Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
File:                     Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft (raw, json)
Hash identifier:          EqS0vz32+SEgexw9RDg6hm92X0je2HHu6VPd+SGtRNc=
Subject key identifier:   EB:C1:E0:CE:57:F2:6E:23:32:7F:D1:72:E2:F4:8D:9D:E8:F0:6C:F8
Authority key identifier: 16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
Certificate issuer:       /CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Certificate serial:       019749313985219463FCD2E87568034FE4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
Manifest number:          0C0F
Signing time:             Sat 07 Jun 2025 07:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:52 +0000
Files and hashes:         1: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl (hash: WyiOzjwx9XG3OMCzibPQj7DjJToUn6CoXHFJC4nq/0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:39:85:21:94:63:fc:d2:e8:75:68:03:4f:e4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
        Validity
            Not Before: Jun  7 07:00:52 2025 GMT
            Not After : Jun  8 07:00:52 2025 GMT
        Subject: CN=ebc1e0ce57f26e23327fd172e2f48d9de8f06cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:19:ba:4e:e8:2c:b1:83:17:89:06:c4:b0:
                    1a:a8:53:a2:3c:45:b4:0a:5c:e8:46:cb:6b:f7:cd:
                    e4:63:1f:a5:01:c0:85:b3:ea:24:65:84:02:aa:a9:
                    e0:71:e4:2c:72:a2:0b:9f:23:ca:6d:71:97:56:cb:
                    19:3e:c5:a7:c1:da:bf:db:1d:1d:96:16:83:9d:7b:
                    cb:5d:1c:ac:97:1b:73:9c:e4:91:2c:4a:86:d8:bd:
                    ec:9b:2e:9e:23:64:35:b5:59:82:9f:55:58:bd:51:
                    1f:ee:0c:b8:09:c2:11:87:57:c0:9d:49:26:2d:92:
                    d6:d1:5b:78:a8:a1:2e:5e:89:52:da:49:bf:b4:1f:
                    d0:02:05:32:33:01:ac:65:00:b8:e4:b7:d3:d1:4c:
                    a6:05:b5:64:80:a0:65:6f:22:02:41:40:5e:50:2c:
                    3a:fb:c7:e6:1e:ff:bf:a1:25:14:aa:1d:a7:9a:45:
                    74:4d:0b:2c:d8:ec:61:7a:90:87:55:ec:d3:96:38:
                    63:26:91:1d:58:e1:e6:82:73:fd:61:f8:14:c8:b6:
                    0a:c7:a2:de:04:bd:5b:6a:73:14:51:d0:dd:02:1b:
                    90:71:9a:54:8b:d6:4d:5a:ce:f8:e9:95:c0:43:71:
                    37:46:bc:58:58:c6:7b:67:89:db:76:ce:f8:c1:17:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C1:E0:CE:57:F2:6E:23:32:7F:D1:72:E2:F4:8D:9D:E8:F0:6C:F8
            X509v3 Authority Key Identifier:
                keyid:16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:18:2a:bd:58:24:f5:be:39:7b:f1:ab:51:06:38:a1:41:
         1f:d3:69:de:70:24:95:af:51:4f:bf:4c:01:5b:0d:e8:a8:89:
         60:f9:19:27:33:1b:f4:13:68:29:b3:6b:30:04:1d:6d:d4:51:
         d3:3d:4b:f6:bb:49:66:7f:9d:92:3f:95:45:54:68:46:47:9c:
         b0:2f:62:c6:b7:ef:08:22:9b:49:8a:fb:50:50:5c:76:8d:fd:
         e5:9a:07:9b:56:05:bd:a9:11:fd:92:7d:7d:7c:51:38:ee:48:
         98:31:5a:c0:9a:cd:5d:aa:d8:bc:e0:dc:41:4a:1c:da:32:35:
         cf:a5:a2:ae:57:f1:54:c4:bc:6a:9f:9f:81:34:ff:65:e9:30:
         ae:9e:8b:d1:c0:60:57:0c:f7:07:db:31:a2:fb:55:de:3a:5a:
         61:e7:45:a0:6c:00:e2:c1:25:74:c4:ff:c5:d6:44:75:19:15:
         55:fc:41:83:4a:3f:e8:46:0c:1a:17:b0:e8:f6:35:ec:47:56:
         da:f4:c6:0a:3c:8a:fe:31:20:bb:ad:6d:07:a1:4d:07:85:70:
         f5:c9:aa:83:ea:1b:ba:6d:e5:70:d3:86:51:32:fc:ca:a5:7f:
         ef:3d:ad:31:2d:68:02:c5:cc:87:d9:ff:a9:3c:c1:37:4e:90:
         71:bf:9e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMTmFIZRj/NLodWgDT+TLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MGNmMWRhYWZmMWRjYjI3NjVjZGM0Zjc4ZTg3MDRlNGUy
YjlhZGEwHhcNMjUwNjA3MDcwMDUyWhcNMjUwNjA4MDcwMDUyWjAzMTEwLwYDVQQD
EyhlYmMxZTBjZTU3ZjI2ZTIzMzI3ZmQxNzJlMmY0OGQ5ZGU4ZjA2Y2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1QZuk7oLLGDF4kGxLAaqFOiPEW0
ClzoRstr983kYx+lAcCFs+okZYQCqqngceQscqILnyPKbXGXVssZPsWnwdq/2x0d
lhaDnXvLXRyslxtznOSRLEqG2L3smy6eI2Q1tVmCn1VYvVEf7gy4CcIRh1fAnUkm
LZLW0Vt4qKEuXolS2km/tB/QAgUyMwGsZQC45LfT0UymBbVkgKBlbyICQUBeUCw6
+8fmHv+/oSUUqh2nmkV0TQss2OxhepCHVezTljhjJpEdWOHmgnP9YfgUyLYKx6Le
BL1banMUUdDdAhuQcZpUi9ZNWs746ZXAQ3E3RrxYWMZ7Z4nbds74wRex+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvB4M5X8m4jMn/RcuL0jZ3o8Gz4MB8GA1UdIwQY
MBaAFBYM8dqv8dyydlzcT3jocE5OK5raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmd6eDJxX3gzTEoyWE54UGVPaHdUazRybXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zMjNjNzQtY2U1My00NDVlLWFiYTQt
ZTkyMzFiZTQzOWQzLzEvRmd6eDJxX3gzTEoyWE54UGVPaHdUazRybXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zMjNjNzQtY2U1My00NDVlLWFiYTQtZTkyMzFiZTQzOWQz
LzEvRmd6eDJxX3gzTEoyWE54UGVPaHdUazRybXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtwYKr1Y
JPW+OXvxq1EGOKFBH9Np3nAkla9RT79MAVsN6KiJYPkZJzMb9BNoKbNrMAQdbdRR
0z1L9rtJZn+dkj+VRVRoRkecsC9ixrfvCCKbSYr7UFBcdo395ZoHm1YFvakR/ZJ9
fXxROO5ImDFawJrNXarYvODcQUoc2jI1z6WirlfxVMS8ap+fgTT/Zekwrp6L0cBg
Vwz3B9sxovtV3jpaYedFoGwA4sEldMT/xdZEdRkVVfxBg0o/6EYMGhew6PY17EdW
2vTGCjyK/jEgu61tB6FNB4Vw9cmqg+obum3lcNOGUTL8yqV/7z2tMS1oAsXMh9n/
qTzBN06Qcb+evg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:58 2025 by rpki-client