Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File:                     ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier:          +8jc78KQn8h1wkXeNNRZmqx7NNe+vmkRZOB4OGIEXAM=
Subject key identifier:   93:E1:03:95:C5:BF:7E:95:B9:3D:2B:80:80:A3:88:20:4C:BD:52:F1
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer:       /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial:       019768F2ADCA6CA3BE089438DE58B2A32E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number:          41
Signing time:             Fri 13 Jun 2025 11:00:24 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:24 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:24 +0000
Files and hashes:         1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: MQM+olnvDvWEN7cVjDgKG7JJZjh4uVuXxYd2AmQm+NI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:ad:ca:6c:a3:be:08:94:38:de:58:b2:a3:2e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
        Validity
            Not Before: Jun 13 11:00:24 2025 GMT
            Not After : Jun 14 11:00:24 2025 GMT
        Subject: CN=93e10395c5bf7e95b93d2b8080a388204cbd52f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:1d:da:31:8a:6b:3b:5a:cf:3c:39:31:1e:
                    65:45:f1:a8:13:fa:b4:04:3c:03:b2:12:0d:02:58:
                    cf:a1:25:e9:c2:12:bd:d6:f3:b2:83:c7:50:71:b5:
                    14:48:f5:a6:72:7b:f5:4a:4d:69:fd:f4:b8:3b:26:
                    22:9a:48:50:e0:7a:35:2e:1a:2e:f2:5e:aa:1e:ec:
                    3f:5b:d6:35:4d:a3:3d:fa:01:bc:0f:cf:80:bf:7c:
                    f9:98:6e:27:01:ba:29:1b:95:5e:11:d1:29:4e:d9:
                    d2:65:31:67:22:19:03:6a:0a:a2:84:6b:14:3a:51:
                    44:04:f9:0b:d7:3b:7f:87:f4:d2:cf:13:23:7c:e4:
                    08:6b:ac:13:dc:14:68:71:5b:47:cd:4b:67:54:5e:
                    a1:39:b4:00:f1:40:c7:2e:33:fc:bb:38:b4:ee:ee:
                    35:ae:d9:05:23:21:62:18:45:11:df:72:ee:70:0f:
                    a2:e7:1b:de:fc:01:48:7c:a3:21:ff:c1:4c:cb:b8:
                    6b:16:28:40:1f:8b:f9:dd:a0:4d:40:b9:8c:b1:12:
                    b7:d7:69:7c:17:4b:33:44:54:ad:f8:3f:be:ab:c4:
                    6a:eb:ac:e2:ba:10:75:12:f0:bc:3e:e4:06:98:46:
                    c9:ec:da:14:d8:8a:a2:f6:02:00:e6:34:ef:68:e9:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E1:03:95:C5:BF:7E:95:B9:3D:2B:80:80:A3:88:20:4C:BD:52:F1
            X509v3 Authority Key Identifier:
                keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ec:94:7d:c5:b1:ff:95:aa:f1:66:7a:ba:ae:ee:30:67:4e:
         06:8e:dd:e5:d7:f9:6d:48:47:b2:42:4f:59:5e:e2:38:1a:01:
         9e:2b:48:b1:35:d3:b5:19:69:13:6f:14:94:04:e7:12:01:61:
         8e:0a:f6:9c:da:4a:53:c3:7b:eb:fa:a1:cb:b7:ea:3e:66:1c:
         e7:7b:98:d2:46:38:24:bf:e3:f1:6a:ea:b7:aa:3c:22:83:dd:
         4b:cd:01:00:66:ef:2c:b5:58:a6:95:6a:08:dc:d9:7d:2c:67:
         87:7f:66:be:51:7a:14:06:75:8d:cd:51:31:28:14:93:b2:1e:
         0f:2b:4e:8e:8f:47:3e:a6:40:49:12:63:3d:40:bf:5c:7d:6c:
         47:dd:69:ec:cb:5c:b5:18:f5:82:06:e3:28:72:3b:80:80:b5:
         8f:14:f9:29:58:a4:ec:2c:35:24:70:8b:3c:47:3e:ab:47:00:
         3b:5c:18:88:2e:6a:90:97:0a:03:dd:dd:da:70:fc:21:8d:44:
         b1:ff:1a:50:6b:87:2e:a2:c8:cb:25:5b:49:23:c6:2f:1e:2c:
         97:5c:5f:a0:e4:67:ef:d2:9f:7b:84:17:3f:9f:2a:68:eb:6a:
         e7:c0:4d:eb:f6:64:c9:92:05:7c:63:97:64:93:33:ee:06:f5:
         27:5c:52:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8q3KbKO+CJQ43liyoy5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDc3ZWFmZGIzODdhZmQxNzU3NDI3MmM5Mzc0YzgxODAz
NzBmNTIwHhcNMjUwNjEzMTEwMDI0WhcNMjUwNjE0MTEwMDI0WjAzMTEwLwYDVQQD
Eyg5M2UxMDM5NWM1YmY3ZTk1YjkzZDJiODA4MGEzODgyMDRjYmQ1MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZwd2jGKaztazzw5MR5lRfGoE/q0
BDwDshINAljPoSXpwhK91vOyg8dQcbUUSPWmcnv1Sk1p/fS4OyYimkhQ4Ho1Lhou
8l6qHuw/W9Y1TaM9+gG8D8+Av3z5mG4nAbopG5VeEdEpTtnSZTFnIhkDagqihGsU
OlFEBPkL1zt/h/TSzxMjfOQIa6wT3BRocVtHzUtnVF6hObQA8UDHLjP8uzi07u41
rtkFIyFiGEUR33LucA+i5xve/AFIfKMh/8FMy7hrFihAH4v53aBNQLmMsRK312l8
F0szRFSt+D++q8Rq66ziuhB1EvC8PuQGmEbJ7NoU2Iqi9gIA5jTvaOn/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPhA5XFv36VuT0rgICjiCBMvVLxMB8GA1UdIwQY
MBaAFH7Xfq/bOHr9F1dCcsk3TIGANw9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2Qt
YmM0MDE3Yzk0NTliLzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2QtYmM0MDE3Yzk0NTli
LzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOyUfcWx
/5Wq8WZ6uq7uMGdOBo7d5df5bUhHskJPWV7iOBoBnitIsTXTtRlpE28UlATnEgFh
jgr2nNpKU8N76/qhy7fqPmYc53uY0kY4JL/j8Wrqt6o8IoPdS80BAGbvLLVYppVq
CNzZfSxnh39mvlF6FAZ1jc1RMSgUk7IeDytOjo9HPqZASRJjPUC/XH1sR91p7Mtc
tRj1ggbjKHI7gIC1jxT5KVik7Cw1JHCLPEc+q0cAO1wYiC5qkJcKA93d2nD8IY1E
sf8aUGuHLqLIyyVbSSPGLx4sl1xfoORn79Kfe4QXP58qaOtq58BN6/ZkyZIFfGOX
ZJMz7gb1J1xScg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:25 2025 by rpki-client