Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          U3Dp3xsolt6BxSxM2FYySL5rDi8KVBiVGuneldZbVOw=
Subject key identifier:   FD:F9:91:20:F9:87:DA:AA:84:22:66:96:90:FB:30:9A:07:29:A4:C8
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       0197624C1B25EFA3032B3F3DE980B1022F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          0C83
Signing time:             Thu 12 Jun 2025 04:00:44 +0000
Manifest this update:     Thu 12 Jun 2025 04:00:44 +0000
Manifest next update:     Fri 13 Jun 2025 04:00:44 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: DFW+hgoRMBifriBgp9q0IE2yDUgt/tAhofgMZD3f2+w=)
                          2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:4c:1b:25:ef:a3:03:2b:3f:3d:e9:80:b1:02:2f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Jun 12 04:00:44 2025 GMT
            Not After : Jun 13 04:00:44 2025 GMT
        Subject: CN=fdf99120f987daaa8422669690fb309a0729a4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:eb:f7:0c:a9:fe:2c:d2:f6:35:f6:4b:99:
                    1b:53:9d:c2:7c:26:5f:d1:50:7f:2f:bf:2c:7d:f0:
                    70:71:ad:aa:07:5a:ef:e0:a7:19:ce:b6:51:80:60:
                    47:dd:d2:dc:ae:bd:3e:f3:cf:e9:e2:59:57:b0:c5:
                    f4:da:d4:f8:9f:e2:b4:95:d1:68:e4:77:c4:67:25:
                    6d:43:cc:9e:54:bc:3f:eb:68:0c:3d:f8:51:38:55:
                    5e:0c:7d:d5:f5:87:3d:3d:04:db:36:58:64:86:2e:
                    0a:b0:52:ec:41:4d:85:4d:25:e5:9e:0c:5d:21:24:
                    19:39:8e:90:b1:07:cc:bd:b3:53:c1:2a:b9:cd:5a:
                    1b:97:74:cf:66:fe:a0:e7:80:0b:2d:10:a1:d1:76:
                    be:41:f8:aa:85:c3:4f:de:32:45:77:c3:ad:ab:37:
                    e2:69:47:69:5b:4f:41:e9:76:50:62:cb:9b:21:10:
                    74:19:32:ba:09:78:fe:b1:ca:29:ee:28:73:d7:eb:
                    06:d0:f6:56:16:0e:cf:d6:f3:b2:37:3e:95:be:a2:
                    31:e7:8a:3e:53:1b:f9:f8:a6:10:e9:3e:24:d9:61:
                    d0:50:14:46:7e:e5:a0:9e:84:cf:c1:79:a5:e5:ff:
                    4f:37:ea:50:02:a0:0b:6b:83:08:74:f0:68:15:33:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F9:91:20:F9:87:DA:AA:84:22:66:96:90:FB:30:9A:07:29:A4:C8
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:0a:b7:d1:fe:33:f0:ea:86:04:79:bd:1a:74:a3:2f:35:
         61:cc:4d:04:b8:88:f7:c4:fb:30:69:7b:de:de:92:cd:16:f0:
         83:c2:39:d5:8d:4b:19:74:a7:f6:a8:76:81:ee:46:7f:41:80:
         ee:07:3d:bb:8b:e5:f5:bb:16:45:79:2c:b3:5d:29:bd:46:84:
         5b:73:66:23:68:eb:6b:c4:80:e8:61:5d:77:51:5f:48:a9:9d:
         e1:52:3a:e6:a4:f9:44:4a:7c:ec:b5:14:24:4b:e1:d3:9f:97:
         fd:74:77:da:c8:5e:fa:47:0f:00:05:36:cb:e0:2a:72:52:f7:
         f9:1d:90:53:e5:f0:ce:91:8c:7b:05:b3:16:3f:f0:4d:f9:1d:
         25:e0:ef:17:45:99:5e:0d:5a:ad:5f:11:81:22:18:81:ef:d9:
         db:75:69:34:44:f2:e2:cd:79:28:77:c6:fd:2c:97:c1:2b:9a:
         34:13:b5:87:fe:5f:e5:32:be:b8:6a:a8:e2:42:3b:7f:b0:60:
         c5:87:51:94:78:21:f7:cb:9b:f2:4f:eb:06:57:90:43:82:91:
         71:76:db:db:5e:dd:1f:c5:1c:6d:d9:02:7e:17:af:68:ec:8e:
         b1:7d:c6:c3:f3:4b:fd:55:5f:e2:2e:61:62:25:09:65:3d:79:
         4c:0e:2b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdiTBsl76MDKz896YCxAi9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4
MmQ0M2EwHhcNMjUwNjEyMDQwMDQ0WhcNMjUwNjEzMDQwMDQ0WjAzMTEwLwYDVQQD
EyhmZGY5OTEyMGY5ODdkYWFhODQyMjY2OTY5MGZiMzA5YTA3MjlhNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjvr9wyp/izS9jX2S5kbU53CfCZf
0VB/L78sffBwca2qB1rv4KcZzrZRgGBH3dLcrr0+88/p4llXsMX02tT4n+K0ldFo
5HfEZyVtQ8yeVLw/62gMPfhROFVeDH3V9Yc9PQTbNlhkhi4KsFLsQU2FTSXlngxd
ISQZOY6QsQfMvbNTwSq5zVobl3TPZv6g54ALLRCh0Xa+QfiqhcNP3jJFd8Otqzfi
aUdpW09B6XZQYsubIRB0GTK6CXj+scop7ihz1+sG0PZWFg7P1vOyNz6VvqIx54o+
Uxv5+KYQ6T4k2WHQUBRGfuWgnoTPwXml5f9PN+pQAqALa4MIdPBoFTOhJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP35kSD5h9qqhCJmlpD7MJoHKaTIMB8GA1UdIwQY
MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt
OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4
LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeMKt9H+
M/DqhgR5vRp0oy81YcxNBLiI98T7MGl73t6SzRbwg8I51Y1LGXSn9qh2ge5Gf0GA
7gc9u4vl9bsWRXkss10pvUaEW3NmI2jra8SA6GFdd1FfSKmd4VI65qT5REp87LUU
JEvh05+X/XR32she+kcPAAU2y+AqclL3+R2QU+XwzpGMewWzFj/wTfkdJeDvF0WZ
Xg1arV8RgSIYge/Z23VpNETy4s15KHfG/SyXwSuaNBO1h/5f5TK+uGqo4kI7f7Bg
xYdRlHgh98ub8k/rBleQQ4KRcXbb217dH8UcbdkCfhevaOyOsX3Gw/NL/VVf4i5h
YiUJZT15TA4r2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:02:55 2025 by rpki-client