Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File:                     F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier:          /0nCjYJjnF/3yKPTb+B/PL9k3zCAZj9STR+es+W8Xsg=
Subject key identifier:   04:82:A5:9B:08:95:6D:AC:AF:DA:D7:04:DF:54:28:66:35:11:98:57
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer:       /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial:       0197488CE597D508B05DB5094446725416A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number:          09FC
Signing time:             Sat 07 Jun 2025 04:01:22 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:22 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:22 +0000
Files and hashes:         1: 1-NglftYb2V7rgWaj06UP-4Fbxaw.roa (hash: zvrixR1OfM7l+BuV+ILz2uoXSyiF2KQB8j15busAZgQ=)
                          2: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: 6EA7oIu1qaZiyZjDoZZMsF9HJ5PwJ73cVC8OQSEBxrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:e5:97:d5:08:b0:5d:b5:09:44:46:72:54:16:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
        Validity
            Not Before: Jun  7 04:01:22 2025 GMT
            Not After : Jun  8 04:01:22 2025 GMT
        Subject: CN=0482a59b08956dacafdad704df54286635119857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:a8:17:c0:f0:06:3b:50:b9:fa:50:23:9e:
                    cf:ac:f2:82:df:9f:b2:90:53:db:14:b9:73:d7:27:
                    6e:c9:71:d9:24:4e:70:91:f7:6a:34:7d:a0:c4:80:
                    06:d5:4f:94:f9:8c:4e:54:eb:fe:b1:99:62:04:ee:
                    11:e1:3c:97:f0:a1:2f:49:c7:a8:9f:3d:77:b6:53:
                    ad:a9:79:79:23:d4:7e:d9:5e:79:68:d5:d2:a4:0e:
                    16:38:1a:c1:df:39:d5:3e:d6:2f:c5:65:a0:78:5e:
                    86:eb:51:4a:a4:49:c4:aa:3b:3f:3d:8b:d7:b2:53:
                    de:8e:7c:78:4f:86:13:cc:5a:69:9f:de:46:48:7e:
                    9c:a2:f6:3e:62:79:3f:5c:0d:da:ba:67:5c:f1:26:
                    b0:21:02:b1:5f:8c:27:db:04:89:48:e3:d6:79:c0:
                    2c:52:92:9f:89:16:2f:0e:a9:ae:8f:e5:17:0d:55:
                    3c:45:63:15:55:bf:dc:47:47:2d:d8:49:11:a8:74:
                    5b:cd:f6:c0:46:95:c9:84:a5:28:05:99:88:5d:b0:
                    0a:90:76:1a:50:1b:4c:ed:10:10:dd:ad:4c:32:26:
                    89:f7:eb:b1:bc:32:dd:f9:4f:94:d1:1d:21:c6:5a:
                    94:5f:30:61:ac:5f:d7:ff:e1:cb:51:48:c1:c6:4b:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:82:A5:9B:08:95:6D:AC:AF:DA:D7:04:DF:54:28:66:35:11:98:57
            X509v3 Authority Key Identifier:
                keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7e:76:64:3c:00:d4:30:a1:9a:0a:48:76:f4:83:8e:32:c5:
         7c:91:cf:4e:1e:31:56:6f:80:cf:c8:0c:3d:8e:ce:b8:50:24:
         7c:71:ce:a5:84:74:8e:a0:bb:f7:32:5d:92:a8:c7:60:8b:be:
         24:3b:53:93:67:44:a6:b0:6b:39:3f:57:11:8a:f7:da:5c:c8:
         d3:a9:f0:fe:59:9f:3a:70:c2:4b:77:4f:f9:b7:1a:5a:91:45:
         01:9d:ea:1a:b9:77:c4:64:8e:90:cd:4f:7c:91:5f:70:f5:42:
         23:45:45:6f:4b:d1:ea:9b:f7:57:a0:8f:d8:9e:b3:10:69:0d:
         d0:e9:9c:3c:81:51:b3:61:d5:06:3d:c0:aa:b6:7b:5d:75:d7:
         12:17:d5:2a:87:44:ff:87:7b:cc:5e:d7:5d:1c:b6:ac:75:4e:
         97:74:34:33:29:70:6d:b9:ba:18:c6:fb:7e:5a:e5:16:59:3a:
         2f:9e:0e:b0:e0:79:56:e3:fd:40:df:3e:ac:c6:9d:ce:95:c9:
         98:49:a7:ea:e3:c0:56:0b:94:64:9b:90:45:db:53:bc:4d:68:
         34:56:22:be:9e:6e:be:20:52:b9:46:1a:a5:19:37:fc:cf:bd:
         ca:03:4f:a8:ad:fe:ec:f1:3b:59:84:6a:73:b6:cc:1e:3f:ef:
         95:04:1f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjOWX1QiwXbUJREZyVBanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZWIzZTAwNDUwMTk4YzhhZDQ1ZWJmODNlMTMwMjE5Yjkz
NjQzYTUwHhcNMjUwNjA3MDQwMTIyWhcNMjUwNjA4MDQwMTIyWjAzMTEwLwYDVQQD
EygwNDgyYTU5YjA4OTU2ZGFjYWZkYWQ3MDRkZjU0Mjg2NjM1MTE5ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZioF8DwBjtQufpQI57PrPKC35+y
kFPbFLlz1yduyXHZJE5wkfdqNH2gxIAG1U+U+YxOVOv+sZliBO4R4TyX8KEvSceo
nz13tlOtqXl5I9R+2V55aNXSpA4WOBrB3znVPtYvxWWgeF6G61FKpEnEqjs/PYvX
slPejnx4T4YTzFppn95GSH6covY+Ynk/XA3aumdc8SawIQKxX4wn2wSJSOPWecAs
UpKfiRYvDqmuj+UXDVU8RWMVVb/cR0ct2EkRqHRbzfbARpXJhKUoBZmIXbAKkHYa
UBtM7RAQ3a1MMiaJ9+uxvDLd+U+U0R0hxlqUXzBhrF/X/+HLUUjBxktQHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASCpZsIlW2sr9rXBN9UKGY1EZhXMB8GA1UdIwQY
MBaAFBfrPgBFAZjIrUXr+D4TAhm5NkOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi1zLUFFVUJtTWl0UmV2NFBoTUNHYmsyUTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMzY0MGMtMzA2NS00M2I4LWI5NTUt
MTg4ODg0NWNhODU5LzEvRi1zLUFFVUJtTWl0UmV2NFBoTUNHYmsyUTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMzY0MGMtMzA2NS00M2I4LWI5NTUtMTg4ODg0NWNhODU5
LzEvRi1zLUFFVUJtTWl0UmV2NFBoTUNHYmsyUTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn52ZDwA
1DChmgpIdvSDjjLFfJHPTh4xVm+Az8gMPY7OuFAkfHHOpYR0jqC79zJdkqjHYIu+
JDtTk2dEprBrOT9XEYr32lzI06nw/lmfOnDCS3dP+bcaWpFFAZ3qGrl3xGSOkM1P
fJFfcPVCI0VFb0vR6pv3V6CP2J6zEGkN0OmcPIFRs2HVBj3AqrZ7XXXXEhfVKodE
/4d7zF7XXRy2rHVOl3Q0Mylwbbm6GMb7flrlFlk6L54OsOB5VuP9QN8+rMadzpXJ
mEmn6uPAVguUZJuQRdtTvE1oNFYivp5uviBSuUYapRk3/M+9ygNPqK3+7PE7WYRq
c7bMHj/vlQQfwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:33 2025 by rpki-client