Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
File:                     FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json)
Hash identifier:          Kkwmj79Rv6vQxMKpdn/25IWU1GIKOq1w0s+pcuIo+04=
Subject key identifier:   5C:20:E6:5C:3A:EC:A6:0C:66:A4:92:D5:9E:16:19:41:95:B3:A1:EA
Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0
Certificate issuer:       /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
Certificate serial:       01992330F96311F5C833533C649A0C244E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
Manifest number:          0610
Signing time:             Sun 07 Sep 2025 08:00:35 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:35 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:35 +0000
Files and hashes:         1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: YwzuwrKZV0AWQbYP5+Yfm5oacJdAV15I3h4Meiu4jb4=)
                          2: RvOaflHrUbGbCGM86DjNMJAz4Rw.roa (hash: 3Nyo7ThzTtGgNw1pACQDePiv05YOigx9XCdhwJe3hKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:f9:63:11:f5:c8:33:53:3c:64:9a:0c:24:4e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
        Validity
            Not Before: Sep  7 08:00:35 2025 GMT
            Not After : Sep  8 08:00:35 2025 GMT
        Subject: CN=5c20e65c3aeca60c66a492d59e16194195b3a1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:7b:bd:b0:c5:9e:e8:6a:d9:6f:2a:cd:b7:
                    18:8f:25:a8:d7:4a:c8:d9:11:9c:8f:85:4e:c6:09:
                    ca:1d:bd:97:4a:ee:8f:1c:4f:09:98:ad:01:a0:87:
                    42:ab:63:fb:4e:0e:70:69:08:7f:56:91:aa:81:f1:
                    0c:0f:18:7e:28:ed:d2:90:23:b2:fa:56:cd:7f:af:
                    d9:4e:ea:de:0d:d3:e9:35:57:61:04:a3:2a:3b:d6:
                    fd:34:40:0d:e5:f8:f0:a0:40:3f:1d:61:83:f3:51:
                    f8:2b:96:28:a1:1f:54:72:ae:07:b2:c0:e8:01:47:
                    58:7c:5f:c5:fb:d3:b6:c8:bf:37:42:df:b4:74:25:
                    96:00:65:9a:b3:ee:df:e5:89:9e:88:ec:83:59:7a:
                    37:83:92:b4:7d:34:df:1f:33:90:ba:4a:f6:3d:ce:
                    a7:d6:a3:b1:70:60:17:40:6e:d8:06:41:ac:21:56:
                    a6:5d:b1:ec:9d:f5:eb:b9:e2:64:97:1d:f0:b3:5a:
                    42:03:f2:62:29:02:22:86:fa:f1:f5:c8:d4:49:d0:
                    cf:c3:f1:b5:af:5c:10:b4:83:5d:b5:5d:df:c4:82:
                    6c:3e:ab:d7:30:98:b9:00:64:cd:f9:a9:1d:c1:ce:
                    9a:46:37:b6:1a:d4:07:3c:c6:f4:3f:c8:de:89:6a:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:E6:5C:3A:EC:A6:0C:66:A4:92:D5:9E:16:19:41:95:B3:A1:EA
            X509v3 Authority Key Identifier:
                keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:70:e5:5a:73:0e:cc:a9:7f:f1:93:57:e1:9b:fd:36:54:77:
         aa:cd:98:5c:d1:ea:50:98:0f:4f:c6:4a:42:75:35:02:8e:63:
         00:9b:79:b1:01:c4:83:4e:73:2e:40:82:35:ec:63:c6:b3:55:
         4d:c2:59:cc:62:a5:49:8c:1b:b5:5d:8b:93:c0:f7:1e:e0:2c:
         a0:5d:41:e9:b7:8e:c4:51:fe:0f:be:1e:b7:d8:ed:c6:8b:1b:
         6c:fc:9b:67:a8:26:e1:10:b9:0b:5d:96:07:94:7b:b4:df:1e:
         af:fe:cd:78:f5:08:29:d2:78:4c:85:8f:47:60:ba:94:34:0a:
         91:6d:c9:ee:3c:91:7b:db:e5:a8:62:2a:45:eb:05:24:c1:2d:
         d8:c6:73:57:d5:40:f0:59:57:31:b8:c7:11:e3:43:b6:d3:a2:
         78:f9:39:e8:bc:b0:13:d8:e0:1d:b3:ca:a2:7f:9c:11:68:45:
         4d:e4:bc:c5:38:bb:8b:a2:09:48:f7:a7:50:37:2b:ef:d3:4b:
         aa:90:eb:91:14:09:2b:3e:9e:e4:06:f2:4b:e0:08:35:8d:0d:
         6b:f1:e1:eb:4a:a8:4f:44:56:02:0c:b3:dd:d6:b1:81:ab:1b:
         18:68:57:35:3d:3f:00:d6:09:52:8d:b0:c4:15:b8:d2:58:c3:
         d3:44:de:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMPljEfXIM1M8ZJoMJE6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTRiYTUwYjQ2OGZjZWVhYzE5NDYyN2U5OGJhMWY1N2Rl
YjRmYzAwHhcNMjUwOTA3MDgwMDM1WhcNMjUwOTA4MDgwMDM1WjAzMTEwLwYDVQQD
Eyg1YzIwZTY1YzNhZWNhNjBjNjZhNDkyZDU5ZTE2MTk0MTk1YjNhMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfJ7vbDFnuhq2W8qzbcYjyWo10rI
2RGcj4VOxgnKHb2XSu6PHE8JmK0BoIdCq2P7Tg5waQh/VpGqgfEMDxh+KO3SkCOy
+lbNf6/ZTureDdPpNVdhBKMqO9b9NEAN5fjwoEA/HWGD81H4K5YooR9Ucq4HssDo
AUdYfF/F+9O2yL83Qt+0dCWWAGWas+7f5YmeiOyDWXo3g5K0fTTfHzOQukr2Pc6n
1qOxcGAXQG7YBkGsIVamXbHsnfXrueJklx3ws1pCA/JiKQIihvrx9cjUSdDPw/G1
r1wQtINdtV3fxIJsPqvXMJi5AGTN+akdwc6aRje2GtQHPMb0P8jeiWpAcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwg5lw67KYMZqSS1Z4WGUGVs6HqMB8GA1UdIwQY
MBaAFBSkulC0aPzurBlGJ+mLofV960/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgt
YTBkNDhkMGQ3NDYxLzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgtYTBkNDhkMGQ3NDYx
LzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3DlWnMO
zKl/8ZNX4Zv9NlR3qs2YXNHqUJgPT8ZKQnU1Ao5jAJt5sQHEg05zLkCCNexjxrNV
TcJZzGKlSYwbtV2Lk8D3HuAsoF1B6beOxFH+D74et9jtxosbbPybZ6gm4RC5C12W
B5R7tN8er/7NePUIKdJ4TIWPR2C6lDQKkW3J7jyRe9vlqGIqResFJMEt2MZzV9VA
8FlXMbjHEeNDttOiePk56LywE9jgHbPKon+cEWhFTeS8xTi7i6IJSPenUDcr79NL
qpDrkRQJKz6e5AbyS+AINY0Na/Hh60qoT0RWAgyz3daxgasbGGhXNT0/ANYJUo2w
xBW40ljD00TegQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client