Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File:                     F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier:          MAJPG6Z1DmPpQYpKebLgUmugVhysUNQdhOdmeOikAQo=
Subject key identifier:   92:84:8C:F5:8E:19:D2:81:27:79:B9:A6:AD:53:8A:22:31:56:DA:DA
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer:       /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial:       0196B28F60F22CBC4C5C7BD92D5C68F6B797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number:          152C
Signing time:             Fri 09 May 2025 01:01:02 +0000
Manifest this update:     Fri 09 May 2025 01:01:02 +0000
Manifest next update:     Sat 10 May 2025 01:01:02 +0000
Files and hashes:         1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: bkrNvgVjWu2yOMHqwZJ709/UF56S4cEP8WQRTd13NI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:8f:60:f2:2c:bc:4c:5c:7b:d9:2d:5c:68:f6:b7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
        Validity
            Not Before: May  9 01:01:02 2025 GMT
            Not After : May 10 01:01:02 2025 GMT
        Subject: CN=92848cf58e19d2812779b9a6ad538a223156dada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:00:2f:7e:f1:fa:9e:66:4d:45:76:b2:21:
                    5d:53:30:cf:64:9a:8e:ca:b7:3f:ff:fe:ed:3c:a3:
                    71:46:d9:20:59:94:b6:a7:8d:42:c1:df:3e:ae:b5:
                    36:62:40:65:c1:b5:3b:0f:3c:ec:e3:63:84:6d:c9:
                    b9:1a:60:84:53:45:10:1b:33:fa:db:3a:df:4a:b5:
                    7d:5f:de:a5:86:fe:5a:50:e0:3c:f8:0c:7c:8d:ea:
                    30:ed:b0:4c:59:34:94:5c:5d:99:45:5a:51:8b:ca:
                    14:b4:8b:75:08:f1:bd:cc:ff:df:3f:7d:cf:99:3f:
                    ef:ef:7a:fd:f8:22:d2:7e:e1:05:8f:ed:73:39:4e:
                    64:59:4e:7c:e0:25:0b:f8:14:2a:f5:2a:a0:af:73:
                    94:ea:a5:ae:f4:f3:8c:74:56:57:5a:d1:cf:0c:fa:
                    5b:f9:46:a9:fe:6d:ba:d8:54:c1:c9:cb:ef:36:74:
                    19:6e:40:11:2c:ce:d0:97:d3:58:62:42:55:cf:cf:
                    8f:6b:6a:e7:94:b2:78:66:d5:5b:8c:fd:1a:65:55:
                    45:a3:db:1f:6e:9d:a3:0a:7c:41:fc:17:99:fd:0b:
                    41:03:a2:61:4d:0b:3b:67:41:b5:95:57:64:8e:e6:
                    0f:7d:96:3a:99:18:2e:0e:5f:b0:8e:63:d9:02:3d:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:84:8C:F5:8E:19:D2:81:27:79:B9:A6:AD:53:8A:22:31:56:DA:DA
            X509v3 Authority Key Identifier:
                keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:6f:17:c0:d8:73:52:3b:70:b7:5a:59:a5:c7:ed:bd:43:
         57:8f:70:a2:3d:13:e0:21:25:82:72:82:62:8f:46:1a:6e:a7:
         c5:bc:1a:00:94:14:da:03:f4:64:00:eb:b4:32:0d:b9:90:73:
         df:bb:8f:60:09:bf:b2:85:d8:aa:04:e8:8d:15:91:1e:b6:76:
         c8:9e:54:0a:cb:34:5c:31:2b:83:89:11:4a:30:1b:62:c0:22:
         6b:b4:58:be:15:69:8e:ee:14:63:41:48:fe:90:d9:fe:6b:39:
         b3:af:a1:db:9f:ed:83:b9:42:f9:36:fb:09:06:9c:d9:6d:88:
         4f:25:fa:ef:65:9d:0c:04:ca:35:4d:88:b3:b5:b9:f8:ea:a6:
         f2:24:ea:55:47:19:c8:6c:c7:ea:96:0b:e0:63:78:9c:75:5e:
         63:42:d3:0c:cb:7d:18:d7:bd:9e:e7:6a:44:92:cd:9a:10:af:
         3d:bb:6d:a6:a1:99:7b:6e:58:0f:e4:74:28:5e:63:ee:fd:98:
         fb:5e:a4:23:19:a2:8a:e7:2e:8d:f9:4f:0b:d1:81:22:59:36:
         5b:2a:95:5f:4e:f7:70:36:5e:ab:49:dd:dd:50:d8:95:d3:ac:
         a6:93:b5:8e:18:44:d6:ed:c5:93:bb:c0:94:7a:1d:72:93:ce:
         75:c3:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:17:36 2025 by rpki-client