Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
File:                     FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft (raw, json)
Hash identifier:          mP2EfSn01LEclxNT9Orqb2XHIfjwXzLLjBDUW5avaAs=
Subject key identifier:   EE:6B:75:AC:49:EC:7C:94:66:D4:81:75:4C:4E:F2:FA:EB:3C:DF:71
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Certificate issuer:       /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial:       019872CF570D0CD580D20E40710020D3DB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 02:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:47 +0000
Files and hashes:         1: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl (hash: np3Cz6sKEBQowRQW4A6f5cGNBJNLnuB2WLNvumBHuc4=)
                          2: Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa (hash: 6KAfAR9FK4FJFxLsDkhMRqDlSfVSMvMOJuzMsurfhN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:57:0d:0c:d5:80:d2:0e:40:71:00:20:d3:db:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
        Validity
            Not Before: Aug  4 02:00:47 2025 GMT
            Not After : Aug  5 02:00:47 2025 GMT
        Subject: CN=ee6b75ac49ec7c9466d481754c4ef2faeb3cdf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:99:05:ce:14:9b:2b:af:ba:8b:3b:16:af:
                    17:7b:60:d5:8e:13:b5:0f:da:c1:b3:93:b8:c2:f3:
                    24:00:06:be:44:15:db:39:2b:8e:f0:f7:1e:4c:cb:
                    31:2e:c6:f0:c0:0a:5e:73:07:4b:45:0c:38:b2:76:
                    0d:f7:97:27:df:70:5f:9d:80:6e:57:ae:ff:f6:5d:
                    9c:44:b3:5c:8c:3d:08:55:06:da:86:bc:cc:e8:25:
                    e0:c1:84:50:68:8d:b6:dd:9a:a1:e5:79:cf:f3:91:
                    85:f0:4d:00:42:c9:a5:64:c3:47:17:0f:bd:1c:5e:
                    81:28:2a:08:f2:37:da:6b:ae:ee:dd:a9:de:57:97:
                    68:e8:d2:0d:e9:4a:f6:2b:1f:c1:c9:bf:e1:e2:bc:
                    4b:25:22:c3:c5:c5:35:ba:a9:d6:ac:bd:5b:7d:0e:
                    07:01:a4:ca:03:fd:80:4c:0f:87:38:34:b1:d5:9b:
                    b6:38:86:23:73:3b:7e:08:76:51:81:5f:10:dd:8b:
                    50:bc:c2:59:53:54:26:72:29:43:02:92:9b:a1:23:
                    35:1b:9a:e4:e3:ee:5e:74:10:3d:65:cb:d5:ab:61:
                    96:c9:fe:d4:3e:c4:3c:97:9e:0e:25:a2:f0:3d:27:
                    31:d2:93:89:61:c2:04:59:b5:02:13:96:34:ff:14:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6B:75:AC:49:EC:7C:94:66:D4:81:75:4C:4E:F2:FA:EB:3C:DF:71
            X509v3 Authority Key Identifier:
                keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:52:ef:06:bf:bd:2a:a0:42:52:25:85:29:43:a9:5e:9f:2a:
         4f:6b:b1:33:6b:02:b5:d9:a0:72:27:77:82:c4:fb:87:18:a4:
         29:49:2f:50:a8:8a:e7:9c:f5:a4:ac:ab:03:5f:7a:93:a9:eb:
         8f:16:38:40:b9:0f:5f:c1:b4:1c:c8:26:11:0d:07:c6:f8:7c:
         36:1d:1f:9c:45:f1:9b:0b:3b:86:94:97:0d:37:48:e0:af:a4:
         bb:1f:97:b9:e1:ee:b7:25:34:22:e3:fb:f2:a3:2b:f7:a5:31:
         e3:36:e0:87:38:35:f6:6f:7d:31:da:3b:86:e0:31:9c:d4:b7:
         b1:7b:2b:35:fa:93:55:4d:93:ad:69:d1:a3:97:9c:c8:53:39:
         8a:56:1a:57:fb:a3:a9:31:33:b9:1a:81:5c:51:6f:d3:09:6d:
         66:30:54:e8:5f:0a:a5:7b:a8:2a:aa:9d:95:5d:42:aa:08:da:
         8c:ad:af:4a:cc:67:02:f2:1e:e5:d2:c9:03:b3:62:12:d0:db:
         01:68:d1:a2:8c:56:d5:c5:43:78:37:35:d3:66:f1:cb:ce:2b:
         f7:21:25:6f:bb:c8:f9:dc:50:79:25:52:f7:f4:91:7e:41:5a:
         0f:3e:7e:31:fa:a8:08:27:fc:f8:4b:0c:1e:59:35:14:82:74:
         2d:d2:71:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz1cNDNWA0g5AcQAg09tIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDkyMDYzYTJhN2RjNjA5ZTJiNmY5Y2MwZGFmMDRmMWU5
OGI5ZWQwHhcNMjUwODA0MDIwMDQ3WhcNMjUwODA1MDIwMDQ3WjAzMTEwLwYDVQQD
EyhlZTZiNzVhYzQ5ZWM3Yzk0NjZkNDgxNzU0YzRlZjJmYWViM2NkZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JiZBc4Umyuvuos7Fq8Xe2DVjhO1
D9rBs5O4wvMkAAa+RBXbOSuO8PceTMsxLsbwwApecwdLRQw4snYN95cn33BfnYBu
V67/9l2cRLNcjD0IVQbahrzM6CXgwYRQaI223Zqh5XnP85GF8E0AQsmlZMNHFw+9
HF6BKCoI8jfaa67u3aneV5do6NIN6Ur2Kx/Byb/h4rxLJSLDxcU1uqnWrL1bfQ4H
AaTKA/2ATA+HODSx1Zu2OIYjczt+CHZRgV8Q3YtQvMJZU1QmcilDApKboSM1G5rk
4+5edBA9ZcvVq2GWyf7UPsQ8l54OJaLwPScx0pOJYcIEWbUCE5Y0/xSMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5rdaxJ7HyUZtSBdUxO8vrrPN9xMB8GA1UdIwQY
MBaAFBYJIGOip9xgnitvnMDa8E8emLntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjct
NjBkM2ZlMTljM2JjLzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjctNjBkM2ZlMTljM2Jj
LzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFLvBr+9
KqBCUiWFKUOpXp8qT2uxM2sCtdmgcid3gsT7hxikKUkvUKiK55z1pKyrA196k6nr
jxY4QLkPX8G0HMgmEQ0Hxvh8Nh0fnEXxmws7hpSXDTdI4K+kux+XueHutyU0IuP7
8qMr96Ux4zbghzg19m99Mdo7huAxnNS3sXsrNfqTVU2TrWnRo5ecyFM5ilYaV/uj
qTEzuRqBXFFv0wltZjBU6F8KpXuoKqqdlV1CqgjajK2vSsxnAvIe5dLJA7NiEtDb
AWjRooxW1cVDeDc102bxy84r9yElb7vI+dxQeSVS9/SRfkFaDz5+MfqoCCf8+EsM
Hlk1FIJ0LdJxaw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:26 2025 by rpki-client