Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          ek8ABVWjchR0zdZYWtcqSq4V45cc4ydFDB1vli/LmEM=
Subject key identifier:   4C:10:DA:BE:10:0C:77:99:E9:B7:35:9A:57:2B:9A:DF:7C:F6:B8:4F
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       0197B7B33C2CE9FE636CABBB6E41EEAAF826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          02D6
Signing time:             Sat 28 Jun 2025 18:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:06 +0000
Files and hashes:         1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: 3Uj1210xmBNU5qhXJzPK2LYUnbj+5JZAzmGP46LOpK0=)
                          2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:3c:2c:e9:fe:63:6c:ab:bb:6e:41:ee:aa:f8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Jun 28 18:01:06 2025 GMT
            Not After : Jun 29 18:01:06 2025 GMT
        Subject: CN=4c10dabe100c7799e9b7359a572b9adf7cf6b84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:93:f3:cd:67:d5:05:d3:d6:ed:d4:c4:9f:
                    07:ac:c9:9e:03:8c:cf:bf:0b:47:fd:34:22:98:9a:
                    5f:5c:0e:8a:8d:17:f6:98:9e:98:1b:00:28:35:31:
                    80:b6:9f:6e:e8:61:0f:50:57:48:13:aa:6f:ab:f9:
                    c1:5d:6e:5e:05:05:a7:fa:68:82:6d:86:3d:a3:83:
                    68:bb:e6:89:69:f1:43:04:b1:7f:57:c6:a8:e1:49:
                    de:62:66:f7:27:30:72:38:8b:09:45:98:ea:1b:85:
                    7a:24:e8:fc:89:61:dd:42:a1:9d:00:1e:32:9e:c6:
                    b9:c3:0b:f6:99:7e:43:e5:47:84:6e:a2:e6:a4:11:
                    7c:9c:e1:8b:7b:a3:36:23:98:7c:d8:8f:d1:63:05:
                    96:bd:2d:3d:f4:ba:71:c5:b2:29:98:eb:0f:97:2d:
                    a6:c4:77:ee:60:82:7f:1c:6c:5e:04:94:6c:d1:e1:
                    b2:5b:59:f2:4c:32:2b:ce:21:82:c1:66:4c:bd:12:
                    f1:a8:58:ac:91:81:05:63:c7:e8:4c:e3:3f:cc:3b:
                    bc:6c:32:13:85:ce:b3:f2:c2:aa:44:e5:cf:56:47:
                    a5:7d:7b:3d:5b:3e:8a:44:56:8e:b0:e8:e1:c6:0a:
                    00:6c:2a:37:d0:2d:16:88:a3:a0:ee:0d:85:de:a4:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:10:DA:BE:10:0C:77:99:E9:B7:35:9A:57:2B:9A:DF:7C:F6:B8:4F
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:d9:2f:13:a1:8c:77:3d:a2:17:55:b3:be:6d:48:6d:31:
         19:31:cf:bd:1b:7a:3a:3c:e9:3d:b2:53:65:b2:40:e6:f5:36:
         60:ef:8a:a7:1a:3a:b2:f1:fe:49:56:d2:aa:30:ff:31:c8:69:
         54:a1:e4:27:83:18:db:d3:5c:88:21:90:d2:2b:03:97:7f:bb:
         b7:94:0f:01:4a:9a:41:8a:b1:d1:ba:13:73:41:66:89:ac:eb:
         a6:03:97:dd:cf:61:b4:a9:05:30:b4:94:fe:0a:7b:84:b2:59:
         74:83:ed:58:2f:52:dc:49:f1:f5:56:e5:5b:b4:32:33:5d:a1:
         ae:15:70:c7:d8:ee:3c:20:64:63:e7:fe:d5:62:a9:6f:47:ce:
         64:37:6b:a7:fd:89:7a:13:83:aa:89:1b:ef:fd:3a:99:dc:fb:
         6d:14:93:17:fd:e8:e1:66:33:be:05:34:6b:6d:bc:50:eb:75:
         c0:9d:fc:a5:61:54:2a:bd:92:7d:e2:6c:5a:e4:4f:50:96:18:
         3e:5c:30:22:96:4b:97:68:7b:10:05:a9:92:e6:00:e4:ab:4b:
         73:46:1f:6c:55:3e:2b:f1:a6:64:16:50:90:b7:9d:6d:af:c0:
         2f:af:40:cd:05:e6:22:37:ce:f7:10:c0:8d:1b:c1:07:8c:94:
         6d:33:fe:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3szws6f5jbKu7bkHuqvgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2ZjZmNlZjgyZjdkMWM1OTA4YTJlNWEwMDlmZDFiMzQz
OTgxN2MwHhcNMjUwNjI4MTgwMTA2WhcNMjUwNjI5MTgwMTA2WjAzMTEwLwYDVQQD
Eyg0YzEwZGFiZTEwMGM3Nzk5ZTliNzM1OWE1NzJiOWFkZjdjZjZiODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFeT881n1QXT1u3UxJ8HrMmeA4zP
vwtH/TQimJpfXA6KjRf2mJ6YGwAoNTGAtp9u6GEPUFdIE6pvq/nBXW5eBQWn+miC
bYY9o4Nou+aJafFDBLF/V8ao4UneYmb3JzByOIsJRZjqG4V6JOj8iWHdQqGdAB4y
nsa5wwv2mX5D5UeEbqLmpBF8nOGLe6M2I5h82I/RYwWWvS099LpxxbIpmOsPly2m
xHfuYIJ/HGxeBJRs0eGyW1nyTDIrziGCwWZMvRLxqFiskYEFY8foTOM/zDu8bDIT
hc6z8sKqROXPVkelfXs9Wz6KRFaOsOjhxgoAbCo30C0WiKOg7g2F3qTE7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwQ2r4QDHeZ6bc1mlcrmt989rhPMB8GA1UdIwQY
MBaAFBXPz874L30cWQii5aAJ/Rs0OYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMzc5MGQtOTcyMy00YjUzLWFkMTMt
NjExZWE0NDJkMmYzLzEvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMzc5MGQtOTcyMy00YjUzLWFkMTMtNjExZWE0NDJkMmYz
LzEvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhrZLxOh
jHc9ohdVs75tSG0xGTHPvRt6OjzpPbJTZbJA5vU2YO+Kpxo6svH+SVbSqjD/Mchp
VKHkJ4MY29NciCGQ0isDl3+7t5QPAUqaQYqx0boTc0FmiazrpgOX3c9htKkFMLSU
/gp7hLJZdIPtWC9S3Enx9VblW7QyM12hrhVwx9juPCBkY+f+1WKpb0fOZDdrp/2J
ehODqokb7/06mdz7bRSTF/3o4WYzvgU0a228UOt1wJ38pWFUKr2SfeJsWuRPUJYY
PlwwIpZLl2h7EAWpkuYA5KtLc0YfbFU+K/GmZBZQkLedba/AL69AzQXmIjfO9xDA
jRvBB4yUbTP+Jw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:39 2025 by rpki-client