Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File:                     FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier:          zLA3M4lU0E/8mVr/N6r2bqbWC9w3ASRXZG7p42v0R8w=
Subject key identifier:   96:9C:7D:08:66:45:45:C6:50:D7:73:13:CF:D7:59:CB:33:8F:FC:26
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer:       /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial:       019758A479426453A6C0328500A123C73535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number:          1581
Signing time:             Tue 10 Jun 2025 07:01:03 +0000
Manifest this update:     Tue 10 Jun 2025 07:01:03 +0000
Manifest next update:     Wed 11 Jun 2025 07:01:03 +0000
Files and hashes:         1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: J+2HGKWVVdZWo6PBemi0I8SAHjL2yhV4IfqpLil3anA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:a4:79:42:64:53:a6:c0:32:85:00:a1:23:c7:35:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
        Validity
            Not Before: Jun 10 07:01:03 2025 GMT
            Not After : Jun 11 07:01:03 2025 GMT
        Subject: CN=969c7d08664545c650d77313cfd759cb338ffc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:49:27:51:66:e2:68:cc:54:e2:9a:47:08:
                    4f:35:f2:04:6e:69:99:31:87:89:65:6b:94:51:c9:
                    0d:10:fe:19:40:22:36:32:41:0f:b0:4c:ad:ca:d4:
                    73:7a:50:70:ca:f3:26:ad:ac:f4:0b:48:34:d3:64:
                    4c:ce:4f:f0:5c:d0:8f:10:b4:8d:22:27:7c:34:9e:
                    f0:fd:bd:87:4a:4d:8e:86:de:35:d2:e9:2e:db:9f:
                    e1:22:5e:43:9a:68:05:78:29:d7:dc:2e:2f:4a:01:
                    f4:85:0d:c8:32:a5:7f:3e:cb:db:a5:62:70:96:95:
                    71:6f:a3:66:a9:1a:fc:4e:df:80:10:90:57:fe:32:
                    18:ca:01:3e:13:96:d8:6e:a1:fc:80:00:63:c5:fa:
                    16:30:b9:7f:78:2e:92:22:4e:2f:dc:03:30:fd:15:
                    a6:7c:ea:e5:c0:8e:17:f6:bc:f7:9a:ce:47:6d:b4:
                    cc:57:ee:34:15:a2:71:fc:cd:d9:2a:9d:76:3f:49:
                    22:87:c5:47:36:e0:48:40:52:a1:f0:da:1b:d5:66:
                    37:de:59:4d:bc:71:9f:6e:89:fb:c8:37:55:1a:36:
                    3c:50:16:7e:a1:61:44:e5:d4:ca:a0:70:09:9c:dc:
                    63:3f:81:64:f6:10:b7:f1:7a:06:99:16:2b:90:d5:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:7D:08:66:45:45:C6:50:D7:73:13:CF:D7:59:CB:33:8F:FC:26
            X509v3 Authority Key Identifier:
                keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:11:c7:b6:2e:e4:0a:9a:49:2b:a3:c2:dc:26:55:6e:9f:
         38:66:05:b8:c0:d1:22:d7:76:18:e9:e7:65:8c:48:18:12:3f:
         a7:22:0e:9c:ab:6d:89:9f:2a:02:f1:4f:94:13:fb:a4:60:9a:
         1d:70:3e:b6:53:1d:51:d0:c2:3a:6a:15:a9:eb:e6:53:ee:ce:
         78:76:19:7c:96:36:06:e8:37:88:40:66:0f:81:f4:08:d7:01:
         af:b8:fb:6a:6a:87:ca:45:a3:f4:8d:b8:21:3d:c1:db:e9:04:
         b1:8c:b3:49:15:bc:6e:48:5f:6a:53:fd:f8:97:e5:cd:69:57:
         81:bf:dd:05:b5:64:96:55:dc:cf:30:a7:99:11:16:5f:a7:e2:
         e6:5e:5d:1d:42:10:2e:64:80:9a:4d:f9:ec:b4:41:d5:0d:d2:
         23:66:46:b1:4f:d0:dc:dd:b6:ca:5d:d2:9d:24:ce:23:06:64:
         ec:b1:f9:ad:1c:76:8f:06:77:11:5d:43:22:fa:75:3e:5b:08:
         e8:a9:bc:bf:30:9c:5b:a2:84:49:56:ef:43:cb:13:39:4d:bc:
         e6:04:99:85:68:6e:1a:6e:d0:0c:e2:e1:3d:59:8a:8e:c8:e2:
         a3:7e:b1:d7:7e:4f:5e:36:c0:a3:c1:c7:33:4d:96:43:c5:39:
         af:f7:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:18:23 2025 by rpki-client