Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
File:                     FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft (raw, json)
Hash identifier:          bcSgw8mje67lNh1fD54aw+JjI8EV3/Rf967pl1lUzDY=
Subject key identifier:   6E:A4:C6:E6:C6:C2:B4:4F:9F:B8:8C:68:DB:66:BC:F6:28:67:53:E7
Authority key identifier: 15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0
Certificate issuer:       /CN=153074d7fa28a43e40778ff4562f534fc38e1fb0
Certificate serial:       0199FB0F252814FAE0801070635A3A532953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
Manifest number:          05DB
Signing time:             Sun 19 Oct 2025 06:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:37 +0000
Files and hashes:         1: FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl (hash: FTDNQz5T7WYGW5ZDOocYclKx4iuJfIRUcOVN/lgYjos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:25:28:14:fa:e0:80:10:70:63:5a:3a:53:29:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153074d7fa28a43e40778ff4562f534fc38e1fb0
        Validity
            Not Before: Oct 19 06:01:37 2025 GMT
            Not After : Oct 20 06:01:37 2025 GMT
        Subject: CN=6ea4c6e6c6c2b44f9fb88c68db66bcf6286753e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:11:5d:d8:88:78:3d:35:4b:a8:dd:e5:98:c3:
                    ce:dc:c5:39:e6:c8:88:bc:a1:13:97:a8:91:a6:da:
                    a7:12:44:b6:3a:b6:06:2b:8c:ff:1c:48:31:4b:34:
                    d4:1b:45:c1:1b:8f:c6:bb:a8:40:b8:54:c9:83:2a:
                    b1:9a:44:d5:8f:a5:51:74:76:fa:44:70:6f:7d:80:
                    e5:54:2c:92:8b:46:75:94:8e:0b:e7:72:08:fa:89:
                    67:95:ab:78:41:fc:1c:d0:95:8e:cd:63:80:0a:7f:
                    98:6e:05:67:34:69:ab:50:80:df:8b:ea:48:66:ca:
                    c6:c0:0f:05:c8:7b:e0:11:f4:8c:3c:60:0c:cd:19:
                    c6:d6:c4:3c:21:b8:d8:0e:ef:67:00:a0:7d:e6:50:
                    25:bc:37:7d:f4:b8:61:27:df:0c:66:a1:2d:fe:16:
                    3a:61:70:26:c3:69:95:56:2e:3d:48:c1:c6:33:12:
                    ca:cc:ed:94:e2:00:77:b7:7c:8e:0f:f3:ed:5b:56:
                    b2:5c:3f:aa:45:f4:c2:b2:84:22:7a:27:25:f2:21:
                    d6:c5:8b:c6:75:f3:e8:47:58:11:91:3a:6e:e5:37:
                    fa:af:27:0a:19:c1:0d:20:a6:6d:2f:f0:cb:b9:f6:
                    4f:85:d9:63:e3:42:39:55:de:6c:a4:7e:16:69:d6:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A4:C6:E6:C6:C2:B4:4F:9F:B8:8C:68:DB:66:BC:F6:28:67:53:E7
            X509v3 Authority Key Identifier:
                keyid:15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:7c:a5:da:3a:31:46:99:a9:91:8b:c6:f3:8d:2e:4a:8c:
         0c:87:45:95:d8:24:fa:fe:96:32:ff:7d:d6:a4:ed:c0:ff:87:
         44:c8:4a:3d:a5:f6:6e:49:78:da:4e:d5:27:4a:d1:20:7f:ab:
         8f:9a:9c:7f:4c:e8:b2:4d:06:22:c7:d6:5d:98:65:27:49:56:
         00:59:54:e6:77:15:e8:18:06:97:3a:b2:94:e9:3e:01:e6:81:
         31:ab:b4:cb:33:0d:0d:36:7a:9e:d5:70:6d:0d:60:29:1c:23:
         ea:a9:16:6d:25:46:34:75:11:22:86:25:5c:6d:5f:cc:75:7e:
         41:5d:d6:fa:15:cc:9b:b7:93:e5:e0:39:59:5c:fa:87:df:4b:
         69:76:0f:5f:84:44:78:3c:2e:ea:19:86:04:b0:9e:11:5e:91:
         51:db:1f:c9:8d:4c:c8:f4:0f:a3:d0:db:ac:74:18:a4:b5:0c:
         7b:06:fd:52:3b:55:15:7b:22:96:a7:02:e3:f0:15:e3:6e:16:
         c2:c6:79:21:8e:06:b0:38:dc:bf:71:21:7e:5c:fa:ca:f2:d1:
         f4:6d:4e:f1:63:60:c3:c7:17:18:68:96:0d:26:9f:50:cb:15:
         a7:ea:f3:7b:07:be:05:e4:45:b6:eb:1d:ff:af:4f:d7:11:ba:
         98:e3:f1:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DyUoFPrggBBwY1o6UylTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzA3NGQ3ZmEyOGE0M2U0MDc3OGZmNDU2MmY1MzRmYzM4
ZTFmYjAwHhcNMjUxMDE5MDYwMTM3WhcNMjUxMDIwMDYwMTM3WjAzMTEwLwYDVQQD
Eyg2ZWE0YzZlNmM2YzJiNDRmOWZiODhjNjhkYjY2YmNmNjI4Njc1M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hFd2Ih4PTVLqN3lmMPO3MU55siI
vKETl6iRptqnEkS2OrYGK4z/HEgxSzTUG0XBG4/Gu6hAuFTJgyqxmkTVj6VRdHb6
RHBvfYDlVCySi0Z1lI4L53II+olnlat4Qfwc0JWOzWOACn+YbgVnNGmrUIDfi+pI
ZsrGwA8FyHvgEfSMPGAMzRnG1sQ8IbjYDu9nAKB95lAlvDd99LhhJ98MZqEt/hY6
YXAmw2mVVi49SMHGMxLKzO2U4gB3t3yOD/PtW1ayXD+qRfTCsoQieicl8iHWxYvG
dfPoR1gRkTpu5Tf6rycKGcENIKZtL/DLufZPhdlj40I5Vd5spH4WadY2eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6kxubGwrRPn7iMaNtmvPYoZ1PnMB8GA1UdIwQY
MBaAFBUwdNf6KKQ+QHeP9FYvU0/Djh+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQt
M2RjMzVlNTQ0YWFmLzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQtM2RjMzVlNTQ0YWFm
LzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkp8pdo6
MUaZqZGLxvONLkqMDIdFldgk+v6WMv991qTtwP+HRMhKPaX2bkl42k7VJ0rRIH+r
j5qcf0zosk0GIsfWXZhlJ0lWAFlU5ncV6BgGlzqylOk+AeaBMau0yzMNDTZ6ntVw
bQ1gKRwj6qkWbSVGNHURIoYlXG1fzHV+QV3W+hXMm7eT5eA5WVz6h99LaXYPX4RE
eDwu6hmGBLCeEV6RUdsfyY1MyPQPo9DbrHQYpLUMewb9UjtVFXsilqcC4/AV424W
wsZ5IY4GsDjcv3Ehflz6yvLR9G1O8WNgw8cXGGiWDSafUMsVp+rzewe+BeRFtusd
/69P1xG6mOPx9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:44 2025 by rpki-client