Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          FvzXQTdBafTn19nKUFxH69JFoNRTiTpQYF1segjhHck=
Subject key identifier:   48:CC:6C:AC:12:BB:A0:54:AE:19:06:14:99:6A:32:6A:83:AF:F0:0A
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       01984BC19AB4DD08AA64C812A942EA07F7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 12:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 12:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 12:00:35 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: ccxtYlW+LcCji5rDoa7laYL/2QJN4ksvgTO5REHkazI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c1:9a:b4:dd:08:aa:64:c8:12:a9:42:ea:07:f7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Jul 27 12:00:35 2025 GMT
            Not After : Jul 28 12:00:35 2025 GMT
        Subject: CN=48cc6cac12bba054ae190614996a326a83aff00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:27:54:80:f4:44:3b:62:b3:99:06:b7:26:
                    22:87:d6:1f:d9:6d:85:a5:83:6b:c4:36:9b:04:5b:
                    74:64:02:21:a3:63:75:06:26:e7:be:9e:d3:00:71:
                    a3:bb:7f:6e:29:37:dc:2e:e4:64:0b:63:cb:0e:bc:
                    a8:0b:28:8b:11:c6:26:2d:01:58:7c:c3:84:b1:1a:
                    c6:77:57:dd:00:ba:5c:4e:a0:b1:3f:9a:90:90:5f:
                    61:47:2f:6b:53:0f:49:75:66:cd:e8:58:bf:3a:5a:
                    bb:79:86:08:aa:69:b0:56:92:82:c2:13:05:fa:f3:
                    b7:1c:ed:ce:80:74:c1:f5:72:14:a1:54:42:60:1b:
                    9e:e6:bc:6a:d8:c8:0f:88:f5:13:e7:14:cd:91:6d:
                    bc:9e:31:a8:73:4c:64:91:ae:d8:7d:f4:4b:d1:9f:
                    70:f3:ab:8a:96:ad:cf:ef:97:ab:96:a8:1d:76:96:
                    a2:31:61:80:fa:3a:01:12:94:7a:28:b8:bc:a5:eb:
                    6d:df:f7:10:3d:2b:8e:0f:0f:c1:e0:29:15:fe:16:
                    f7:db:cd:3d:52:c4:30:1b:4c:db:fb:f1:64:83:d7:
                    f4:2c:9f:5b:eb:a0:79:56:09:b9:db:73:91:c7:0e:
                    dc:7e:2f:cc:a0:cd:1b:60:6b:f6:94:fe:2b:24:4a:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CC:6C:AC:12:BB:A0:54:AE:19:06:14:99:6A:32:6A:83:AF:F0:0A
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a0:bf:23:08:37:1e:61:6b:aa:0f:4c:7e:fc:f0:ce:86:29:
         ec:97:24:27:38:de:2c:2b:05:12:7d:9a:7e:99:15:0c:ed:7e:
         46:e0:9d:40:b3:09:83:80:08:dc:8f:e7:f1:8f:ff:f9:a3:65:
         2a:93:50:cf:47:c5:95:84:29:ee:bc:c3:c4:14:f6:81:7a:58:
         c2:a9:b9:ed:22:8e:60:a5:96:34:96:cc:4a:d5:11:4a:90:b3:
         a5:e3:44:31:88:d1:07:29:23:f1:ef:b9:e6:48:1f:a5:71:49:
         44:fd:17:b8:22:88:c9:8f:29:00:a1:fd:86:a3:79:98:c9:0f:
         9b:7d:6e:df:73:b9:f0:41:01:b8:d5:0f:8a:7b:1b:08:ce:29:
         75:ca:19:a4:4a:96:a6:01:30:32:81:1b:62:96:ff:f3:cd:12:
         64:d1:d2:76:2e:fe:c3:79:68:f3:41:a3:b8:9f:09:9b:1d:da:
         42:fe:43:78:6d:25:29:b6:dd:25:af:b0:eb:0d:13:77:09:c5:
         1c:97:18:f7:b1:53:77:f4:25:d4:21:42:c1:08:1a:ce:bd:ab:
         13:53:cb:ef:dc:93:f6:6f:14:f2:ac:e5:05:04:17:4b:2b:ad:
         20:75:3e:d5:04:4d:25:e7:a2:c5:38:38:78:97:6b:42:33:18:
         02:e6:4c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwZq03QiqZMgSqULqB/fsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTc4MTYyNmI0YzdjNDhhOGRjZDUxNGM2YTc1NDlmZmI0
ZjYzYWEwHhcNMjUwNzI3MTIwMDM1WhcNMjUwNzI4MTIwMDM1WjAzMTEwLwYDVQQD
Eyg0OGNjNmNhYzEyYmJhMDU0YWUxOTA2MTQ5OTZhMzI2YTgzYWZmMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRgnVID0RDtis5kGtyYih9Yf2W2F
pYNrxDabBFt0ZAIho2N1Bibnvp7TAHGju39uKTfcLuRkC2PLDryoCyiLEcYmLQFY
fMOEsRrGd1fdALpcTqCxP5qQkF9hRy9rUw9JdWbN6Fi/Olq7eYYIqmmwVpKCwhMF
+vO3HO3OgHTB9XIUoVRCYBue5rxq2MgPiPUT5xTNkW28njGoc0xkka7YffRL0Z9w
86uKlq3P75erlqgddpaiMWGA+joBEpR6KLi8pett3/cQPSuODw/B4CkV/hb32809
UsQwG0zb+/Fkg9f0LJ9b66B5Vgm523ORxw7cfi/MoM0bYGv2lP4rJErsyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjMbKwSu6BUrhkGFJlqMmqDr/AKMB8GA1UdIwQY
MBaAFBUXgWJrTHxIqNzVFManVJ/7T2OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQt
ZDE1MmFiODI4ZGQ1LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQtZDE1MmFiODI4ZGQ1
LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6C/Iwg3
HmFrqg9MfvzwzoYp7JckJzjeLCsFEn2afpkVDO1+RuCdQLMJg4AI3I/n8Y//+aNl
KpNQz0fFlYQp7rzDxBT2gXpYwqm57SKOYKWWNJbMStURSpCzpeNEMYjRBykj8e+5
5kgfpXFJRP0XuCKIyY8pAKH9hqN5mMkPm31u33O58EEBuNUPinsbCM4pdcoZpEqW
pgEwMoEbYpb/880SZNHSdi7+w3lo80GjuJ8Jmx3aQv5DeG0lKbbdJa+w6w0TdwnF
HJcY97FTd/Ql1CFCwQgazr2rE1PL79yT9m8U8qzlBQQXSyutIHU+1QRNJeeixTg4
eJdrQjMYAuZM0A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:05:35 2025 by rpki-client