Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File:                     flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier:          Ncor8pflfkyatwxj+VbT3tb19rJ7dzcQojY2uYlR0Bk=
Subject key identifier:   5F:21:01:FA:19:D1:93:35:E5:50:0B:9A:8E:C6:A5:B5:AE:8C:28:38
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer:       /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial:       01974E8E75158A21F8BBAFE0B260F2F80C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number:          1496
Signing time:             Sun 08 Jun 2025 08:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:48 +0000
Files and hashes:         1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
                          2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: AqIouQeVfOjj0o7BqbpTlzRxvOJ3m6XznKvvNlHX4dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:75:15:8a:21:f8:bb:af:e0:b2:60:f2:f8:0c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
        Validity
            Not Before: Jun  8 08:00:48 2025 GMT
            Not After : Jun  9 08:00:48 2025 GMT
        Subject: CN=5f2101fa19d19335e5500b9a8ec6a5b5ae8c2838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:37:a4:05:25:0a:23:04:90:c9:f4:85:34:
                    ac:bf:6f:65:02:a7:45:5b:f9:ba:95:c3:a6:e3:46:
                    31:51:26:0d:5b:90:fd:fe:df:f2:67:b4:53:98:0d:
                    ea:d8:03:5b:f1:19:86:20:f7:bd:a9:d0:0b:dd:96:
                    f4:2e:a5:49:e2:45:5f:9c:0b:b6:ac:d9:fa:67:b8:
                    1a:ce:d1:7f:67:2b:d9:23:22:92:1a:0f:59:c2:a2:
                    65:5a:74:57:e1:bb:aa:a6:2f:a2:ac:85:ff:62:96:
                    f3:4c:b2:d7:2b:c7:19:f0:b7:02:f4:04:97:8a:5d:
                    3d:b3:69:b5:f5:6b:aa:0a:09:da:e5:93:e2:2b:24:
                    13:76:f8:07:1d:e3:68:95:4e:02:a6:8f:92:3c:e2:
                    f7:11:d8:53:50:15:94:e9:ab:a1:a5:a5:83:de:f3:
                    70:65:91:88:b7:74:6f:74:43:32:35:9c:09:36:75:
                    39:2b:a4:93:3a:6a:f3:c7:9b:ac:68:ac:ec:b3:9e:
                    05:51:ca:5a:52:94:85:4e:69:07:b9:56:d9:77:90:
                    14:29:38:79:8f:4c:35:26:37:6d:b3:e1:e8:b3:e6:
                    09:84:e6:81:12:e8:de:16:e7:74:11:74:55:13:4b:
                    7a:1f:97:c0:44:ef:e8:22:2f:00:41:c2:79:02:07:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:21:01:FA:19:D1:93:35:E5:50:0B:9A:8E:C6:A5:B5:AE:8C:28:38
            X509v3 Authority Key Identifier:
                keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:6c:33:c4:5a:d4:8b:5f:52:e8:a7:d9:61:46:32:1f:1e:
         9f:46:9e:89:23:de:91:7a:41:1f:6f:86:25:75:f6:73:ff:a8:
         70:e9:9c:1f:ce:65:1a:ce:6c:b1:75:92:9c:68:da:49:d4:99:
         80:59:c6:02:77:be:92:ea:69:9a:c0:db:b8:3f:fb:3f:3a:34:
         49:ae:e5:57:5c:7a:38:95:f5:32:76:63:9e:2f:0a:38:6b:67:
         68:24:6b:d9:61:44:a3:97:49:ab:b4:5a:45:69:17:bf:db:75:
         a8:c1:75:96:c2:46:46:fd:5a:c5:b4:28:c5:ae:c9:3d:13:28:
         89:b8:5f:80:2c:f8:c0:97:cc:71:63:a8:d8:73:7e:36:f1:02:
         bf:a9:7b:ed:8f:15:2e:a8:11:5b:13:19:df:75:9a:a5:63:6f:
         df:75:71:56:01:e1:5c:e9:eb:13:5b:0e:e7:8b:96:99:c5:11:
         f2:00:06:d9:af:66:05:f4:98:af:19:42:09:50:ea:8b:44:78:
         eb:e9:aa:df:02:23:b9:3f:47:26:ba:8f:4f:cb:f8:35:24:b8:
         77:e0:ea:e4:c8:87:98:40:5f:f0:3d:ea:98:b6:13:99:e3:cb:
         e6:87:e0:a6:2f:e7:2e:f2:47:67:88:12:24:04:b7:a4:e0:a2:
         d2:7e:04:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjnUViiH4u6/gsmDy+Ax0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTY2ZmZmNDA3ZjMxYzZhZTg1NmMzNzQzZWYzZTVmMjJm
OGQzNWIwHhcNMjUwNjA4MDgwMDQ4WhcNMjUwNjA5MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZjIxMDFmYTE5ZDE5MzM1ZTU1MDBiOWE4ZWM2YTViNWFlOGMyODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M03pAUlCiMEkMn0hTSsv29lAqdF
W/m6lcOm40YxUSYNW5D9/t/yZ7RTmA3q2ANb8RmGIPe9qdAL3Zb0LqVJ4kVfnAu2
rNn6Z7gaztF/ZyvZIyKSGg9ZwqJlWnRX4buqpi+irIX/YpbzTLLXK8cZ8LcC9ASX
il09s2m19WuqCgna5ZPiKyQTdvgHHeNolU4Cpo+SPOL3EdhTUBWU6auhpaWD3vNw
ZZGIt3RvdEMyNZwJNnU5K6STOmrzx5usaKzss54FUcpaUpSFTmkHuVbZd5AUKTh5
j0w1Jjdts+Hos+YJhOaBEujeFud0EXRVE0t6H5fARO/oIi8AQcJ5Agd0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8hAfoZ0ZM15VALmo7GpbWujCg4MB8GA1UdIwQY
MBaAFH5Wb/9AfzHGroVsN0PvPl8i+NNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNDA1NjQtNTk1Mi00MjIzLWJjY2Et
Zjg3NmMwNTVhMzE1LzEvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wNDA1NjQtNTk1Mi00MjIzLWJjY2EtZjg3NmMwNTVhMzE1
LzEvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCpsM8Ra
1ItfUuin2WFGMh8en0aeiSPekXpBH2+GJXX2c/+ocOmcH85lGs5ssXWSnGjaSdSZ
gFnGAne+kuppmsDbuD/7Pzo0Sa7lV1x6OJX1MnZjni8KOGtnaCRr2WFEo5dJq7Ra
RWkXv9t1qMF1lsJGRv1axbQoxa7JPRMoibhfgCz4wJfMcWOo2HN+NvECv6l77Y8V
LqgRWxMZ33WapWNv33VxVgHhXOnrE1sO54uWmcUR8gAG2a9mBfSYrxlCCVDqi0R4
6+mq3wIjuT9HJrqPT8v4NSS4d+Dq5MiHmEBf8D3qmLYTmePL5ofgpi/nLvJHZ4gS
JAS3pOCi0n4ElQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:07:02 2025 by rpki-client