Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
File:                     FW-pMchet5jGgtwy5CkJ1xySOyM.mft (raw, json)
Hash identifier:          bObSodoMuCUmxb5mSZKeyLpmFuoguTgpCcse/HCV11U=
Subject key identifier:   5E:4D:1A:88:CA:E4:F7:70:43:B2:71:57:98:1F:09:CD:DB:37:E9:59
Authority key identifier: 15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
Certificate issuer:       /CN=156fa931c85eb798c682dc32e42909d71c923b23
Certificate serial:       0198A15F891D61D08F0CB104D762362A44E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
Manifest number:          0518
Signing time:             Wed 13 Aug 2025 03:00:49 +0000
Manifest this update:     Wed 13 Aug 2025 03:00:49 +0000
Manifest next update:     Thu 14 Aug 2025 03:00:49 +0000
Files and hashes:         1: FW-pMchet5jGgtwy5CkJ1xySOyM.crl (hash: s7J1ncwsbJumAOwrVON7u6BF48RNfODyhHTWXsxRcPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:5f:89:1d:61:d0:8f:0c:b1:04:d7:62:36:2a:44:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156fa931c85eb798c682dc32e42909d71c923b23
        Validity
            Not Before: Aug 13 03:00:49 2025 GMT
            Not After : Aug 14 03:00:49 2025 GMT
        Subject: CN=5e4d1a88cae4f77043b27157981f09cddb37e959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5a:9c:f9:8c:19:92:9d:11:8b:e0:7c:35:c6:
                    df:9c:ff:1a:24:b4:33:24:de:58:6b:94:c4:0c:c1:
                    0f:30:f8:99:06:67:75:de:57:d1:09:b5:00:b5:c6:
                    47:37:ac:c8:7d:72:c1:0a:e7:b1:39:f0:23:5a:34:
                    e9:ff:80:5b:52:58:ae:64:d8:3a:a5:2e:59:9b:39:
                    7d:3e:85:eb:a5:93:ca:bb:b9:de:2b:a6:6b:48:83:
                    5e:9e:88:94:fa:8b:cc:ce:bb:45:2f:6a:6d:cd:f4:
                    41:df:fc:f4:6d:26:7f:b0:1c:f1:2f:a0:94:95:86:
                    79:c2:43:ed:1a:e2:72:1d:b9:99:b7:fb:3c:d5:59:
                    b8:0c:12:b3:21:33:c1:ac:12:54:de:a9:ff:66:44:
                    70:a3:b3:c7:6b:00:12:85:31:2c:93:26:04:b2:48:
                    ea:e3:5a:4f:ac:ad:ae:be:96:17:ab:e2:24:69:66:
                    4f:6f:b2:a6:35:37:b7:0d:51:f2:1f:4c:b6:dd:0d:
                    46:a0:ed:3b:b4:a7:a2:2b:dc:6e:82:1d:62:8f:87:
                    d2:14:2a:1d:e5:80:73:a7:02:65:dc:c1:d2:8b:7b:
                    58:42:b5:de:51:a5:a5:16:3a:cc:51:34:c4:12:a7:
                    95:dd:00:b2:32:77:76:a1:17:b5:a5:37:11:2b:d6:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4D:1A:88:CA:E4:F7:70:43:B2:71:57:98:1F:09:CD:DB:37:E9:59
            X509v3 Authority Key Identifier:
                keyid:15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:c8:33:6a:e7:4f:2e:ee:90:e7:77:ca:9b:14:d5:32:74:
         31:94:e7:13:d1:2c:09:c3:ae:4c:d7:5d:5e:4c:cb:5c:35:0e:
         c2:0f:af:e8:89:b7:1f:2f:df:54:17:1f:d8:53:2c:9e:8a:26:
         7d:c2:73:8e:e3:79:70:19:1c:94:a7:2d:bc:1f:23:b7:09:5f:
         aa:80:ba:fd:e6:cb:68:0e:86:3b:33:66:61:74:80:d0:52:0f:
         7f:2c:3e:5b:6c:14:2a:ef:79:1b:c6:a7:89:25:d0:df:d0:8f:
         3c:34:c6:4d:c5:47:b8:b0:92:db:07:4e:84:0e:20:33:28:4d:
         37:46:04:9f:28:c7:ee:ed:ad:70:3e:4a:bf:53:3a:90:9a:96:
         39:ef:b5:d9:77:9b:98:66:c0:72:84:6b:ba:64:6c:aa:a1:a3:
         ff:3f:b3:11:a4:a1:31:b3:ff:50:e6:85:78:2e:70:c7:ca:df:
         ee:d5:20:14:f9:f0:3e:91:30:f2:0a:26:64:52:1b:b9:e0:ad:
         1f:60:03:7c:50:5a:4d:09:5b:ce:4e:e6:78:14:f9:e2:9a:9b:
         da:d8:10:1c:64:d8:f8:77:29:38:b8:d5:80:0f:40:8e:e6:89:
         63:b9:9d:45:d2:18:52:3c:71:15:51:aa:f1:f8:1f:7a:86:56:
         60:03:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:05 2025 by rpki-client