Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File:                     FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier:          NwIrecf5rqTDYOyaWd/PdUlyanuFKOqGdQ+HMD2RAzU=
Subject key identifier:   8D:1A:E7:5F:F6:E7:C2:48:D5:86:4F:8B:37:66:C0:DE:D0:4A:06:49
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer:       /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial:       0196CDCF7B648410C435748CFA73F8613833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number:          089B
Signing time:             Wed 14 May 2025 08:00:48 +0000
Manifest this update:     Wed 14 May 2025 08:00:48 +0000
Manifest next update:     Thu 15 May 2025 08:00:48 +0000
Files and hashes:         1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: kl4BnURAquytG1fvcVaponTqYEzo4Dvj/wncVysSMgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:cf:7b:64:84:10:c4:35:74:8c:fa:73:f8:61:38:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
        Validity
            Not Before: May 14 08:00:48 2025 GMT
            Not After : May 15 08:00:48 2025 GMT
        Subject: CN=8d1ae75ff6e7c248d5864f8b3766c0ded04a0649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:22:d7:cd:17:af:25:66:56:45:96:e7:14:
                    e2:18:60:59:44:80:f7:91:8c:45:4e:6d:33:d3:a0:
                    1d:64:b9:46:2c:fd:2b:83:eb:02:43:62:f9:14:41:
                    90:b2:03:99:82:66:38:af:9c:8c:e9:4a:72:31:a9:
                    e8:dc:e6:1b:83:75:6d:91:2e:5f:79:34:40:cb:70:
                    6c:6a:26:b1:e7:20:e1:65:81:b0:c3:88:d3:05:52:
                    e3:ca:f0:73:63:d9:ba:b9:78:ba:ae:90:e6:58:bc:
                    e3:ff:f9:0b:5c:67:5f:59:3f:ae:81:84:2b:d9:2c:
                    e6:14:b2:9f:71:fe:a1:87:57:2a:29:b4:31:78:54:
                    a3:7b:72:29:b7:12:e7:fd:f7:7d:ff:fd:8f:c3:59:
                    be:23:0d:df:db:88:dc:44:32:5f:02:37:c2:d7:af:
                    ea:0c:31:98:35:aa:18:48:9d:46:6f:3d:c3:67:97:
                    07:bb:34:33:60:ff:6b:16:3d:63:0b:d7:3d:89:9a:
                    28:47:c7:13:c3:56:d5:7b:7c:05:73:d9:5d:82:10:
                    44:34:50:d8:05:bf:94:cb:64:0a:b5:1c:15:45:b3:
                    7d:50:c1:a7:38:12:29:23:97:88:5c:92:5d:31:8c:
                    79:a7:32:b9:62:fc:ee:af:c6:72:ed:56:6a:c8:3e:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1A:E7:5F:F6:E7:C2:48:D5:86:4F:8B:37:66:C0:DE:D0:4A:06:49
            X509v3 Authority Key Identifier:
                keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:57:3e:cd:6a:68:11:6c:7a:e8:4f:f7:48:44:43:81:f5:ec:
         ef:b8:a0:56:25:24:c7:3e:ff:e8:66:eb:f1:ee:cf:96:18:68:
         2a:1a:c6:a5:36:70:f6:4d:a3:b3:cb:e2:5a:9f:ee:d2:ab:d1:
         99:70:c8:1a:09:7d:c2:f7:4f:12:71:1e:56:5b:2b:34:1c:5e:
         26:55:5c:0c:68:de:84:05:7a:5d:0e:0d:ee:a3:7a:30:5a:4d:
         dc:23:e2:59:98:a1:73:83:66:a6:ee:ad:b4:19:af:16:52:a1:
         15:60:17:1d:05:7d:21:79:c0:61:3b:36:66:ed:b0:f7:94:3c:
         07:02:e6:75:26:aa:23:fa:2f:75:e6:37:94:cc:d4:e3:c6:51:
         c4:06:0b:c0:a3:bd:b2:4f:4c:e4:b3:86:d1:88:1e:62:47:14:
         72:b2:ea:9a:83:d7:ee:3f:e7:0a:af:5e:bd:d4:a0:de:c8:a5:
         d6:58:d8:a5:8b:48:15:7d:0e:e5:a5:de:0d:10:b8:e3:36:4e:
         7e:7a:75:4b:a2:71:2f:39:14:aa:b8:38:50:2a:84:63:74:60:
         94:6e:e8:15:67:4e:3c:d0:d8:5b:99:63:6c:ed:79:34:5e:c4:
         c8:6d:09:db:b9:70:e1:6b:d0:a1:9a:cc:3d:0f:bb:7b:c7:a1:
         e9:4d:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:28:27 2025 by rpki-client