Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
File:                     fylmV6-NAMJf119W7MiiizUVBXU.mft (raw, json)
Hash identifier:          YMuLArIxulP85Y3I75biiEC+2R9yLXxKszhyjcAjYYQ=
Subject key identifier:   A8:13:2C:C8:74:5F:D3:C6:10:2C:81:3D:70:07:91:58:B7:11:4C:33
Authority key identifier: 7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75
Certificate issuer:       /CN=7f296657af8d00c25fd75f56ecc8a28b35150575
Certificate serial:       0197B7454EFD94E1C4EE54AFF3849B83E880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
Manifest number:          0EEA
Signing time:             Sat 28 Jun 2025 16:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:02 +0000
Files and hashes:         1: fylmV6-NAMJf119W7MiiizUVBXU.crl (hash: i7m/UqD5EGWQMSZ804hKlbj73gu+q7ZFt0aHoDXi0es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:4e:fd:94:e1:c4:ee:54:af:f3:84:9b:83:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f296657af8d00c25fd75f56ecc8a28b35150575
        Validity
            Not Before: Jun 28 16:01:02 2025 GMT
            Not After : Jun 29 16:01:02 2025 GMT
        Subject: CN=a8132cc8745fd3c6102c813d70079158b7114c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:56:07:a5:7c:de:04:0f:f3:d7:a0:03:86:
                    e7:fe:b5:1c:22:ce:83:e6:64:1a:db:fd:8d:51:14:
                    b6:3d:4a:03:01:c4:4e:26:82:53:b5:f2:c1:3a:3b:
                    8a:5f:6c:4f:72:03:ba:cf:68:84:80:63:9a:ac:b6:
                    c5:1f:8b:9e:ec:c0:9d:fb:a3:ab:90:00:76:48:a5:
                    d7:c7:55:a7:f3:1f:b0:63:af:1c:ba:dc:82:95:8a:
                    9e:7d:51:6a:4c:03:de:70:40:c8:b4:37:19:8a:3e:
                    72:67:11:46:1b:68:aa:f3:72:7c:6a:d4:b6:8e:f0:
                    08:9b:b0:be:13:d1:5f:e8:07:bc:4b:6a:34:bb:b2:
                    25:68:44:33:f7:cb:15:a5:0a:94:19:1f:3b:39:77:
                    53:c0:94:de:ad:88:d0:91:df:0f:49:6e:ab:cc:c8:
                    34:2a:3f:e5:a4:17:cd:d3:c3:c5:61:10:e8:7e:39:
                    88:50:eb:0a:d1:c2:ce:66:90:df:bb:a3:7e:ca:17:
                    30:07:3c:ee:d4:fc:64:bc:cb:0e:7f:72:42:1b:9d:
                    b9:45:58:70:85:54:c9:6e:c8:a9:36:58:e9:f5:01:
                    49:e7:48:bb:01:be:31:30:32:33:80:d6:0a:42:ce:
                    3a:15:4a:94:b0:6b:de:ed:e5:1b:10:62:8b:a2:f8:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:13:2C:C8:74:5F:D3:C6:10:2C:81:3D:70:07:91:58:B7:11:4C:33
            X509v3 Authority Key Identifier:
                keyid:7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:95:f0:d6:bd:09:b3:82:f0:e1:ca:46:f5:9d:d9:36:17:fd:
         db:93:5c:f6:00:e2:83:03:00:5d:79:25:df:e0:96:86:70:d3:
         d9:63:a4:38:31:ba:4c:b3:32:0a:85:17:f9:e7:df:fa:ed:77:
         7e:dc:95:af:f9:24:84:86:20:52:18:da:ea:b6:2a:02:c4:a8:
         0c:19:e3:8e:5b:51:78:83:ff:0d:a1:ed:3d:32:2b:ea:e5:14:
         65:fc:30:f4:da:75:63:3a:8f:94:68:d9:11:10:07:dc:5a:f0:
         1a:96:b5:4f:48:be:5d:24:9f:6c:6b:20:4a:45:d4:d2:6a:f9:
         4c:4e:a3:6a:df:ae:61:57:99:a4:01:71:6e:22:e1:8a:f6:2a:
         1b:7f:71:a5:fa:e5:4b:0a:09:f8:dc:27:d1:05:bf:df:31:55:
         3e:e5:f9:a0:07:5b:fb:bb:59:fe:a0:02:2d:aa:01:37:cd:da:
         79:4b:7b:ee:4a:52:b8:2b:39:fe:78:fd:16:f4:32:0c:50:24:
         a6:d7:04:a4:9f:f8:f0:6f:90:5b:1e:33:c5:cd:49:d2:11:1a:
         5a:c9:74:4b:5f:c3:c7:d8:b6:c4:99:a3:3c:ad:77:92:a9:59:
         ea:94:65:6b:34:54:3b:f1:e2:ce:3b:94:01:db:dc:8f:9b:06:
         ac:77:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:09 2025 by rpki-client