Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
File:                     ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json)
Hash identifier:          RSR4KihCjQQzCgPI+3CKJNhq3GK5xJVCHZ90Yn9nMa0=
Subject key identifier:   35:8E:90:A8:2A:71:81:A8:B2:BC:BC:C1:65:E1:4C:1E:68:35:A6:E7
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       0196D1AC0F5378E9197A964AEC5B13EC7DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
Manifest number:          32
Signing time:             Thu 15 May 2025 02:00:36 +0000
Manifest this update:     Thu 15 May 2025 02:00:36 +0000
Manifest next update:     Fri 16 May 2025 02:00:36 +0000
Files and hashes:         1: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: fngqwJeh6DGeHJTFHDbVO0QughQVlhNj16Cbbyta6zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:ac:0f:53:78:e9:19:7a:96:4a:ec:5b:13:ec:7d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: May 15 02:00:36 2025 GMT
            Not After : May 16 02:00:36 2025 GMT
        Subject: CN=358e90a82a7181a8b2bcbcc165e14c1e6835a6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:a8:c2:72:2b:82:35:ea:a2:c2:db:d3:b8:
                    6b:2c:f8:4a:2a:fe:aa:c1:b5:ae:0b:7a:bd:61:13:
                    83:6f:8a:2b:3c:f3:3a:65:af:6a:63:fc:30:e3:b5:
                    14:5f:62:40:c9:50:f6:ae:4f:34:15:b1:d1:55:1a:
                    d0:6a:00:ee:64:23:e3:e2:da:d3:24:44:1f:72:df:
                    27:c0:92:02:d3:33:d1:a7:b1:6b:c1:c5:92:88:b5:
                    de:b1:d2:b9:e2:15:c4:b0:80:2d:31:4c:76:59:94:
                    ea:2e:69:b0:65:a8:76:11:26:be:1c:62:bf:67:22:
                    bf:41:e4:0a:f0:21:ab:31:b0:b5:c2:84:72:7b:28:
                    90:ac:f6:64:4c:27:fa:9a:5c:d6:8c:3e:fd:1f:0c:
                    74:53:6d:96:7a:d0:6f:76:ee:a0:86:4e:28:ba:3c:
                    07:5d:33:2f:66:7b:b8:46:4a:cc:33:48:37:ff:32:
                    0f:2a:ca:d1:bf:42:db:64:6a:25:91:5c:e1:05:38:
                    75:97:26:8f:5a:5c:19:e4:f2:48:e7:60:3a:4e:18:
                    fc:1b:34:67:ea:91:3f:16:7d:a6:d4:1b:40:aa:e7:
                    22:c0:8e:d2:8b:ec:a0:35:0c:f7:2f:4f:62:e3:9f:
                    81:84:2b:15:10:c7:9a:b0:88:53:56:a6:d8:17:b9:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:90:A8:2A:71:81:A8:B2:BC:BC:C1:65:E1:4C:1E:68:35:A6:E7
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:a3:45:8e:2b:fe:d2:8d:5f:8f:11:25:11:95:e7:b1:48:c6:
         b3:cb:5c:85:d0:41:86:ad:d9:9b:a3:e6:ce:1b:bc:10:80:13:
         ca:48:4f:91:05:2a:01:08:e0:b2:46:ac:95:c5:bf:3a:59:36:
         18:cc:c6:d9:4f:6f:10:85:36:6e:80:3d:33:88:d8:0c:ae:29:
         8c:52:0a:c1:9c:d8:47:80:74:74:9d:22:14:12:80:10:61:df:
         9b:64:82:2f:de:62:6e:df:df:5b:06:ec:46:c4:7a:8c:c5:d7:
         d4:41:b3:f3:00:4b:31:28:7d:a7:5f:26:13:36:87:cf:60:5d:
         54:72:a9:61:8f:cb:ee:ff:da:74:7c:13:d2:33:b9:3a:46:17:
         63:ce:ed:38:95:83:ca:0d:e0:c9:36:68:28:1a:f5:32:d6:f6:
         ca:5f:8a:08:83:ce:08:6e:c1:2f:2e:e4:ec:b6:97:78:d9:16:
         1c:40:0e:91:f6:d8:67:f3:35:b6:71:5f:65:19:81:c1:7c:96:
         a1:e1:05:fb:bb:34:4a:1e:bf:d9:31:b3:31:5f:5e:ee:8b:db:
         30:b0:02:48:ff:db:bd:8f:d1:7f:19:56:58:4f:97:62:12:5e:
         4d:a9:a2:dd:ed:6f:26:97:8b:a0:1f:b0:04:de:bb:fe:f4:0a:
         d4:bb:db:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:56:04 2025 by rpki-client