Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File:                     n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier:          fEfvLd3Djn2vGm2sRxbrHr7qCTrgZ/1+5Jd/UkADbis=
Subject key identifier:   7D:A3:E1:66:9E:43:0B:25:FA:75:E0:29:C0:C8:EA:D8:46:08:52:0E
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer:       /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial:       0197711AC45A58557D6E37A9F779CF485992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number:          0510
Signing time:             Sun 15 Jun 2025 01:01:09 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:09 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:09 +0000
Files and hashes:         1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: ecvjxxlJZMT87sO0RLAWsEoWQxmry/OGcgB2DRl8XSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:c4:5a:58:55:7d:6e:37:a9:f7:79:cf:48:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
        Validity
            Not Before: Jun 15 01:01:09 2025 GMT
            Not After : Jun 16 01:01:09 2025 GMT
        Subject: CN=7da3e1669e430b25fa75e029c0c8ead84608520e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:93:03:3d:ed:2e:1a:72:c5:fc:c1:89:9c:
                    be:c2:f0:c6:62:4c:65:c3:25:e2:6a:ad:24:19:3d:
                    bb:d9:d0:0e:40:a7:76:e5:4a:54:d0:a6:82:2a:2a:
                    2f:3b:5f:20:59:f2:3f:53:c9:6b:fe:9d:f8:f6:2c:
                    33:cb:14:dd:ee:8d:80:0a:07:20:32:66:62:c7:05:
                    7b:8e:c0:15:c3:67:aa:01:b2:27:f0:92:f6:e2:36:
                    69:29:5a:87:b4:8d:37:61:54:52:dc:90:d1:0a:60:
                    e2:4e:7f:a5:34:0b:ec:dc:19:5b:0a:35:80:6a:df:
                    99:19:f7:9e:c1:a9:75:2f:ab:c8:14:cf:71:59:2a:
                    18:33:98:80:d3:0c:b4:db:97:79:2e:1c:62:67:3d:
                    7a:a0:0b:bb:e7:85:92:87:f0:a7:51:7d:01:7c:af:
                    0c:24:a5:de:1e:fb:18:8e:76:fd:9a:64:05:d6:a5:
                    fd:dc:38:bf:db:15:48:ce:f0:fa:04:65:ee:bb:8c:
                    d2:28:18:34:ee:11:a6:5b:1a:24:f9:86:27:3a:ff:
                    35:5b:8e:d6:2d:30:38:30:3d:39:8b:9d:d7:d0:d2:
                    e4:af:f4:d8:c2:f4:f0:a3:98:f8:e3:25:b7:f9:81:
                    8e:5f:2b:8c:2d:e4:2a:1a:d2:51:78:2d:b8:d3:96:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A3:E1:66:9E:43:0B:25:FA:75:E0:29:C0:C8:EA:D8:46:08:52:0E
            X509v3 Authority Key Identifier:
                keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:a2:16:12:d4:7a:f3:05:2d:05:28:08:18:d3:7d:50:a0:
         c3:4a:18:46:11:eb:7e:89:f6:2e:98:64:f9:4a:97:79:f2:d2:
         ef:56:f3:6f:3c:42:87:30:da:d6:b1:6c:2d:79:2b:88:54:be:
         0a:7e:5b:62:f9:29:f5:04:0f:01:0f:e9:29:ea:ae:72:d3:7a:
         64:a7:f7:cb:84:76:b6:e4:a4:b9:05:0f:98:40:c7:04:20:52:
         dd:e0:51:44:e5:30:02:2d:1b:4d:75:aa:b5:7d:53:1e:df:b0:
         01:42:b7:16:f0:ac:27:ba:3f:36:e3:32:91:31:01:67:5d:35:
         9a:a8:2d:21:a8:38:67:0f:da:8c:bd:a7:10:65:54:50:23:45:
         88:b5:b1:b6:df:a0:48:e3:4d:7a:75:41:e4:b4:52:69:12:8c:
         42:3b:ea:58:c6:76:28:1c:2b:fd:35:58:54:27:6d:1d:2c:c3:
         4e:f2:55:e1:3c:c5:72:39:b5:93:2c:9b:e0:b8:64:fc:a0:b8:
         83:91:8d:ba:06:37:db:32:24:6b:65:3f:e8:2a:e7:7e:48:20:
         f7:b5:4e:d7:77:9c:bb:e0:bb:6c:ee:34:d7:ca:3d:05:45:4f:
         9c:2f:31:2b:64:c8:b7:92:bf:57:fe:36:ea:5a:32:48:1f:66:
         6a:21:3b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGsRaWFV9bjep93nPSFmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTE2MTAxZTQyMWQyMWNkYjVlNWIwNWEyZTI4OWRmYjc3
M2Y0YzkwHhcNMjUwNjE1MDEwMTA5WhcNMjUwNjE2MDEwMTA5WjAzMTEwLwYDVQQD
Eyg3ZGEzZTE2NjllNDMwYjI1ZmE3NWUwMjljMGM4ZWFkODQ2MDg1MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nyTAz3tLhpyxfzBiZy+wvDGYkxl
wyXiaq0kGT272dAOQKd25UpU0KaCKiovO18gWfI/U8lr/p349iwzyxTd7o2ACgcg
MmZixwV7jsAVw2eqAbIn8JL24jZpKVqHtI03YVRS3JDRCmDiTn+lNAvs3BlbCjWA
at+ZGfeewal1L6vIFM9xWSoYM5iA0wy025d5LhxiZz16oAu754WSh/CnUX0BfK8M
JKXeHvsYjnb9mmQF1qX93Di/2xVIzvD6BGXuu4zSKBg07hGmWxok+YYnOv81W47W
LTA4MD05i53X0NLkr/TYwvTwo5j44yW3+YGOXyuMLeQqGtJReC2405bBSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2j4WaeQwsl+nXgKcDI6thGCFIOMB8GA1UdIwQY
MBaAFJ/hYQHkIdIc215bBaLiid+3c/TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQt
ZTk3MTFmNTc2YjRlLzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQtZTk3MTFmNTc2YjRl
LzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2CiFhLU
evMFLQUoCBjTfVCgw0oYRhHrfon2Lphk+UqXefLS71bzbzxChzDa1rFsLXkriFS+
Cn5bYvkp9QQPAQ/pKequctN6ZKf3y4R2tuSkuQUPmEDHBCBS3eBRROUwAi0bTXWq
tX1THt+wAUK3FvCsJ7o/NuMykTEBZ101mqgtIag4Zw/ajL2nEGVUUCNFiLWxtt+g
SONNenVB5LRSaRKMQjvqWMZ2KBwr/TVYVCdtHSzDTvJV4TzFcjm1kyyb4Lhk/KC4
g5GNugY32zIka2U/6Crnfkgg97VO13ecu+C7bO4018o9BUVPnC8xK2TIt5K/V/42
6loySB9maiE7Sg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:22:23 2025 by rpki-client