Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          PVL0IqZ+45PDvpha8d+SSzQTb4LF/6Pmpf4e5XGwhAw=
Subject key identifier:   60:17:F0:2C:00:B2:2A:63:90:40:A2:D3:7A:88:7D:4D:45:EA:38:58
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       01975B37585A348E0CC8689EBDEA26B03B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          028C
Signing time:             Tue 10 Jun 2025 19:00:42 +0000
Manifest this update:     Tue 10 Jun 2025 19:00:42 +0000
Manifest next update:     Wed 11 Jun 2025 19:00:42 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: qjrHbrlZu5zWP4ZccwppHRqvYKj2gwNtKc39OYj+Kzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:58:5a:34:8e:0c:c8:68:9e:bd:ea:26:b0:3b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Jun 10 19:00:42 2025 GMT
            Not After : Jun 11 19:00:42 2025 GMT
        Subject: CN=6017f02c00b22a639040a2d37a887d4d45ea3858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:18:d7:16:07:72:19:bb:a9:49:15:27:aa:
                    05:44:88:bc:90:e2:14:ee:6a:5a:85:a7:4b:fe:25:
                    f3:4f:e8:26:8e:3e:81:4e:a3:72:ec:3d:67:a6:5f:
                    69:b1:af:75:79:a5:1a:70:1c:a3:5a:bf:c4:26:e0:
                    8d:aa:72:f7:27:bb:03:a4:41:c9:46:18:7e:4a:7b:
                    d8:79:de:d7:cc:40:58:75:fa:f1:26:0a:2a:04:f7:
                    dc:85:eb:a7:42:5a:40:fa:8f:61:27:ee:0f:0d:41:
                    b7:84:97:ac:ed:fa:40:c2:41:bc:a2:67:95:39:6e:
                    e5:69:22:4b:08:fb:f4:c8:d7:a6:87:51:98:74:34:
                    b8:25:4b:e0:07:45:54:18:88:19:6e:dc:91:a6:b1:
                    b6:ef:df:12:c1:24:90:8f:70:22:ad:ca:01:87:df:
                    7d:de:4a:b3:9e:c3:04:ca:8c:c5:46:28:9e:2b:8b:
                    b1:2d:99:fc:09:60:5b:d7:bf:80:f3:f4:79:d7:19:
                    73:8b:f0:29:8a:d2:56:2a:78:43:89:51:bc:ea:99:
                    ea:91:f1:96:07:05:75:07:c4:2f:68:cc:0e:ca:58:
                    ff:8c:7e:f2:6a:d5:f8:e5:5d:be:73:f0:c7:8c:3a:
                    e8:0d:1e:80:91:5a:ff:8f:ac:41:1f:12:46:49:1e:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:F0:2C:00:B2:2A:63:90:40:A2:D3:7A:88:7D:4D:45:EA:38:58
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:97:60:c0:0d:e7:44:9c:25:37:c1:cd:b1:1a:70:98:e3:a0:
         de:22:c3:d2:34:17:01:17:54:d6:1b:f5:10:64:00:03:01:7d:
         43:c3:af:03:34:c3:ea:f2:ef:9b:8e:3d:77:a4:b8:8c:2a:c2:
         90:47:b6:ed:6e:7b:33:3d:20:ae:3d:c9:61:7f:a2:ec:d5:46:
         3b:5d:d1:00:a7:e7:93:85:e5:51:f1:23:10:67:e7:ec:c2:8c:
         4b:50:0e:91:9d:ea:77:9d:5f:f3:af:47:3c:c6:f0:52:bd:06:
         07:08:1b:30:49:86:94:8d:e9:32:9d:0d:4d:2c:97:a1:da:58:
         d6:e1:e3:27:5b:8a:d5:41:f3:b1:94:b9:68:ca:bd:0e:40:24:
         bd:b9:bd:6e:e8:ee:c4:b6:e3:93:1e:1b:35:12:af:f4:91:ff:
         8f:61:de:1b:c2:17:bb:31:2b:5b:7f:85:09:fc:21:49:af:1d:
         2a:86:90:23:43:96:28:7f:5c:13:bd:3e:21:b4:35:e2:88:1e:
         43:74:51:0e:a5:51:4b:63:2d:a9:20:d9:40:41:a9:09:49:b7:
         05:43:c5:ab:17:57:3d:a7:e5:93:e4:83:dd:0b:47:81:ee:26:
         66:3f:f6:db:c6:07:d8:24:d7:63:99:bc:9c:df:3f:d7:20:c5:
         73:1b:30:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdbN1haNI4MyGieveomsDsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTVjN2NjN2I1NDI0ZGE1YTIxMTE2ZmVmNzJjZTVjZDU2
NGMwZjEwHhcNMjUwNjEwMTkwMDQyWhcNMjUwNjExMTkwMDQyWjAzMTEwLwYDVQQD
Eyg2MDE3ZjAyYzAwYjIyYTYzOTA0MGEyZDM3YTg4N2Q0ZDQ1ZWEzODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUY1xYHchm7qUkVJ6oFRIi8kOIU
7mpahadL/iXzT+gmjj6BTqNy7D1npl9psa91eaUacByjWr/EJuCNqnL3J7sDpEHJ
Rhh+SnvYed7XzEBYdfrxJgoqBPfcheunQlpA+o9hJ+4PDUG3hJes7fpAwkG8omeV
OW7laSJLCPv0yNemh1GYdDS4JUvgB0VUGIgZbtyRprG2798SwSSQj3AircoBh999
3kqznsMEyozFRiieK4uxLZn8CWBb17+A8/R51xlzi/ApitJWKnhDiVG86pnqkfGW
BwV1B8QvaMwOylj/jH7yatX45V2+c/DHjDroDR6AkVr/j6xBHxJGSR49PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAX8CwAsipjkECi03qIfU1F6jhYMB8GA1UdIwQY
MBaAFBcVx8x7VCTaWiERb+9yzlzVZMDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYt
YzUzNmJmNzM5ODY5LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYtYzUzNmJmNzM5ODY5
LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZdgwA3n
RJwlN8HNsRpwmOOg3iLD0jQXARdU1hv1EGQAAwF9Q8OvAzTD6vLvm449d6S4jCrC
kEe27W57Mz0grj3JYX+i7NVGO13RAKfnk4XlUfEjEGfn7MKMS1AOkZ3qd51f869H
PMbwUr0GBwgbMEmGlI3pMp0NTSyXodpY1uHjJ1uK1UHzsZS5aMq9DkAkvbm9buju
xLbjkx4bNRKv9JH/j2HeG8IXuzErW3+FCfwhSa8dKoaQI0OWKH9cE70+IbQ14oge
Q3RRDqVRS2MtqSDZQEGpCUm3BUPFqxdXPaflk+SD3QtHge4mZj/228YH2CTXY5m8
nN8/1yDFcxswBw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 02:51:23 2025 by rpki-client