Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
File:                     FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json)
Hash identifier:          gu5FctRJA4CbJx3SFZJCA5mSFTuZUguU2HM4XlHACEQ=
Subject key identifier:   52:CC:59:C2:27:47:48:A3:68:E6:CA:40:F9:DF:E8:E4:A0:D3:B8:D1
Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
Certificate issuer:       /CN=17271603fa8f06afa44a8782065f35f9659c7edd
Certificate serial:       0197B77CAE2853AB64300660F1D7F94FA803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
Manifest number:          0151
Signing time:             Sat 28 Jun 2025 17:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:30 +0000
Files and hashes:         1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: eCKQj/RyKZvA/j9Dvhy/BYDckaA0NhuPu74he4rJkeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:ae:28:53:ab:64:30:06:60:f1:d7:f9:4f:a8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd
        Validity
            Not Before: Jun 28 17:01:30 2025 GMT
            Not After : Jun 29 17:01:30 2025 GMT
        Subject: CN=52cc59c2274748a368e6ca40f9dfe8e4a0d3b8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:2d:0a:af:a1:f0:82:ae:2d:d8:64:4e:e5:
                    3d:0c:9b:b0:72:25:59:54:30:01:b6:e0:e9:b2:95:
                    13:34:5f:9c:4a:02:8c:7b:82:70:ab:f1:e6:b6:f4:
                    11:ef:7a:88:56:42:53:60:35:75:41:94:f6:ca:a3:
                    7e:4a:44:a9:8e:c9:22:e5:0b:cd:d9:f1:b2:3a:ce:
                    18:b9:f8:1e:94:a7:dd:12:da:99:89:1c:5e:ea:2a:
                    50:59:98:be:cc:09:09:f3:42:bf:16:66:e3:dd:f6:
                    76:b7:2a:2f:ff:71:62:e3:f9:98:4e:c6:4a:94:7d:
                    6b:fa:28:42:07:60:91:a1:aa:dd:c4:e9:72:ff:dd:
                    fe:bd:52:7d:47:9d:b4:18:ad:f7:57:d7:7f:64:2e:
                    28:91:d1:14:c1:94:2c:db:0c:1c:e9:af:83:77:8f:
                    4b:41:42:67:79:f6:ab:7b:e8:e8:10:0d:98:06:37:
                    a1:61:31:50:68:dc:0f:35:f1:0b:c6:ae:7b:9a:08:
                    4d:6d:d0:28:31:a4:2c:50:5e:60:19:bf:4e:48:43:
                    1d:13:1d:38:39:67:bb:2f:87:a9:60:3a:ad:d1:46:
                    ae:2d:59:d0:6e:83:f6:d4:37:e6:77:ba:12:b7:56:
                    37:33:f7:30:e8:8a:0e:a1:df:5c:e4:3e:c5:84:e1:
                    af:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:59:C2:27:47:48:A3:68:E6:CA:40:F9:DF:E8:E4:A0:D3:B8:D1
            X509v3 Authority Key Identifier:
                keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:0b:dc:c0:11:03:61:df:69:83:fd:bd:83:10:87:cc:a4:
         c9:7a:5e:4b:bb:46:9c:f3:6e:fd:bd:c7:1e:b3:90:94:ae:51:
         34:fc:92:5e:aa:7d:14:31:11:51:40:5f:11:2c:3f:a7:85:1c:
         af:c0:78:71:cd:bc:29:3b:43:52:66:b7:a2:4b:2e:26:5a:c4:
         7d:9b:77:c9:38:bf:43:bb:cd:47:1a:cf:1c:fb:e0:60:e7:1f:
         48:44:8f:e5:83:d9:4b:58:bd:92:ed:c0:8a:1e:27:fe:d6:06:
         5e:41:0b:a6:e3:1b:a6:d4:ac:86:f7:72:81:75:de:9e:b9:18:
         d5:3e:e5:a2:eb:8a:fd:3b:85:2f:54:42:9d:24:0f:97:f1:bb:
         3d:e9:1f:2c:79:36:42:25:5a:fc:c9:7f:5d:9d:3b:db:21:da:
         c5:77:38:6a:4c:20:ad:77:4e:04:ae:5c:ee:8a:b6:78:3a:ba:
         f8:f6:01:7b:30:87:9f:db:f4:32:35:9d:67:56:73:8b:96:31:
         c0:4f:d1:9c:cf:eb:88:e2:44:73:cc:01:87:46:a3:3a:49:79:
         ed:f0:ab:4f:79:15:19:18:99:8c:cf:59:58:6f:01:43:df:df:
         2c:62:ef:78:81:dd:ed:41:a1:6b:8c:b8:68:be:28:8d:27:37:
         42:ff:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:33 2025 by rpki-client