Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File:                     fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier:          7/Cl71ilfTlQI/LsASVrI4bC3F20snKzo5Dvg2rtMLw=
Subject key identifier:   B1:42:32:00:71:2B:8C:40:73:BF:56:7A:57:DA:3F:63:69:76:DA:FC
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer:       /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial:       01976961B6D9278F6768B3E70900415DA702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number:          1588
Signing time:             Fri 13 Jun 2025 13:01:40 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:40 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:40 +0000
Files and hashes:         1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: /HHxCPXSBlbbN07J6H99JsemF6v/BY/JIBKduEFnAN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:b6:d9:27:8f:67:68:b3:e7:09:00:41:5d:a7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
        Validity
            Not Before: Jun 13 13:01:40 2025 GMT
            Not After : Jun 14 13:01:40 2025 GMT
        Subject: CN=b1423200712b8c4073bf567a57da3f636976dafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:b7:a0:20:d1:c6:2a:de:40:82:ea:41:b9:
                    79:d9:9b:bc:84:ed:2a:a6:e1:d1:44:ba:4e:d7:f6:
                    e9:99:5f:67:55:5b:2f:72:8d:c5:8d:20:72:dc:fb:
                    e0:24:da:dd:0d:c1:5a:02:60:ed:8c:8a:89:4d:ef:
                    31:67:4a:74:1e:6f:cb:17:63:b7:16:29:71:5d:17:
                    26:89:ad:bd:bb:6b:b6:d0:66:36:94:48:fe:27:21:
                    e4:cd:1e:0f:7c:6d:61:1f:67:be:eb:d7:c5:7c:fe:
                    b5:c8:b4:30:c4:33:cb:6a:1d:12:b0:43:4f:46:59:
                    39:02:7e:0d:2b:79:13:88:31:96:26:53:aa:83:ad:
                    9a:66:ab:a3:13:2b:ea:5b:1d:03:ce:74:cb:7e:48:
                    6d:6f:74:28:56:67:5f:15:ef:fd:53:b8:45:ea:b8:
                    53:4d:cd:89:da:56:18:31:71:ff:fa:e9:a5:52:8f:
                    d2:b0:7b:ab:2f:09:bf:a3:0b:13:56:a6:82:b8:e3:
                    31:6e:01:c0:bc:eb:ef:8a:27:a0:2c:f3:d4:7c:ae:
                    39:3d:0a:97:26:11:3a:a7:8d:15:01:72:35:09:7e:
                    64:30:56:68:08:d1:df:23:9b:5c:5f:f0:b8:2f:29:
                    ca:91:9c:68:f3:3a:f6:a4:28:37:8d:8b:3b:4c:22:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:42:32:00:71:2B:8C:40:73:BF:56:7A:57:DA:3F:63:69:76:DA:FC
            X509v3 Authority Key Identifier:
                keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:60:2c:64:e9:74:8d:e9:3e:b0:86:96:14:ff:4a:f0:05:
         6c:16:e8:86:c3:4c:56:45:31:ac:28:ff:0a:16:96:01:4a:25:
         8e:45:50:b6:c6:48:34:65:ec:8d:a1:43:de:f3:f4:50:b4:0a:
         e0:6e:94:a9:99:ea:9d:97:f5:68:4c:c6:09:9d:ee:ee:1a:b6:
         c1:1b:c0:1e:93:30:e7:de:3e:91:2e:78:52:e5:6a:95:cf:24:
         97:d1:ec:fe:50:50:16:49:64:00:57:9f:76:7b:8a:2f:cd:6e:
         4b:2e:4c:e0:e8:bd:ff:9a:33:c4:88:45:8f:a4:31:ce:d3:89:
         89:6a:9c:dc:f3:d2:71:65:2a:6c:48:cd:2e:da:9f:1d:26:e3:
         d8:41:e6:a0:7c:90:fe:2e:7a:b3:25:56:de:a1:01:3d:62:5d:
         c9:f6:b2:fe:a0:c6:55:40:13:3a:9f:d4:3a:62:ed:f5:bd:a0:
         f9:39:09:5d:7a:55:25:3b:ec:66:40:cc:74:29:b2:e4:f1:6a:
         f5:38:4a:f5:5f:a2:0d:9e:44:a7:65:3f:ce:76:30:a6:1e:d6:
         d7:d3:56:15:72:c4:cb:25:65:99:92:13:79:2c:f6:47:d7:20:
         8e:73:ab:5f:d3:34:ed:90:f4:14:ec:7c:ee:6e:07:9e:a4:78:
         ed:63:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:50 2025 by rpki-client