Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File:                     FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier:          WvkHUi5OF28EbEX/VVkYzVrM5d6zY9kUGJKFOpg77qw=
Subject key identifier:   6D:6D:83:EC:FF:1A:C6:F5:6B:62:1E:31:5D:CD:50:70:D4:B9:61:54
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer:       /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial:       019922C344F26C9993EDDB8373CB01A8B3FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number:          160C
Signing time:             Sun 07 Sep 2025 06:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:46 +0000
Files and hashes:         1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: sB3GwOdZr6RurfGm1HQL2Za3DPDul2Ts2OXSDWFkcI0=)
                          2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:44:f2:6c:99:93:ed:db:83:73:cb:01:a8:b3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
        Validity
            Not Before: Sep  7 06:00:46 2025 GMT
            Not After : Sep  8 06:00:46 2025 GMT
        Subject: CN=6d6d83ecff1ac6f56b621e315dcd5070d4b96154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:89:63:b7:c4:04:6f:89:73:42:13:2c:64:
                    af:aa:4d:62:4f:40:4d:11:47:d7:cf:d9:51:f2:61:
                    82:a0:69:ad:4d:e1:b6:8e:97:1e:63:0e:b6:16:8d:
                    32:14:6b:ac:e7:81:40:ba:c2:5f:f9:64:ab:f5:99:
                    6a:e9:31:11:c7:a8:a4:81:97:1e:36:7c:77:5f:3a:
                    66:7c:c3:9b:d1:45:c4:aa:1c:7e:70:9e:c7:b0:cc:
                    a3:59:c3:27:b0:31:bb:30:f0:8c:59:a3:4d:b0:ae:
                    31:c2:d7:53:04:56:39:76:99:c3:55:67:9b:77:a1:
                    e1:66:b4:d6:de:48:46:29:b0:bf:9d:48:35:40:f4:
                    dc:f3:03:88:b5:d3:33:41:27:5e:e9:2c:a4:fe:55:
                    47:ad:68:53:f0:2c:c4:38:a1:79:9c:16:c3:04:cd:
                    ed:3d:37:19:ba:35:f0:ad:b7:32:36:85:45:3f:e2:
                    49:e3:d5:4a:0a:14:82:a7:51:09:17:79:f2:fa:7f:
                    fa:1b:62:fd:be:fd:c3:b9:37:dc:84:44:a7:29:27:
                    d9:b8:8f:30:c9:59:14:72:ad:9f:77:04:ee:2b:40:
                    da:08:4e:66:f6:08:86:8f:52:aa:88:20:ce:d9:6e:
                    95:c9:79:f7:04:bd:79:a0:18:93:33:d3:11:e4:6c:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6D:83:EC:FF:1A:C6:F5:6B:62:1E:31:5D:CD:50:70:D4:B9:61:54
            X509v3 Authority Key Identifier:
                keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9d:5e:e2:09:c7:78:7e:96:22:a1:5c:6e:b6:78:8f:18:7c:
         1f:59:26:4e:eb:16:6b:33:8f:4b:88:8e:0c:27:14:58:fc:d6:
         fa:f6:7c:b6:8d:2a:a8:b6:f1:4c:f1:e6:9b:0e:f2:08:a0:12:
         8e:fc:e2:6e:b7:3e:d8:04:99:24:29:e3:a7:31:dc:88:85:0d:
         86:52:39:43:a8:dd:26:2f:2b:a7:d3:2b:83:b5:98:55:94:b2:
         38:bf:16:41:f5:47:95:e8:8e:c8:5b:80:c4:d2:69:84:5b:28:
         22:dd:69:0c:91:b1:cb:51:e6:7f:2a:f5:37:6f:58:7c:52:1b:
         bb:1b:09:3c:69:78:dc:93:d5:2c:46:cf:d7:6b:b5:83:cb:b0:
         78:79:f8:64:92:47:11:4d:d1:52:40:bb:f3:5f:6d:36:6e:87:
         6f:a5:6b:c1:17:b7:09:1d:63:db:78:97:0f:1b:1d:50:85:df:
         79:e2:49:9b:5c:7f:b5:5b:80:11:be:01:d6:c6:10:85:28:cd:
         ef:1c:32:50:b7:50:d6:e6:c5:21:11:50:ac:35:0a:d1:6c:da:
         c0:37:98:30:59:f5:db:ff:9c:6b:60:67:42:22:90:46:e3:d7:
         8b:3b:24:97:ef:05:a8:c1:47:92:d0:a8:53:fe:19:3c:ea:cf:
         8e:9c:ed:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw0TybJmT7duDc8sBqLP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzEyNzI5ODgyZDZmY2M0MDBkMjRjN2ExNjE5MWViZjc5
YWQzYWUwHhcNMjUwOTA3MDYwMDQ2WhcNMjUwOTA4MDYwMDQ2WjAzMTEwLwYDVQQD
Eyg2ZDZkODNlY2ZmMWFjNmY1NmI2MjFlMzE1ZGNkNTA3MGQ0Yjk2MTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphaJY7fEBG+Jc0ITLGSvqk1iT0BN
EUfXz9lR8mGCoGmtTeG2jpceYw62Fo0yFGus54FAusJf+WSr9Zlq6TERx6ikgZce
Nnx3XzpmfMOb0UXEqhx+cJ7HsMyjWcMnsDG7MPCMWaNNsK4xwtdTBFY5dpnDVWeb
d6HhZrTW3khGKbC/nUg1QPTc8wOItdMzQSde6Syk/lVHrWhT8CzEOKF5nBbDBM3t
PTcZujXwrbcyNoVFP+JJ49VKChSCp1EJF3ny+n/6G2L9vv3DuTfchESnKSfZuI8w
yVkUcq2fdwTuK0DaCE5m9giGj1KqiCDO2W6VyXn3BL15oBiTM9MR5GzPTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1tg+z/Gsb1a2IeMV3NUHDUuWFUMB8GA1UdIwQY
MBaAFBTBJymILW/MQA0kx6Fhkev3mtOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1FbktZZ3RiOHhBRFNUSG9XR1I2X2VhMDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jYjNhNTMtMDg4Ny00YzJhLTlkZDIt
ZGQ3MGZkNjc5ZWZiLzEvRk1FbktZZ3RiOHhBRFNUSG9XR1I2X2VhMDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jYjNhNTMtMDg4Ny00YzJhLTlkZDItZGQ3MGZkNjc5ZWZi
LzEvRk1FbktZZ3RiOHhBRFNUSG9XR1I2X2VhMDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ1e4gnH
eH6WIqFcbrZ4jxh8H1kmTusWazOPS4iODCcUWPzW+vZ8to0qqLbxTPHmmw7yCKAS
jvzibrc+2ASZJCnjpzHciIUNhlI5Q6jdJi8rp9Mrg7WYVZSyOL8WQfVHleiOyFuA
xNJphFsoIt1pDJGxy1Hmfyr1N29YfFIbuxsJPGl43JPVLEbP12u1g8uweHn4ZJJH
EU3RUkC7819tNm6Hb6VrwRe3CR1j23iXDxsdUIXfeeJJm1x/tVuAEb4B1sYQhSjN
7xwyULdQ1ubFIRFQrDUK0WzawDeYMFn12/+ca2BnQiKQRuPXizskl+8FqMFHktCo
U/4ZPOrPjpztGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:07 2025 by rpki-client