Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File:                     FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier:          OX/WrrnZ5KYLsZtd71ikFwwwSpMBxnrj1t1RibMuuy4=
Subject key identifier:   72:C9:84:43:26:1C:E2:0F:26:56:60:19:C8:5F:C9:7A:2C:60:FB:52
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer:       /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial:       0198496543C8876180214491AF278085F6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number:          B6
Signing time:             Sun 27 Jul 2025 01:00:29 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:29 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:29 +0000
Files and hashes:         1: 2KNjtYfkkvpIBPVL-Dk7JZfM4jU.roa (hash: YZgrPPEN8zGqhO8cwF6VGe00Dd89Opm5ALHWcKmIHgM=)
                          2: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: Ryn3wugW9KYlDSkcahzbRTsRizJp4sIRzM8Q7O1ct9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:43:c8:87:61:80:21:44:91:af:27:80:85:f6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
        Validity
            Not Before: Jul 27 01:00:29 2025 GMT
            Not After : Jul 28 01:00:29 2025 GMT
        Subject: CN=72c98443261ce20f26566019c85fc97a2c60fb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:79:4e:6e:44:e6:97:26:67:b0:f7:2d:a5:
                    45:fc:0f:5f:44:fe:4f:af:f8:99:d0:d9:b7:1c:cc:
                    69:8b:0c:ad:d4:71:19:93:0d:96:d5:25:34:a7:5d:
                    3f:53:da:8c:0c:25:bd:52:8b:ea:34:2b:d6:3f:99:
                    5f:a9:fe:d6:42:64:18:29:e6:c3:a7:1d:4e:57:a4:
                    fe:ac:b3:e3:be:3a:e8:55:a7:a0:ba:4d:bc:cc:ef:
                    c7:d2:ba:1f:78:ed:9c:f2:9c:80:aa:21:29:e2:1d:
                    60:04:f3:0c:3a:3b:fd:4c:19:fd:a6:f9:df:6b:4d:
                    9f:e2:54:48:28:f5:e0:4a:76:8a:f6:d9:35:ea:f1:
                    5c:db:c4:4b:90:44:37:e4:b4:dc:16:59:04:f8:94:
                    db:ef:be:d0:02:b2:8b:77:e1:78:82:41:3a:06:24:
                    27:1e:fc:ea:89:75:df:57:3c:f0:22:95:ee:b7:bc:
                    a3:6d:da:6d:d5:e2:08:15:6e:55:7d:71:e5:e8:40:
                    12:6b:33:57:12:8a:b6:07:ce:67:db:8a:a5:38:b7:
                    87:51:6a:2b:3f:84:04:d7:a9:1f:76:5a:a7:28:a5:
                    23:7b:d9:94:8b:57:e8:b4:82:a3:97:ac:74:9f:d4:
                    6c:fa:07:bf:50:6c:80:34:d0:06:6c:4a:8d:73:49:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C9:84:43:26:1C:E2:0F:26:56:60:19:C8:5F:C9:7A:2C:60:FB:52
            X509v3 Authority Key Identifier:
                keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:88:62:6f:50:09:e5:75:64:73:ed:90:a2:1f:f7:d3:c2:b8:
         5a:04:6a:1f:11:b3:f4:38:7d:29:f7:d8:40:f0:c5:0b:e9:e3:
         cc:5e:c3:ef:2b:24:ad:ae:04:59:31:f2:e3:76:a3:ec:7c:98:
         22:3e:93:3a:b0:c8:fa:9b:ec:41:fc:9e:3d:de:4b:1b:2e:8d:
         f8:6a:f1:c4:3c:af:21:1d:02:29:2c:dc:b8:09:97:2d:80:02:
         83:01:18:c5:8e:d9:3b:7b:29:a1:ae:c2:a5:13:7b:cd:7c:d6:
         c4:57:65:d7:fc:a0:d8:9c:40:f3:4c:c9:9d:7e:57:8b:df:78:
         a1:79:44:52:6a:a9:c3:ac:3f:e7:1d:e1:87:ae:31:8c:f7:1f:
         6f:ff:85:ca:9f:34:67:2d:b0:10:ae:38:e7:9d:5b:26:00:05:
         0a:b3:eb:c9:9c:3b:a7:c4:5b:91:b3:af:8f:4c:68:73:9b:d3:
         63:6c:cd:b0:61:92:1b:d5:ad:c3:c1:08:0b:24:51:cc:f6:bf:
         85:04:6f:70:7f:27:65:2a:b5:5c:fc:8f:8a:ed:98:31:c8:0a:
         a9:1c:c3:2a:fd:e9:c5:75:65:f2:13:66:27:09:22:77:28:56:
         80:a6:35:d6:19:83:ce:05:7f:fa:db:2a:da:e3:03:2d:8d:0c:
         84:c7:1d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZUPIh2GAIUSRryeAhfbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzE4YTI5MDhjZWJkOTA4NWUwMTI2NmJiMDJmYjhhZjIy
NDc3MzUwHhcNMjUwNzI3MDEwMDI5WhcNMjUwNzI4MDEwMDI5WjAzMTEwLwYDVQQD
Eyg3MmM5ODQ0MzI2MWNlMjBmMjY1NjYwMTljODVmYzk3YTJjNjBmYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCJ5Tm5E5pcmZ7D3LaVF/A9fRP5P
r/iZ0Nm3HMxpiwyt1HEZkw2W1SU0p10/U9qMDCW9UovqNCvWP5lfqf7WQmQYKebD
px1OV6T+rLPjvjroVaeguk28zO/H0rofeO2c8pyAqiEp4h1gBPMMOjv9TBn9pvnf
a02f4lRIKPXgSnaK9tk16vFc28RLkEQ35LTcFlkE+JTb777QArKLd+F4gkE6BiQn
HvzqiXXfVzzwIpXut7yjbdpt1eIIFW5VfXHl6EASazNXEoq2B85n24qlOLeHUWor
P4QE16kfdlqnKKUje9mUi1fotIKjl6x0n9Rs+ge/UGyANNAGbEqNc0n+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLJhEMmHOIPJlZgGchfyXosYPtSMB8GA1UdIwQY
MBaAFBXBiikIzr2QheASZrsC+4ryJHc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5Mzgt
N2U1M2QxYzU1OGQ5LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5MzgtN2U1M2QxYzU1OGQ5
LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIhib1AJ
5XVkc+2Qoh/308K4WgRqHxGz9Dh9KffYQPDFC+njzF7D7yskra4EWTHy43aj7HyY
Ij6TOrDI+pvsQfyePd5LGy6N+GrxxDyvIR0CKSzcuAmXLYACgwEYxY7ZO3spoa7C
pRN7zXzWxFdl1/yg2JxA80zJnX5Xi994oXlEUmqpw6w/5x3hh64xjPcfb/+Fyp80
Zy2wEK44551bJgAFCrPryZw7p8RbkbOvj0xoc5vTY2zNsGGSG9Wtw8EICyRRzPa/
hQRvcH8nZSq1XPyPiu2YMcgKqRzDKv3pxXVl8hNmJwkidyhWgKY11hmDzgV/+tsq
2uMDLY0MhMcdAA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:03:10 2025 by rpki-client