Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          wsQiiljsHjP08rziDYLsaY0KpUJ0dldkIlIi3atfNjs=
Subject key identifier:   EB:FA:64:78:09:9E:FD:08:06:66:85:C7:26:6B:4F:0F:EB:71:C2:44
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       0196BE936179DCB0A919845157A145D4AAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          0255
Signing time:             Sun 11 May 2025 09:00:51 +0000
Manifest this update:     Sun 11 May 2025 09:00:51 +0000
Manifest next update:     Mon 12 May 2025 09:00:51 +0000
Files and hashes:         1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: rMThKaTUCXMEZ5SItJJlK1r6Z8TuPpyQV/NmlYu+a7M=)
                          2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:61:79:dc:b0:a9:19:84:51:57:a1:45:d4:aa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: May 11 09:00:51 2025 GMT
            Not After : May 12 09:00:51 2025 GMT
        Subject: CN=ebfa6478099efd08066685c7266b4f0feb71c244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:18:78:67:9d:94:c2:16:cd:fd:e7:6e:3a:
                    50:72:be:4c:a6:2b:95:23:43:a4:45:d3:3a:24:6f:
                    fb:0a:57:9d:99:41:60:d4:e6:6d:e8:73:3c:3d:d8:
                    ee:74:cc:03:44:f7:7d:9a:11:6b:1d:83:12:c3:e5:
                    37:dc:9e:84:d2:b4:fc:6f:70:56:5b:73:50:e3:92:
                    f0:54:fe:20:31:76:52:29:79:1c:1f:d5:c8:75:0b:
                    cd:f1:c2:7a:53:70:28:ed:5e:55:87:ad:f0:f7:aa:
                    c0:03:05:16:01:43:63:54:df:fc:3b:48:e4:fe:f9:
                    70:e2:a2:d5:5b:7b:5c:84:5f:77:5a:03:3a:36:a4:
                    1d:f4:93:c4:2c:f3:32:a7:01:73:2d:89:5b:f3:ef:
                    95:5d:42:a8:d6:3c:5d:4f:51:e0:71:56:cd:a7:33:
                    ad:d9:ed:e0:9b:0e:c7:ca:4d:8e:36:1e:6a:52:74:
                    b6:0b:56:dd:8f:aa:d9:3b:da:19:bf:8e:f7:87:20:
                    83:69:a5:9d:a6:0c:2c:ed:11:13:9f:32:9f:3f:8c:
                    4a:f7:02:07:e1:f1:55:c0:2d:d4:3e:e2:a8:ed:6e:
                    a2:a7:44:e9:2b:75:8b:9c:d1:b2:c8:41:33:bb:e5:
                    cb:73:09:83:2c:26:11:5c:58:9d:c9:cc:07:0e:d5:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FA:64:78:09:9E:FD:08:06:66:85:C7:26:6B:4F:0F:EB:71:C2:44
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:ea:6e:85:b9:9c:9a:ee:72:bb:a6:ef:25:36:50:2d:3b:
         9c:b8:c6:d7:88:aa:5d:25:82:20:4e:f6:b0:30:da:a7:c9:51:
         31:bc:0d:06:ed:1b:30:0e:46:9e:29:26:92:6e:81:68:ab:17:
         59:b6:9d:b6:47:57:c1:f5:e6:16:2f:43:d1:81:da:0c:a1:5d:
         86:24:26:6e:bd:7a:4e:73:f9:7e:64:fc:57:30:54:50:45:fb:
         37:82:8e:18:11:e3:53:24:79:02:c1:cd:08:0d:d3:55:4c:eb:
         12:84:65:08:09:43:b0:cd:d9:43:84:01:48:68:43:2e:02:19:
         5a:e0:cd:63:9c:b6:2b:ee:be:4b:54:de:cd:af:b7:fc:a5:21:
         ee:da:fe:2a:23:ef:ab:4e:24:13:e2:33:dc:b5:8b:c8:53:1e:
         f5:15:a7:76:8d:87:a8:24:31:80:e4:48:38:7f:62:1f:72:19:
         fd:e2:0f:f4:51:14:71:8e:5f:5e:cc:c5:a8:25:3c:00:02:f4:
         a7:ad:9b:53:b0:1e:64:b1:52:4f:f0:34:90:fc:4b:b3:02:07:
         b1:7e:4b:93:4b:c8:e2:ed:65:27:16:84:31:34:71:f2:bb:3e:
         9e:40:55:cd:77:4e:54:f4:e2:aa:9e:d5:46:08:11:b5:7f:e9:
         7a:d6:19:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+k2F53LCpGYRRV6FF1KriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2ZjZmNlZjgyZjdkMWM1OTA4YTJlNWEwMDlmZDFiMzQz
OTgxN2MwHhcNMjUwNTExMDkwMDUxWhcNMjUwNTEyMDkwMDUxWjAzMTEwLwYDVQQD
EyhlYmZhNjQ3ODA5OWVmZDA4MDY2Njg1YzcyNjZiNGYwZmViNzFjMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNIYeGedlMIWzf3nbjpQcr5MpiuV
I0OkRdM6JG/7CledmUFg1OZt6HM8PdjudMwDRPd9mhFrHYMSw+U33J6E0rT8b3BW
W3NQ45LwVP4gMXZSKXkcH9XIdQvN8cJ6U3Ao7V5Vh63w96rAAwUWAUNjVN/8O0jk
/vlw4qLVW3tchF93WgM6NqQd9JPELPMypwFzLYlb8++VXUKo1jxdT1HgcVbNpzOt
2e3gmw7Hyk2ONh5qUnS2C1bdj6rZO9oZv473hyCDaaWdpgws7RETnzKfP4xK9wIH
4fFVwC3UPuKo7W6ip0TpK3WLnNGyyEEzu+XLcwmDLCYRXFidycwHDtVbRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv6ZHgJnv0IBmaFxyZrTw/rccJEMB8GA1UdIwQY
MBaAFBXPz874L30cWQii5aAJ/Rs0OYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMzc5MGQtOTcyMy00YjUzLWFkMTMt
NjExZWE0NDJkMmYzLzEvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMzc5MGQtOTcyMy00YjUzLWFkMTMtNjExZWE0NDJkMmYz
LzEvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeerqboW5
nJrucrum7yU2UC07nLjG14iqXSWCIE72sDDap8lRMbwNBu0bMA5Gnikmkm6BaKsX
WbadtkdXwfXmFi9D0YHaDKFdhiQmbr16TnP5fmT8VzBUUEX7N4KOGBHjUyR5AsHN
CA3TVUzrEoRlCAlDsM3ZQ4QBSGhDLgIZWuDNY5y2K+6+S1Teza+3/KUh7tr+KiPv
q04kE+Iz3LWLyFMe9RWndo2HqCQxgORIOH9iH3IZ/eIP9FEUcY5fXszFqCU8AAL0
p62bU7AeZLFST/A0kPxLswIHsX5Lk0vI4u1lJxaEMTRx8rs+nkBVzXdOVPTiqp7V
RggRtX/petYZ2Q==
-----END CERTIFICATE-----
Generated at Sun May 11 14:54:22 2025 by rpki-client