Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          88DOiKPWb4cG3ivXUObz9QnbC6sP3lq01ZgbSj7Hy48=
Subject key identifier:   D8:96:7F:BB:E8:4C:7E:D6:1C:7D:A9:38:9D:A1:E5:B9:9B:7E:59:0B
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       01976BBD48FC540A036931E0B97EFA008BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 00:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:56 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: zFzI6bQDRZa/O9Y4DrtgSRzfb1Ja5akMjdLcj07Kzrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:48:fc:54:0a:03:69:31:e0:b9:7e:fa:00:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Jun 14 00:00:56 2025 GMT
            Not After : Jun 15 00:00:56 2025 GMT
        Subject: CN=d8967fbbe84c7ed61c7da9389da1e5b99b7e590b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:9d:65:9c:4c:3b:21:18:65:45:03:f6:1e:
                    2c:1e:29:ca:da:20:48:44:76:31:3a:3a:df:3b:33:
                    25:5e:7d:36:01:50:45:b0:32:9e:a4:e3:c6:3a:51:
                    ef:56:18:60:13:58:8f:bc:a5:c3:f7:04:97:4e:13:
                    86:1f:6d:b8:88:0e:2c:ae:07:48:01:ee:e5:74:53:
                    9e:df:aa:7b:25:70:aa:44:c2:ea:36:81:ef:01:8e:
                    3a:50:09:04:09:a7:4d:05:fc:1c:d6:f6:bd:67:99:
                    74:44:ec:1d:76:46:b7:91:55:b1:3f:32:78:5c:df:
                    ff:0c:2d:93:65:3d:05:66:89:fd:08:a6:a2:43:f9:
                    ec:4f:e9:0e:00:16:9f:35:50:86:a3:d2:30:06:38:
                    a7:29:0f:fd:cf:bf:4a:42:29:18:63:46:49:cc:2b:
                    15:73:56:8a:2c:f6:dc:fe:96:e2:2e:8a:6d:59:4a:
                    ee:f1:72:80:54:8f:fd:0f:04:f0:f2:d9:48:c6:39:
                    c8:55:ca:52:ba:1b:f8:94:e0:ca:8f:a1:f5:d7:26:
                    9d:ea:5d:ff:79:7b:78:a1:96:07:66:ea:73:4a:ac:
                    48:c6:f8:b2:c1:e6:82:9a:51:be:7b:71:60:83:02:
                    ab:73:6f:d0:85:4f:18:78:da:84:88:2a:58:cc:11:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:96:7F:BB:E8:4C:7E:D6:1C:7D:A9:38:9D:A1:E5:B9:9B:7E:59:0B
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:1d:7e:75:5c:43:72:1f:26:c0:31:b1:06:32:2a:16:14:
         aa:2e:29:e4:ca:61:e7:73:87:ad:63:a7:77:fd:61:19:67:b5:
         84:d1:12:1e:a8:30:34:12:0f:ce:5f:b8:8f:fa:d5:10:02:bd:
         a6:4f:df:99:c1:84:7c:2c:6f:4e:f4:54:6d:06:ce:d1:84:65:
         56:6d:79:b3:8c:b0:1e:b7:0b:98:b1:78:ad:86:5b:06:b0:ff:
         f3:82:4a:be:b4:01:b9:bb:df:c8:00:6b:3c:27:57:72:80:b7:
         f5:b9:9f:0e:7d:c6:44:fc:ac:fb:40:9e:93:7a:34:6a:42:bc:
         fd:59:b5:83:06:7d:2d:b4:e9:6d:70:70:12:56:32:c5:8e:38:
         5a:5d:39:e7:df:c6:e1:df:1f:b2:07:1c:1e:16:8f:cb:0b:7b:
         7e:8a:4e:d3:cb:e2:bf:27:1b:b4:52:6d:4d:8e:fc:93:dd:7d:
         ad:a4:db:e8:e2:d5:d2:29:ff:23:3d:09:66:91:b5:25:24:2a:
         23:ef:c4:41:82:65:ae:1a:a6:d0:3f:5a:68:c9:48:b6:15:45:
         0c:0c:fe:e6:cc:c3:4b:0c:c2:12:e0:1a:da:f7:5d:0f:a6:a9:
         f6:05:97:a7:e6:7b:79:a2:ad:8e:a5:de:25:57:49:06:a3:34:
         6c:60:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:20:05 2025 by rpki-client