Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File:                     fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier:          sOVNS5J6AFC4cR5rzh4XcNZw+yuS+2LIrIsjQtJeq3E=
Subject key identifier:   9A:ED:39:98:C7:2B:7F:26:0B:73:A7:24:9A:87:88:13:11:69:36:5D
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer:       /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial:       019873E26F0FAD2D37473FA33C203414F897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number:          0ED3
Signing time:             Mon 04 Aug 2025 07:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:15 +0000
Files and hashes:         1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: Trj57nC+1mOWubHQGGU5cCa/FtkkZMY8BosytxlmU10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:6f:0f:ad:2d:37:47:3f:a3:3c:20:34:14:f8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
        Validity
            Not Before: Aug  4 07:01:15 2025 GMT
            Not After : Aug  5 07:01:15 2025 GMT
        Subject: CN=9aed3998c72b7f260b73a7249a8788131169365d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:09:69:6c:32:14:57:7c:4c:fa:8d:1a:d2:
                    a3:f7:46:d4:a7:ef:7a:c4:42:92:73:a3:2b:d6:f1:
                    4e:68:f5:93:4e:1d:10:e6:3f:71:9f:aa:7f:0b:c9:
                    0e:de:f1:bf:85:cb:11:c2:16:37:1b:e0:77:f4:09:
                    a8:c2:3d:98:be:40:74:b3:14:bb:95:a8:b2:76:86:
                    3e:13:33:0c:19:7c:a2:7f:71:0e:3d:a1:97:ed:8c:
                    8c:4a:ba:bf:7a:cc:25:c6:a9:91:18:c7:94:d0:7b:
                    c2:a5:dc:a6:4b:49:65:ae:2a:4a:50:1f:00:ca:9c:
                    05:b6:16:93:be:8f:31:e5:4a:89:c0:be:86:f1:8a:
                    9b:67:67:3a:fb:e5:98:58:27:24:ca:8d:fb:cc:93:
                    eb:2b:9a:0b:d6:4d:95:53:c7:ad:5d:c3:60:ac:26:
                    09:02:62:8f:a8:84:bc:3e:fc:b6:de:bd:f5:6a:b1:
                    95:c6:4b:a0:17:03:dc:7e:4f:66:5e:10:37:06:63:
                    03:12:82:3e:36:5e:17:33:45:f9:4c:2a:a4:58:a5:
                    33:41:f1:ff:14:26:77:f2:bb:75:ea:40:e0:d5:50:
                    86:fd:fa:7e:28:6d:b1:7b:40:44:21:99:c7:a0:c7:
                    b2:5b:16:54:7a:01:54:a2:5d:f8:69:d8:d8:f2:10:
                    91:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:ED:39:98:C7:2B:7F:26:0B:73:A7:24:9A:87:88:13:11:69:36:5D
            X509v3 Authority Key Identifier:
                keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b8:5d:4a:15:ce:af:3b:73:25:86:df:86:94:e8:48:fc:63:
         51:2d:0c:0d:f8:a3:50:54:35:66:6c:c7:eb:e0:5c:8e:81:f8:
         c7:b0:1a:de:24:37:e2:c4:d7:bb:34:49:9d:20:c5:e2:53:9d:
         41:5f:40:be:a9:62:75:cf:76:c0:b2:9d:42:94:eb:f2:a1:dd:
         5f:a1:66:99:06:c2:1c:ba:40:91:e6:bb:84:92:c0:96:4b:ef:
         33:3e:e8:01:41:b2:7a:1a:d7:e5:4f:e9:d9:29:3b:17:bf:ac:
         38:17:be:c3:08:c2:39:40:2a:60:35:ad:3a:e2:83:e3:35:3a:
         db:e7:bf:a8:fd:68:cb:07:2c:54:0c:9e:d7:8b:45:c7:bf:ad:
         a8:f9:f7:bf:14:1c:26:1c:0a:d3:f8:1a:38:61:84:af:91:19:
         a2:7c:43:7b:d3:c3:dc:3e:ef:c9:f1:01:c2:08:55:1f:e4:4f:
         6c:99:d0:81:09:2c:0d:4f:81:0c:08:cb:13:85:0d:a2:26:16:
         2f:24:e6:74:6a:e8:8a:33:ee:f2:3b:50:66:c3:70:6a:5d:32:
         b5:12:89:d1:00:a5:9d:ff:cb:71:ab:50:98:20:3a:cd:15:4b:
         44:a3:99:32:73:ac:c9:d5:92:44:f4:ae:5b:7b:84:14:85:d7:
         3a:cc:fc:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4m8PrS03Rz+jPCA0FPiXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTRjZTgxMDNiNzg1ZjM1MDRiYzRiMzJmMWY0YzliNzBj
ZTNmN2YwHhcNMjUwODA0MDcwMTE1WhcNMjUwODA1MDcwMTE1WjAzMTEwLwYDVQQD
Eyg5YWVkMzk5OGM3MmI3ZjI2MGI3M2E3MjQ5YTg3ODgxMzExNjkzNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTMJaWwyFFd8TPqNGtKj90bUp+96
xEKSc6Mr1vFOaPWTTh0Q5j9xn6p/C8kO3vG/hcsRwhY3G+B39Amowj2YvkB0sxS7
laiydoY+EzMMGXyif3EOPaGX7YyMSrq/eswlxqmRGMeU0HvCpdymS0llripKUB8A
ypwFthaTvo8x5UqJwL6G8YqbZ2c6++WYWCckyo37zJPrK5oL1k2VU8etXcNgrCYJ
AmKPqIS8Pvy23r31arGVxkugFwPcfk9mXhA3BmMDEoI+Nl4XM0X5TCqkWKUzQfH/
FCZ38rt16kDg1VCG/fp+KG2xe0BEIZnHoMeyWxZUegFUol34adjY8hCR4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrtOZjHK38mC3OnJJqHiBMRaTZdMB8GA1UdIwQY
MBaAFH8UzoEDt4XzUEvEsy8fTJtwzj9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2It
ZjYxNjBmYTFmYjAyLzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2ItZjYxNjBmYTFmYjAy
LzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrhdShXO
rztzJYbfhpToSPxjUS0MDfijUFQ1ZmzH6+BcjoH4x7Aa3iQ34sTXuzRJnSDF4lOd
QV9Avqlidc92wLKdQpTr8qHdX6FmmQbCHLpAkea7hJLAlkvvMz7oAUGyehrX5U/p
2Sk7F7+sOBe+wwjCOUAqYDWtOuKD4zU62+e/qP1oywcsVAye14tFx7+tqPn3vxQc
JhwK0/gaOGGEr5EZonxDe9PD3D7vyfEBwghVH+RPbJnQgQksDU+BDAjLE4UNoiYW
LyTmdGroijPu8jtQZsNwal0ytRKJ0QClnf/LcatQmCA6zRVLRKOZMnOsydWSRPSu
W3uEFIXXOsz80A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:32 2025 by rpki-client