Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File:                     F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier:          w6SWCtosipQou/hx1DaszAz5t5TejN/oN9YeppwzxiA=
Subject key identifier:   07:EE:53:43:8E:3C:4B:42:FD:7A:E4:D7:6F:50:26:E3:A4:9A:5F:51
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer:       /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial:       0197B7451DCDED66280E81979EC82595B7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 16:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:49 +0000
Files and hashes:         1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: ACmrehgovHiXElkfd98VnrjxjyOQB2GHtqqouaHRZAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:1d:cd:ed:66:28:0e:81:97:9e:c8:25:95:b7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
        Validity
            Not Before: Jun 28 16:00:49 2025 GMT
            Not After : Jun 29 16:00:49 2025 GMT
        Subject: CN=07ee53438e3c4b42fd7ae4d76f5026e3a49a5f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:00:fe:01:f7:b8:92:65:f9:be:81:f5:1e:
                    6b:dc:ec:7c:7a:e6:e3:27:9a:51:00:52:8d:e5:55:
                    8c:46:30:ad:75:88:38:9e:06:9f:65:35:5d:af:04:
                    a0:91:8f:02:50:69:a5:6e:9b:92:b3:03:ca:3e:5f:
                    fb:90:2a:c9:2e:1c:43:a9:59:bb:c2:f2:6c:d4:69:
                    5f:b7:4c:4c:13:e4:4a:ca:68:2a:31:1e:46:53:98:
                    1c:ca:0c:88:50:d6:e9:04:16:e1:48:b0:ba:f0:d2:
                    25:f8:24:be:88:88:b6:b4:b1:ed:59:cb:c4:8c:dd:
                    b7:71:08:d0:ab:c8:ab:7b:ce:30:9c:27:92:51:11:
                    0e:b5:f8:dd:38:14:2a:a3:81:2e:ac:8c:54:4e:af:
                    ff:a3:5a:34:9a:7c:ab:05:64:06:bd:cc:ab:2b:b7:
                    65:42:4a:00:b1:02:13:70:9a:ae:c1:56:8e:92:f5:
                    f5:16:7e:7f:0e:59:43:3e:89:b9:30:f4:98:54:fd:
                    61:f7:d1:df:80:77:7d:e6:4e:7d:0c:67:17:3e:1f:
                    5a:e0:ad:e4:1c:df:9f:89:cd:d2:aa:ae:5a:83:5a:
                    82:f1:61:fb:33:a5:30:94:4f:eb:b6:27:45:72:db:
                    04:de:96:f3:a7:ea:1b:84:8e:db:25:d9:e5:fb:95:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:53:43:8E:3C:4B:42:FD:7A:E4:D7:6F:50:26:E3:A4:9A:5F:51
            X509v3 Authority Key Identifier:
                keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:cb:d6:cb:14:5f:16:3f:1a:f6:c6:02:92:e7:60:4a:8c:
         a6:3f:e4:97:3f:6c:ba:6a:09:0d:10:59:aa:d0:4c:93:c9:b9:
         e4:bf:1c:77:62:72:81:a7:d7:9d:9e:f1:0f:a4:3f:3b:e6:9f:
         0c:47:d3:ab:63:c5:31:e8:d1:37:e5:e8:1e:c0:22:ad:0e:8f:
         81:2e:45:eb:b1:bb:cb:34:08:67:e8:15:38:cf:fe:0f:8e:a7:
         bd:ab:e0:79:ce:25:c6:bf:40:eb:4c:19:23:c4:33:c5:71:22:
         ac:75:ab:3a:e4:a9:7d:63:fc:24:00:a7:fb:0f:1e:33:7e:2c:
         a8:b5:1e:ff:d3:42:5d:fd:f2:ba:b5:c2:a7:ae:cc:b1:f4:ba:
         94:73:41:33:29:ea:ba:c9:af:fe:c6:b9:d1:2c:27:b7:a6:79:
         38:65:ec:93:c8:f0:10:f1:73:03:3e:06:94:c8:d9:79:9c:ee:
         83:38:3f:6c:fa:b9:87:45:3a:64:a1:4b:55:77:4f:25:30:9e:
         7e:d1:43:34:46:64:d4:a5:0a:3b:85:b2:8a:21:35:9c:b7:e4:
         82:ff:41:dd:24:96:4e:4c:62:8f:95:40:21:d6:4d:4c:ec:2c:
         dc:10:79:97:71:96:ae:ea:1d:8a:3c:ef:8f:2f:84:70:ec:c2:
         2c:33:82:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RR3N7WYoDoGXnsgllbfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjYwMjVkOTM5ZTBjN2IxY2Y0NmMwMjE5ZWNmYTI1YTE5
NTM4MjUwHhcNMjUwNjI4MTYwMDQ5WhcNMjUwNjI5MTYwMDQ5WjAzMTEwLwYDVQQD
EygwN2VlNTM0MzhlM2M0YjQyZmQ3YWU0ZDc2ZjUwMjZlM2E0OWE1ZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kMA/gH3uJJl+b6B9R5r3Ox8eubj
J5pRAFKN5VWMRjCtdYg4ngafZTVdrwSgkY8CUGmlbpuSswPKPl/7kCrJLhxDqVm7
wvJs1Glft0xME+RKymgqMR5GU5gcygyIUNbpBBbhSLC68NIl+CS+iIi2tLHtWcvE
jN23cQjQq8ire84wnCeSUREOtfjdOBQqo4EurIxUTq//o1o0mnyrBWQGvcyrK7dl
QkoAsQITcJquwVaOkvX1Fn5/DllDPom5MPSYVP1h99HfgHd95k59DGcXPh9a4K3k
HN+fic3Sqq5ag1qC8WH7M6UwlE/rtidFctsE3pbzp+obhI7bJdnl+5WX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfuU0OOPEtC/Xrk129QJuOkml9RMB8GA1UdIwQY
MBaAFBdmAl2Tngx7HPRsAhns+iWhlTglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1Yjct
ZTI4MzUyZTc5ZjdkLzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1YjctZTI4MzUyZTc5Zjdk
LzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao7L1ssU
XxY/GvbGApLnYEqMpj/klz9sumoJDRBZqtBMk8m55L8cd2JygafXnZ7xD6Q/O+af
DEfTq2PFMejRN+XoHsAirQ6PgS5F67G7yzQIZ+gVOM/+D46nvavgec4lxr9A60wZ
I8QzxXEirHWrOuSpfWP8JACn+w8eM34sqLUe/9NCXf3yurXCp67MsfS6lHNBMynq
usmv/sa50Swnt6Z5OGXsk8jwEPFzAz4GlMjZeZzugzg/bPq5h0U6ZKFLVXdPJTCe
ftFDNEZk1KUKO4WyiiE1nLfkgv9B3SSWTkxij5VAIdZNTOws3BB5l3GWruodijzv
jy+EcOzCLDOCyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:09 2025 by rpki-client