Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File:                     Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier:          v4LUTAE5TNuynwBED35qrCEBM5IK0RW93xsIaocmTpM=
Subject key identifier:   14:0E:7B:29:97:82:38:05:AC:EB:7B:BF:74:B2:93:57:D8:85:E9:ED
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer:       /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial:       01975C80FF8299E9BF987F51E3B5EC88B696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number:          13CC
Signing time:             Wed 11 Jun 2025 01:00:47 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:47 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:47 +0000
Files and hashes:         1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: JPSfq2p3KI6GBlYL8eT0dJsJH4yEYQuqfxvbopAhFWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:80:ff:82:99:e9:bf:98:7f:51:e3:b5:ec:88:b6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
        Validity
            Not Before: Jun 11 01:00:47 2025 GMT
            Not After : Jun 12 01:00:47 2025 GMT
        Subject: CN=140e7b2997823805aceb7bbf74b29357d885e9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:ed:04:44:5e:41:69:ef:f9:e9:64:df:89:
                    36:8e:8b:1c:2d:e4:2a:96:9d:cd:b9:89:52:ed:11:
                    87:81:29:3f:d8:19:78:bb:61:93:ad:ff:27:db:3d:
                    68:44:c0:d2:cc:33:bb:e1:08:5a:79:89:26:93:8e:
                    f9:d4:c9:9f:d0:4a:d5:c7:58:fc:56:18:28:76:d1:
                    65:9b:54:61:d6:2c:dd:79:ce:15:d9:e8:e2:ff:b6:
                    0b:27:d3:78:f0:6c:42:31:62:33:6b:db:2d:5c:6f:
                    0d:c4:71:5e:21:46:b3:f8:51:b9:ee:3b:51:f9:a0:
                    eb:35:1f:6a:2c:74:45:c5:ce:8d:43:30:3b:54:ce:
                    ab:a5:0a:54:38:45:58:8e:a6:a8:1b:15:81:d5:4c:
                    cd:06:48:17:ab:f2:b2:4b:b4:be:1e:65:f8:92:4e:
                    c9:0f:95:ef:d3:28:39:73:58:31:b2:4a:91:86:f5:
                    6a:63:cb:01:f9:2c:19:0d:28:53:14:57:c6:ca:15:
                    90:0f:32:c2:f6:0e:b4:18:e7:3f:d6:74:e5:7d:6c:
                    4e:f4:ed:fd:97:21:32:c8:7c:13:49:71:c8:04:53:
                    db:3d:5c:9a:88:59:62:2f:ee:0c:31:f1:e7:22:c7:
                    62:e7:27:c0:c5:28:3c:14:91:8a:3f:eb:92:f8:69:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0E:7B:29:97:82:38:05:AC:EB:7B:BF:74:B2:93:57:D8:85:E9:ED
            X509v3 Authority Key Identifier:
                keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:55:a9:ac:38:d6:ba:8e:2f:80:bb:20:c4:cd:06:b9:d0:61:
         de:49:18:6d:35:bd:18:36:e7:b2:4d:06:49:1f:37:be:f6:bd:
         4f:5b:88:48:eb:8a:e9:b6:41:d0:10:33:0e:57:6a:b8:ee:8c:
         44:71:0c:16:95:ed:cb:88:47:6c:64:d1:86:7e:cf:ef:e6:1b:
         bd:55:e7:cb:53:d7:e3:23:d8:6f:a9:10:ae:b8:2e:19:14:05:
         3c:07:44:f2:70:61:ad:44:43:36:73:ed:5f:c9:c0:aa:ac:8d:
         40:b3:36:56:31:2a:64:96:ca:f9:32:12:bf:6c:fa:37:97:f6:
         31:1b:ef:45:96:ba:15:01:8a:3c:a6:cd:7a:0e:45:62:47:19:
         37:5e:23:ef:09:3e:20:4c:ef:d3:67:3f:6d:a8:9b:18:34:b6:
         52:1c:5e:14:08:c9:a4:84:9f:92:fc:54:5e:85:91:61:a6:89:
         57:83:af:95:39:ad:c7:04:e3:6c:11:9d:92:55:55:36:97:a8:
         0f:7e:7c:22:e6:43:51:23:ef:54:2f:38:d4:70:30:51:96:ea:
         02:8d:97:57:bf:99:61:9a:db:5b:e5:96:85:2f:06:9a:ce:87:
         26:b4:d5:ef:3d:d8:04:17:84:18:1d:fe:ea:04:5c:64:94:89:
         08:fe:a3:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcgP+Cmem/mH9R47XsiLaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YjZmOTc3MmE4ZGUyYTAyYWY2MWE0ZWE2MjdkM2U1MWQ4
NGY5YmQwHhcNMjUwNjExMDEwMDQ3WhcNMjUwNjEyMDEwMDQ3WjAzMTEwLwYDVQQD
EygxNDBlN2IyOTk3ODIzODA1YWNlYjdiYmY3NGIyOTM1N2Q4ODVlOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfbtBEReQWnv+elk34k2joscLeQq
lp3NuYlS7RGHgSk/2Bl4u2GTrf8n2z1oRMDSzDO74QhaeYkmk4751Mmf0ErVx1j8
VhgodtFlm1Rh1izdec4V2eji/7YLJ9N48GxCMWIza9stXG8NxHFeIUaz+FG57jtR
+aDrNR9qLHRFxc6NQzA7VM6rpQpUOEVYjqaoGxWB1UzNBkgXq/KyS7S+HmX4kk7J
D5Xv0yg5c1gxskqRhvVqY8sB+SwZDShTFFfGyhWQDzLC9g60GOc/1nTlfWxO9O39
lyEyyHwTSXHIBFPbPVyaiFliL+4MMfHnIsdi5yfAxSg8FJGKP+uS+GmncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQOeymXgjgFrOt7v3Syk1fYhentMB8GA1UdIwQY
MBaAFBW2+XcqjeKgKvYaTqYn0+UdhPm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYt
ZTU3OWUyYWFmOWVhLzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYtZTU3OWUyYWFmOWVh
LzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1WprDjW
uo4vgLsgxM0GudBh3kkYbTW9GDbnsk0GSR83vva9T1uISOuK6bZB0BAzDldquO6M
RHEMFpXty4hHbGTRhn7P7+YbvVXny1PX4yPYb6kQrrguGRQFPAdE8nBhrURDNnPt
X8nAqqyNQLM2VjEqZJbK+TISv2z6N5f2MRvvRZa6FQGKPKbNeg5FYkcZN14j7wk+
IEzv02c/baibGDS2UhxeFAjJpISfkvxUXoWRYaaJV4OvlTmtxwTjbBGdklVVNpeo
D358IuZDUSPvVC841HAwUZbqAo2XV7+ZYZrbW+WWhS8Gms6HJrTV7z3YBBeEGB3+
6gRcZJSJCP6jZA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:18:44 2025 by rpki-client