Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File:                     FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier:          KTp8ihGvfX9fVGVDLOfer2IW4z7fi9u1zuvTSiwvSu8=
Subject key identifier:   9F:A3:CC:23:CC:3A:DC:9A:C1:89:A7:F5:A1:A4:B7:35:76:47:71:4A
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer:       /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial:       019782EA25580DF2A1C7BC97E73A8A8811EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number:          1584
Signing time:             Wed 18 Jun 2025 12:01:12 +0000
Manifest this update:     Wed 18 Jun 2025 12:01:12 +0000
Manifest next update:     Thu 19 Jun 2025 12:01:12 +0000
Files and hashes:         1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: hsBslJvIbjl2DW7JyYQ+kPTsKX5Ue2oOsqF/upF0iCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:ea:25:58:0d:f2:a1:c7:bc:97:e7:3a:8a:88:11:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15894575555cde14c770cbb183da5535d144b540
        Validity
            Not Before: Jun 18 12:01:12 2025 GMT
            Not After : Jun 19 12:01:12 2025 GMT
        Subject: CN=9fa3cc23cc3adc9ac189a7f5a1a4b7357647714a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:0e:c5:c5:03:56:53:56:90:3b:e5:45:e6:
                    a0:89:17:a5:f0:46:95:82:51:2f:fc:2b:0c:dc:95:
                    98:5c:fb:8e:62:b0:31:d3:25:2d:ab:f6:df:2b:85:
                    51:c6:ae:12:87:a7:96:93:0a:f6:39:e1:26:44:71:
                    c8:7c:bf:f8:d4:cc:3c:94:28:68:1e:ce:f3:88:3b:
                    22:11:4c:6e:d5:d9:3e:24:49:30:72:6e:e4:e3:74:
                    fc:5c:79:e6:38:a8:94:73:0b:05:2b:a2:ec:80:c7:
                    05:4f:00:ed:03:a3:67:7b:ea:39:2f:c7:95:45:1e:
                    44:e0:ab:a2:8d:0e:5c:b4:5a:4f:36:1a:c4:3c:43:
                    8c:cf:a5:5a:a7:30:fb:03:29:7b:4f:bf:de:9c:04:
                    23:3f:0f:99:1f:03:58:80:0d:8a:39:95:b1:30:05:
                    3a:5e:85:74:6b:cc:29:86:00:b6:e7:57:7f:7b:26:
                    99:96:b5:bc:a6:e1:2e:03:7f:54:32:74:e1:02:c7:
                    7d:93:12:55:8d:8a:7e:15:42:22:54:f2:d6:00:47:
                    df:68:ac:61:05:6b:7e:b6:8b:12:62:1a:2f:3e:e1:
                    5a:a8:da:f9:48:50:db:41:05:6b:1c:ec:66:a0:34:
                    d0:9d:53:5b:fe:32:b6:03:8a:ea:5e:d3:53:0a:39:
                    63:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:CC:23:CC:3A:DC:9A:C1:89:A7:F5:A1:A4:B7:35:76:47:71:4A
            X509v3 Authority Key Identifier:
                keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:8d:8a:98:db:36:93:ae:80:6d:38:71:27:21:83:87:62:
         ef:f8:72:40:2c:34:e3:e9:25:d2:59:81:ba:d1:d7:ef:e7:e7:
         b5:50:f2:6c:9b:45:d9:0b:bf:61:55:2e:e4:fd:c1:ab:a8:9c:
         f1:c5:4d:0c:8e:e7:f0:99:5d:cf:1c:2b:54:c9:f5:a2:b0:e9:
         c6:ae:85:b3:2f:ac:ec:26:5b:98:64:a3:24:09:6d:9c:0b:a5:
         31:d7:e0:68:c9:f2:63:70:ab:cd:0f:96:17:81:80:bf:da:8b:
         2e:70:b0:36:3b:54:21:3a:a0:2c:a8:70:33:70:0b:20:c1:a9:
         18:e3:99:d8:da:31:8d:c4:69:8c:1c:78:24:6a:b4:65:0f:41:
         02:6f:66:db:51:71:7f:2b:15:a8:f0:f2:24:30:95:99:83:9f:
         3c:45:6d:c5:64:18:5e:ec:2b:d6:fd:d7:89:a8:cc:83:4b:e6:
         ea:8d:b0:96:99:4b:ac:9c:19:d2:1d:7b:6f:18:ef:cc:35:d5:
         0c:a6:7f:f5:f0:c4:3e:99:87:dc:fb:ef:b2:65:82:b8:1f:2c:
         64:42:45:d2:8e:74:30:05:d8:27:1c:f0:a6:21:30:5a:a8:b4:
         ad:d0:69:1a:e2:21:2c:d9:ce:76:e1:9d:65:13:ee:ff:4c:1b:
         84:21:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:12:55 2025 by rpki-client