Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
File:                     F1rTPU9qTQU5wncOK0-7qU_PHx0.mft (raw, json)
Hash identifier:          8l5PYSXiln9C0O4nz3ula0GuRn4ViMOZgjjDdJ4wQRM=
Subject key identifier:   81:64:0E:31:51:57:CA:DC:1D:5F:5C:03:18:84:A3:C9:DD:1A:4F:AE
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Certificate issuer:       /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial:       019748F9E76F6853059296BE34C772AF7D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
Manifest number:          0C15
Signing time:             Sat 07 Jun 2025 06:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:26 +0000
Files and hashes:         1: F1rTPU9qTQU5wncOK0-7qU_PHx0.crl (hash: Ub2etoX+Vf9tw6ULbYJ8w91qTwX38AfSpPJw7Mze+YE=)
                          2: zei6YjhBpdjVqL63TukdVgynd-Y.roa (hash: T4fQda7C6XsjIP/sCnd8L2esALMeo+oGlKzEL3Px+0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:e7:6f:68:53:05:92:96:be:34:c7:72:af:7d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
        Validity
            Not Before: Jun  7 06:00:26 2025 GMT
            Not After : Jun  8 06:00:26 2025 GMT
        Subject: CN=81640e315157cadc1d5f5c031884a3c9dd1a4fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:f2:5e:93:08:fb:dc:b7:78:88:73:03:0b:
                    b5:07:d5:60:9b:2d:3d:63:d9:fe:17:52:5c:24:cc:
                    42:43:f3:21:a0:45:58:8c:0e:af:bd:a9:d0:44:b9:
                    60:83:27:bb:5e:9a:d4:19:d7:55:62:da:50:7c:a0:
                    e3:8a:af:78:c2:72:67:99:56:39:d5:7a:ad:d3:51:
                    f0:11:2e:76:ee:b4:e1:2c:ce:b0:29:14:6b:21:f6:
                    35:78:de:66:a4:42:45:70:22:d0:da:d5:c8:f6:40:
                    73:b6:7c:da:5c:51:41:45:a6:5a:7b:09:89:4f:b0:
                    fd:9a:2c:ac:51:c3:c5:13:b6:26:a0:55:e6:e6:d9:
                    5b:61:0d:f4:c6:7b:89:b8:67:02:01:fe:72:4c:ec:
                    2c:55:7d:35:6c:dc:c1:35:76:b3:25:2c:14:04:22:
                    87:e5:e9:34:10:5e:0c:40:ad:16:45:85:68:23:4c:
                    40:2e:cf:68:59:9b:b1:24:bf:44:db:63:6a:dc:c4:
                    5c:82:1a:2a:3e:57:9f:14:80:88:73:20:c7:d2:4b:
                    b4:9b:c0:fc:2a:1f:b6:d0:15:bf:23:a2:d3:54:61:
                    7a:e9:16:82:2d:df:c9:22:53:f4:80:20:64:28:dc:
                    15:36:52:3c:02:be:a6:f0:6d:ef:c8:10:2c:5e:64:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:64:0E:31:51:57:CA:DC:1D:5F:5C:03:18:84:A3:C9:DD:1A:4F:AE
            X509v3 Authority Key Identifier:
                keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:e1:70:85:da:c8:5e:30:43:c1:36:56:bd:44:06:eb:be:
         fb:b2:c8:7f:7d:16:5f:18:5a:38:bb:d8:c5:9a:e4:24:32:9f:
         19:b4:a3:3d:c7:fa:89:fb:67:85:73:1a:bb:ea:2c:5b:60:29:
         86:01:67:44:5e:f7:27:bc:bd:4a:9d:de:f5:18:f1:92:d8:f1:
         3d:00:88:35:d4:4a:36:84:67:6e:9c:6a:18:5a:17:53:5d:f4:
         7e:11:ae:d4:bc:b3:57:17:72:70:48:b6:eb:80:e0:de:cb:77:
         1b:a2:cf:ae:5e:10:78:36:76:55:c3:ce:f6:1c:1e:87:2b:75:
         e8:f8:33:8c:19:5e:5d:c8:a6:65:a8:1d:ff:d4:39:7f:42:94:
         29:60:ed:4c:9f:9d:d6:35:f6:70:cd:e2:dd:47:be:8e:1f:61:
         6e:d8:c7:87:02:3a:e1:f5:d6:df:9d:65:14:e4:85:96:48:b9:
         ff:3e:0b:53:ba:0c:53:4d:43:f2:86:1a:b1:30:d1:4e:96:b3:
         c2:23:e1:f9:5e:03:95:54:d4:2f:d3:c6:05:f7:5f:5f:c3:a0:
         f4:dc:37:23:a7:85:70:36:b4:09:a2:c7:42:fc:84:df:62:dd:
         93:48:0c:cf:af:35:fd:a8:43:d6:44:f2:16:42:e1:53:aa:f6:
         c7:7c:e9:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+edvaFMFkpa+NMdyr30iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWFkMzNkNGY2YTRkMDUzOWMyNzcwZTJiNGZiYmE5NGZj
ZjFmMWQwHhcNMjUwNjA3MDYwMDI2WhcNMjUwNjA4MDYwMDI2WjAzMTEwLwYDVQQD
Eyg4MTY0MGUzMTUxNTdjYWRjMWQ1ZjVjMDMxODg0YTNjOWRkMWE0ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7nyXpMI+9y3eIhzAwu1B9Vgmy09
Y9n+F1JcJMxCQ/MhoEVYjA6vvanQRLlggye7XprUGddVYtpQfKDjiq94wnJnmVY5
1Xqt01HwES527rThLM6wKRRrIfY1eN5mpEJFcCLQ2tXI9kBztnzaXFFBRaZaewmJ
T7D9miysUcPFE7YmoFXm5tlbYQ30xnuJuGcCAf5yTOwsVX01bNzBNXazJSwUBCKH
5ek0EF4MQK0WRYVoI0xALs9oWZuxJL9E22Nq3MRcghoqPlefFICIcyDH0ku0m8D8
Kh+20BW/I6LTVGF66RaCLd/JIlP0gCBkKNwVNlI8Ar6m8G3vyBAsXmQJrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFkDjFRV8rcHV9cAxiEo8ndGk+uMB8GA1UdIwQY
MBaAFBda0z1Pak0FOcJ3DitPu6lPzx8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEt
MDcyMDNjZDgxNmI4LzEvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEtMDcyMDNjZDgxNmI4
LzEvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg13hcIXa
yF4wQ8E2Vr1EBuu++7LIf30WXxhaOLvYxZrkJDKfGbSjPcf6iftnhXMau+osW2Ap
hgFnRF73J7y9Sp3e9RjxktjxPQCINdRKNoRnbpxqGFoXU130fhGu1LyzVxdycEi2
64Dg3st3G6LPrl4QeDZ2VcPO9hwehyt16PgzjBleXcimZagd/9Q5f0KUKWDtTJ+d
1jX2cM3i3Ue+jh9hbtjHhwI64fXW351lFOSFlki5/z4LU7oMU01D8oYasTDRTpaz
wiPh+V4DlVTUL9PGBfdfX8Og9Nw3I6eFcDa0CaLHQvyE32Ldk0gMz681/ahD1kTy
FkLhU6r2x3zpNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:40:34 2025 by rpki-client