Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File:                     fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier:          hLbU5Fvt+0xRvvn919tmseYAh4x3f0GGg+mi45mPqWk=
Subject key identifier:   33:C4:20:95:D0:3F:0D:27:C5:03:B7:A7:92:7C:E3:4B:4A:C1:D9:F1
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer:       /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial:       019873E38E9E06C0ECF656900AD5FD908D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:02:29 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:29 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:29 +0000
Files and hashes:         1: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: Y1gIMSkeESVk0b8GhOcUVmTXp/GglAUcFxhQUl2jz6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:8e:9e:06:c0:ec:f6:56:90:0a:d5:fd:90:8d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
        Validity
            Not Before: Aug  4 07:02:29 2025 GMT
            Not After : Aug  5 07:02:29 2025 GMT
        Subject: CN=33c42095d03f0d27c503b7a7927ce34b4ac1d9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:15:04:2d:dc:4b:d5:ea:34:17:da:0f:70:
                    ef:40:07:94:99:1f:a2:78:c7:a5:c1:f3:89:13:94:
                    78:93:26:e3:63:96:0a:26:e0:74:f6:43:fd:2d:69:
                    5c:11:7d:b6:2d:f1:5e:1e:db:f6:3c:1f:9c:4f:6b:
                    9d:4a:54:5a:a5:b0:da:a0:15:fd:2c:f6:2e:bc:e6:
                    98:4a:3c:cb:9e:df:29:20:6f:e1:a2:12:00:91:89:
                    7c:1b:08:3e:98:c2:23:ab:a3:86:f8:17:49:0b:1d:
                    9d:a2:29:57:54:c1:74:ea:62:8b:56:00:66:02:fb:
                    9f:98:4f:c2:98:5f:3f:35:b4:94:4c:d7:e4:ff:ee:
                    10:91:9a:be:ff:68:bf:f1:81:9a:03:e7:83:04:3c:
                    f1:f3:1d:b8:03:f1:77:57:54:19:ee:05:b3:4f:03:
                    1b:69:dd:5a:d0:f9:0c:3e:ab:a4:27:96:79:60:34:
                    8d:1d:f2:ee:d8:a1:14:e3:98:69:49:da:c9:e1:11:
                    5c:76:db:76:4a:6a:e7:2a:ef:42:7d:17:9d:d2:13:
                    f3:eb:d9:7e:1d:c1:68:8f:85:81:98:63:ef:a9:f9:
                    73:01:91:7b:f7:66:22:ce:36:f7:f2:43:76:ec:9d:
                    09:40:91:5b:59:15:c6:1d:4b:b2:c6:c1:82:37:58:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:20:95:D0:3F:0D:27:C5:03:B7:A7:92:7C:E3:4B:4A:C1:D9:F1
            X509v3 Authority Key Identifier:
                keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:c4:7f:c3:6c:1d:02:17:a4:a5:aa:67:21:f7:5b:db:4f:
         7e:39:68:88:fc:31:85:ab:83:76:ea:04:85:32:2d:1e:f6:ae:
         fa:6c:ff:bb:65:4a:d0:31:89:cd:78:00:75:4e:ff:0f:ae:30:
         75:98:a3:4a:c0:70:6c:d0:ac:67:e8:9f:68:ec:48:b1:64:37:
         7c:b2:95:ac:07:16:90:50:59:7b:06:c9:97:49:1d:86:6e:69:
         98:f0:04:fb:79:06:8e:b8:8b:d7:d8:53:d3:40:47:6b:50:69:
         40:29:55:b1:3c:9b:9b:c3:ac:7c:dc:54:ff:96:35:5d:4b:91:
         96:33:59:f7:73:e0:7a:ec:ed:eb:4f:46:89:2f:9b:84:85:7f:
         85:60:9b:b5:85:f7:f0:3c:67:f1:f5:cf:45:2d:2a:ec:5c:2e:
         c1:7f:13:39:ce:d3:c8:82:d8:52:7c:90:d5:d8:f7:84:d2:a3:
         3d:26:28:5a:0a:c3:af:dc:49:13:3e:2b:1a:e6:66:0c:58:d1:
         d8:64:11:6f:3f:b7:7a:43:73:67:34:fc:ae:5e:cc:50:27:ac:
         c2:76:85:6e:31:35:83:da:5a:c3:dd:9c:07:4b:a5:09:de:9e:
         32:42:79:c5:e3:7a:a9:bb:4e:58:59:90:f8:41:30:c5:98:74:
         98:58:4a:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz446eBsDs9laQCtX9kI0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjdlZTNkZTg4MTU2MmVlYTdkZjJlMzIzMmNkYjMyYjU0
ZmUwMzcwHhcNMjUwODA0MDcwMjI5WhcNMjUwODA1MDcwMjI5WjAzMTEwLwYDVQQD
EygzM2M0MjA5NWQwM2YwZDI3YzUwM2I3YTc5MjdjZTM0YjRhYzFkOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgwVBC3cS9XqNBfaD3DvQAeUmR+i
eMelwfOJE5R4kybjY5YKJuB09kP9LWlcEX22LfFeHtv2PB+cT2udSlRapbDaoBX9
LPYuvOaYSjzLnt8pIG/hohIAkYl8Gwg+mMIjq6OG+BdJCx2doilXVMF06mKLVgBm
AvufmE/CmF8/NbSUTNfk/+4QkZq+/2i/8YGaA+eDBDzx8x24A/F3V1QZ7gWzTwMb
ad1a0PkMPqukJ5Z5YDSNHfLu2KEU45hpSdrJ4RFcdtt2SmrnKu9CfRed0hPz69l+
HcFoj4WBmGPvqflzAZF792Yizjb38kN27J0JQJFbWRXGHUuyxsGCN1hLLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPEIJXQPw0nxQO3p5J840tKwdnxMB8GA1UdIwQY
MBaAFHxn7j3ogVYu6n3y4yMs2zK1T+A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQt
M2VkMmVjZWI0ZjZjLzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQtM2VkMmVjZWI0ZjZj
LzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKbEf8Ns
HQIXpKWqZyH3W9tPfjloiPwxhauDduoEhTItHvau+mz/u2VK0DGJzXgAdU7/D64w
dZijSsBwbNCsZ+ifaOxIsWQ3fLKVrAcWkFBZewbJl0kdhm5pmPAE+3kGjriL19hT
00BHa1BpQClVsTybm8OsfNxU/5Y1XUuRljNZ93Pgeuzt609GiS+bhIV/hWCbtYX3
8Dxn8fXPRS0q7FwuwX8TOc7TyILYUnyQ1dj3hNKjPSYoWgrDr9xJEz4rGuZmDFjR
2GQRbz+3ekNzZzT8rl7MUCeswnaFbjE1g9paw92cB0ulCd6eMkJ5xeN6qbtOWFmQ
+EEwxZh0mFhKSg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:26 2025 by rpki-client