:aa:73:02:54:
         b4:2b:32:8f:f3:e1:35:64:8a:71:c6:68:85:bc:05:7d:40:4e:
         3c:c8:da:76:70:6a:77:fc:f6:29:4d:e3:dd:1b:2c:5e:86:4a:
         09:fc:98:cb:f6:a9:55:07:bf:ef:82:e0:9c:98:db:bb:1c:ea:
         95:ee:62:62:be:78:50:e3:a9:b5:8d:2e:e2:77:2a:3f:79:96:
         ef:92:80:81:db:1c:a0:8c:dd:3d:7e:42:e6:e8:cd:c7:f5:23:
         6c:84:91:64:4b:c3:93:31:88:50:bf:4f:00:86:70:25:a1:5e:
         8c:2b:18:02:37:35:61:50:85:46:2e:fe:a0:88:93:36:90:49:
         d1:42:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:31 2025 by rpki-client