Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File:                     FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier:          RGO7kRn061OJJlg6ZsPakj2B2f3/Z/nwzIKpJPQhc0Q=
Subject key identifier:   A0:3C:9D:83:F4:59:01:3D:BF:DA:F5:CE:74:B6:6D:45:21:BC:6E:58
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer:       /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial:       019923A0A55D5CCCFD779DA532684E4ABE42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number:          0143
Signing time:             Sun 07 Sep 2025 10:02:34 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:34 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:34 +0000
Files and hashes:         1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: DWN+Cn3Ht3mO1OsEqbfaGbMEiKfvm2kVsu8IFUqJwwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:a5:5d:5c:cc:fd:77:9d:a5:32:68:4e:4a:be:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
        Validity
            Not Before: Sep  7 10:02:34 2025 GMT
            Not After : Sep  8 10:02:34 2025 GMT
        Subject: CN=a03c9d83f459013dbfdaf5ce74b66d4521bc6e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:b9:c4:ee:84:11:4d:b0:36:9c:35:76:ca:
                    a2:3c:6d:c1:50:5f:ae:a0:4a:ba:53:8c:88:6a:29:
                    1f:bf:d2:69:db:f1:c9:d8:c3:4f:c9:44:4e:06:83:
                    44:25:99:03:01:f1:81:9f:45:0e:5f:81:e3:0a:59:
                    f2:2d:29:f6:c6:55:64:ac:9e:bc:a9:94:ef:dd:01:
                    aa:e7:d3:3c:d8:eb:1c:26:8f:77:c6:59:af:38:ff:
                    bb:39:f1:cc:c4:46:69:83:be:d5:e6:4a:35:7f:ec:
                    f9:14:96:cc:03:8c:d8:fe:b0:05:14:ad:79:51:60:
                    10:34:ea:ff:43:22:71:d9:77:fd:0f:e2:60:47:59:
                    0e:eb:4a:89:70:65:a6:0c:47:22:ea:e4:06:77:72:
                    2c:c9:24:f4:a5:78:fb:49:37:dd:0d:e7:d5:47:2a:
                    d2:70:9e:06:f9:45:d0:a9:a1:48:4b:0c:aa:f6:86:
                    f9:dc:72:9d:79:6f:b4:1e:4d:0b:8e:78:11:9b:ac:
                    0b:2c:9e:30:14:da:17:3a:e0:26:15:5c:11:02:ca:
                    d1:4d:86:01:05:4f:df:16:0e:3e:de:28:99:42:37:
                    c0:fb:71:72:af:12:96:7e:37:64:cd:66:73:27:5e:
                    ba:0e:3e:31:95:a7:f6:0a:fe:5d:65:32:d8:4f:87:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3C:9D:83:F4:59:01:3D:BF:DA:F5:CE:74:B6:6D:45:21:BC:6E:58
            X509v3 Authority Key Identifier:
                keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:d1:e2:a8:61:da:66:0e:f4:0a:0d:7e:3b:b0:a7:63:42:
         1e:2b:b6:8e:5e:83:fa:6d:09:4c:75:e6:9a:fd:e5:94:43:9b:
         43:ba:95:10:b8:48:c4:5d:2e:c4:87:9b:b5:c6:75:3e:a5:ae:
         df:a5:8e:39:eb:e5:8a:9e:cb:5a:89:7c:06:cb:81:fa:76:92:
         42:43:69:39:8c:0c:f2:37:0f:92:39:c1:d8:6f:43:b9:35:ea:
         8f:1c:9f:54:cf:74:8b:87:01:b4:fd:d6:aa:58:8d:ae:d8:f1:
         fc:6f:95:3d:29:90:06:bf:14:20:7c:84:81:fb:61:79:41:17:
         41:72:51:54:3a:d2:fe:71:7f:db:5e:48:1c:8f:ed:a2:bb:b3:
         24:e8:c6:d8:c6:b5:33:5f:1f:9e:fb:f1:7f:d1:29:b2:64:1a:
         19:40:8c:ab:28:9c:13:a9:44:df:ec:e6:4b:d7:d7:06:33:de:
         da:ac:56:b6:65:54:65:5a:03:bf:f2:ce:76:bb:42:09:68:94:
         c8:af:b5:12:32:d5:90:ac:c5:b3:f8:3f:99:06:1e:31:3f:be:
         56:6a:da:f1:cc:54:5d:04:fc:94:f9:e7:4e:78:dd:68:03:8b:
         d4:20:99:42:95:74:31:f5:73:81:86:78:31:e2:b2:98:a3:d5:
         03:60:ca:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoKVdXMz9d52lMmhOSr5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzUxNWY0Yzg0MTcwMTRmODg0MTVmNmQwNGE5ZjcwMDNm
YzBiMjIwHhcNMjUwOTA3MTAwMjM0WhcNMjUwOTA4MTAwMjM0WjAzMTEwLwYDVQQD
EyhhMDNjOWQ4M2Y0NTkwMTNkYmZkYWY1Y2U3NGI2NmQ0NTIxYmM2ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAula5xO6EEU2wNpw1dsqiPG3BUF+u
oEq6U4yIaikfv9Jp2/HJ2MNPyUROBoNEJZkDAfGBn0UOX4HjClnyLSn2xlVkrJ68
qZTv3QGq59M82OscJo93xlmvOP+7OfHMxEZpg77V5ko1f+z5FJbMA4zY/rAFFK15
UWAQNOr/QyJx2Xf9D+JgR1kO60qJcGWmDEci6uQGd3IsyST0pXj7STfdDefVRyrS
cJ4G+UXQqaFISwyq9ob53HKdeW+0Hk0LjngRm6wLLJ4wFNoXOuAmFVwRAsrRTYYB
BU/fFg4+3iiZQjfA+3FyrxKWfjdkzWZzJ166Dj4xlaf2Cv5dZTLYT4f+kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA8nYP0WQE9v9r1znS2bUUhvG5YMB8GA1UdIwQY
MBaAFBc1FfTIQXAU+IQV9tBKn3AD/AsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNGQ0MzktYjY1OS00ZDdlLWI5Zjct
MTgyNjRjYjc4YjRjLzEvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNGQ0MzktYjY1OS00ZDdlLWI5ZjctMTgyNjRjYjc4YjRj
LzEvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJbR4qhh
2mYO9AoNfjuwp2NCHiu2jl6D+m0JTHXmmv3llEObQ7qVELhIxF0uxIebtcZ1PqWu
36WOOevlip7LWol8BsuB+naSQkNpOYwM8jcPkjnB2G9DuTXqjxyfVM90i4cBtP3W
qliNrtjx/G+VPSmQBr8UIHyEgftheUEXQXJRVDrS/nF/215IHI/toruzJOjG2Ma1
M18fnvvxf9EpsmQaGUCMqyicE6lE3+zmS9fXBjPe2qxWtmVUZVoDv/LOdrtCCWiU
yK+1EjLVkKzFs/g/mQYeMT++Vmra8cxUXQT8lPnnTnjdaAOL1CCZQpV0MfVzgYZ4
MeKymKPVA2DKGg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:00 2025 by rpki-client