Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          hgl6ec1vVTpCSFKADZyA2fDFZdI+ftfLpktmv1I1X+g=
Subject key identifier:   BC:68:32:86:E3:8A:76:CE:91:30:09:E2:B3:82:9A:1C:D8:D2:BB:E7
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       0199FC58A7DA86FDF526F2522FDC791808DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 12:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:32 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: xVKXDfgQqALWdUgptQ+rfsFpUuAzU7vU484rer3L2mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a7:da:86:fd:f5:26:f2:52:2f:dc:79:18:08:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Oct 19 12:01:32 2025 GMT
            Not After : Oct 20 12:01:32 2025 GMT
        Subject: CN=bc683286e38a76ce913009e2b3829a1cd8d2bbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:ca:0d:30:8d:84:66:71:4c:8a:7d:98:fa:
                    87:ee:58:7c:7d:f0:93:b1:69:82:1d:72:13:cc:74:
                    f7:a9:f9:43:6a:ab:7f:5b:ee:94:b3:88:0f:2d:4e:
                    34:5e:80:2f:f8:01:9e:1f:e5:09:e8:30:f8:c5:c4:
                    02:52:9e:5c:a8:65:d0:0e:67:b9:70:d8:35:1f:3c:
                    7a:c8:51:c9:05:34:bb:7d:a6:bd:08:a9:9a:c1:8d:
                    8a:0c:7f:0a:40:0d:f1:d3:0c:73:8f:72:84:a7:7e:
                    cf:d5:51:fa:75:1f:1c:43:8d:a2:96:7a:f3:3d:54:
                    02:9d:2d:b7:95:8c:2c:e9:f3:6b:9a:f1:de:fd:5b:
                    ae:6b:34:de:35:24:8a:5f:e7:7a:7d:a8:d0:b2:b3:
                    7e:c7:6c:9c:87:35:4d:e6:2f:d1:f0:cc:72:fb:93:
                    e5:4c:dd:8c:79:55:ff:20:51:0d:c2:b6:c0:45:ed:
                    a1:02:8d:03:b7:d9:68:63:73:e5:1a:55:1a:f2:1e:
                    1a:07:6d:71:ea:b5:bd:19:42:40:dd:b7:dc:80:0a:
                    57:31:9d:b1:b1:57:c6:64:3c:f3:1e:98:b0:98:66:
                    45:7b:42:47:90:96:21:25:03:69:eb:a6:44:26:1d:
                    c0:34:3b:9b:8c:81:36:15:19:92:29:88:ac:8e:14:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:68:32:86:E3:8A:76:CE:91:30:09:E2:B3:82:9A:1C:D8:D2:BB:E7
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:47:da:06:19:3d:90:4f:58:bb:c7:58:af:ac:3b:6a:31:
         97:08:92:11:70:c1:14:76:ba:c0:c3:0e:7e:00:71:74:b4:12:
         79:5c:0d:43:74:2a:9a:dd:73:41:9b:0d:c5:5a:80:e3:60:b2:
         68:cc:95:87:a0:aa:4b:3d:d4:c0:bc:cc:fe:24:d8:3c:fa:56:
         53:a2:43:af:84:ed:c4:25:10:a3:92:e5:f1:2c:e3:f7:9d:19:
         45:29:10:b4:f3:4c:d4:eb:c2:b5:31:28:2b:7d:ec:5e:22:4f:
         a8:92:d3:2d:85:b0:c7:cd:1b:3d:25:6c:6b:eb:76:11:a5:b9:
         00:1d:1b:a3:bb:0c:db:48:ef:2c:39:d0:f8:c7:6c:ba:1c:f8:
         8b:42:dc:7e:19:4b:9a:51:12:c2:c4:c1:39:89:14:85:04:d3:
         b2:71:eb:e7:be:7f:a2:38:f5:4a:51:48:9b:26:ec:85:61:12:
         d0:c3:b2:f3:04:f0:be:03:f1:14:be:c0:e0:d2:81:b3:fe:79:
         7f:a2:3a:d4:6e:3b:a1:7f:e9:01:55:c0:39:d4:3a:7d:e2:67:
         79:9c:4e:af:fd:67:42:61:bb:67:28:4e:12:37:f1:97:a7:34:
         d4:c8:75:b1:6e:ff:f7:90:eb:7c:58:ac:e8:19:39:80:95:ab:
         3b:b3:d0:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKfahv31JvJSL9x5GAjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTc4MTYyNmI0YzdjNDhhOGRjZDUxNGM2YTc1NDlmZmI0
ZjYzYWEwHhcNMjUxMDE5MTIwMTMyWhcNMjUxMDIwMTIwMTMyWjAzMTEwLwYDVQQD
EyhiYzY4MzI4NmUzOGE3NmNlOTEzMDA5ZTJiMzgyOWExY2Q4ZDJiYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVXKDTCNhGZxTIp9mPqH7lh8ffCT
sWmCHXITzHT3qflDaqt/W+6Us4gPLU40XoAv+AGeH+UJ6DD4xcQCUp5cqGXQDme5
cNg1Hzx6yFHJBTS7faa9CKmawY2KDH8KQA3x0wxzj3KEp37P1VH6dR8cQ42ilnrz
PVQCnS23lYws6fNrmvHe/VuuazTeNSSKX+d6fajQsrN+x2ychzVN5i/R8Mxy+5Pl
TN2MeVX/IFENwrbARe2hAo0Dt9loY3PlGlUa8h4aB21x6rW9GUJA3bfcgApXMZ2x
sVfGZDzzHpiwmGZFe0JHkJYhJQNp66ZEJh3ANDubjIE2FRmSKYisjhTHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxoMobjinbOkTAJ4rOCmhzY0rvnMB8GA1UdIwQY
MBaAFBUXgWJrTHxIqNzVFManVJ/7T2OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQt
ZDE1MmFiODI4ZGQ1LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQtZDE1MmFiODI4ZGQ1
LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPlH2gYZ
PZBPWLvHWK+sO2oxlwiSEXDBFHa6wMMOfgBxdLQSeVwNQ3Qqmt1zQZsNxVqA42Cy
aMyVh6CqSz3UwLzM/iTYPPpWU6JDr4TtxCUQo5Ll8Szj950ZRSkQtPNM1OvCtTEo
K33sXiJPqJLTLYWwx80bPSVsa+t2EaW5AB0bo7sM20jvLDnQ+Mdsuhz4i0LcfhlL
mlESwsTBOYkUhQTTsnHr575/ojj1SlFImybshWES0MOy8wTwvgPxFL7A4NKBs/55
f6I61G47oX/pAVXAOdQ6feJneZxOr/1nQmG7ZyhOEjfxl6c01Mh1sW7/95DrfFis
6Bk5gJWrO7PQdw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:40 2025 by rpki-client