Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
File:                     FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft (raw, json)
Hash identifier:          cbTO78DE+fQJcdl0XMATF4D666+YRj07LRlKY7e1Rgc=
Subject key identifier:   F6:82:9D:05:8C:F0:64:7E:C8:FE:EA:28:EB:C6:9C:EA:F7:1D:AF:A8
Authority key identifier: 15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
Certificate issuer:       /CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Certificate serial:       01977ED5B01B05AEA2746A82288A079B4552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
Manifest number:          1596
Signing time:             Tue 17 Jun 2025 17:00:22 +0000
Manifest this update:     Tue 17 Jun 2025 17:00:22 +0000
Manifest next update:     Wed 18 Jun 2025 17:00:22 +0000
Files and hashes:         1: FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl (hash: SOikZ7ukVeKcyzH+scNk6UhL54vKO/bnvpNmFnSWmVI=)
                          2: PyQ8fu5pDLbvLBuzcMMxIAkMsmo.roa (hash: mZg5dPb6uDIAF/lQgfs5kl+MW8uT39zjW3CSCFzbS/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:d5:b0:1b:05:ae:a2:74:6a:82:28:8a:07:9b:45:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
        Validity
            Not Before: Jun 17 17:00:22 2025 GMT
            Not After : Jun 18 17:00:22 2025 GMT
        Subject: CN=f6829d058cf0647ec8feea28ebc69ceaf71dafa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:84:b1:5f:61:1a:8f:be:4b:8f:88:d4:10:
                    52:b6:a7:08:0b:45:f0:fe:e9:57:83:8c:7b:cc:8e:
                    25:02:06:80:08:37:3d:01:4b:c8:e6:16:8b:6a:df:
                    f4:8e:2e:6c:63:28:b9:6d:de:c3:2a:96:bc:a2:3a:
                    59:1d:b6:1b:9e:68:ea:8a:fc:54:a5:cf:8b:38:c4:
                    56:4b:a2:55:23:5d:f9:02:b4:f4:ee:57:25:f9:90:
                    f4:60:8a:b0:ba:50:62:b2:4f:d4:41:8d:bb:c1:e0:
                    18:d0:21:aa:9f:34:3a:40:1d:32:95:2f:06:b3:e6:
                    2f:4b:9c:ae:e6:e9:11:4c:99:ed:3a:fa:4c:f1:79:
                    8a:c4:78:ce:39:0f:a8:0e:ff:77:04:ed:b9:99:7c:
                    54:13:60:3d:fb:21:2d:a2:f0:85:70:65:e3:d9:36:
                    be:d6:f0:85:3d:36:d7:26:74:f2:b3:49:b0:df:a7:
                    8f:a3:e7:cf:2f:45:52:c6:ce:e8:73:09:7e:51:3f:
                    b5:97:e5:80:82:9c:52:72:59:7c:43:2c:20:6d:33:
                    dd:3f:e8:f1:0f:5c:d0:97:93:09:29:30:57:be:46:
                    61:fe:cf:b4:1a:e1:79:70:70:1f:7f:4a:13:82:4b:
                    7e:f6:1e:a8:0a:96:58:95:05:b5:f3:99:9d:9e:ff:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:82:9D:05:8C:F0:64:7E:C8:FE:EA:28:EB:C6:9C:EA:F7:1D:AF:A8
            X509v3 Authority Key Identifier:
                keyid:15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:a3:25:38:02:fc:d0:d2:82:5a:2e:c8:40:7f:0d:43:b7:
         c9:cc:01:da:82:69:a4:90:b2:82:65:9e:d0:35:e0:0d:0e:3a:
         69:23:51:20:a2:42:d7:f7:7e:d0:f4:bf:7f:ff:00:86:15:10:
         3e:07:d6:4c:eb:d0:c9:ab:86:6a:30:cc:76:a1:1e:d1:a9:cb:
         5a:c2:2c:10:b5:b2:7a:18:7e:47:24:6a:83:2a:18:ce:7b:d7:
         53:2e:b7:50:65:11:6d:d8:d4:36:9d:0f:c3:71:04:91:6b:15:
         08:07:c7:80:ca:24:38:fe:25:1f:75:e2:06:7c:a3:ec:ed:f6:
         ee:5e:bf:dc:83:34:2e:2b:02:6e:a3:27:bf:9b:ab:4f:9b:cd:
         d0:d0:87:7b:e7:11:13:06:1a:db:d2:4d:10:75:44:14:a0:61:
         6a:38:d2:63:91:8b:95:68:a1:a2:07:ae:48:7e:dc:8c:41:24:
         9e:8b:fc:93:d8:1a:3c:4c:76:3f:2b:49:25:28:71:4f:23:f7:
         be:84:bf:cb:7b:67:1c:e0:20:78:41:8d:62:13:1e:cf:0b:82:
         36:24:13:3c:3a:ea:d3:66:3e:f1:de:48:37:8c:79:84:cd:7b:
         a6:87:7d:fa:b5:01:3f:a4:8e:10:38:6e:ac:d0:cd:03:c6:a7:
         e7:c4:d3:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+1bAbBa6idGqCKIoHm0VSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MGI3ZmY5YmMxOTYyZWJjZWMwYmU0MzVjY2MyNzJkNzUx
YTFjMTYwHhcNMjUwNjE3MTcwMDIyWhcNMjUwNjE4MTcwMDIyWjAzMTEwLwYDVQQD
EyhmNjgyOWQwNThjZjA2NDdlYzhmZWVhMjhlYmM2OWNlYWY3MWRhZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy+EsV9hGo++S4+I1BBStqcIC0Xw
/ulXg4x7zI4lAgaACDc9AUvI5haLat/0ji5sYyi5bd7DKpa8ojpZHbYbnmjqivxU
pc+LOMRWS6JVI135ArT07lcl+ZD0YIqwulBisk/UQY27weAY0CGqnzQ6QB0ylS8G
s+YvS5yu5ukRTJntOvpM8XmKxHjOOQ+oDv93BO25mXxUE2A9+yEtovCFcGXj2Ta+
1vCFPTbXJnTys0mw36ePo+fPL0VSxs7ocwl+UT+1l+WAgpxScll8QywgbTPdP+jx
D1zQl5MJKTBXvkZh/s+0GuF5cHAff0oTgkt+9h6oCpZYlQW185mdnv8xAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaCnQWM8GR+yP7qKOvGnOr3Ha+oMB8GA1UdIwQY
MBaAFBULf/m8GWLrzsC+Q1zMJy11GhwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUt
MTBjZDIwZmFiMzg2LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUtMTBjZDIwZmFiMzg2
LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgijJTgC
/NDSglouyEB/DUO3ycwB2oJppJCygmWe0DXgDQ46aSNRIKJC1/d+0PS/f/8AhhUQ
PgfWTOvQyauGajDMdqEe0anLWsIsELWyehh+RyRqgyoYznvXUy63UGURbdjUNp0P
w3EEkWsVCAfHgMokOP4lH3XiBnyj7O327l6/3IM0LisCbqMnv5urT5vN0NCHe+cR
EwYa29JNEHVEFKBhajjSY5GLlWihogeuSH7cjEEknov8k9gaPEx2PytJJShxTyP3
voS/y3tnHOAgeEGNYhMezwuCNiQTPDrq02Y+8d5IN4x5hM17pod9+rUBP6SOEDhu
rNDNA8an58TTbA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:38:22 2025 by rpki-client