Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File:                     Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier:          6arRBgXuOYgI57nUT7uoCQiHqDxYKUhY8M8Q0B8G47U=
Subject key identifier:   2C:96:24:A8:FE:A0:83:65:DD:14:14:1B:90:41:D1:00:1B:BF:26:6F
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer:       /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial:       0198D5BB9BABAA8B6282D4038BF07C437405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number:          0F16
Signing time:             Sat 23 Aug 2025 07:01:38 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:38 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:38 +0000
Files and hashes:         1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: 6xThqsMVFPxTsJ2TWfyKUJlcHMnsE6L2eKxcPiHL8UE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:9b:ab:aa:8b:62:82:d4:03:8b:f0:7c:43:74:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
        Validity
            Not Before: Aug 23 07:01:38 2025 GMT
            Not After : Aug 24 07:01:38 2025 GMT
        Subject: CN=2c9624a8fea08365dd14141b9041d1001bbf266f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:5d:c0:3c:00:99:c8:f5:0d:4d:52:8b:46:
                    46:0c:3b:81:fb:48:3c:bb:ab:f4:56:70:99:1b:30:
                    ef:ba:be:23:ad:43:cb:6a:34:c9:7a:80:9a:14:93:
                    d3:6c:89:ad:23:be:6f:81:e7:0a:e6:0d:3e:75:86:
                    33:56:24:bc:5d:57:0d:0b:80:13:49:2f:e0:d4:3d:
                    b4:4e:20:0c:f9:43:2f:29:03:60:5b:30:da:d0:96:
                    26:93:23:25:a0:65:0f:c3:d2:4a:0d:a7:f2:41:e1:
                    7e:65:da:92:0a:48:d1:22:fd:21:1a:6a:0c:40:49:
                    29:c1:ae:35:52:4a:56:00:72:23:d5:73:c5:85:de:
                    27:bf:0c:ce:b0:66:3b:53:f1:4a:20:01:a3:d5:76:
                    e9:d0:5b:aa:09:00:d2:4a:52:4f:a1:82:4b:b2:7e:
                    fd:9d:c9:b4:60:a3:f0:20:c7:a9:ac:ba:a7:56:91:
                    9e:ab:dd:be:d0:e0:fe:b0:e1:7e:ed:65:7b:fa:4b:
                    2a:f6:51:92:03:e4:65:56:75:51:85:36:cd:77:b4:
                    db:aa:26:1f:63:c6:11:75:1b:e8:4b:8b:43:ec:b6:
                    37:1c:ba:84:d4:29:5b:29:6e:db:7b:f7:50:cd:1d:
                    1a:e3:04:84:5b:fc:00:56:6c:1a:a8:65:98:7b:73:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:96:24:A8:FE:A0:83:65:DD:14:14:1B:90:41:D1:00:1B:BF:26:6F
            X509v3 Authority Key Identifier:
                keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:c7:fc:57:9e:3b:6a:bc:43:db:15:8a:8b:9d:be:bb:cc:
         35:4b:30:bf:ca:10:6d:0c:1d:52:42:2f:f1:c9:07:09:7e:90:
         98:d9:c1:62:7e:d0:ec:b4:73:a1:04:d0:c3:bd:26:30:71:e6:
         0e:40:c0:3f:19:9e:80:10:98:f7:96:35:6f:78:35:de:b3:71:
         76:96:2c:a2:65:ba:74:7a:cd:02:25:99:87:da:7f:b6:0f:e5:
         f4:0f:ee:e4:8e:3b:c4:42:9d:34:00:e6:f8:58:7a:f6:4b:ec:
         b5:e1:aa:21:96:c1:34:94:40:19:dd:ed:08:82:10:5b:19:32:
         ae:e9:4d:37:12:9d:aa:e2:db:fb:7b:11:24:91:e6:b2:fd:a2:
         35:4a:b1:c2:3f:4a:c7:b2:c2:03:dd:23:24:93:fb:f2:a8:60:
         69:c0:81:75:22:29:07:be:67:8e:ac:c4:2e:60:1d:ce:16:83:
         63:07:0f:0a:9b:34:5e:6a:57:b8:74:32:2b:b7:af:1c:eb:c1:
         60:ac:56:c0:1e:01:a9:bb:7f:f5:3c:9f:4f:05:82:ac:d6:63:
         bd:36:fe:96:07:b7:67:9d:63:43:27:d7:14:03:3f:25:c8:cb:
         73:47:94:2e:80:7e:94:42:64:15:78:20:b2:3c:9d:5d:c3:3b:
         2f:aa:10:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5urqotigtQDi/B8Q3QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2
YzczMDcwHhcNMjUwODIzMDcwMTM4WhcNMjUwODI0MDcwMTM4WjAzMTEwLwYDVQQD
EygyYzk2MjRhOGZlYTA4MzY1ZGQxNDE0MWI5MDQxZDEwMDFiYmYyNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLRdwDwAmcj1DU1Si0ZGDDuB+0g8
u6v0VnCZGzDvur4jrUPLajTJeoCaFJPTbImtI75vgecK5g0+dYYzViS8XVcNC4AT
SS/g1D20TiAM+UMvKQNgWzDa0JYmkyMloGUPw9JKDafyQeF+ZdqSCkjRIv0hGmoM
QEkpwa41UkpWAHIj1XPFhd4nvwzOsGY7U/FKIAGj1Xbp0FuqCQDSSlJPoYJLsn79
ncm0YKPwIMeprLqnVpGeq92+0OD+sOF+7WV7+ksq9lGSA+RlVnVRhTbNd7TbqiYf
Y8YRdRvoS4tD7LY3HLqE1ClbKW7be/dQzR0a4wSEW/wAVmwaqGWYe3OrCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyWJKj+oINl3RQUG5BB0QAbvyZvMB8GA1UdIwQY
MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt
OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2
LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQarH/Fee
O2q8Q9sVioudvrvMNUswv8oQbQwdUkIv8ckHCX6QmNnBYn7Q7LRzoQTQw70mMHHm
DkDAPxmegBCY95Y1b3g13rNxdpYsomW6dHrNAiWZh9p/tg/l9A/u5I47xEKdNADm
+Fh69kvsteGqIZbBNJRAGd3tCIIQWxkyrulNNxKdquLb+3sRJJHmsv2iNUqxwj9K
x7LCA90jJJP78qhgacCBdSIpB75njqzELmAdzhaDYwcPCps0XmpXuHQyK7evHOvB
YKxWwB4Bqbt/9TyfTwWCrNZjvTb+lge3Z51jQyfXFAM/JcjLc0eULoB+lEJkFXgg
sjydXcM7L6oQuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:14 2025 by rpki-client