Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File:                     KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier:          ULziCfmSezo7AO8Pbg9nWeZtCEMg8DbeDnfg4THkxMA=
Subject key identifier:   FB:52:EE:F8:09:6B:00:F7:47:98:5A:8A:83:60:0C:6F:A9:69:CB:20
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer:       /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial:       0197CF16C85510AD27C5CC758E111A868E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number:          15C2
Signing time:             Thu 03 Jul 2025 07:01:06 +0000
Manifest this update:     Thu 03 Jul 2025 07:01:06 +0000
Manifest next update:     Fri 04 Jul 2025 07:01:06 +0000
Files and hashes:         1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: 9pkCoFu77+UZcaWkDRQ5ACi9BC2sHQmP1JPo6ewZoFA=)
                          2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cf:16:c8:55:10:ad:27:c5:cc:75:8e:11:1a:86:8e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
        Validity
            Not Before: Jul  3 07:01:06 2025 GMT
            Not After : Jul  4 07:01:06 2025 GMT
        Subject: CN=fb52eef8096b00f747985a8a83600c6fa969cb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4f:bf:4b:89:b5:f8:d3:37:d9:30:bf:67:75:
                    70:cc:b6:3d:1e:2a:2a:28:52:1f:bc:3a:14:fe:08:
                    45:3a:87:9c:a9:da:3d:8f:12:8b:af:5e:86:78:bf:
                    ad:01:c5:2d:07:24:c6:0c:21:40:9e:26:45:5d:56:
                    cb:02:07:ca:c5:21:95:2f:24:10:1a:d5:de:28:a0:
                    f0:5c:0b:98:10:d6:b7:ab:13:2b:d0:9d:c4:c0:c8:
                    4e:0e:07:26:47:f2:77:6f:a3:32:80:dd:0e:6a:8c:
                    e6:6b:0c:8d:b6:a5:ed:54:ea:10:fa:de:1a:3b:e8:
                    18:64:e8:c9:70:76:ea:8d:e9:8a:2c:85:18:17:88:
                    e3:4d:2c:4a:06:49:5c:29:82:5f:3f:1c:12:0c:b6:
                    11:53:d7:15:2c:66:4c:28:e9:53:a6:98:d1:d4:d7:
                    f6:7e:58:05:fc:c7:2b:6b:68:d6:20:be:72:4c:7e:
                    d7:af:c5:42:80:99:5f:c5:63:c6:95:bd:17:89:41:
                    be:36:f8:36:c9:f8:80:3d:12:9f:22:52:db:11:20:
                    76:3d:f0:71:13:38:1d:8b:ff:7b:d0:43:b9:18:c1:
                    6b:1d:1c:2b:a4:71:77:73:b7:ee:bd:d6:68:57:2a:
                    fe:d5:c2:21:5a:cf:da:52:af:86:02:ee:10:80:f6:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:52:EE:F8:09:6B:00:F7:47:98:5A:8A:83:60:0C:6F:A9:69:CB:20
            X509v3 Authority Key Identifier:
                keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:07:2b:5e:72:6b:55:5d:e6:fd:a9:e8:29:a4:15:81:23:d8:
         7a:a6:f6:15:3f:fc:3b:b3:8a:a0:4d:5c:fc:f1:6f:40:f0:32:
         fe:aa:8c:9c:6d:fb:d9:03:77:34:91:f8:10:62:d1:d9:fb:b9:
         c7:c3:84:51:60:64:36:5d:51:60:c4:9b:f8:b6:50:bf:15:ba:
         9c:c9:90:59:54:b0:f1:fa:71:33:04:0d:e4:5f:db:d6:2c:35:
         a4:16:8e:bf:4a:e6:a4:b4:20:46:07:fe:12:06:59:18:4e:6a:
         54:40:56:21:ba:4d:eb:58:6a:7b:c2:f8:0c:3d:1f:3b:18:ab:
         c9:63:f1:6f:3a:18:28:6a:c0:51:f5:ea:d4:48:a8:af:2c:12:
         57:c6:27:8a:7f:85:a1:36:7a:a7:7e:f7:f0:4e:8d:6c:4d:98:
         7f:c3:d3:fb:e4:9c:9a:d4:c9:cc:b5:88:a5:16:90:36:61:31:
         4b:3d:4d:0c:24:94:9f:86:3e:b4:94:5a:ea:ff:4c:77:de:d2:
         71:ef:25:20:b1:c3:83:0e:c4:00:80:7d:c9:b5:3e:a2:9f:ff:
         f6:a4:13:01:1f:f6:6e:58:c9:79:13:54:9e:a0:ac:c6:e4:45:
         27:23:d6:b5:81:87:fe:a2:e6:1b:7e:cd:87:81:8e:70:33:ca:
         86:2e:78:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfPFshVEK0nxcx1jhEaho4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NWRlZTQwMTgwOGUxYjVlYzA0YjVjMWFiZTVkOWRlNWEz
ODU4YWMwHhcNMjUwNzAzMDcwMTA2WhcNMjUwNzA0MDcwMTA2WjAzMTEwLwYDVQQD
EyhmYjUyZWVmODA5NmIwMGY3NDc5ODVhOGE4MzYwMGM2ZmE5NjljYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k+/S4m1+NM32TC/Z3VwzLY9Hioq
KFIfvDoU/ghFOoecqdo9jxKLr16GeL+tAcUtByTGDCFAniZFXVbLAgfKxSGVLyQQ
GtXeKKDwXAuYENa3qxMr0J3EwMhODgcmR/J3b6MygN0OaozmawyNtqXtVOoQ+t4a
O+gYZOjJcHbqjemKLIUYF4jjTSxKBklcKYJfPxwSDLYRU9cVLGZMKOlTppjR1Nf2
flgF/Mcra2jWIL5yTH7Xr8VCgJlfxWPGlb0XiUG+Nvg2yfiAPRKfIlLbESB2PfBx
Ezgdi/970EO5GMFrHRwrpHF3c7fuvdZoVyr+1cIhWs/aUq+GAu4QgPY1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtS7vgJawD3R5haioNgDG+pacsgMB8GA1UdIwQY
MBaAFChd7kAYCOG17AS1wavl2d5aOFisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQt
OTgwYTRiNTQ0MDU2LzEvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQtOTgwYTRiNTQ0MDU2
LzEvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAcrXnJr
VV3m/anoKaQVgSPYeqb2FT/8O7OKoE1c/PFvQPAy/qqMnG372QN3NJH4EGLR2fu5
x8OEUWBkNl1RYMSb+LZQvxW6nMmQWVSw8fpxMwQN5F/b1iw1pBaOv0rmpLQgRgf+
EgZZGE5qVEBWIbpN61hqe8L4DD0fOxiryWPxbzoYKGrAUfXq1EiorywSV8Ynin+F
oTZ6p3738E6NbE2Yf8PT++ScmtTJzLWIpRaQNmExSz1NDCSUn4Y+tJRa6v9Md97S
ce8lILHDgw7EAIB9ybU+op//9qQTAR/2bljJeRNUnqCsxuRFJyPWtYGH/qLmG37N
h4GOcDPKhi542w==
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:11:02 2025 by rpki-client