Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          7Wx7X4RyWWlJOAdXr+49+8ji1rhSdZIH+Pl9dsk6FW4=
Subject key identifier:   03:B6:46:D7:F8:69:8F:FA:80:C1:7B:E5:7E:98:DB:20:6D:82:66:48
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       01967868CDB8AC4A32D69D08E16D13C93B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 18:00:56 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:56 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:56 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: ORdaPgx/OxxnhPZXJOgdsYWUHWF48Zj9VV6OAULWfkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:cd:b8:ac:4a:32:d6:9d:08:e1:6d:13:c9:3b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Apr 27 18:00:56 2025 GMT
            Not After : Apr 28 18:00:56 2025 GMT
        Subject: CN=03b646d7f8698ffa80c17be57e98db206d826648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:c2:d7:fb:f6:44:d2:24:63:c1:79:21:8a:
                    c6:f6:97:57:a5:32:3e:bf:ce:bd:34:ea:14:34:68:
                    9d:94:3e:50:68:f7:12:b8:b8:65:3d:19:24:0a:c4:
                    c7:5c:b0:55:9c:60:f7:9e:13:e8:82:69:91:f2:10:
                    aa:02:b1:95:48:0b:e2:a1:b7:47:56:53:d2:69:b4:
                    53:ec:0a:97:ed:85:87:a6:91:ab:dc:79:bc:9c:16:
                    bd:8f:b0:ab:d4:cc:2b:27:9e:0a:ad:ce:4a:36:19:
                    65:45:ad:ef:8e:65:e9:7f:4d:72:27:c2:a8:df:47:
                    1b:53:a3:49:28:de:00:0c:44:d0:6d:2a:1a:35:c7:
                    19:0b:dc:61:c5:10:5e:87:e4:b3:1a:64:e7:dd:2b:
                    50:ca:27:e8:e9:52:07:ee:65:e4:27:61:75:d1:6d:
                    4a:10:a2:2c:b9:22:0a:3b:b3:fa:51:2c:b1:7f:2f:
                    c0:68:c5:35:f3:35:5a:53:43:ec:87:c4:a2:fe:a0:
                    1a:c3:83:4c:77:58:46:0e:72:82:6a:79:fd:a0:17:
                    50:c6:13:63:d1:65:35:90:ff:3f:c6:c1:81:12:14:
                    fb:32:7a:b4:b2:ad:8d:d5:1e:4c:fe:f2:da:de:0d:
                    1d:16:25:ff:df:f9:57:31:54:fd:ba:02:e6:02:cc:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B6:46:D7:F8:69:8F:FA:80:C1:7B:E5:7E:98:DB:20:6D:82:66:48
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:d0:6d:3c:6d:30:1d:2f:ef:08:7f:82:41:5e:90:8e:39:
         01:de:27:b5:fe:f0:0d:95:65:25:a8:47:d6:90:ce:9a:83:bb:
         c8:c7:5f:ea:12:e6:39:ed:0d:e8:8d:a7:8a:36:0d:78:8c:62:
         00:56:a2:ca:e9:67:bb:60:e0:51:01:4f:87:30:aa:ae:cb:eb:
         4c:67:39:8f:e3:d9:09:c2:64:5a:3b:0b:05:a0:7a:d1:5f:9b:
         08:51:b5:b4:40:73:b5:e0:54:30:4a:ae:b1:72:b8:c1:01:ef:
         5a:ee:67:64:74:f5:e8:6c:1c:bf:c8:e5:08:a5:08:3d:37:0c:
         36:3d:56:db:64:7e:59:b3:6e:35:cb:bb:d8:4a:d8:80:b0:f5:
         40:f9:7a:88:6b:14:21:cf:e2:a1:55:59:4b:a6:0e:48:4d:51:
         fe:09:1b:40:dd:0c:05:95:ba:86:39:ca:1e:2b:9e:ac:d1:da:
         36:ae:06:3d:df:8e:0f:8c:32:d4:d1:40:6d:4a:c1:ce:89:d0:
         c9:51:5b:c0:d5:59:6a:38:c1:e3:8a:a5:76:76:6b:07:48:eb:
         49:b8:0e:14:7c:f4:80:f7:6c:63:3a:ed:76:93:f2:ae:f2:6a:
         6f:2c:ca:72:2b:35:ce:c0:8d:9f:bf:a8:55:60:51:6b:0c:1e:
         2e:1d:16:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:22 2025 by rpki-client