Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
File:                     skFYMFfyBWPJOCuJTx_OrKVfvaM.mft (raw, json)
Hash identifier:          lRusNK3BaK5L8CHTtPC6vBuJaGX3ihDojDguTiLwq/E=
Subject key identifier:   00:A6:98:A9:AB:EC:06:A9:D8:47:C4:43:FD:42:C0:A7:5E:01:8F:1D
Authority key identifier: B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
Certificate issuer:       /CN=b241583057f20563c9382b894f1fceaca55fbda3
Certificate serial:       0197B7EA2F2896FD8B14B5474474DB6EB0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:07 +0000
Files and hashes:         1: skFYMFfyBWPJOCuJTx_OrKVfvaM.crl (hash: 9yzqBd7SvNn6DvkyOt6AaQt8oONINi6ZgR+ALIBm+pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:2f:28:96:fd:8b:14:b5:47:44:74:db:6e:b0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b241583057f20563c9382b894f1fceaca55fbda3
        Validity
            Not Before: Jun 28 19:01:07 2025 GMT
            Not After : Jun 29 19:01:07 2025 GMT
        Subject: CN=00a698a9abec06a9d847c443fd42c0a75e018f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:dd:9d:44:8f:31:f1:fc:9b:57:96:fd:8a:
                    bd:c0:27:98:5d:e0:36:db:c2:7c:2d:a6:9d:5b:bf:
                    73:0c:7f:e3:59:5a:60:bd:9f:08:6c:f4:93:4d:b4:
                    ac:a4:f6:87:31:17:f4:2d:75:be:51:d8:b3:ff:d3:
                    10:e0:46:a6:17:a9:ea:63:c5:d2:3a:30:c2:e8:a6:
                    e0:8c:39:75:bd:b8:d7:b8:b0:48:83:33:4f:48:c0:
                    47:7d:29:4b:f6:96:65:4a:3f:cb:0f:cb:89:1e:ea:
                    58:56:3a:03:d9:12:27:2c:21:c3:2c:46:79:a7:1c:
                    07:54:53:61:29:7c:7b:3a:8f:18:ff:1c:67:a9:2a:
                    72:f7:35:ea:12:cb:35:55:91:13:8c:ca:11:4d:4b:
                    15:07:e3:08:e7:0b:d1:d1:5b:32:40:fb:73:a4:d5:
                    b1:af:e6:88:a0:15:a1:26:42:33:20:9d:fa:79:07:
                    44:7f:2a:79:76:d8:98:96:ed:0f:d0:cc:b4:8f:91:
                    b4:bb:af:5b:3a:3e:1a:a8:c2:b4:00:45:72:c3:06:
                    53:27:21:42:cd:0f:cd:db:f1:95:75:58:c5:f0:60:
                    24:e5:95:7e:f4:52:68:ca:a6:d2:ec:7f:03:fa:a9:
                    ea:17:cc:9f:eb:20:d4:19:7d:8d:e5:10:fd:0d:25:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:98:A9:AB:EC:06:A9:D8:47:C4:43:FD:42:C0:A7:5E:01:8F:1D
            X509v3 Authority Key Identifier:
                keyid:B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a9:19:b5:e4:fa:40:8a:0d:09:c5:57:a4:f1:1b:a1:b9:06:
         6f:cb:f3:bf:c5:b5:2d:51:f3:0e:2c:87:af:7c:21:5d:7a:a6:
         37:6a:24:2c:76:77:03:87:cf:68:0d:f4:b5:e9:7a:36:dd:ae:
         27:36:09:10:fa:9b:73:67:e9:eb:a7:99:a1:a0:e3:96:96:ae:
         2c:4b:ee:67:5b:be:d3:44:23:b4:cb:2f:de:a2:a2:0f:cd:a2:
         16:46:18:19:1b:f9:dc:b4:2d:db:09:9f:a4:af:b0:b4:88:5f:
         da:bf:a6:98:41:2d:ed:0e:a0:1a:05:c3:e1:f1:b2:1a:9b:c0:
         cc:a8:28:31:99:4a:bf:11:94:77:4a:b8:2a:ff:b5:f7:92:0f:
         b3:fc:cb:d9:27:34:b1:83:fb:e4:21:71:28:5c:4b:7c:bb:be:
         e1:18:cc:89:5b:10:40:5c:4e:20:d2:59:a0:49:a5:57:32:0c:
         94:34:e4:2a:a1:10:02:19:4d:8e:c2:fc:02:60:98:65:45:ff:
         e5:d9:55:98:91:65:9f:bb:ad:d6:80:2e:3b:2f:26:85:62:85:
         15:8b:80:c7:1a:22:ac:a1:8d:fa:da:26:6c:e9:89:f3:08:76:
         35:2a:8a:bc:b1:8e:31:e8:23:09:31:df:17:a2:22:6a:22:1b:
         2b:b6:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:21:30 2025 by rpki-client