Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File:                     m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier:          MfffnryTiwPm7nu+cioq832zdLqCTraAMjgIx7AzY94=
Subject key identifier:   7B:06:37:1A:8F:E2:18:C9:7D:25:03:BC:E4:8D:8E:9F:F2:B8:87:53
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer:       /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial:       0196A0F63B096B1D4F88B1211085855C7E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number:          13A6
Signing time:             Mon 05 May 2025 15:00:13 +0000
Manifest this update:     Mon 05 May 2025 15:00:13 +0000
Manifest next update:     Tue 06 May 2025 15:00:13 +0000
Files and hashes:         1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: Oe1ebTuJGS6/efDobOZ7l8hKLFfy7JUCOUtriW2rCsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:f6:3b:09:6b:1d:4f:88:b1:21:10:85:85:5c:7e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
        Validity
            Not Before: May  5 15:00:13 2025 GMT
            Not After : May  6 15:00:13 2025 GMT
        Subject: CN=7b06371a8fe218c97d2503bce48d8e9ff2b88753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:cc:14:ca:5f:82:88:71:e1:f5:f5:80:67:
                    b3:8f:7f:56:9e:c7:02:54:e3:c1:c1:34:bb:f2:f8:
                    ca:6f:82:c3:da:d2:91:4b:bb:e4:93:5f:8e:d8:2e:
                    73:d8:ba:be:a8:20:10:e1:5b:f0:35:cd:58:86:13:
                    06:17:d3:28:7a:41:cc:84:7d:fa:92:73:18:f8:d7:
                    22:96:77:25:1e:13:58:be:ee:58:c4:eb:33:da:60:
                    be:a6:d0:44:66:f6:3a:82:d6:01:ab:72:20:7d:dc:
                    a2:17:dd:7e:e8:39:73:c4:90:3a:3c:7d:74:4b:c2:
                    ad:8b:eb:6e:11:0a:88:aa:2f:39:56:47:1e:04:c4:
                    68:29:20:ae:5a:2c:07:d4:96:92:89:cc:17:2c:e1:
                    a7:d1:ec:82:cb:ee:90:af:d3:bc:70:4d:7b:e0:fd:
                    fd:19:1a:69:d6:ce:81:89:3c:58:f0:85:c7:df:8a:
                    60:48:b5:e3:43:6c:b6:cd:06:cd:bf:ab:2f:f6:22:
                    65:74:95:6b:ed:59:81:49:40:e7:3d:56:f9:6a:35:
                    27:a5:5a:25:5a:58:6c:80:3e:3e:5b:40:0d:61:7e:
                    e6:2a:e7:5b:b9:fc:af:22:3b:27:85:f8:51:c8:10:
                    2b:d1:b3:8c:fb:4d:7c:8c:5e:ac:58:9b:d6:31:45:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:06:37:1A:8F:E2:18:C9:7D:25:03:BC:E4:8D:8E:9F:F2:B8:87:53
            X509v3 Authority Key Identifier:
                keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:86:9a:4c:e2:08:e7:f2:8c:fe:04:7b:56:72:25:6d:4f:39:
         ce:1d:85:f8:49:88:7a:ed:70:92:b0:23:67:83:41:7b:df:81:
         8d:03:c0:f1:af:cf:6c:0e:50:8d:e1:89:f8:59:8e:4b:94:67:
         c9:a6:0e:5a:6b:30:18:c1:d0:fc:49:91:12:a2:24:e7:3e:ac:
         1a:83:4a:06:cb:64:7c:f3:2d:69:04:de:55:25:f5:23:1e:b9:
         c9:9f:03:8a:8c:d6:98:8e:92:09:01:96:33:62:46:72:37:4d:
         ca:b8:ed:00:26:e3:1e:04:d6:ab:72:cb:08:8a:1a:43:cf:0f:
         34:3c:14:e4:ff:5c:c5:1d:25:93:1e:d1:4b:04:e2:91:93:57:
         ed:8a:ea:c5:f4:92:96:f8:c8:85:ec:8a:e6:ee:2f:81:61:6d:
         56:a8:5f:00:f8:4c:35:79:6c:92:23:69:0e:47:9f:50:45:62:
         35:8b:d1:5a:c6:bf:1d:9c:eb:fe:72:57:f2:7d:b0:e5:3b:3b:
         0d:77:6e:04:89:22:d1:34:e7:ea:14:c2:5a:24:5c:31:58:23:
         97:48:0f:a8:c5:6c:66:12:21:8f:d9:0e:e4:d1:33:a8:b7:88:
         dc:60:b2:18:de:30:8b:54:ee:f8:db:8b:70:bc:dd:13:7f:0f:
         5a:5c:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:17:32 2025 by rpki-client