Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File:                     fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier:          4ZYRdYlGEJzSXhBIDhyXoYOi+UJddajkHdxT+iSsnvc=
Subject key identifier:   FA:1C:50:26:C8:9E:E7:66:81:18:B1:59:8F:E1:B7:91:70:DA:D7:19
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer:       /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial:       0196C1CB24E377C795A5A155799D47DE49F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 00:00:38 +0000
Manifest this update:     Mon 12 May 2025 00:00:38 +0000
Manifest next update:     Tue 13 May 2025 00:00:38 +0000
Files and hashes:         1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: OnrGMXL0WlnlwzY7bxDEhyjnmibQaCHlYnrDky7gYOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:cb:24:e3:77:c7:95:a5:a1:55:79:9d:47:de:49:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
        Validity
            Not Before: May 12 00:00:38 2025 GMT
            Not After : May 13 00:00:38 2025 GMT
        Subject: CN=fa1c5026c89ee7668118b1598fe1b79170dad719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:c5:b2:17:a4:4a:60:43:54:de:8e:a9:73:
                    6a:76:ca:a1:61:82:ee:fb:fe:85:7c:0f:31:c9:1f:
                    6b:8f:66:b7:cf:c0:42:72:ef:12:27:e8:b2:2b:71:
                    ff:68:1e:f6:c7:5d:ed:c3:62:b6:62:85:74:6f:70:
                    c2:44:01:71:b8:ec:c6:7f:5f:ac:2f:30:13:36:5d:
                    d9:6a:a0:b2:78:fa:30:9d:2a:91:bd:0a:ce:58:1a:
                    83:16:0a:b2:3b:a7:8d:d8:88:0d:c9:ce:37:0d:e2:
                    a2:70:1b:bd:ec:8e:53:a9:ce:31:49:02:e1:96:1d:
                    63:20:97:f9:5a:a3:95:94:2c:ae:98:ae:3f:37:b1:
                    06:6c:71:4d:b9:32:20:5f:cd:ff:ea:e6:17:c1:33:
                    4b:d7:1f:ae:62:19:9e:fc:e3:bc:b3:a4:68:0c:48:
                    36:2e:55:9b:82:96:b3:f1:1b:ae:e7:38:19:a0:5f:
                    f8:47:25:f1:5c:39:f3:c7:a3:1e:a3:43:db:59:97:
                    cd:9a:94:e6:08:3c:9e:9e:94:bd:28:d4:92:99:b4:
                    a7:20:df:66:21:5f:94:d4:b1:6d:8c:f4:30:0e:73:
                    1a:ff:eb:a0:48:c9:5c:d0:9a:b9:c4:cb:ae:20:74:
                    62:10:51:c8:03:d0:ef:20:43:4e:8b:8d:fc:7b:78:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1C:50:26:C8:9E:E7:66:81:18:B1:59:8F:E1:B7:91:70:DA:D7:19
            X509v3 Authority Key Identifier:
                keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:51:60:2e:13:25:55:03:57:8e:72:d5:ff:e4:32:87:e3:16:
         8e:54:00:91:2e:9b:ef:12:22:39:7f:3b:52:b4:5d:ed:f1:a4:
         7a:ed:17:c4:fe:56:cd:d8:3c:f5:9d:85:0a:21:ad:b2:fa:91:
         50:98:7b:84:47:13:78:b4:c1:96:55:9b:22:35:eb:2e:97:7c:
         0e:c9:b2:b0:db:6b:62:74:da:63:9f:3b:ae:52:8b:51:61:14:
         2e:9b:7f:45:8f:2b:58:36:12:f0:ec:a1:1f:45:38:6a:a8:74:
         fc:95:0c:d6:bc:34:a6:a0:1c:55:9b:e3:03:cb:f6:9f:4b:44:
         54:d1:c2:78:16:88:c0:16:82:a4:8f:8d:8c:b2:c0:6c:6a:fc:
         04:46:f1:0e:c0:1e:67:5f:8f:c4:13:c2:b2:44:e8:c5:67:f9:
         9e:83:f9:26:34:1f:83:8b:11:8b:8a:77:5d:97:e7:12:c2:21:
         bf:c0:a3:e4:2c:51:f8:0e:c0:22:8a:2b:ba:b2:ca:20:4b:7b:
         40:7c:07:ff:5e:2f:f4:2d:7c:6d:e2:91:95:d5:91:29:ea:8d:
         00:80:0e:df:15:27:de:9d:87:19:ce:66:7e:8b:d7:3c:0a:32:
         a2:e3:d9:f6:6e:65:0d:4f:65:95:d6:ef:bb:63:05:4a:c8:44:
         e4:a2:69:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:38:06 2025 by rpki-client