Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File:                     FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier:          2dL+OW3LdRZv/S1JZ2UNMwr8QScK7b/UFmTXH+nNEYo=
Subject key identifier:   4E:B7:0A:0C:ED:BD:C9:B8:F7:28:7F:5E:62:9A:53:5F:E5:A1:62:51
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer:       /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial:       01976F2CACBD2A336FCAA272B80C68D57124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number:          1520
Signing time:             Sat 14 Jun 2025 16:01:28 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:28 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:28 +0000
Files and hashes:         1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: Eb+Xk/WDuUh0DIDGX5DYht2f1BZY6ul087k0Llyj90Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:ac:bd:2a:33:6f:ca:a2:72:b8:0c:68:d5:71:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
        Validity
            Not Before: Jun 14 16:01:28 2025 GMT
            Not After : Jun 15 16:01:28 2025 GMT
        Subject: CN=4eb70a0cedbdc9b8f7287f5e629a535fe5a16251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:e6:ef:fe:72:50:87:75:99:aa:43:91:16:
                    a2:5f:d9:e3:26:14:7a:e7:b4:dc:6b:e6:84:ab:c5:
                    08:a2:0e:6c:68:7c:5d:07:de:b1:4b:94:fb:ba:f5:
                    b3:a9:29:f0:27:56:6c:16:29:68:3b:25:a4:54:88:
                    93:9c:e4:07:9b:6d:67:30:e3:3e:ec:71:57:cd:28:
                    87:14:8b:8e:07:82:69:4f:45:cf:3a:f8:ab:1e:7c:
                    1a:18:b3:79:26:93:5f:07:20:be:8d:f2:13:2a:dd:
                    b7:b4:a0:9a:12:dd:b7:54:23:58:62:9d:64:bd:4a:
                    28:18:59:fd:28:0b:25:a0:3f:8e:e1:e8:b3:23:34:
                    45:ec:ff:f3:2b:88:08:cb:80:33:6f:63:83:b3:6e:
                    df:91:99:87:1d:22:cc:5a:8e:f2:70:7d:2d:84:b8:
                    d5:e8:01:dd:e4:30:49:97:28:fd:70:94:93:8f:c0:
                    13:2c:7e:8f:2b:1d:e0:a8:2b:df:98:ea:b1:a6:04:
                    8f:7a:b5:16:e8:8a:01:8a:8f:cd:76:1f:1f:45:45:
                    78:8d:57:cc:aa:b3:c6:54:0d:f6:3f:00:5c:e2:9b:
                    47:2e:4e:13:e0:3b:e0:dc:69:df:2d:29:a1:5e:4e:
                    9a:6e:b8:72:69:18:8b:cc:ab:8a:bd:0f:f5:79:f3:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B7:0A:0C:ED:BD:C9:B8:F7:28:7F:5E:62:9A:53:5F:E5:A1:62:51
            X509v3 Authority Key Identifier:
                keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:a2:16:40:73:1f:8b:c4:c5:64:42:ef:4e:44:30:0c:95:
         70:85:4d:1e:48:83:52:ca:76:c9:47:9c:0e:8c:24:f3:e0:86:
         e6:c7:70:79:d7:c9:60:cb:af:a8:7a:56:89:d0:ee:51:d3:bf:
         0e:9c:8d:42:8c:8c:10:6b:39:d4:87:8b:2c:26:73:64:37:bc:
         3e:5f:6a:b3:a1:46:37:a2:3c:a1:bd:24:ac:88:8d:ac:e9:ed:
         f2:00:20:0f:a9:37:5a:48:a7:8e:32:5c:d2:32:33:0b:9c:57:
         9f:9d:a6:70:49:40:ae:b6:da:03:a0:71:7c:62:d1:5a:be:18:
         89:69:56:63:c9:c8:4c:d1:11:48:69:5f:ab:19:6c:3a:72:33:
         ef:ad:d2:65:59:3e:bd:07:97:dd:ca:c9:2d:2f:21:92:03:62:
         45:76:23:7d:26:92:f8:4e:fd:0a:ba:c4:84:ac:3f:74:81:d1:
         d2:70:15:8a:50:bc:c0:d5:84:67:7d:f5:28:ae:94:02:ad:05:
         c0:9b:c1:8a:3c:49:4f:71:cd:a5:e5:1b:f2:4a:f1:ed:2a:12:
         4c:b4:e2:d9:cb:c1:36:03:ed:49:09:bd:3f:72:8f:f3:72:9a:
         c0:8c:0c:44:11:74:c6:6d:01:00:9d:39:af:f2:e2:cf:cd:de:
         8a:c0:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:17 2025 by rpki-client