Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File:                     FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier:          96Jyq0ionqaxpalR3UwAXXQkxI9XtjWWaD5YAaS6KQg=
Subject key identifier:   FE:A6:77:3E:2C:55:98:8A:25:81:17:A9:3E:32:18:F6:C2:D4:B5:1B
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer:       /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial:       019874F5554AD6425E5725BB2CF6E5A11A9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number:          15B2
Signing time:             Mon 04 Aug 2025 12:01:31 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:31 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:31 +0000
Files and hashes:         1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: +UlIcEcXw2o9TYs6jSZzC/AAvHTx3jHqCJ2wa+G3hLc=)
                          2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:55:4a:d6:42:5e:57:25:bb:2c:f6:e5:a1:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
        Validity
            Not Before: Aug  4 12:01:31 2025 GMT
            Not After : Aug  5 12:01:31 2025 GMT
        Subject: CN=fea6773e2c55988a258117a93e3218f6c2d4b51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:8f:c4:29:85:70:c2:7a:66:92:89:3d:93:
                    38:6e:d7:1a:f1:0f:68:d8:b5:e4:c7:04:c2:6e:61:
                    ec:ff:53:84:67:04:a6:9d:02:29:4a:b6:0d:f1:d7:
                    a7:85:3b:87:7a:8e:04:4e:7c:8e:af:7a:14:27:d8:
                    e0:26:0b:cb:04:5a:52:40:59:b0:1c:32:c9:93:a7:
                    7d:98:58:85:37:20:20:4b:af:ed:c3:c0:f8:b6:1b:
                    84:e7:1b:1e:7d:33:af:42:68:40:4f:a5:d0:74:64:
                    97:12:f9:86:cb:d4:35:65:10:2d:0e:41:c2:a6:d3:
                    57:53:9d:c2:0b:cb:9c:9e:f3:29:47:fc:5a:08:94:
                    71:7c:9b:11:fd:0b:f4:f8:ae:d0:43:19:f5:50:f6:
                    e2:69:21:dd:68:a5:13:b5:f6:2c:9f:c7:33:81:7d:
                    32:51:f6:6e:db:a6:9a:53:62:01:02:68:0b:8b:b9:
                    ce:9b:c0:6c:70:99:10:d3:c9:a3:ac:55:78:8c:30:
                    c8:34:f2:df:b6:a4:ea:0a:5c:96:41:05:d1:24:cd:
                    6b:11:6f:e1:bc:d3:2e:ef:94:87:55:c5:2c:3f:50:
                    74:a8:3e:14:0d:eb:b2:46:bd:09:e8:44:55:01:02:
                    57:9e:03:7d:b9:ce:18:09:a0:87:ca:c4:95:d6:d7:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A6:77:3E:2C:55:98:8A:25:81:17:A9:3E:32:18:F6:C2:D4:B5:1B
            X509v3 Authority Key Identifier:
                keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fe:8e:93:27:de:95:63:92:f1:f1:be:9a:04:15:12:69:ab:
         48:b5:ac:51:d8:2c:14:29:59:86:56:de:e3:47:6f:79:48:23:
         a3:38:fe:61:d8:ad:ad:88:e3:25:ee:5c:ff:c8:3d:04:cb:f6:
         d9:1e:43:dd:32:5e:c4:19:64:4f:2e:ef:8d:7e:43:a5:63:64:
         e7:13:ab:e8:b0:5f:cf:05:90:bd:8c:b6:9b:1e:a8:3d:1e:be:
         7a:06:39:b4:66:bf:8f:f5:ad:fe:16:07:12:c7:70:01:a8:74:
         02:82:63:32:b8:15:d9:03:f7:bc:f9:ca:98:7a:75:f2:13:a1:
         70:ad:54:20:54:73:d3:4a:93:64:85:89:f4:9f:5e:0d:fe:02:
         aa:f1:45:44:73:2a:4f:95:b3:2e:6b:35:4d:a4:df:06:8f:cc:
         94:6b:a5:3d:a0:7f:5e:2a:4d:ae:ce:06:4d:21:b2:9c:77:5c:
         da:aa:fe:ee:92:9a:6a:29:bf:cb:60:2f:e3:f6:de:ab:86:16:
         72:e3:99:8b:c4:58:82:31:31:d0:2c:16:10:17:29:df:9a:63:
         5e:eb:c4:ef:f8:8d:65:a0:14:fb:00:7c:36:ae:57:c3:5a:21:
         c6:ac:bc:e1:01:e4:7c:36:69:7c:1d:1c:3f:23:1a:ab:9a:71:
         d7:50:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:54 2025 by rpki-client