Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File:                     fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier:          BRyt3jKJz688RhyTEeNt9LVQ4rewgLjz0IiX7uKkPKM=
Subject key identifier:   9C:7B:92:5D:51:BF:3E:C8:63:9D:D9:07:40:CF:F6:78:5E:D0:B5:E8
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer:       /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial:       019872987537B5F545273DFC3620DA5BC97C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 01:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:50 +0000
Files and hashes:         1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
                          2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
                          3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: dMQfBH0Ihrv13Ov5uNRk2Zl1RG8HFaASBsm3YzDRRH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:75:37:b5:f5:45:27:3d:fc:36:20:da:5b:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
        Validity
            Not Before: Aug  4 01:00:50 2025 GMT
            Not After : Aug  5 01:00:50 2025 GMT
        Subject: CN=9c7b925d51bf3ec8639dd90740cff6785ed0b5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:8e:c0:e4:56:8f:4c:14:a6:7b:af:02:1a:
                    27:ac:e8:27:80:b5:e5:ba:b1:80:a2:66:8c:5d:f1:
                    14:eb:00:47:24:41:01:0d:92:4d:45:b8:8d:2d:39:
                    23:52:fa:44:ac:02:8c:b1:46:b8:48:e9:18:71:be:
                    32:31:16:38:64:dc:51:52:af:c5:73:e4:53:3d:e3:
                    6c:f6:87:fd:06:5b:8f:a6:f2:43:3e:a5:d0:37:2f:
                    61:dd:1d:a1:05:68:74:32:83:ce:a7:14:fe:1d:36:
                    71:01:b4:2a:b3:6f:e1:57:8d:e9:0e:b7:b9:19:c9:
                    8e:95:ab:ef:85:15:fa:d8:6f:85:64:a9:bc:f3:41:
                    23:c9:3c:c9:81:d8:f7:b3:c5:8e:21:9a:85:b6:df:
                    32:68:ec:af:d5:e3:5b:61:04:e7:a5:d6:e7:3d:65:
                    4e:a3:33:9e:4b:d5:3d:6d:f4:e6:60:33:98:b1:ec:
                    b8:c2:74:99:e5:8b:4d:82:40:a3:0e:50:2e:c3:e0:
                    f3:6f:f9:25:fe:2d:23:9d:0c:22:6c:f2:0d:9c:15:
                    d5:29:79:1e:ae:18:4b:56:68:78:dc:2d:ac:cf:a4:
                    08:b7:04:a6:30:b2:53:44:9c:9d:9b:ff:6f:d9:d2:
                    b5:9f:3a:5f:36:aa:8e:2a:34:0b:33:83:8b:75:5f:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7B:92:5D:51:BF:3E:C8:63:9D:D9:07:40:CF:F6:78:5E:D0:B5:E8
            X509v3 Authority Key Identifier:
                keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:50:70:e6:0a:50:f6:21:7a:d2:8e:4f:9c:7e:67:10:41:02:
         bf:09:40:88:2e:86:23:11:95:4d:47:dd:79:a6:bd:d3:2e:23:
         1e:a4:75:51:d0:5f:67:7e:84:4a:b6:57:b2:aa:e4:1c:8e:16:
         a0:be:00:7a:d2:a6:13:68:d0:50:f0:6f:3f:80:36:9e:c3:00:
         b5:5f:51:b1:2d:cc:72:4a:dd:81:14:d4:47:d2:65:e0:62:52:
         bf:99:04:01:6d:49:02:1f:8a:f1:cf:5b:ad:d5:d9:a8:f4:1e:
         12:b4:fc:76:b7:45:ef:72:da:21:f7:36:4e:78:98:82:5d:c2:
         34:29:8f:e9:aa:13:91:2f:63:74:6b:30:b5:be:4b:26:f9:f6:
         a6:b3:39:1b:5b:a1:25:66:3d:d6:a0:79:de:ff:40:5f:46:f7:
         8b:c0:09:fc:cc:83:8d:e6:f5:3e:17:0d:6b:69:5f:d4:eb:40:
         ba:17:34:5c:87:b5:83:30:a3:48:0f:80:f3:07:41:89:41:b1:
         a7:64:db:bd:68:d0:ef:41:b0:53:6f:76:7a:68:a1:02:d7:8a:
         38:e2:24:28:25:ed:0e:41:aa:c6:13:87:7f:4b:04:33:54:9b:
         40:bf:91:aa:d9:76:18:83:1d:1c:ce:c8:23:bc:ad:01:1a:44:
         9b:bc:3a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymHU3tfVFJz38NiDaW8l8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzA0NWZjNDkxZDM5ZjUyZTcxNDViMTAwMGIzYjg2YzM3
ZGVkNDUwHhcNMjUwODA0MDEwMDUwWhcNMjUwODA1MDEwMDUwWjAzMTEwLwYDVQQD
Eyg5YzdiOTI1ZDUxYmYzZWM4NjM5ZGQ5MDc0MGNmZjY3ODVlZDBiNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxymOwORWj0wUpnuvAhonrOgngLXl
urGAomaMXfEU6wBHJEEBDZJNRbiNLTkjUvpErAKMsUa4SOkYcb4yMRY4ZNxRUq/F
c+RTPeNs9of9BluPpvJDPqXQNy9h3R2hBWh0MoPOpxT+HTZxAbQqs2/hV43pDre5
GcmOlavvhRX62G+FZKm880EjyTzJgdj3s8WOIZqFtt8yaOyv1eNbYQTnpdbnPWVO
ozOeS9U9bfTmYDOYsey4wnSZ5YtNgkCjDlAuw+Dzb/kl/i0jnQwibPINnBXVKXke
rhhLVmh43C2sz6QItwSmMLJTRJydm/9v2dK1nzpfNqqOKjQLM4OLdV9XewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx7kl1Rvz7IY53ZB0DP9nhe0LXoMB8GA1UdIwQY
MBaAFH0wRfxJHTn1LnFFsQALO4bDfe1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xZjYzZGItYzk2My00NGJjLWEwMzkt
OGFhYTZhOTBmZjk1LzEvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xZjYzZGItYzk2My00NGJjLWEwMzktOGFhYTZhOTBmZjk1
LzEvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFBw5gpQ
9iF60o5PnH5nEEECvwlAiC6GIxGVTUfdeaa90y4jHqR1UdBfZ36ESrZXsqrkHI4W
oL4AetKmE2jQUPBvP4A2nsMAtV9RsS3MckrdgRTUR9Jl4GJSv5kEAW1JAh+K8c9b
rdXZqPQeErT8drdF73LaIfc2TniYgl3CNCmP6aoTkS9jdGswtb5LJvn2prM5G1uh
JWY91qB53v9AX0b3i8AJ/MyDjeb1PhcNa2lf1OtAuhc0XIe1gzCjSA+A8wdBiUGx
p2TbvWjQ70GwU292emihAteKOOIkKCXtDkGqxhOHf0sEM1SbQL+Rqtl2GIMdHM7I
I7ytARpEm7w6cA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:58 2025 by rpki-client