Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File:                     FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier:          uWuQddKCYcfA1MfwJCKvlfXwdy1i6qjmCVuSvmN+cno=
Subject key identifier:   1A:BB:62:FF:87:B2:72:40:8E:74:58:12:23:FB:CF:40:38:A7:4E:38
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer:       /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial:       019849665B4477D09B709AE3C4C9D99CD4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number:          0CF6
Signing time:             Sun 27 Jul 2025 01:01:41 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:41 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:41 +0000
Files and hashes:         1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
                          2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: nDIAzrYxULKetMxockg/953fEUKGml9atvaoI2ljk60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:5b:44:77:d0:9b:70:9a:e3:c4:c9:d9:9c:d4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
        Validity
            Not Before: Jul 27 01:01:41 2025 GMT
            Not After : Jul 28 01:01:41 2025 GMT
        Subject: CN=1abb62ff87b272408e74581223fbcf4038a74e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:b4:d7:2a:67:be:71:b7:3e:e6:df:d1:30:
                    cb:56:a1:a9:c0:00:ff:23:33:7d:e4:b7:15:8a:14:
                    28:64:ff:de:0f:be:2d:3e:ed:38:26:3f:46:fa:1c:
                    de:45:7a:74:00:6a:62:81:50:b1:c5:f0:6a:f5:8c:
                    f7:af:df:33:43:07:9c:3b:f3:bc:34:84:2f:49:4f:
                    b0:2d:df:80:d8:1b:de:ed:1d:7e:ea:a2:70:b2:df:
                    9d:32:36:22:77:87:45:27:06:a5:6d:02:8f:d3:cc:
                    cc:c1:06:bb:59:19:43:92:b0:72:3e:93:bf:ce:42:
                    9c:b5:85:6d:c6:0e:5a:95:d6:df:d8:ed:90:d7:c5:
                    2a:b9:88:3a:c5:13:f7:ac:c0:3b:d0:5c:ab:f3:3d:
                    72:68:83:be:23:ac:3f:30:90:20:74:d7:b4:14:64:
                    65:9f:27:7b:2a:39:2c:c7:97:fd:be:17:f3:ae:b9:
                    f3:9c:91:a0:f2:44:17:55:66:c0:a3:81:82:87:ca:
                    ad:72:58:7d:47:63:0c:bd:01:b1:27:16:2e:2f:85:
                    60:84:6f:d1:b1:db:f5:4a:f7:f7:1e:22:35:8c:82:
                    4e:4a:89:84:90:ea:82:39:aa:23:cb:77:74:4b:06:
                    d0:9d:9d:f8:32:97:28:97:6e:59:48:84:8e:be:7d:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BB:62:FF:87:B2:72:40:8E:74:58:12:23:FB:CF:40:38:A7:4E:38
            X509v3 Authority Key Identifier:
                keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:54:89:80:ce:a1:cd:9a:d3:fd:4d:22:80:97:e9:fa:68:d0:
         c8:a8:6c:aa:52:ae:3e:a2:28:d6:57:10:b6:f1:ac:20:f7:c8:
         65:cb:96:2f:b5:80:51:5d:35:a9:ab:95:74:53:c0:80:12:1c:
         d6:52:38:4b:dd:3e:b5:0a:45:90:cc:59:91:b5:9a:66:54:2c:
         ac:7e:c5:1a:23:5c:0b:bb:0c:ef:c3:7b:17:f3:7d:41:95:41:
         ff:12:9f:6c:7b:61:6a:07:e3:cb:40:c1:bb:82:97:48:84:b3:
         7c:a1:2c:7d:c8:b7:85:31:9b:6d:e8:d3:c6:c6:db:a4:ed:b6:
         e3:96:47:c2:37:2b:a5:56:86:37:2e:12:5b:75:05:a6:54:de:
         3d:e0:0e:1e:1f:47:5d:23:ca:86:89:03:b2:88:8b:54:c2:47:
         5e:16:db:f7:d3:f3:a8:07:05:c8:31:65:dc:bf:06:11:31:2f:
         65:fd:39:45:3f:d4:26:f6:bb:c0:c1:c1:36:4d:ec:29:2c:b0:
         b2:97:27:ac:cc:75:df:9b:b4:c1:01:24:ca:90:20:02:fc:b4:
         c3:7b:8e:fb:1c:86:2e:a3:30:90:50:4f:18:9b:27:2c:2c:83:
         d9:da:ff:76:59:13:27:f7:bc:af:09:9d:a0:21:a5:0f:14:0b:
         bb:64:a2:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZltEd9CbcJrjxMnZnNTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjUxZTkwMzZjYTZlNzU2YTAxNjNjMzg3NzgyMGNkNWZj
ZTExYWUwHhcNMjUwNzI3MDEwMTQxWhcNMjUwNzI4MDEwMTQxWjAzMTEwLwYDVQQD
EygxYWJiNjJmZjg3YjI3MjQwOGU3NDU4MTIyM2ZiY2Y0MDM4YTc0ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJu01ypnvnG3Pubf0TDLVqGpwAD/
IzN95LcVihQoZP/eD74tPu04Jj9G+hzeRXp0AGpigVCxxfBq9Yz3r98zQwecO/O8
NIQvSU+wLd+A2Bve7R1+6qJwst+dMjYid4dFJwalbQKP08zMwQa7WRlDkrByPpO/
zkKctYVtxg5aldbf2O2Q18UquYg6xRP3rMA70Fyr8z1yaIO+I6w/MJAgdNe0FGRl
nyd7Kjksx5f9vhfzrrnznJGg8kQXVWbAo4GCh8qtclh9R2MMvQGxJxYuL4VghG/R
sdv1Svf3HiI1jIJOSomEkOqCOaojy3d0SwbQnZ34Mpcol25ZSISOvn0fsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq7Yv+HsnJAjnRYEiP7z0A4p044MB8GA1UdIwQY
MBaAFBa1HpA2ym51agFjw4d4IM1fzhGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4Yzgt
MmVjNDEyNGRkNDA5LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4YzgtMmVjNDEyNGRkNDA5
LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVSJgM6h
zZrT/U0igJfp+mjQyKhsqlKuPqIo1lcQtvGsIPfIZcuWL7WAUV01qauVdFPAgBIc
1lI4S90+tQpFkMxZkbWaZlQsrH7FGiNcC7sM78N7F/N9QZVB/xKfbHthagfjy0DB
u4KXSISzfKEsfci3hTGbbejTxsbbpO2245ZHwjcrpVaGNy4SW3UFplTePeAOHh9H
XSPKhokDsoiLVMJHXhbb99PzqAcFyDFl3L8GETEvZf05RT/UJva7wMHBNk3sKSyw
spcnrMx135u0wQEkypAgAvy0w3uO+xyGLqMwkFBPGJsnLCyD2dr/dlkTJ/e8rwmd
oCGlDxQLu2Sidw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:56 2025 by rpki-client