Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File:                     fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier:          rCbBJqWwW0/2Q8NClVm0mJerrqHgSKGhGG2RN8p0luI=
Subject key identifier:   6C:C7:5E:59:70:47:CB:5B:2A:1B:BD:7A:63:D8:70:6B:E2:91:3B:56
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer:       /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial:       0198D65FB121B155BBD64685C221A84E3CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number:          14FC
Signing time:             Sat 23 Aug 2025 10:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:52 +0000
Files and hashes:         1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: PMqF/vQgzQj3iPoeQ4+cA1kdOkQBnSIJxvE2F7R2+6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:b1:21:b1:55:bb:d6:46:85:c2:21:a8:4e:3c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Validity
            Not Before: Aug 23 10:00:52 2025 GMT
            Not After : Aug 24 10:00:52 2025 GMT
        Subject: CN=6cc75e597047cb5b2a1bbd7a63d8706be2913b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:fc:a5:41:54:35:5e:49:ef:75:69:01:b9:
                    1d:a5:ff:59:0a:ea:cd:15:b7:a2:65:e5:e2:df:7b:
                    9f:43:65:e3:0c:f0:4c:30:ef:f5:e3:77:1b:9d:ff:
                    fa:d3:19:39:8d:07:21:50:e2:f6:b5:b7:6f:af:42:
                    59:c6:32:e4:0f:0b:3b:6f:f8:09:8a:8a:bb:08:d4:
                    c6:53:e2:26:0d:ad:0a:0e:9c:b5:03:0b:7c:fd:c3:
                    da:d4:64:4a:09:de:df:d0:e8:15:b6:6f:9e:0f:15:
                    29:47:01:ec:ec:0d:a2:6d:80:c8:4a:5d:fe:2c:94:
                    8d:85:56:ce:0c:f2:7d:1b:ce:9d:59:37:15:13:2c:
                    46:b0:30:8d:01:01:85:ca:44:16:0e:fa:d0:93:e9:
                    91:64:43:2f:60:1f:e9:f8:2c:22:8d:cb:9f:c6:38:
                    c4:4c:5c:54:58:6e:aa:2a:fc:11:f8:c9:af:ff:b0:
                    d0:70:78:5e:f9:40:e1:ed:f6:90:00:50:1b:4e:64:
                    6c:75:9f:d4:3f:55:75:87:aa:e4:54:09:57:29:3f:
                    99:27:bd:f0:7c:51:28:75:78:4a:2a:4e:ae:97:dc:
                    65:d7:08:43:c1:51:32:58:85:0b:34:22:24:00:69:
                    46:a9:e8:49:50:89:0d:92:d9:ab:37:83:58:f7:e1:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C7:5E:59:70:47:CB:5B:2A:1B:BD:7A:63:D8:70:6B:E2:91:3B:56
            X509v3 Authority Key Identifier:
                keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:c6:0d:c9:2d:8e:26:18:06:f4:0d:4b:94:79:6f:45:ba:
         1d:00:d0:bd:3c:e6:bf:da:27:9c:d0:71:04:10:f2:83:83:fa:
         7c:15:6e:1d:de:0a:55:d6:d7:8e:31:9b:f8:f5:37:c5:52:91:
         4c:7c:b9:1e:3e:92:4d:ae:52:50:66:65:1c:92:70:ca:1c:41:
         c1:ff:19:11:73:0f:0e:86:4f:0f:60:88:03:de:c5:fc:c9:02:
         f3:a8:b4:97:24:43:64:e1:bf:c5:da:43:16:2b:c0:3d:6b:0c:
         62:01:58:67:3b:4d:05:3a:46:75:09:32:42:bb:c6:e8:a2:86:
         78:3e:bf:ab:6f:fd:1e:f7:b9:f7:df:7f:6d:30:4d:ed:6a:92:
         0c:6b:a1:4d:09:9a:15:54:b0:b0:d5:6f:94:01:20:ce:58:f9:
         dd:62:7e:83:a1:9f:27:57:03:54:0a:97:d1:ec:10:3b:8c:bb:
         b6:3b:5a:67:d1:6d:19:63:d0:43:49:07:09:62:01:3d:1e:b2:
         dc:ee:bd:1f:d7:6f:bf:d4:72:fb:ae:d5:d8:95:34:39:4a:60:
         8e:ad:db:24:5b:b6:2b:6e:85:0b:ca:35:ce:24:ef:ef:00:76:
         eb:6d:5f:73:82:3f:68:2a:c1:92:5b:6f:7d:40:5a:3c:c5:ed:
         e7:eb:32:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX7EhsVW71kaFwiGoTjzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlM2ZiODUzZjg0MGIzNzcwY2QzZmE0MmIzZjlkMmY5YmU3
ZDFiN2YwHhcNMjUwODIzMTAwMDUyWhcNMjUwODI0MTAwMDUyWjAzMTEwLwYDVQQD
Eyg2Y2M3NWU1OTcwNDdjYjViMmExYmJkN2E2M2Q4NzA2YmUyOTEzYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jb8pUFUNV5J73VpAbkdpf9ZCurN
FbeiZeXi33ufQ2XjDPBMMO/143cbnf/60xk5jQchUOL2tbdvr0JZxjLkDws7b/gJ
ioq7CNTGU+ImDa0KDpy1Awt8/cPa1GRKCd7f0OgVtm+eDxUpRwHs7A2ibYDISl3+
LJSNhVbODPJ9G86dWTcVEyxGsDCNAQGFykQWDvrQk+mRZEMvYB/p+CwijcufxjjE
TFxUWG6qKvwR+Mmv/7DQcHhe+UDh7faQAFAbTmRsdZ/UP1V1h6rkVAlXKT+ZJ73w
fFEodXhKKk6ul9xl1whDwVEyWIULNCIkAGlGqehJUIkNktmrN4NY9+GQvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzHXllwR8tbKhu9emPYcGvikTtWMB8GA1UdIwQY
MBaAFH4/uFP4QLN3DNP6QrP50vm+fRt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYt
MTYzZjBlMDc3ZjIzLzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYtMTYzZjBlMDc3ZjIz
LzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQrGDckt
jiYYBvQNS5R5b0W6HQDQvTzmv9onnNBxBBDyg4P6fBVuHd4KVdbXjjGb+PU3xVKR
THy5Hj6STa5SUGZlHJJwyhxBwf8ZEXMPDoZPD2CIA97F/MkC86i0lyRDZOG/xdpD
FivAPWsMYgFYZztNBTpGdQkyQrvG6KKGeD6/q2/9Hve5999/bTBN7WqSDGuhTQma
FVSwsNVvlAEgzlj53WJ+g6GfJ1cDVAqX0ewQO4y7tjtaZ9FtGWPQQ0kHCWIBPR6y
3O69H9dvv9Ry+67V2JU0OUpgjq3bJFu2K26FC8o1ziTv7wB2621fc4I/aCrBkltv
fUBaPMXt5+sygw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:50 2025 by rpki-client