Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File:                     FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier:          4IdmqxZKa+nf1rLTF/MnatyTjW0lKzeCJCH7TbZzlU4=
Subject key identifier:   63:62:C7:DB:14:7D:9E:6B:B1:B2:4E:3E:95:16:22:FC:7F:C5:A9:CA
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer:       /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial:       0198D5BBDC79230EA601AC234C3F3B462798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number:          0F6D
Signing time:             Sat 23 Aug 2025 07:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:55 +0000
Files and hashes:         1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
                          2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: u24CScvFL88EB59hkTkmAMecKNH0ALMGCxVfEkw6F5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:dc:79:23:0e:a6:01:ac:23:4c:3f:3b:46:27:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
        Validity
            Not Before: Aug 23 07:01:55 2025 GMT
            Not After : Aug 24 07:01:55 2025 GMT
        Subject: CN=6362c7db147d9e6bb1b24e3e951622fc7fc5a9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:4b:37:c1:30:6b:7b:7a:31:2f:ff:f2:dc:
                    d4:59:1a:73:83:82:a4:c4:4b:f2:d2:40:fe:ff:90:
                    a4:e8:5e:20:32:b5:35:ee:24:03:f2:66:e2:32:25:
                    59:9c:86:96:c5:5c:cd:8a:18:51:26:79:41:61:ff:
                    02:d2:f6:00:8b:0a:cf:e7:80:3d:45:58:f8:2a:10:
                    35:52:38:99:d7:f4:c7:2f:d6:e5:e0:9e:80:c1:14:
                    5b:3a:d6:82:f4:e7:6d:81:4b:06:3e:2a:0b:cc:03:
                    e5:2e:2c:65:a1:cc:46:aa:72:87:1e:1e:21:91:aa:
                    07:a7:a6:35:19:4b:b6:b6:96:04:cc:21:d9:df:ff:
                    75:e6:f0:8d:a9:93:42:3d:75:92:d9:7f:00:40:ba:
                    52:87:5c:14:9f:bc:53:6b:6c:ab:7f:55:9e:46:ae:
                    78:9f:7f:9f:28:11:91:77:8d:4c:47:76:07:bb:99:
                    7d:95:d3:1f:dd:c1:54:9b:ed:8d:aa:51:ef:53:cc:
                    b1:9c:e3:89:73:84:7f:df:b2:4b:72:65:d2:fa:77:
                    f7:80:38:df:b2:65:53:7f:e0:c2:a0:52:99:f8:e9:
                    a1:45:b0:ec:44:a4:6b:c8:48:34:61:5e:07:8f:fb:
                    e7:dd:23:7f:c3:eb:9b:94:34:bd:4d:cc:d0:f1:80:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:62:C7:DB:14:7D:9E:6B:B1:B2:4E:3E:95:16:22:FC:7F:C5:A9:CA
            X509v3 Authority Key Identifier:
                keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9a:09:38:57:a1:8b:1a:32:25:15:f1:fb:7f:ee:89:cc:31:
         cd:75:38:d4:fd:4c:cf:4b:1f:bc:ba:31:67:56:c3:9b:32:73:
         e9:80:6e:ed:de:a3:81:b9:34:3b:e2:8c:6b:78:d0:be:6d:f9:
         f2:d0:38:fc:26:9c:f1:7c:fd:31:58:63:56:ba:44:5f:09:87:
         99:84:6e:65:b1:6f:c9:26:9d:36:69:58:73:a1:1b:1b:b5:62:
         d3:c7:07:85:48:c3:d0:a7:37:ff:0a:70:66:84:6c:f6:52:71:
         06:f9:c6:84:a7:ba:c4:1d:d5:ae:1b:29:26:81:75:9a:42:29:
         a5:c9:e1:a4:b7:fd:45:de:ed:ec:1d:5c:fa:c5:0c:52:f3:fd:
         99:ef:eb:d8:0a:19:44:8b:23:ac:3b:c0:11:e3:0d:b1:6f:5a:
         f5:66:f8:c2:2c:b6:bb:4e:c2:5a:ea:a7:23:90:b2:18:0f:76:
         de:54:7f:fa:be:30:22:6f:95:9e:28:7c:ec:27:bf:13:dc:e4:
         73:84:53:44:af:6a:91:0c:f5:7f:1e:d9:29:b8:92:8b:2b:a3:
         bf:d1:01:f4:31:f2:5a:1d:ec:dd:03:80:fa:7f:0d:44:84:48:
         6c:0b:ea:09:d3:da:f6:6b:9e:18:fb:f6:7e:12:d3:f1:c5:55:
         24:bd:11:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9x5Iw6mAawjTD87RieYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj
M2RjYWMwHhcNMjUwODIzMDcwMTU1WhcNMjUwODI0MDcwMTU1WjAzMTEwLwYDVQQD
Eyg2MzYyYzdkYjE0N2Q5ZTZiYjFiMjRlM2U5NTE2MjJmYzdmYzVhOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXRLN8Ewa3t6MS//8tzUWRpzg4Kk
xEvy0kD+/5Ck6F4gMrU17iQD8mbiMiVZnIaWxVzNihhRJnlBYf8C0vYAiwrP54A9
RVj4KhA1UjiZ1/THL9bl4J6AwRRbOtaC9OdtgUsGPioLzAPlLixlocxGqnKHHh4h
kaoHp6Y1GUu2tpYEzCHZ3/915vCNqZNCPXWS2X8AQLpSh1wUn7xTa2yrf1WeRq54
n3+fKBGRd41MR3YHu5l9ldMf3cFUm+2NqlHvU8yxnOOJc4R/37JLcmXS+nf3gDjf
smVTf+DCoFKZ+OmhRbDsRKRryEg0YV4Hj/vn3SN/w+ublDS9TczQ8YCKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNix9sUfZ5rsbJOPpUWIvx/xanKMB8GA1UdIwQY
MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt
NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw
LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZoJOFeh
ixoyJRXx+3/uicwxzXU41P1Mz0sfvLoxZ1bDmzJz6YBu7d6jgbk0O+KMa3jQvm35
8tA4/Cac8Xz9MVhjVrpEXwmHmYRuZbFvySadNmlYc6EbG7Vi08cHhUjD0Kc3/wpw
ZoRs9lJxBvnGhKe6xB3VrhspJoF1mkIppcnhpLf9Rd7t7B1c+sUMUvP9me/r2AoZ
RIsjrDvAEeMNsW9a9Wb4wiy2u07CWuqnI5CyGA923lR/+r4wIm+Vnih87Ce/E9zk
c4RTRK9qkQz1fx7ZKbiSiyujv9EB9DHyWh3s3QOA+n8NRIRIbAvqCdPa9mueGPv2
fhLT8cVVJL0Rzg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:25 2025 by rpki-client