Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File:                     fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier:          Z9X2KerMZw2+VTtVpHKEFg3Alkwj07qp9JfY3GcHCZ4=
Subject key identifier:   8B:EC:13:5B:C9:CF:63:CF:AC:C4:C1:6D:C8:E9:F7:82:42:8F:56:41
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer:       /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial:       01974BC431B2AAC3E1B16A6707B1A1E3B6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number:          0CFE
Signing time:             Sat 07 Jun 2025 19:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:38 +0000
Files and hashes:         1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: mSSP4VxrCTkwdUuVQq3Yx/pw15abeT9zraFfcR1fuwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:31:b2:aa:c3:e1:b1:6a:67:07:b1:a1:e3:b6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
        Validity
            Not Before: Jun  7 19:00:38 2025 GMT
            Not After : Jun  8 19:00:38 2025 GMT
        Subject: CN=8bec135bc9cf63cfacc4c16dc8e9f782428f5641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:fa:4e:46:4b:e1:ed:77:b0:d3:63:58:bb:
                    f2:0b:05:c5:f3:22:ea:56:ad:4e:99:3a:1e:3a:f5:
                    da:ed:99:92:7b:12:c7:c4:c1:7c:db:79:27:34:06:
                    9b:88:90:3f:be:cf:5a:74:3d:2a:5e:96:2a:c3:e8:
                    3d:f2:7d:57:d9:3e:9b:29:0d:95:ed:1b:79:28:9a:
                    6e:3e:62:be:80:1a:17:ae:a6:2d:44:0e:91:31:9b:
                    e7:53:ac:bd:06:fa:6c:0e:4d:30:b8:7b:56:93:f3:
                    15:4b:42:22:d6:9f:62:52:93:3c:25:e1:64:75:02:
                    d3:c5:78:f6:6f:92:e1:de:da:07:d9:e3:81:f9:9a:
                    00:a8:97:64:08:6a:6c:16:44:80:e0:a1:9d:98:78:
                    33:e1:f9:ab:51:d3:a2:29:11:1a:a4:38:3b:46:08:
                    b8:d1:e7:06:7f:73:33:ea:3c:f9:45:6e:85:f5:53:
                    84:13:da:d4:4d:85:65:1d:3c:43:82:a9:39:ad:6c:
                    a7:d7:ce:d0:de:31:43:2e:da:4d:b8:76:de:6c:8b:
                    2b:6c:3b:93:e8:5f:45:79:a9:d7:b0:a5:38:11:5d:
                    5e:39:73:8f:87:2b:96:86:dd:36:59:7c:42:77:22:
                    37:16:26:63:ce:1d:b3:a5:40:5e:7e:e3:2c:99:b5:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EC:13:5B:C9:CF:63:CF:AC:C4:C1:6D:C8:E9:F7:82:42:8F:56:41
            X509v3 Authority Key Identifier:
                keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:cc:6f:c3:06:90:07:2f:e1:1b:94:96:07:2a:d1:98:38:
         75:83:f7:d5:46:ef:bf:51:66:e7:a3:c5:3b:02:01:7c:d6:fa:
         58:f0:30:58:5e:ee:04:88:81:10:52:e3:99:33:0d:6b:de:ec:
         b8:b5:e4:4f:e6:b2:6a:aa:c5:01:e3:f2:4e:59:a7:2e:56:01:
         8b:18:46:0a:b4:21:af:fe:21:2f:e0:4e:d3:d0:49:18:80:57:
         c3:e4:15:59:66:cc:33:8f:49:1e:05:1a:ff:11:1d:00:f0:a0:
         c9:8a:6a:52:db:cf:53:b0:70:77:c0:78:88:64:78:b8:7c:64:
         94:66:94:a3:3f:9b:49:99:6c:17:d7:3e:bb:ae:45:a8:de:fe:
         db:50:d4:ac:29:63:65:d5:7f:a5:50:73:ec:ce:30:e1:a0:aa:
         1c:e7:04:e8:63:ae:b9:85:7a:e4:ff:da:79:38:51:ca:fe:be:
         05:22:93:37:74:3b:01:8d:05:34:1a:ba:ba:78:6d:39:a9:62:
         ea:2a:d4:28:57:07:f6:c5:1b:da:6b:6c:91:e2:c9:b9:a9:0c:
         8d:b8:7b:74:10:c0:52:ba:51:04:5f:79:33:92:b0:15:59:a4:
         ad:ea:f2:b6:ea:d3:aa:7b:00:95:08:9d:40:00:cf:02:70:50:
         0e:a9:47:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxDGyqsPhsWpnB7Gh47b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTdiNmY5MzIzOTlkNTg1MDkzZDE4NzMzOTRlYmZlMWIy
OWY5OGMwHhcNMjUwNjA3MTkwMDM4WhcNMjUwNjA4MTkwMDM4WjAzMTEwLwYDVQQD
Eyg4YmVjMTM1YmM5Y2Y2M2NmYWNjNGMxNmRjOGU5Zjc4MjQyOGY1NjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i36TkZL4e13sNNjWLvyCwXF8yLq
Vq1OmToeOvXa7ZmSexLHxMF823knNAabiJA/vs9adD0qXpYqw+g98n1X2T6bKQ2V
7Rt5KJpuPmK+gBoXrqYtRA6RMZvnU6y9BvpsDk0wuHtWk/MVS0Ii1p9iUpM8JeFk
dQLTxXj2b5Lh3toH2eOB+ZoAqJdkCGpsFkSA4KGdmHgz4fmrUdOiKREapDg7Rgi4
0ecGf3Mz6jz5RW6F9VOEE9rUTYVlHTxDgqk5rWyn187Q3jFDLtpNuHbebIsrbDuT
6F9FeanXsKU4EV1eOXOPhyuWht02WXxCdyI3FiZjzh2zpUBefuMsmbX4hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvsE1vJz2PPrMTBbcjp94JCj1ZBMB8GA1UdIwQY
MBaAFH8XtvkyOZ1YUJPRhzOU6/4bKfmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUt
ODI3NTc3ZGY4ZWRjLzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUtODI3NTc3ZGY4ZWRj
LzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedzMb8MG
kAcv4RuUlgcq0Zg4dYP31Ubvv1Fm56PFOwIBfNb6WPAwWF7uBIiBEFLjmTMNa97s
uLXkT+ayaqrFAePyTlmnLlYBixhGCrQhr/4hL+BO09BJGIBXw+QVWWbMM49JHgUa
/xEdAPCgyYpqUtvPU7Bwd8B4iGR4uHxklGaUoz+bSZlsF9c+u65FqN7+21DUrClj
ZdV/pVBz7M4w4aCqHOcE6GOuuYV65P/aeThRyv6+BSKTN3Q7AY0FNBq6unhtOali
6irUKFcH9sUb2mtskeLJuakMjbh7dBDAUrpRBF95M5KwFVmkreryturTqnsAlQid
QADPAnBQDqlHfA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:56 2025 by rpki-client