Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
File:                     fylmV6-NAMJf119W7MiiizUVBXU.mft (raw, json)
Hash identifier:          vu0y6AOtmocu8Hk+XrwBo97xRMF1P8+qa/VtuZegz5k=
Subject key identifier:   1E:8D:71:7B:F1:6E:84:B7:D8:73:D9:56:61:5D:49:2B:19:18:A9:82
Authority key identifier: 7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75
Certificate issuer:       /CN=7f296657af8d00c25fd75f56ecc8a28b35150575
Certificate serial:       0196A509F9D5267421BA173187104114B9AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
Manifest number:          0E5C
Signing time:             Tue 06 May 2025 10:00:16 +0000
Manifest this update:     Tue 06 May 2025 10:00:16 +0000
Manifest next update:     Wed 07 May 2025 10:00:16 +0000
Files and hashes:         1: fylmV6-NAMJf119W7MiiizUVBXU.crl (hash: xnycEyLLIjQhI1sB8/TxdvivXCb9R8dnxSJJlSHfygk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 10:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:09:f9:d5:26:74:21:ba:17:31:87:10:41:14:b9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f296657af8d00c25fd75f56ecc8a28b35150575
        Validity
            Not Before: May  6 10:00:16 2025 GMT
            Not After : May  7 10:00:16 2025 GMT
        Subject: CN=1e8d717bf16e84b7d873d956615d492b1918a982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:bc:14:61:e0:6e:67:af:c5:f3:df:11:5a:
                    4f:34:ec:44:0e:b5:61:0d:73:61:ec:97:de:5b:71:
                    85:13:41:76:f2:88:02:73:fe:cd:98:d2:16:fa:69:
                    33:4f:92:c3:32:5e:32:55:75:81:9a:02:92:a7:3a:
                    dc:93:fd:56:ac:f4:3b:b9:ae:cb:1d:1f:b3:45:46:
                    2e:97:7e:11:15:de:24:10:68:f4:18:e8:67:5f:99:
                    5b:0b:0e:0e:12:d4:18:79:8e:4f:f3:23:1b:75:62:
                    32:24:9f:dc:96:4e:51:52:58:7f:a1:5e:f0:9c:ff:
                    c0:6b:7e:83:df:0a:87:fc:5a:a7:f2:e5:58:d3:58:
                    ff:69:fb:3b:0e:2b:ab:89:89:81:21:0c:b7:07:2a:
                    84:46:d4:75:6a:03:23:ba:09:34:b9:95:3f:50:24:
                    df:1a:e9:2c:b6:60:87:95:ba:93:fd:9e:ba:6b:42:
                    ba:1e:7b:32:1e:52:13:aa:8c:31:50:dd:af:72:ce:
                    7b:c5:ec:b7:b0:4c:f3:2c:f0:f4:94:f3:58:0e:7b:
                    b6:06:2e:72:ed:87:b8:f4:5d:9b:0a:1a:6d:5c:ce:
                    88:c8:35:c4:84:ea:df:7f:05:e7:42:c0:d2:c4:a5:
                    e3:5c:a1:3d:c5:57:ab:11:0b:0e:c1:36:50:ca:3c:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8D:71:7B:F1:6E:84:B7:D8:73:D9:56:61:5D:49:2B:19:18:A9:82
            X509v3 Authority Key Identifier:
                keyid:7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:02:c4:7f:5d:7f:93:28:a4:a6:71:48:3d:ee:55:af:a0:2f:
         c3:11:3b:ba:ab:e0:4a:bc:52:70:a2:1b:87:a5:e9:4a:0d:10:
         51:de:c4:c7:66:b2:77:40:59:20:ae:a2:23:4b:6b:41:fe:6c:
         66:1a:0e:c0:21:0e:6f:b1:79:a2:7a:95:5d:ca:46:ab:bf:94:
         c7:8a:c0:32:95:75:07:d2:ea:bc:81:ed:59:a4:4b:1a:80:02:
         c8:7e:78:58:22:72:a3:cc:60:67:80:12:71:62:41:87:ff:e1:
         8f:34:cd:3c:4c:78:84:74:52:d7:a0:d4:1f:05:96:5e:71:60:
         7c:db:fe:35:92:b4:98:74:f4:ba:aa:29:b9:26:b4:b5:82:e4:
         9c:54:63:7d:bf:4f:73:5e:d7:47:ab:85:37:94:06:7a:ea:ed:
         dd:bf:f4:9d:10:fd:a0:82:73:a9:e2:79:21:d7:b0:40:f7:00:
         4f:a4:2f:35:e6:b3:13:84:51:22:f2:90:e9:62:f6:7e:df:4c:
         ff:08:4b:c4:f5:93:29:d5:48:07:62:0e:93:75:24:7a:ba:ea:
         16:a9:dd:c3:ab:a7:5e:b5:2c:1c:89:bd:74:64:7b:88:f7:fa:
         ea:5e:2f:64:6d:df:c1:29:e8:80:09:da:89:e5:6c:6d:37:13:
         14:a9:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:17:27 2025 by rpki-client