Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File:                     FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier:          QZJ4wAkfZgvdxc4uqTz8TjtzI/5kNgKOzbOhUuj6dDI=
Subject key identifier:   4D:C6:68:F3:53:52:0B:44:62:03:EC:FD:65:5B:EC:1E:89:28:F2:B0
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer:       /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial:       01984AAE7A6755AE48DA426A316760CC0176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number:          08D0
Signing time:             Sun 27 Jul 2025 07:00:05 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:05 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:05 +0000
Files and hashes:         1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: gm1EN9fNSWLGu3wboizrGiTFm008ffKJXIh+n9nsTlc=)
                          2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:7a:67:55:ae:48:da:42:6a:31:67:60:cc:01:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
        Validity
            Not Before: Jul 27 07:00:05 2025 GMT
            Not After : Jul 28 07:00:05 2025 GMT
        Subject: CN=4dc668f353520b446203ecfd655bec1e8928f2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:31:ec:ed:f8:d1:8d:26:d2:a8:bc:3b:a5:
                    80:3d:92:0f:4b:a9:3c:eb:ff:27:a1:01:f5:c9:bb:
                    44:b0:dc:73:23:16:aa:e9:2f:a2:fd:50:c0:bb:9e:
                    b9:71:ac:30:63:4b:e4:26:29:8f:d1:73:00:35:dd:
                    67:52:ce:dc:6c:1c:6a:dd:09:e9:3e:65:d3:78:2f:
                    f5:02:5a:8d:ae:3f:a7:8c:cc:60:c7:64:11:14:cd:
                    d0:1e:67:06:26:c6:e5:6b:d9:9b:f1:a0:4f:27:1e:
                    03:94:c9:76:06:3d:09:64:1f:91:45:c5:96:05:1e:
                    df:09:9b:e6:69:07:46:3a:c1:11:87:f8:af:51:56:
                    8f:74:90:95:36:1e:57:6c:a4:63:22:8c:96:ea:3d:
                    92:22:7d:89:c4:33:1e:2d:f9:b4:f5:fd:ab:74:c1:
                    da:23:be:8d:b8:b0:0d:88:1a:62:01:dc:27:c9:b7:
                    76:17:60:13:f4:38:82:70:d2:0c:14:fd:bb:ab:a8:
                    04:53:a9:d9:2f:22:87:fc:71:ff:82:c7:5c:c3:4b:
                    d4:ad:7a:09:a3:83:80:00:db:16:68:b9:cb:bc:16:
                    7d:d8:18:32:3f:39:6b:26:16:31:7c:70:78:f2:fe:
                    36:2a:ba:df:5e:15:8f:ac:ed:77:67:0c:0f:59:15:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:68:F3:53:52:0B:44:62:03:EC:FD:65:5B:EC:1E:89:28:F2:B0
            X509v3 Authority Key Identifier:
                keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:5e:6b:2d:4e:18:f7:80:ed:92:c5:4d:8d:41:40:44:07:
         5a:36:64:46:66:12:9b:4a:6e:69:d2:b9:ce:3f:0c:da:0b:b1:
         e0:d5:5c:e4:ba:31:ea:54:c7:51:fa:0d:77:1f:e3:a9:e6:fd:
         cb:83:ba:d4:51:92:a3:09:c9:7c:02:77:64:18:c8:41:d8:5f:
         70:64:56:f3:1b:3b:9e:ed:60:70:da:14:23:7c:3a:ce:28:8a:
         8f:68:b8:1b:29:23:95:2b:4b:1c:de:20:8b:b6:4b:83:8d:6e:
         30:cc:ed:22:1e:62:1b:c4:31:52:b3:59:64:e6:1b:c5:a9:91:
         b5:e1:b8:0d:d5:ae:1d:24:01:6c:7f:b7:4d:a2:cf:a9:ca:a4:
         5a:6e:e4:3f:86:d9:c4:04:7a:72:b6:a1:38:99:de:7b:5d:65:
         6b:f7:60:dc:d2:76:41:b0:a3:73:a8:a2:16:38:86:2b:3c:af:
         df:09:21:5b:01:af:97:cb:8e:d9:fa:f0:25:c2:fd:80:ac:d2:
         36:d2:fd:7f:1b:f5:2b:f2:eb:a2:88:ba:45:24:f6:d5:89:2d:
         8a:dd:83:13:82:39:ee:7a:f1:22:6c:d8:53:33:2d:c1:d8:f3:
         75:e5:1b:95:8a:d0:07:73:f1:6c:3f:bb:0b:f1:00:d3:15:97:
         76:01:26:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrnpnVa5I2kJqMWdgzAF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDEzMDI0NTUyOTQyY2VhZjY4YzY3ZTAxMjhkZmY0Yjll
Zjc0OWMwHhcNMjUwNzI3MDcwMDA1WhcNMjUwNzI4MDcwMDA1WjAzMTEwLwYDVQQD
Eyg0ZGM2NjhmMzUzNTIwYjQ0NjIwM2VjZmQ2NTViZWMxZTg5MjhmMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+wx7O340Y0m0qi8O6WAPZIPS6k8
6/8noQH1ybtEsNxzIxaq6S+i/VDAu565cawwY0vkJimP0XMANd1nUs7cbBxq3Qnp
PmXTeC/1AlqNrj+njMxgx2QRFM3QHmcGJsbla9mb8aBPJx4DlMl2Bj0JZB+RRcWW
BR7fCZvmaQdGOsERh/ivUVaPdJCVNh5XbKRjIoyW6j2SIn2JxDMeLfm09f2rdMHa
I76NuLANiBpiAdwnybd2F2AT9DiCcNIMFP27q6gEU6nZLyKH/HH/gsdcw0vUrXoJ
o4OAANsWaLnLvBZ92BgyPzlrJhYxfHB48v42KrrfXhWPrO13ZwwPWRUVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3GaPNTUgtEYgPs/WVb7B6JKPKwMB8GA1UdIwQY
MBaAFBUBMCRVKULOr2jGfgEo3/S573ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWIt
NzBmYzRiMDhmMDBiLzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWItNzBmYzRiMDhmMDBi
LzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkReay1O
GPeA7ZLFTY1BQEQHWjZkRmYSm0puadK5zj8M2gux4NVc5Lox6lTHUfoNdx/jqeb9
y4O61FGSownJfAJ3ZBjIQdhfcGRW8xs7nu1gcNoUI3w6ziiKj2i4GykjlStLHN4g
i7ZLg41uMMztIh5iG8QxUrNZZOYbxamRteG4DdWuHSQBbH+3TaLPqcqkWm7kP4bZ
xAR6crahOJnee11la/dg3NJ2QbCjc6iiFjiGKzyv3wkhWwGvl8uO2frwJcL9gKzS
NtL9fxv1K/Lrooi6RST21Yktit2DE4I57nrxImzYUzMtwdjzdeUblYrQB3PxbD+7
C/EA0xWXdgEmFQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:23 2025 by rpki-client