Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File:                     _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier:          Ujv3mPz5NM/dl8wIIys8lp2AsC2Ynuecf6gNeOx/vYQ=
Subject key identifier:   51:EC:2E:D2:3F:EF:C6:B0:AA:61:8A:2F:13:75:F4:F9:12:B7:AA:54
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer:       /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial:       0197782F3195604F93470A4101EC9F91E30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number:          1592
Signing time:             Mon 16 Jun 2025 10:00:48 +0000
Manifest this update:     Mon 16 Jun 2025 10:00:48 +0000
Manifest next update:     Tue 17 Jun 2025 10:00:48 +0000
Files and hashes:         1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: mRd2haUqosRUazozQIsRBcJVuTwIAfLdk+MJ+Vpmv68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:2f:31:95:60:4f:93:47:0a:41:01:ec:9f:91:e3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
        Validity
            Not Before: Jun 16 10:00:48 2025 GMT
            Not After : Jun 17 10:00:48 2025 GMT
        Subject: CN=51ec2ed23fefc6b0aa618a2f1375f4f912b7aa54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:e5:c4:1f:4d:f1:ff:3a:fd:c0:aa:b6:0b:
                    e3:46:96:e3:fe:c7:52:a8:02:6c:6c:cd:c5:48:25:
                    2e:42:8d:f1:54:bf:a2:eb:50:3f:f0:27:6b:be:fb:
                    c7:10:21:93:79:8d:fc:a0:47:e0:7d:3e:66:a8:7c:
                    c2:ec:6c:2e:c1:5f:f1:96:d5:96:3d:00:c3:18:38:
                    60:e3:86:9b:52:8a:fb:76:1f:7b:ca:22:ea:71:bf:
                    5d:38:9f:05:5a:38:cb:07:05:bf:9f:d5:1a:cd:8e:
                    dd:bc:3c:d3:73:46:5d:84:d0:68:20:2c:8d:1f:e2:
                    7c:23:c2:9c:3e:32:95:f5:8c:34:02:8e:59:db:a5:
                    82:92:02:10:42:81:d3:1e:90:12:55:a7:66:10:4d:
                    1e:24:d0:5d:81:a8:d8:91:60:47:49:b2:fc:cb:76:
                    14:14:8e:d7:d9:c0:47:39:b3:0d:a1:c7:41:c3:3e:
                    dc:89:0e:f6:df:b1:fb:29:d8:42:e8:63:59:61:6c:
                    cd:49:99:95:bb:0a:7c:9b:0c:96:82:a9:22:b8:22:
                    f9:13:94:2c:47:0c:4f:94:cc:fa:f6:f7:34:4f:91:
                    cd:99:1e:e5:ef:73:5a:fa:3b:25:ea:db:66:11:0c:
                    aa:86:af:1c:97:7b:28:8b:22:22:53:30:f5:d9:58:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:2E:D2:3F:EF:C6:B0:AA:61:8A:2F:13:75:F4:F9:12:B7:AA:54
            X509v3 Authority Key Identifier:
                keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:b7:51:5d:46:d8:d5:37:2b:95:63:26:77:5b:00:f6:43:
         01:09:11:e4:42:39:ba:12:4b:4f:c9:d1:af:42:5f:2d:16:1d:
         62:63:ea:14:ba:a5:a2:73:80:0e:7a:19:22:60:e6:d8:f9:3c:
         08:6c:16:3a:f4:90:80:5f:75:d8:46:ab:da:23:a6:de:78:83:
         7e:06:1f:d6:4c:b2:a8:21:cb:da:08:17:5e:f6:d2:eb:fb:e0:
         6f:f7:a8:8e:82:7e:68:82:54:10:0d:b8:f5:fc:d3:8a:e1:90:
         28:04:b2:4f:e9:f7:0a:5b:b1:b0:d6:7c:47:06:a0:e4:05:66:
         26:52:0e:2b:5f:82:3d:9f:d7:23:26:c4:6f:ad:12:8c:3b:65:
         9d:20:41:6d:79:8e:54:eb:20:2e:ae:b3:99:8b:de:3a:b8:29:
         b4:b1:82:32:e4:6d:0b:b0:d4:5a:2b:54:9b:41:5b:b2:3c:ef:
         6d:ee:21:96:d7:65:dc:56:c9:f8:13:13:7f:57:90:3d:fc:96:
         cd:d3:cc:89:aa:04:71:74:1a:55:73:56:bf:63:df:9a:7e:91:
         06:a1:d6:c8:d2:4d:17:43:77:36:66:62:ee:4a:7a:a5:79:f2:
         88:1d:4f:a3:68:5c:ac:66:a7:21:13:7a:df:48:96:62:b5:bf:
         3b:a9:87:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:47:51 2025 by rpki-client