Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File:                     FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier:          8dtCASatSi2Xp2NZfxg3DDzaTmFOwuOfR6elpG5qjV4=
Subject key identifier:   E3:25:D6:4E:6B:75:8C:8F:30:2F:DC:C9:BB:48:FA:D8:F0:D0:A9:C0
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer:       /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial:       0197B7454D92F770327DDD65022FA195F057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number:          0859
Signing time:             Sat 28 Jun 2025 16:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:01 +0000
Files and hashes:         1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
                          2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: b6eXtR8PvgEpp+F2FcIeZDRS/ed4MShHE6bCnMLMAbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:4d:92:f7:70:32:7d:dd:65:02:2f:a1:95:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
        Validity
            Not Before: Jun 28 16:01:01 2025 GMT
            Not After : Jun 29 16:01:01 2025 GMT
        Subject: CN=e325d64e6b758c8f302fdcc9bb48fad8f0d0a9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:67:de:db:43:9d:16:db:d8:96:e9:d8:12:
                    15:4f:aa:4e:c0:13:64:a3:35:6c:93:ff:f9:15:70:
                    62:4b:be:c1:45:3a:58:6d:27:99:b0:42:2c:66:d6:
                    d6:d9:53:b4:60:17:87:b4:88:a0:1c:80:dc:d0:4e:
                    06:d7:6c:a7:f2:1f:91:16:0c:38:d1:bf:b1:83:86:
                    74:3a:8d:4e:0b:ab:dc:91:02:3f:c2:85:19:51:09:
                    d8:fc:91:77:62:94:55:0a:47:b3:70:f5:46:12:d2:
                    8a:fd:c0:b0:7e:81:27:51:4d:d7:c2:68:c9:66:af:
                    db:cf:f7:ae:a3:53:01:4e:d7:78:69:ec:67:52:09:
                    43:61:ac:e0:8f:bd:26:ab:3e:52:f6:f0:ef:3b:cc:
                    21:3b:64:da:8c:0b:29:04:08:1f:f6:30:49:69:2f:
                    5c:d0:6b:2d:b6:ba:24:9d:d6:64:e6:d7:cc:b4:94:
                    5e:85:21:c4:14:1f:ad:70:fa:b7:42:a4:f5:35:80:
                    f2:ec:6f:f1:93:38:15:99:be:e3:0b:37:6e:8d:4e:
                    48:92:29:81:be:eb:b3:88:cb:5e:16:33:a5:93:6d:
                    e7:91:df:2b:05:6b:ee:d5:0d:e8:37:89:54:4a:c1:
                    9e:9d:cf:2b:2f:41:57:04:5d:2a:87:e0:b4:38:55:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:25:D6:4E:6B:75:8C:8F:30:2F:DC:C9:BB:48:FA:D8:F0:D0:A9:C0
            X509v3 Authority Key Identifier:
                keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:e0:23:4b:6c:a7:b5:ee:5c:2d:41:71:fc:fe:a5:dd:ef:
         e3:a9:9c:95:b3:ce:e2:7a:6a:27:8b:d2:35:85:b9:65:70:69:
         20:a2:28:f5:b8:bb:bd:4a:5a:95:65:6b:95:7c:94:1f:9a:08:
         da:97:53:31:8a:15:0f:f9:2e:de:14:5d:20:7c:27:5b:e1:6f:
         8f:b2:2e:ad:99:3a:bc:72:a5:34:4f:3a:28:17:5d:be:c8:8f:
         48:bb:f4:52:ba:e8:ef:ca:19:20:e5:d9:3a:4e:2f:d3:a1:62:
         a8:91:d9:b7:98:6b:88:40:9b:3a:f0:8c:12:2f:1d:da:f9:0c:
         2d:e9:c8:66:3b:63:bc:27:39:40:e9:ac:ad:43:e2:b4:72:89:
         84:2f:5c:3e:49:ff:42:bd:82:89:93:05:9a:f9:9e:b9:86:87:
         e0:05:4d:35:85:c2:bf:59:48:2e:44:09:cf:32:38:bb:20:10:
         06:68:40:ec:7e:9b:fa:c3:32:45:1c:4d:a8:fa:f4:15:e5:d1:
         97:06:86:41:67:f9:4e:69:6b:0c:09:b1:85:60:0e:f5:49:f2:
         7e:cb:a5:1e:2e:5c:9d:58:11:73:25:f9:14:da:97:fd:1a:4b:
         1d:3d:c2:40:13:6b:b3:7f:0b:19:69:6e:4b:21:55:16:d1:2d:
         f1:85:74:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RU2S93Ayfd1lAi+hlfBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz
YzQyZDYwHhcNMjUwNjI4MTYwMTAxWhcNMjUwNjI5MTYwMTAxWjAzMTEwLwYDVQQD
EyhlMzI1ZDY0ZTZiNzU4YzhmMzAyZmRjYzliYjQ4ZmFkOGYwZDBhOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu85n3ttDnRbb2Jbp2BIVT6pOwBNk
ozVsk//5FXBiS77BRTpYbSeZsEIsZtbW2VO0YBeHtIigHIDc0E4G12yn8h+RFgw4
0b+xg4Z0Oo1OC6vckQI/woUZUQnY/JF3YpRVCkezcPVGEtKK/cCwfoEnUU3XwmjJ
Zq/bz/euo1MBTtd4aexnUglDYazgj70mqz5S9vDvO8whO2TajAspBAgf9jBJaS9c
0GsttrokndZk5tfMtJRehSHEFB+tcPq3QqT1NYDy7G/xkzgVmb7jCzdujU5IkimB
vuuziMteFjOlk23nkd8rBWvu1Q3oN4lUSsGenc8rL0FXBF0qh+C0OFX8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMl1k5rdYyPMC/cybtI+tjw0KnAMB8GA1UdIwQY
MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt
NzlhODI5MWIxNTdmLzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm
LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0HgI0ts
p7XuXC1Bcfz+pd3v46mclbPO4npqJ4vSNYW5ZXBpIKIo9bi7vUpalWVrlXyUH5oI
2pdTMYoVD/ku3hRdIHwnW+Fvj7IurZk6vHKlNE86KBddvsiPSLv0Urro78oZIOXZ
Ok4v06FiqJHZt5hriECbOvCMEi8d2vkMLenIZjtjvCc5QOmsrUPitHKJhC9cPkn/
Qr2CiZMFmvmeuYaH4AVNNYXCv1lILkQJzzI4uyAQBmhA7H6b+sMyRRxNqPr0FeXR
lwaGQWf5TmlrDAmxhWAO9UnyfsulHi5cnVgRcyX5FNqX/RpLHT3CQBNrs38LGWlu
SyFVFtEt8YV0uA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:43 2025 by rpki-client