Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
File:                     FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json)
Hash identifier:          n0gByHbjXuB+kDRejLy2onDacT9lXc+aZLZBwcR6HR8=
Subject key identifier:   11:81:C1:09:15:5B:85:85:B1:F7:EE:D1:89:84:86:22:D7:99:03:39
Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0
Certificate issuer:       /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
Certificate serial:       0198D7E0ECC221B71254605EEE20C8354E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
Manifest number:          05E9
Signing time:             Sat 23 Aug 2025 17:01:38 +0000
Manifest this update:     Sat 23 Aug 2025 17:01:38 +0000
Manifest next update:     Sun 24 Aug 2025 17:01:38 +0000
Files and hashes:         1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: grieAkD4Y/a8EbDOm7yyBDso85fOnhmaAuHitIURrmw=)
                          2: RvOaflHrUbGbCGM86DjNMJAz4Rw.roa (hash: 3Nyo7ThzTtGgNw1pACQDePiv05YOigx9XCdhwJe3hKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e0:ec:c2:21:b7:12:54:60:5e:ee:20:c8:35:4e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
        Validity
            Not Before: Aug 23 17:01:38 2025 GMT
            Not After : Aug 24 17:01:38 2025 GMT
        Subject: CN=1181c109155b8585b1f7eed189848622d7990339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:85:64:02:4c:4b:ac:37:11:e8:0a:77:b1:
                    e6:2a:95:f6:f6:23:61:7d:48:eb:eb:ee:b5:bc:58:
                    07:09:8f:58:1d:89:9c:d1:d6:c0:8e:e6:01:5c:ed:
                    c2:7d:09:ac:92:57:bf:0a:e5:7a:85:19:b1:be:aa:
                    71:2c:1d:32:9e:0d:fd:ac:cc:e4:89:d9:a8:a8:e7:
                    e8:6b:51:13:f3:38:ec:0e:79:2d:8d:18:3b:b2:3b:
                    a0:de:c6:4f:6e:88:4b:18:2a:81:90:fa:25:76:46:
                    92:a9:9f:7e:59:d5:9d:01:fc:57:03:50:f4:a2:6d:
                    5c:c6:f3:51:60:bb:a7:39:84:54:84:cb:83:c6:ed:
                    82:d5:62:60:41:55:dc:53:4c:5c:8c:b9:25:5a:ad:
                    48:f0:1b:b3:cd:9f:f6:4e:ac:24:c1:08:74:af:af:
                    11:bc:3c:45:de:5f:9e:01:78:b3:e2:12:00:79:78:
                    c6:eb:00:bf:10:50:93:13:f0:0e:1c:67:d9:1c:9f:
                    3c:89:5e:d1:f3:c1:d1:55:42:72:2e:76:ca:7b:bd:
                    cd:c1:0c:1e:ce:a3:73:52:a9:5c:22:0f:5f:fe:e3:
                    42:45:72:39:6e:05:8d:84:0d:b5:a9:e5:e3:5d:d9:
                    d7:71:b6:81:23:30:cf:65:be:3a:0f:11:cf:ad:9c:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:C1:09:15:5B:85:85:B1:F7:EE:D1:89:84:86:22:D7:99:03:39
            X509v3 Authority Key Identifier:
                keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:80:1e:08:89:a3:1f:b7:bf:32:ee:5e:59:47:78:5f:10:fd:
         5b:62:28:00:95:68:9a:47:72:a4:6b:2f:31:08:10:4e:84:cd:
         20:b4:31:3e:5f:b9:05:29:28:70:04:e2:e1:e2:ae:48:dc:f2:
         0f:81:db:f1:ae:a3:d9:20:75:55:0f:6a:f4:ed:49:54:10:36:
         5b:a7:06:e6:09:6a:89:de:e9:cb:dc:1c:0a:b4:2d:27:61:29:
         90:85:1b:9f:02:83:69:52:e0:a6:fe:ac:93:80:62:ff:ef:6c:
         cf:3c:d6:bd:a4:22:fb:67:ad:25:6c:c1:b1:b1:ed:25:22:28:
         a0:cb:b5:17:6e:95:54:07:f7:ea:be:e7:12:c8:a1:fe:e9:6b:
         35:4d:af:c0:4b:fb:07:e9:73:51:e6:19:fa:a0:3c:ad:a5:45:
         a9:3e:06:89:5b:e4:4a:e3:34:19:1b:81:29:7b:d1:41:3a:5b:
         a9:3c:b0:b1:42:ff:28:de:23:73:72:c7:0a:96:08:c8:db:3f:
         d3:ee:65:04:fb:c2:07:06:0b:14:f9:a8:98:cb:54:e3:81:f5:
         29:3f:27:03:90:c9:00:db:0e:6c:12:ed:cc:cb:10:f3:ad:d2:
         b5:57:7d:d5:33:8a:01:76:8a:54:c2:b7:e7:81:92:76:24:79:
         2b:f6:c2:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4OzCIbcSVGBe7iDINU6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTRiYTUwYjQ2OGZjZWVhYzE5NDYyN2U5OGJhMWY1N2Rl
YjRmYzAwHhcNMjUwODIzMTcwMTM4WhcNMjUwODI0MTcwMTM4WjAzMTEwLwYDVQQD
EygxMTgxYzEwOTE1NWI4NTg1YjFmN2VlZDE4OTg0ODYyMmQ3OTkwMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/aFZAJMS6w3EegKd7HmKpX29iNh
fUjr6+61vFgHCY9YHYmc0dbAjuYBXO3CfQmskle/CuV6hRmxvqpxLB0yng39rMzk
idmoqOfoa1ET8zjsDnktjRg7sjug3sZPbohLGCqBkPoldkaSqZ9+WdWdAfxXA1D0
om1cxvNRYLunOYRUhMuDxu2C1WJgQVXcU0xcjLklWq1I8BuzzZ/2TqwkwQh0r68R
vDxF3l+eAXiz4hIAeXjG6wC/EFCTE/AOHGfZHJ88iV7R88HRVUJyLnbKe73NwQwe
zqNzUqlcIg9f/uNCRXI5bgWNhA21qeXjXdnXcbaBIzDPZb46DxHPrZxEmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGBwQkVW4WFsffu0YmEhiLXmQM5MB8GA1UdIwQY
MBaAFBSkulC0aPzurBlGJ+mLofV960/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgt
YTBkNDhkMGQ3NDYxLzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgtYTBkNDhkMGQ3NDYx
LzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4AeCImj
H7e/Mu5eWUd4XxD9W2IoAJVomkdypGsvMQgQToTNILQxPl+5BSkocATi4eKuSNzy
D4Hb8a6j2SB1VQ9q9O1JVBA2W6cG5glqid7py9wcCrQtJ2EpkIUbnwKDaVLgpv6s
k4Bi/+9szzzWvaQi+2etJWzBsbHtJSIooMu1F26VVAf36r7nEsih/ulrNU2vwEv7
B+lzUeYZ+qA8raVFqT4GiVvkSuM0GRuBKXvRQTpbqTywsUL/KN4jc3LHCpYIyNs/
0+5lBPvCBwYLFPmomMtU44H1KT8nA5DJANsObBLtzMsQ863StVd91TOKAXaKVMK3
54GSdiR5K/bCeQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:51 2025 by rpki-client