Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File:                     FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier:          Us8un020qKKUTWQKnLwOtlysU/JnDfOS71SIqvMn7ek=
Subject key identifier:   9F:CF:75:10:C5:C5:05:A8:54:26:5D:9E:DC:88:7E:48:B9:B6:5C:E2
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer:       /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial:       0196741DA6F7E0D13F2988D333B559E6BC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number:          150A
Signing time:             Sat 26 Apr 2025 22:00:22 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:22 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:22 +0000
Files and hashes:         1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: 0CjeFdtPwBHbCPdh4F3B9/Aom96/8bHaq0/sim6fEX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:a6:f7:e0:d1:3f:29:88:d3:33:b5:59:e6:bc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
        Validity
            Not Before: Apr 26 22:00:22 2025 GMT
            Not After : Apr 27 22:00:22 2025 GMT
        Subject: CN=9fcf7510c5c505a854265d9edc887e48b9b65ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:ba:4a:30:64:8b:3f:9a:f7:f6:6a:fc:09:
                    15:3d:7c:e6:14:7a:7a:ed:67:8a:23:11:9f:59:6a:
                    67:78:70:e9:33:7c:b1:83:49:47:ba:64:28:da:2f:
                    c7:8e:de:13:bb:00:43:ae:12:16:ba:56:35:cf:96:
                    09:72:37:09:91:cc:cf:7a:1c:d9:62:06:d9:e5:1a:
                    a8:f6:87:cd:ca:bb:67:7a:67:30:a9:84:ce:98:52:
                    19:56:e9:e2:46:23:83:2d:c4:5e:d9:e2:fc:9e:c7:
                    c9:66:8c:52:83:52:61:e6:32:c9:c6:61:27:a2:3e:
                    1a:8b:06:ec:e1:2d:8f:7d:e3:e2:02:a1:86:f9:55:
                    98:2f:ae:58:37:be:68:0c:39:db:82:17:3a:38:e2:
                    f4:b0:ca:d4:08:1e:6f:19:4f:85:92:bc:a2:fc:fb:
                    26:c0:23:5e:5e:0a:ad:c2:02:96:a6:9c:59:28:5f:
                    39:0e:bc:0a:45:b5:11:ac:cc:4f:c5:b9:55:8d:a5:
                    57:19:f8:40:07:ce:a0:f2:58:f6:e0:b2:d5:b5:de:
                    ba:21:9c:a1:ae:63:d6:cc:8d:0f:ed:46:d0:92:5e:
                    d9:73:9d:63:85:b6:39:3c:ce:9b:1c:a4:14:42:62:
                    4e:b6:af:59:55:d3:ef:42:d4:0d:e3:84:04:3c:f8:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CF:75:10:C5:C5:05:A8:54:26:5D:9E:DC:88:7E:48:B9:B6:5C:E2
            X509v3 Authority Key Identifier:
                keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:78:c5:90:ea:d8:de:bc:7c:6f:4f:4f:f4:60:52:50:08:
         1c:a0:03:ed:ae:ee:fa:c8:f9:fe:35:02:41:2c:b3:f3:8a:25:
         b2:86:1b:08:07:b1:fd:e1:1a:d0:d9:e6:ec:41:f5:2c:63:3d:
         8c:af:ed:b2:ac:63:4c:08:7b:ba:0a:96:11:4b:44:10:43:8a:
         56:03:f3:09:74:79:1c:79:53:35:39:70:88:47:3a:2c:ba:31:
         3b:f3:3a:9c:2b:34:70:7b:95:51:60:4a:07:c0:4c:56:f1:80:
         e3:d4:4d:02:2e:77:57:fb:6c:d4:02:f1:da:c2:0b:ef:fd:c1:
         96:93:ec:b8:4b:b4:73:64:2d:ed:8f:23:40:69:f2:6a:be:43:
         e2:2c:f1:60:a2:fd:cb:b0:e1:55:01:2d:0e:f6:36:59:49:a2:
         8e:14:5a:6c:1c:e9:27:45:e1:ce:32:39:df:ee:f1:9c:36:07:
         a9:5f:8f:e9:01:b8:0d:87:93:62:64:1c:48:f1:ef:61:1e:dc:
         30:2a:b8:c8:df:fd:45:05:41:50:33:c7:6f:5b:55:b6:35:d1:
         83:c7:4a:ba:ff:7b:57:bc:a6:76:0c:39:c7:39:2a:1f:73:02:
         1f:ed:a3:2e:4d:6e:2f:cd:60:7c:fa:8c:1a:d1:bc:cf:d0:3c:
         48:a1:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:15 2025 by rpki-client