Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File:                     fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier:          6P2FYRJrqMbQCOrRwLb4gYtfeNG7K0uUEnGYyg/WwKs=
Subject key identifier:   59:24:68:B6:D1:3A:E3:3D:65:FB:21:82:36:6E:6D:2D:98:85:91:64
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer:       /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial:       0197BA7ECA78F87E737FFC78ECA298FF5600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number:          115A
Signing time:             Sun 29 Jun 2025 07:02:40 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:40 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:40 +0000
Files and hashes:         1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: Sqpaq/kUmqJskcdV6xQe1Io9Bo8AGJgcNtZxZiAwcjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:ca:78:f8:7e:73:7f:fc:78:ec:a2:98:ff:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
        Validity
            Not Before: Jun 29 07:02:40 2025 GMT
            Not After : Jun 30 07:02:40 2025 GMT
        Subject: CN=592468b6d13ae33d65fb2182366e6d2d98859164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:e9:71:22:a3:37:d5:af:68:0f:85:d1:03:
                    0d:46:6b:ca:e1:cf:97:50:d9:79:8a:ac:cd:44:62:
                    77:da:db:35:22:77:05:ca:62:ed:47:ed:85:1f:3a:
                    41:5e:11:cb:51:55:18:b3:22:8d:59:17:f7:a5:28:
                    05:ea:e0:f0:f1:53:af:ba:83:44:3c:e3:08:38:06:
                    ba:a7:de:93:01:a9:9f:a2:3d:3a:8e:8a:22:2e:6d:
                    fc:4b:fe:9f:30:b6:ee:2d:79:4f:b1:02:88:2a:41:
                    dc:f1:9c:f6:d5:76:58:19:a9:90:15:8b:d8:39:06:
                    60:c8:43:8c:e9:16:78:5d:d7:82:7b:a0:0d:52:2c:
                    cc:dd:39:8f:60:18:4e:fb:b7:81:3c:cb:29:15:e5:
                    c1:33:3e:73:b8:b8:fb:8d:09:ec:c2:8f:84:ca:8b:
                    bd:82:ea:c4:92:41:5b:18:31:80:de:af:42:c9:be:
                    a1:10:04:8e:1c:20:a6:1c:21:79:d2:bd:07:12:12:
                    fb:81:fb:d7:50:43:a0:04:a9:2e:f2:f8:9b:62:76:
                    2c:be:cf:a5:90:8a:67:c8:e4:6f:41:69:15:40:a0:
                    e6:a2:e9:ff:67:ea:9b:fb:77:3f:5b:6f:94:de:03:
                    28:26:e1:db:aa:c6:7e:31:12:75:f3:61:c4:46:8a:
                    93:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:68:B6:D1:3A:E3:3D:65:FB:21:82:36:6E:6D:2D:98:85:91:64
            X509v3 Authority Key Identifier:
                keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:66:84:a6:5b:f7:a9:e9:05:b4:28:c9:1e:cb:3b:e8:ab:65:
         e6:b8:1d:ad:3a:be:c5:b0:f1:cc:9c:9b:20:a1:83:0c:5e:c0:
         d5:e3:d7:de:ca:a5:00:92:12:ac:68:9d:98:05:e5:23:73:92:
         c7:ab:96:95:d4:f0:05:82:68:21:07:5d:ee:dc:fb:75:36:96:
         41:37:ac:86:1f:a7:26:f2:16:55:b0:7e:57:48:25:4c:85:91:
         88:a6:3e:cb:52:c2:5e:64:9d:59:af:2e:d4:d9:b6:f5:c3:41:
         88:16:ed:72:35:be:cf:86:c0:51:7d:be:2f:c6:50:5a:e5:cd:
         6e:fa:43:98:21:23:50:30:8b:3a:6b:23:04:fc:ef:6e:40:03:
         3a:fd:9a:d7:c6:f9:ee:76:70:59:1d:c8:90:b9:b6:a3:f7:bf:
         5b:b5:aa:6b:9f:f2:ee:d7:64:e9:87:67:e0:db:91:f5:30:b1:
         35:fb:4b:ca:79:dc:1f:6f:24:e9:b1:13:1a:50:2b:de:76:b4:
         4a:1f:4a:aa:5c:d3:ce:1e:cc:2a:70:5f:16:22:f3:09:d2:22:
         9f:86:bf:90:57:14:3d:d3:53:f5:07:b0:b3:c2:37:1d:f3:e8:
         67:f2:ce:5f:8f:9f:46:6a:b8:0f:a1:91:35:72:c1:18:4a:85:
         f3:f3:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:56 2025 by rpki-client