Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          uus0tVsCk1P3jon7HvkhEsRvFLml0tyVTK70WsJf1NM=
Subject key identifier:   69:6D:46:85:00:3C:0D:96:4F:C6:12:B7:78:EF:7D:3E:C8:0E:2A:CE
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       0196CE060C8FCA344DE1934D38FA7790C129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          1539
Signing time:             Wed 14 May 2025 09:00:25 +0000
Manifest this update:     Wed 14 May 2025 09:00:25 +0000
Manifest next update:     Thu 15 May 2025 09:00:25 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: 7YykeTG4EL//c3/9qD48hh2UCVuYbr5RnrNOSxEx++k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:06:0c:8f:ca:34:4d:e1:93:4d:38:fa:77:90:c1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: May 14 09:00:25 2025 GMT
            Not After : May 15 09:00:25 2025 GMT
        Subject: CN=696d4685003c0d964fc612b778ef7d3ec80e2ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:72:a2:42:f6:8a:12:f9:5d:bd:87:17:44:
                    d1:bb:d4:c9:8b:f1:36:7d:a4:84:f6:b6:04:d4:db:
                    25:c7:0f:ae:f2:08:67:04:97:e3:b9:86:7d:9b:cd:
                    c2:02:db:63:6e:20:10:19:5c:76:5e:b7:f1:5b:bb:
                    27:67:4a:29:b9:1d:e2:72:c2:5c:92:bc:ca:57:a2:
                    f4:4f:20:fa:68:a3:81:57:1c:fc:9b:a2:c8:d9:cd:
                    f2:07:f1:e5:25:93:e5:56:16:94:a3:4d:fb:a8:52:
                    79:43:97:c3:33:98:18:2c:43:77:a6:07:40:5c:c4:
                    d3:d0:1f:be:95:cd:62:06:f4:75:25:3c:c9:fd:b5:
                    db:46:0a:e2:ba:90:71:a4:b7:e7:8a:c7:4f:1a:51:
                    bb:a1:9d:d6:9f:c3:e9:ab:b7:b1:1f:65:2f:5a:18:
                    20:c8:55:b7:bd:af:80:ff:9e:e0:0b:e2:6f:d5:ed:
                    a3:84:4c:19:3c:17:8e:5c:3d:ef:68:dc:c7:be:90:
                    6a:50:c7:1b:f8:d2:48:34:6f:d5:d3:bf:d3:5f:7e:
                    29:d8:ce:f2:d8:28:90:e4:fd:1e:0f:84:5a:8a:6f:
                    bf:67:16:5b:55:dc:12:1b:66:6d:6d:6e:0e:41:d7:
                    13:5a:ba:15:46:90:1f:88:0f:19:26:30:85:77:5f:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:46:85:00:3C:0D:96:4F:C6:12:B7:78:EF:7D:3E:C8:0E:2A:CE
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:13:1f:ba:bf:49:27:3c:56:0e:1e:49:5c:e8:76:93:7b:02:
         e4:43:c7:89:df:44:fe:eb:2c:27:ed:63:cc:e3:8a:67:34:23:
         fb:76:ce:72:01:6a:85:a2:10:0f:10:41:5f:b8:66:8b:d2:e9:
         f7:cd:d1:2f:62:49:6f:1e:9e:a2:6e:96:3b:a4:32:04:bd:87:
         a6:42:16:a1:58:7c:26:7c:4b:cd:c1:a3:62:6b:c7:7f:ec:0f:
         fc:e1:9e:7a:89:0e:c1:a0:0b:fd:44:09:c5:7b:1e:b7:f5:97:
         8e:45:17:51:3e:86:84:9e:c3:cc:f7:68:96:00:13:1b:c4:af:
         c0:90:e7:2c:b1:02:78:21:77:83:0d:27:a5:86:c9:b8:85:1c:
         ec:2e:9e:db:3e:59:77:d5:a2:8c:46:76:eb:54:c9:2c:62:ad:
         4c:20:13:59:07:53:1c:6d:8a:55:50:a9:bd:de:7c:34:5c:ba:
         95:8b:49:e4:9a:d3:e0:8e:fb:d7:61:4f:32:7c:52:a8:cd:2a:
         9a:da:ab:60:e0:1f:c7:02:40:a2:96:d2:69:02:46:1d:4c:ba:
         b9:2e:f9:02:a7:c5:13:51:b3:2f:ff:4a:aa:2e:ba:72:cd:4e:
         e9:8b:5a:50:0c:18:a5:b3:80:c5:b5:3d:7b:fd:8a:6c:97:a4:
         97:e4:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:05:03 2025 by rpki-client