Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File:                     Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier:          YNVqx4gujFrmkg/BPb1P7ElcU6qfVHbBeD4WNNfi81s=
Subject key identifier:   40:F6:56:C6:D8:CE:22:B0:75:6D:DB:51:50:BB:D8:5A:98:41:2C:8E
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer:       /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial:       01968391A8BEAE5969A5BB8E6AFD95474982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number:          1512
Signing time:             Tue 29 Apr 2025 22:01:23 +0000
Manifest this update:     Tue 29 Apr 2025 22:01:23 +0000
Manifest next update:     Wed 30 Apr 2025 22:01:23 +0000
Files and hashes:         1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: I1n/plnJ2WWPkfjDADVERxxcFio9MSqPm+m1VbI0xbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:a8:be:ae:59:69:a5:bb:8e:6a:fd:95:47:49:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
        Validity
            Not Before: Apr 29 22:01:23 2025 GMT
            Not After : Apr 30 22:01:23 2025 GMT
        Subject: CN=40f656c6d8ce22b0756ddb5150bbd85a98412c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:cc:b2:d5:15:19:2d:62:0a:c4:53:8f:1a:
                    39:e0:8e:75:63:c2:9c:22:2c:fe:e1:cb:0b:b9:d8:
                    b1:38:24:7a:da:37:b1:78:d8:d5:a2:e6:bf:d0:cf:
                    e2:67:42:ba:0a:fa:b3:b4:ec:0e:43:6a:1d:b7:f0:
                    ac:6a:4f:d4:90:32:4a:fa:12:38:ef:f1:f2:7b:e5:
                    ab:f6:70:02:65:ba:91:d5:05:ce:13:4e:dd:fa:76:
                    88:9a:90:1d:35:27:70:1d:33:c5:bf:20:0a:de:2c:
                    0c:14:d6:01:9a:37:cb:d6:be:12:34:b5:9d:23:4d:
                    3a:1e:f5:b9:5a:77:50:10:80:fc:7a:50:35:24:13:
                    6e:50:4c:a0:ee:2c:ff:fa:c0:1f:b1:90:ac:81:05:
                    ee:fc:f2:61:7f:17:20:8d:2c:44:b8:a2:31:92:48:
                    d8:19:da:d9:13:8d:b4:76:3d:da:a9:0d:9f:40:5f:
                    40:02:ee:88:ef:6a:86:44:9a:ba:61:88:35:e6:33:
                    d9:62:d2:72:f7:14:16:08:c0:33:69:39:a1:de:44:
                    c2:64:a7:84:b6:ed:f7:01:fd:dc:61:f4:86:01:b0:
                    4f:1d:05:d7:4b:e6:fc:c3:40:81:4b:09:33:43:d9:
                    67:49:c2:68:48:e9:64:ce:54:0c:aa:f4:23:25:f2:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F6:56:C6:D8:CE:22:B0:75:6D:DB:51:50:BB:D8:5A:98:41:2C:8E
            X509v3 Authority Key Identifier:
                keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:9d:99:2d:62:43:80:e8:d5:00:bb:02:f9:d8:a7:43:61:dd:
         d5:db:cb:20:cc:73:d1:1b:38:c9:66:a3:71:12:61:38:32:36:
         37:cc:3a:89:89:9a:39:50:8e:27:ce:e4:85:1a:25:bd:74:6f:
         26:9b:3d:a8:09:e3:e0:43:0f:7e:19:ab:b1:89:6a:27:44:61:
         de:2d:3f:f7:2d:7b:f2:29:21:76:2f:b3:2a:fc:43:02:92:17:
         62:e2:75:73:64:e5:79:fb:82:18:4a:ea:ab:e5:1c:b8:56:4a:
         87:2c:99:36:e7:d2:a5:b5:3d:17:2d:38:96:75:b4:94:09:17:
         04:dd:38:1f:29:b0:0f:f5:8b:42:cb:db:f6:33:c2:34:94:78:
         8e:20:e2:03:8e:ac:a4:47:74:e7:09:4a:16:f7:2f:3e:9c:95:
         39:a9:aa:87:a0:85:e0:c8:61:20:88:aa:e0:ff:29:1f:e7:f2:
         48:d7:fa:cc:2c:c7:c7:7a:40:66:89:c2:10:20:c3:cc:80:69:
         f2:b3:c5:01:7c:2e:2e:6d:5b:97:85:9b:b6:1f:89:62:cd:2d:
         5a:f6:af:e0:1d:02:56:0f:40:28:9a:48:25:60:6a:9d:25:80:
         25:30:52:02:89:ab:68:e2:68:0c:9e:4a:a2:69:9d:17:fa:99:
         62:8b:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:44:48 2025 by rpki-client