Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          TCl7HiSX9aBIqq3lU+6wIqHhTfiPri8FmPYFXfLZgqc=
Subject key identifier:   08:ED:CE:9B:8D:BD:22:E0:63:D1:4F:E9:2C:C5:25:70:49:63:C2:A2
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       0198D583BF6A677624FB90715DC3E3ED2188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 06:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:37 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: tdYRzKDHmcHwt6uk1q0av92Zh0deoQj0AlAYOekGp/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:bf:6a:67:76:24:fb:90:71:5d:c3:e3:ed:21:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Aug 23 06:00:37 2025 GMT
            Not After : Aug 24 06:00:37 2025 GMT
        Subject: CN=08edce9b8dbd22e063d14fe92cc525704963c2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:33:6a:ce:93:34:ea:93:d5:a2:b6:1e:9e:
                    87:73:5d:f1:19:8d:e6:c2:d8:ee:35:8a:90:c5:2a:
                    9e:45:0f:cf:c9:bf:de:01:06:3d:62:fe:dc:8e:e8:
                    c7:c7:59:9f:2c:17:88:cd:02:2a:bc:21:6b:b6:5b:
                    fd:4a:c1:73:d8:d7:35:60:55:d5:ec:34:b2:e8:e0:
                    de:4a:0b:29:5d:d6:c1:c8:6d:03:ea:3e:50:23:02:
                    52:89:3e:ab:db:c0:4d:b8:62:bd:62:1d:3e:2d:28:
                    5b:8a:d4:85:c8:fb:0f:08:cd:e5:26:65:c5:70:c2:
                    b7:42:01:9e:b0:5e:a9:97:1f:fd:be:32:60:d0:2f:
                    7f:e4:d0:96:4b:49:33:a1:45:e2:f0:f6:be:bb:db:
                    3d:d0:1b:52:49:f4:23:18:68:d2:44:5b:cb:f9:2d:
                    9e:52:73:20:44:9e:53:5e:12:75:ed:34:4f:f7:75:
                    25:ea:25:77:35:93:12:f1:8a:07:96:e2:bc:a6:ca:
                    a6:82:92:f0:fc:d4:96:5a:df:7a:ea:6b:f1:7d:14:
                    cb:9f:ec:b5:30:8c:a4:19:d2:3f:41:36:30:d0:1b:
                    1e:ba:09:b0:4e:a5:3f:16:f9:c7:13:f3:f0:5b:9b:
                    df:5b:8f:f5:f9:72:54:f9:d4:26:e4:8c:c8:54:f4:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:CE:9B:8D:BD:22:E0:63:D1:4F:E9:2C:C5:25:70:49:63:C2:A2
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:e1:00:73:e4:2b:c5:1e:f1:4c:b6:07:20:a9:42:0d:51:
         89:4a:1e:48:38:ca:af:8f:2b:5d:a7:07:b3:a1:35:36:f5:5b:
         32:17:03:87:a5:a7:51:bc:de:a4:d1:f0:91:6b:43:9a:2d:c4:
         6d:19:94:d0:a5:33:e8:1c:a8:08:fe:f0:f3:58:fa:7f:02:df:
         0d:60:e0:6e:1b:77:01:b6:26:b0:de:e5:48:d9:43:98:52:ea:
         96:ac:c8:ed:40:d1:e0:fc:80:83:53:53:58:d0:91:b8:dd:71:
         de:09:d2:e1:d0:27:28:17:5c:70:1b:70:8c:af:cd:31:d1:6f:
         cf:22:5c:2d:c0:88:05:89:65:54:1f:da:3c:f6:a9:9f:33:a3:
         f7:aa:2b:00:dc:49:83:a2:56:86:4c:31:5e:5f:22:38:c9:f6:
         35:59:3b:c0:d7:eb:fe:97:5d:22:33:fa:e4:c2:9a:b9:87:33:
         55:65:75:e8:9a:16:f8:3d:40:f7:34:bf:36:75:4a:ad:31:31:
         a2:90:9a:26:d6:2d:02:a4:5c:80:39:3e:2f:71:42:33:d8:b0:
         1a:fa:60:57:2a:8c:42:1e:17:e2:90:17:78:9b:71:4a:4d:3d:
         ee:ba:a2:cc:21:e1:e3:03:8d:fa:b9:6c:4c:14:54:85:20:0f:
         c1:aa:64:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg79qZ3Yk+5BxXcPj7SGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YmE2NmJjMGZjM2IyNmJhZGQ3MmZiNWJiODM4N2I2ZGJj
MzNmNzcwHhcNMjUwODIzMDYwMDM3WhcNMjUwODI0MDYwMDM3WjAzMTEwLwYDVQQD
EygwOGVkY2U5YjhkYmQyMmUwNjNkMTRmZTkyY2M1MjU3MDQ5NjNjMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm70zas6TNOqT1aK2Hp6Hc13xGY3m
wtjuNYqQxSqeRQ/Pyb/eAQY9Yv7cjujHx1mfLBeIzQIqvCFrtlv9SsFz2Nc1YFXV
7DSy6ODeSgspXdbByG0D6j5QIwJSiT6r28BNuGK9Yh0+LShbitSFyPsPCM3lJmXF
cMK3QgGesF6plx/9vjJg0C9/5NCWS0kzoUXi8Pa+u9s90BtSSfQjGGjSRFvL+S2e
UnMgRJ5TXhJ17TRP93Ul6iV3NZMS8YoHluK8psqmgpLw/NSWWt966mvxfRTLn+y1
MIykGdI/QTYw0BseugmwTqU/FvnHE/PwW5vfW4/1+XJU+dQm5IzIVPRw1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjtzpuNvSLgY9FP6SzFJXBJY8KiMB8GA1UdIwQY
MBaAFBW6ZrwPw7JrrdcvtbuDh7bbwz93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTI2N2UtODk0OS00MzE4LTgzMzMt
YzE3ODRkZmQ2Zjc5LzEvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yZTI2N2UtODk0OS00MzE4LTgzMzMtYzE3ODRkZmQ2Zjc5
LzEvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/DhAHPk
K8Ue8Uy2ByCpQg1RiUoeSDjKr48rXacHs6E1NvVbMhcDh6WnUbzepNHwkWtDmi3E
bRmU0KUz6ByoCP7w81j6fwLfDWDgbht3AbYmsN7lSNlDmFLqlqzI7UDR4PyAg1NT
WNCRuN1x3gnS4dAnKBdccBtwjK/NMdFvzyJcLcCIBYllVB/aPPapnzOj96orANxJ
g6JWhkwxXl8iOMn2NVk7wNfr/pddIjP65MKauYczVWV16JoW+D1A9zS/NnVKrTEx
opCaJtYtAqRcgDk+L3FCM9iwGvpgVyqMQh4X4pAXeJtxSk097rqizCHh4wON+rls
TBRUhSAPwapkqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:23 2025 by rpki-client