Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          vM/Yz+W/q8UxfSZtRBJIVNSwnW409YbRjTRsFDoX/FU=
Subject key identifier:   01:93:CE:AD:7D:4B:B8:BC:B4:A0:92:55:13:9C:A0:D0:23:7D:D5:98
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       0198D661432E5E8A533F2F043EC076BB2115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          047C
Signing time:             Sat 23 Aug 2025 10:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:35 +0000
Files and hashes:         1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: EwQfwZShLWzCx7cEqVOlNrkyrRhIXjwbvXBRB/WJNjI=)
                          2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:43:2e:5e:8a:53:3f:2f:04:3e:c0:76:bb:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Aug 23 10:02:35 2025 GMT
            Not After : Aug 24 10:02:35 2025 GMT
        Subject: CN=0193cead7d4bb8bcb4a09255139ca0d0237dd598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:cf:a9:d3:ac:ba:c3:fe:96:34:f5:20:43:
                    d8:ce:46:c7:11:42:5a:c3:07:e4:48:e1:da:2f:89:
                    c2:c1:7d:34:ab:8a:ce:69:4f:d4:74:8d:4b:35:65:
                    84:99:1b:bd:91:cf:cd:a6:82:cf:90:22:5d:95:7f:
                    bc:e3:1f:d9:44:c5:0d:54:08:ea:11:1b:71:ea:ae:
                    c4:a7:fd:e9:ee:29:44:60:df:c3:c9:8f:53:46:e5:
                    58:97:ac:af:3c:75:85:24:63:44:26:48:ab:41:57:
                    9c:f2:75:e7:89:1a:94:c9:86:09:5f:05:0e:1b:4e:
                    b7:a9:21:1c:b6:25:c6:86:73:d0:e6:3c:5c:6c:65:
                    75:9d:0f:95:ac:70:5e:93:1e:87:be:32:c0:40:b1:
                    33:9b:b5:d8:5a:29:e3:ea:76:f3:24:6f:af:a4:cd:
                    4d:21:e0:36:0d:3e:01:97:a0:c0:00:52:19:6a:c4:
                    8a:80:37:96:40:f2:16:ca:92:20:0b:00:90:dc:2f:
                    86:82:a4:21:69:a6:fb:86:43:cb:a8:f0:bf:13:93:
                    8d:c3:09:fb:83:2e:3f:50:bf:c2:64:f2:68:ec:f2:
                    66:4d:dc:ac:d3:29:ea:2e:50:b7:e0:3d:c0:bb:d3:
                    54:35:e8:a2:d6:57:ca:bc:28:7d:bb:21:4e:ad:76:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:93:CE:AD:7D:4B:B8:BC:B4:A0:92:55:13:9C:A0:D0:23:7D:D5:98
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:de:9c:a7:b6:16:57:e7:a5:04:ef:26:18:cf:c1:61:74:
         73:19:e7:a6:3f:46:9b:a3:3b:dd:4f:f7:2e:b5:43:2a:60:8a:
         38:e1:99:2d:59:a7:9b:f4:60:95:8d:16:eb:83:10:9f:69:22:
         fe:42:c9:4a:c8:83:cf:4b:d8:9b:15:c8:d6:2b:24:6a:6a:1e:
         24:cb:cf:23:9c:88:0f:3e:dd:d5:e2:d6:e0:4a:f9:5e:9e:ce:
         5c:12:a7:41:99:72:25:b3:23:b0:32:f0:fa:06:82:a2:0f:16:
         ee:e1:a9:3b:84:17:1a:0c:a8:fc:c9:94:2b:41:a1:74:79:3e:
         78:f6:d8:1b:1f:a9:b0:b3:2f:0c:16:50:9a:08:3c:e2:46:91:
         32:80:62:01:6e:29:39:9d:d7:48:3d:f1:10:ed:02:4d:2d:1f:
         5b:0f:c1:0a:79:87:14:36:3f:04:4a:78:f7:3a:4a:de:2e:2b:
         fc:bc:79:8d:9c:26:af:23:20:7d:d0:c9:20:3b:65:91:ef:83:
         54:f3:04:55:01:ee:b7:9c:44:0c:50:38:68:a2:70:b2:2b:20:
         71:4f:c7:1b:21:0e:e5:93:28:75:a0:1e:b7:58:37:f1:eb:39:
         41:66:bc:58:f3:d0:3e:c2:7e:61:42:00:38:04:b2:77:d0:9f:
         ca:2a:a8:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYUMuXopTPy8EPsB2uyEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl
MTE5ZjkwHhcNMjUwODIzMTAwMjM1WhcNMjUwODI0MTAwMjM1WjAzMTEwLwYDVQQD
EygwMTkzY2VhZDdkNGJiOGJjYjRhMDkyNTUxMzljYTBkMDIzN2RkNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1fPqdOsusP+ljT1IEPYzkbHEUJa
wwfkSOHaL4nCwX00q4rOaU/UdI1LNWWEmRu9kc/NpoLPkCJdlX+84x/ZRMUNVAjq
ERtx6q7Ep/3p7ilEYN/DyY9TRuVYl6yvPHWFJGNEJkirQVec8nXniRqUyYYJXwUO
G063qSEctiXGhnPQ5jxcbGV1nQ+VrHBekx6HvjLAQLEzm7XYWinj6nbzJG+vpM1N
IeA2DT4Bl6DAAFIZasSKgDeWQPIWypIgCwCQ3C+GgqQhaab7hkPLqPC/E5ONwwn7
gy4/UL/CZPJo7PJmTdys0ynqLlC34D3Au9NUNeii1lfKvCh9uyFOrXbfUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGTzq19S7i8tKCSVROcoNAjfdWYMB8GA1UdIwQY
MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt
MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3
LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfLenKe2
FlfnpQTvJhjPwWF0cxnnpj9Gm6M73U/3LrVDKmCKOOGZLVmnm/RglY0W64MQn2ki
/kLJSsiDz0vYmxXI1iskamoeJMvPI5yIDz7d1eLW4Er5Xp7OXBKnQZlyJbMjsDLw
+gaCog8W7uGpO4QXGgyo/MmUK0GhdHk+ePbYGx+psLMvDBZQmgg84kaRMoBiAW4p
OZ3XSD3xEO0CTS0fWw/BCnmHFDY/BEp49zpK3i4r/Lx5jZwmryMgfdDJIDtlke+D
VPMEVQHut5xEDFA4aKJwsisgcU/HGyEO5ZModaAet1g38es5QWa8WPPQPsJ+YUIA
OASyd9Cfyiqo2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:52 2025 by rpki-client