Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File:                     FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier:          +w3xUiRmCApWyDj01PqBqbT87BDnMPvLN31zwE2ZmuI=
Subject key identifier:   7F:84:BF:79:96:D2:A9:19:D2:B3:1A:85:5A:4F:71:FF:7C:DC:3B:F1
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer:       /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial:       0199221E481F5E1B2C54CCC124602A7D2892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number:          165B
Signing time:             Sun 07 Sep 2025 03:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:33 +0000
Files and hashes:         1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: JpWB8Nb3QoSWmA4uFtUQdWYWERtuljbMbdDtJSFJz94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:48:1f:5e:1b:2c:54:cc:c1:24:60:2a:7d:28:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15894575555cde14c770cbb183da5535d144b540
        Validity
            Not Before: Sep  7 03:00:33 2025 GMT
            Not After : Sep  8 03:00:33 2025 GMT
        Subject: CN=7f84bf7996d2a919d2b31a855a4f71ff7cdc3bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:1f:3e:c3:2b:da:7a:5c:3f:56:34:72:e4:
                    df:ce:e9:e4:46:99:69:50:01:84:80:db:9c:1d:c3:
                    c9:f9:7b:d4:e2:80:bc:49:06:33:c8:86:d4:65:76:
                    62:33:18:91:0d:67:0b:25:f4:6e:9e:be:da:19:84:
                    bc:a6:6c:a0:dc:4c:0e:94:ea:56:04:78:9e:28:63:
                    47:06:f1:47:b9:fc:09:11:9c:b1:d5:78:2a:f7:95:
                    c5:66:c4:35:b3:fb:2b:60:51:59:97:88:7c:4f:64:
                    63:78:f7:f4:23:42:f1:79:a9:9d:fa:7c:f6:5b:92:
                    0f:90:36:5c:4a:2a:08:72:af:86:b5:5b:fa:80:f6:
                    da:98:7c:ef:07:fe:01:3b:bf:65:72:93:63:04:95:
                    f9:89:86:b2:72:8b:59:8a:32:13:00:0d:7f:46:6a:
                    d2:ba:ff:4b:31:b7:1c:dd:76:67:9c:f2:c7:14:0d:
                    0b:83:5f:8f:fb:fc:c9:80:0d:4b:7a:13:be:b4:a0:
                    9a:2f:1a:5b:53:71:64:9b:97:33:72:65:0c:33:f0:
                    21:c0:01:91:ab:ae:8c:8c:0f:a9:06:9c:15:83:54:
                    7a:76:12:7e:1c:a3:19:79:8d:40:88:3e:a5:24:78:
                    97:4c:0e:ec:58:c0:b8:f4:7a:09:d2:e0:1f:92:11:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:BF:79:96:D2:A9:19:D2:B3:1A:85:5A:4F:71:FF:7C:DC:3B:F1
            X509v3 Authority Key Identifier:
                keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:fd:0f:70:b3:65:95:f4:7a:13:fd:0e:c4:89:6c:52:ed:
         50:35:f6:5c:5c:7a:89:ea:70:b3:6d:ea:0e:9c:2a:40:c0:b4:
         ff:d1:15:a8:3d:65:90:56:29:96:03:2a:f9:3d:a7:d9:b6:f3:
         98:10:af:69:24:78:33:45:20:d8:35:c7:bd:29:e4:8e:6f:20:
         9a:db:d0:01:f2:24:b5:9e:96:9c:c6:1c:a7:41:7d:96:93:39:
         d7:b7:15:97:7b:1e:4d:f8:dc:9c:32:f1:de:79:de:8d:fa:62:
         2d:48:bf:ca:5e:71:53:9f:48:bb:df:b4:5c:fd:4a:d0:92:74:
         1d:a2:e0:e6:6d:34:82:e5:30:1a:a4:16:d8:3f:c9:aa:0b:91:
         38:3e:28:bd:80:96:2e:34:f3:92:22:7f:ae:25:9f:12:78:31:
         96:bd:24:b7:e0:0a:2c:4f:35:14:7d:89:d0:a1:c5:eb:b2:db:
         66:f1:25:db:0e:84:6e:3f:4d:70:6a:cc:f9:40:3d:17:1f:ac:
         64:05:52:1a:1a:ab:11:31:7a:61:20:1f:82:a2:f9:f4:f9:a6:
         a6:96:be:c7:cd:70:57:7d:1d:c6:14:21:1f:0c:b2:be:f4:3d:
         86:b7:a1:55:02:22:2d:f3:34:5b:0e:2f:a6:ca:73:0e:b6:4b:
         2f:52:8b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHkgfXhssVMzBJGAqfSiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODk0NTc1NTU1Y2RlMTRjNzcwY2JiMTgzZGE1NTM1ZDE0
NGI1NDAwHhcNMjUwOTA3MDMwMDMzWhcNMjUwOTA4MDMwMDMzWjAzMTEwLwYDVQQD
Eyg3Zjg0YmY3OTk2ZDJhOTE5ZDJiMzFhODU1YTRmNzFmZjdjZGMzYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi0fPsMr2npcP1Y0cuTfzunkRplp
UAGEgNucHcPJ+XvU4oC8SQYzyIbUZXZiMxiRDWcLJfRunr7aGYS8pmyg3EwOlOpW
BHieKGNHBvFHufwJEZyx1Xgq95XFZsQ1s/srYFFZl4h8T2RjePf0I0Lxeamd+nz2
W5IPkDZcSioIcq+GtVv6gPbamHzvB/4BO79lcpNjBJX5iYaycotZijITAA1/RmrS
uv9LMbcc3XZnnPLHFA0Lg1+P+/zJgA1LehO+tKCaLxpbU3Fkm5czcmUMM/AhwAGR
q66MjA+pBpwVg1R6dhJ+HKMZeY1AiD6lJHiXTA7sWMC49HoJ0uAfkhHsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+Ev3mW0qkZ0rMahVpPcf983DvxMB8GA1UdIwQY
MBaAFBWJRXVVXN4Ux3DLsYPaVTXRRLVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmIt
NGEwMzEyZmIxYTc1LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmItNGEwMzEyZmIxYTc1
LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2b9D3Cz
ZZX0ehP9DsSJbFLtUDX2XFx6iepws23qDpwqQMC0/9EVqD1lkFYplgMq+T2n2bbz
mBCvaSR4M0Ug2DXHvSnkjm8gmtvQAfIktZ6WnMYcp0F9lpM517cVl3seTfjcnDLx
3nnejfpiLUi/yl5xU59Iu9+0XP1K0JJ0HaLg5m00guUwGqQW2D/JqguROD4ovYCW
LjTzkiJ/riWfEngxlr0kt+AKLE81FH2J0KHF67LbZvEl2w6Ebj9NcGrM+UA9Fx+s
ZAVSGhqrETF6YSAfgqL59Pmmppa+x81wV30dxhQhHwyyvvQ9hrehVQIiLfM0Ww4v
pspzDrZLL1KLLA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:22 2025 by rpki-client