Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File:                     fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier:          wckaMtL0BlI4R5YjrEhhWQxj0tbgkyR2yJ9xEMHmbQI=
Subject key identifier:   A6:ED:F6:6A:E5:EB:2D:4E:26:79:12:CD:0A:71:D2:52:DB:6B:1B:50
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer:       /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial:       0197B6A0B1B89219DBDF75E8ACA3A2DB865F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:13 +0000
Files and hashes:         1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
                          2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: bXBfgwSEoR7FIY9K9kxXIQ/sHwv6W4IZe1wFOqrACtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:b1:b8:92:19:db:df:75:e8:ac:a3:a2:db:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
        Validity
            Not Before: Jun 28 13:01:13 2025 GMT
            Not After : Jun 29 13:01:13 2025 GMT
        Subject: CN=a6edf66ae5eb2d4e267912cd0a71d252db6b1b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:6e:32:dc:26:fa:c4:bb:eb:73:b1:df:a3:
                    47:77:d3:0e:b0:d7:8d:68:4b:ad:8f:b8:81:ec:7f:
                    1c:19:f8:03:8a:f8:94:02:bc:f6:c3:3c:d9:57:92:
                    47:bc:48:aa:4f:7f:29:8d:47:df:83:3f:19:63:0a:
                    56:0d:97:40:99:6b:f1:f2:c4:e8:23:b7:70:c1:7f:
                    35:a2:37:43:c8:50:63:a2:bc:7f:d9:d5:65:8d:0e:
                    09:7c:85:f0:f6:e6:98:a4:76:d6:b5:52:43:6d:12:
                    8c:52:f6:7b:77:30:1c:ce:48:a8:3a:bb:74:7f:49:
                    88:37:f2:6d:fd:a5:af:ba:19:78:ba:44:02:e8:e2:
                    bc:e5:6d:21:d4:e8:9c:1b:85:e9:ca:17:3f:bf:6a:
                    f5:0c:41:bc:de:43:9b:1b:20:ce:d7:53:87:c0:d3:
                    29:9c:dd:23:2a:de:b7:bb:14:0c:fc:8a:72:18:15:
                    fe:c6:61:53:0a:a3:51:01:a6:28:3a:84:93:35:58:
                    95:62:a9:01:17:84:36:d2:f5:92:69:9d:03:34:1d:
                    be:32:66:7a:91:cc:ad:b8:0d:e5:2a:4c:07:e7:2b:
                    c4:28:19:67:da:a7:68:fd:1b:75:1c:19:64:d7:99:
                    7b:82:42:a1:12:17:ff:e9:85:30:da:1f:50:7c:20:
                    9e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:ED:F6:6A:E5:EB:2D:4E:26:79:12:CD:0A:71:D2:52:DB:6B:1B:50
            X509v3 Authority Key Identifier:
                keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:32:2d:b8:f9:0e:f7:18:3b:66:f1:1a:bc:52:b4:76:c6:
         bc:78:b7:b3:15:74:8e:9a:3c:d4:b5:9d:95:cc:7b:9d:4f:3c:
         4c:fe:49:5f:2d:4e:7b:a3:b3:98:6a:cf:2f:b8:a0:e1:0c:9e:
         84:13:1b:3f:6c:55:78:ac:29:b7:b1:d7:fb:25:b0:39:1a:db:
         fc:ee:0f:67:b0:0a:26:b9:3c:16:4d:7b:6a:72:7a:82:dd:15:
         6d:d5:3f:8d:f3:29:aa:fd:cf:8a:58:b3:6f:ee:fd:8c:6e:5e:
         d3:ab:f6:d9:37:24:f5:da:09:3d:07:6a:da:7e:92:85:68:56:
         47:7a:3e:7b:70:cf:86:8c:be:88:67:05:5f:92:12:6a:88:70:
         50:80:7a:1b:40:a6:2d:8d:71:f5:5d:bb:a5:ed:bf:07:0d:9c:
         13:4a:0b:4f:3c:fb:69:13:ba:86:44:06:e3:19:d4:d4:3f:48:
         6c:9f:06:63:2b:0b:be:d6:72:ce:d2:0b:7e:29:57:ea:e2:65:
         82:e2:8e:dd:8f:3f:ea:31:33:f9:64:3c:dc:83:45:e2:4d:92:
         12:a8:ea:5f:88:50:a3:f3:42:20:cd:ec:16:8b:09:f3:f8:65:
         a6:60:e8:fb:d6:1a:47:12:06:b9:cb:a0:9d:15:d9:8a:62:c3:
         a2:a5:69:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLG4khnb33XorKOi24ZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3
OTg5MmEwHhcNMjUwNjI4MTMwMTEzWhcNMjUwNjI5MTMwMTEzWjAzMTEwLwYDVQQD
EyhhNmVkZjY2YWU1ZWIyZDRlMjY3OTEyY2QwYTcxZDI1MmRiNmIxYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1luMtwm+sS763Ox36NHd9MOsNeN
aEutj7iB7H8cGfgDiviUArz2wzzZV5JHvEiqT38pjUffgz8ZYwpWDZdAmWvx8sTo
I7dwwX81ojdDyFBjorx/2dVljQ4JfIXw9uaYpHbWtVJDbRKMUvZ7dzAczkioOrt0
f0mIN/Jt/aWvuhl4ukQC6OK85W0h1OicG4Xpyhc/v2r1DEG83kObGyDO11OHwNMp
nN0jKt63uxQM/IpyGBX+xmFTCqNRAaYoOoSTNViVYqkBF4Q20vWSaZ0DNB2+MmZ6
kcytuA3lKkwH5yvEKBln2qdo/Rt1HBlk15l7gkKhEhf/6YUw2h9QfCCeawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbt9mrl6y1OJnkSzQpx0lLbaxtQMB8GA1UdIwQY
MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt
ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi
LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXsyLbj5
DvcYO2bxGrxStHbGvHi3sxV0jpo81LWdlcx7nU88TP5JXy1Oe6OzmGrPL7ig4Qye
hBMbP2xVeKwpt7HX+yWwORrb/O4PZ7AKJrk8Fk17anJ6gt0VbdU/jfMpqv3Piliz
b+79jG5e06v22Tck9doJPQdq2n6ShWhWR3o+e3DPhoy+iGcFX5ISaohwUIB6G0Cm
LY1x9V27pe2/Bw2cE0oLTzz7aRO6hkQG4xnU1D9IbJ8GYysLvtZyztILfilX6uJl
guKO3Y8/6jEz+WQ83INF4k2SEqjqX4hQo/NCIM3sFosJ8/hlpmDo+9YaRxIGucug
nRXZimLDoqVpIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:11 2025 by rpki-client