Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          20Azw5O3S+cvS2DxXZkJLZBL2TODZ+uULzFc7hsKZe8=
Subject key identifier:   CC:3F:D3:F7:7E:79:A7:08:4D:6F:72:56:63:31:47:02:5F:8A:E3:DB
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       0197B6A12017773B2499364CC5959BAB78E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          15B0
Signing time:             Sat 28 Jun 2025 13:01:42 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:42 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:42 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: nEqEzVW4KK8EvXqZqXXLirBfsMdPh115DQ8HF6OBBcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:20:17:77:3b:24:99:36:4c:c5:95:9b:ab:78:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Jun 28 13:01:42 2025 GMT
            Not After : Jun 29 13:01:42 2025 GMT
        Subject: CN=cc3fd3f77e79a7084d6f7256633147025f8ae3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:5e:53:cf:d6:f0:ef:16:27:0b:30:32:85:
                    3f:41:f5:ce:f6:e8:c9:81:e0:75:55:f2:75:95:9b:
                    2f:d3:0e:8c:fb:8d:b5:a1:7c:7a:27:fe:d0:07:bd:
                    bb:b0:b5:d6:65:d4:d8:ac:60:54:02:bd:ea:4d:25:
                    24:09:c0:0a:ad:bc:9a:eb:29:18:56:d3:3f:b6:75:
                    5f:ec:99:d7:6a:dd:e6:91:b1:93:11:5d:c2:06:f6:
                    da:af:a6:67:90:2d:0d:86:07:da:0c:a2:99:e5:c4:
                    2e:45:9c:7b:98:87:7c:da:cf:aa:b9:86:38:45:ab:
                    2e:7e:e9:ad:90:09:da:36:fc:bf:4c:b4:18:ec:6a:
                    14:1d:0f:b7:13:19:e8:8b:63:82:58:b9:ba:d1:ab:
                    1a:a9:ce:12:1e:a5:a5:ec:e4:30:a6:f4:ca:81:90:
                    26:8c:e5:10:2f:9c:00:58:8d:9a:45:9b:bd:bd:0a:
                    02:f5:fe:07:84:82:98:9d:07:b2:da:73:83:84:87:
                    83:1d:8d:43:49:0a:57:4a:8b:fc:70:2a:7a:e3:a6:
                    9f:4d:93:31:94:33:60:25:ce:8c:82:1d:5f:43:2e:
                    8e:85:a6:d8:7d:6e:27:37:89:1b:ef:1a:5d:58:9b:
                    0b:c0:4e:fb:ae:4b:fa:f4:d4:01:c1:33:3c:d6:2c:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3F:D3:F7:7E:79:A7:08:4D:6F:72:56:63:31:47:02:5F:8A:E3:DB
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:2a:26:2a:1c:6d:5a:91:1d:8b:79:45:a1:73:7b:05:ec:
         7d:54:9d:3b:d3:d2:8e:4b:28:91:78:77:c6:3d:58:22:86:61:
         8e:67:b1:78:cb:aa:5c:91:7b:74:46:42:98:4b:81:96:94:89:
         86:99:b3:24:03:20:7a:ee:f8:8e:aa:c7:3f:17:8b:22:06:9b:
         0c:48:3d:39:d8:78:33:5e:73:03:4d:77:85:ee:a8:62:0a:8b:
         b5:f7:fc:0e:f0:9f:e5:a8:b6:11:84:2a:47:0f:6a:4c:5b:24:
         93:42:a4:13:a3:e4:ca:ff:f2:67:4f:5c:ed:47:26:25:4a:a4:
         e1:1b:22:28:f1:eb:4a:b1:05:24:94:cb:14:92:f6:1d:8f:ae:
         4c:9a:7d:1b:e0:14:10:bf:5d:a0:4b:ac:2f:a6:4a:44:78:40:
         0c:86:51:96:2d:24:54:76:e6:a7:78:63:23:42:44:c3:ba:59:
         94:33:1c:6c:29:ab:b5:7f:1c:ba:14:ab:4f:10:40:eb:68:bb:
         13:58:e2:79:10:11:e8:da:cd:b2:73:aa:ac:19:b0:ad:82:92:
         2c:33:26:2f:6c:3e:cd:ff:ad:36:41:12:e6:d0:f3:15:9e:37:
         e2:8a:d2:89:dc:f0:c8:06:de:8a:b4:e7:d5:e1:ca:bd:a3:78:
         89:cd:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:30 2025 by rpki-client