Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File:                     Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier:          00FFpyBIrna+y/EuR/PxV/5Z35JxZgCP54nNdRAi+U8=
Subject key identifier:   4D:BD:B4:69:06:60:CC:92:1D:B8:15:B6:74:EC:F6:D0:AF:A1:EF:68
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer:       /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial:       019771517F958717105E4B1428A82FFD027F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number:          04D1
Signing time:             Sun 15 Jun 2025 02:00:55 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:55 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:55 +0000
Files and hashes:         1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
                          2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: N4rgA3s67KKP2LqLXveCLwIZLFUjT6DwYI5QcVzJ8zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:7f:95:87:17:10:5e:4b:14:28:a8:2f:fd:02:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
        Validity
            Not Before: Jun 15 02:00:55 2025 GMT
            Not After : Jun 16 02:00:55 2025 GMT
        Subject: CN=4dbdb4690660cc921db815b674ecf6d0afa1ef68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:88:1d:d2:68:3d:38:1b:3d:db:b0:c6:8f:
                    ea:21:86:7c:d6:55:ab:b1:19:3d:9c:08:43:53:dd:
                    b9:a7:48:77:33:2d:c2:4f:c0:ed:d8:15:8b:7a:42:
                    30:9a:dc:a3:18:bc:a7:dc:6e:72:9f:27:11:cb:10:
                    78:9f:c9:37:1b:ae:45:40:08:63:d8:a1:b1:15:72:
                    8b:79:c1:e8:e7:67:aa:c8:3f:f2:88:7a:40:01:19:
                    38:ae:46:9b:a5:16:25:eb:34:24:1e:3c:36:61:92:
                    34:f2:46:9a:4a:83:58:4a:0e:7a:cd:e2:22:c2:c0:
                    dd:ca:4c:02:f1:60:9d:66:3b:53:b4:85:10:66:75:
                    b7:4f:af:46:49:9e:8f:f7:2f:82:d6:8d:76:92:91:
                    5b:f7:ad:4b:0d:11:89:47:38:2c:dc:66:ae:90:04:
                    56:e4:65:db:ab:53:69:14:fc:ea:41:f9:31:11:06:
                    a1:02:e3:3e:c7:b8:fe:fd:c9:45:a6:38:d3:fc:01:
                    30:14:5d:4c:21:26:8d:3b:6e:7b:45:65:6a:9b:01:
                    a0:84:06:71:93:f3:49:fa:52:16:a3:01:5e:24:9f:
                    52:f4:28:0f:90:52:a4:a7:56:33:ed:a1:9a:d7:89:
                    1e:f7:61:ff:96:82:35:e2:75:a5:8c:54:61:7a:68:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BD:B4:69:06:60:CC:92:1D:B8:15:B6:74:EC:F6:D0:AF:A1:EF:68
            X509v3 Authority Key Identifier:
                keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:37:46:5f:0f:13:a9:a1:17:16:3f:44:47:81:1b:f4:50:
         0d:8a:38:11:da:cb:67:60:34:96:74:51:60:62:37:9f:9e:8b:
         64:d9:ce:72:c5:a7:42:a3:38:9a:9d:80:ed:d9:d9:5a:93:e2:
         ab:a5:6d:4b:1a:1d:a6:c0:32:6f:c7:ee:01:97:38:e5:5f:ee:
         85:53:21:08:b1:3d:e8:1b:0d:9c:34:42:a5:78:25:89:44:40:
         75:73:35:9a:c8:a7:03:4c:6f:7f:e4:63:71:c2:06:b6:03:3a:
         6c:69:74:5d:a3:eb:8e:16:34:84:95:58:a5:9c:5c:ee:28:b8:
         95:d2:2e:19:6d:75:b4:b0:9d:68:ce:22:ab:cd:e0:c5:c7:93:
         38:09:46:58:40:10:bb:80:c8:0f:4c:5c:6c:ae:fa:40:48:c0:
         9b:98:5d:ef:b8:e1:e2:99:d9:5c:82:0a:9a:29:57:a7:50:e7:
         29:21:e8:53:ea:92:9b:67:cb:c3:37:9d:88:b0:a5:36:17:75:
         60:5c:0d:01:e7:ea:48:d2:85:53:28:2e:27:f6:ea:15:8d:1a:
         86:40:1a:17:08:52:ba:d9:8d:b3:5e:38:8b:9e:c0:a2:63:8c:
         ed:d3:bf:3d:e7:85:b7:da:62:7e:a1:06:72:42:53:2d:73:b5:
         80:50:7b:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUX+VhxcQXksUKKgv/QJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjUwNjE1MDIwMDU1WhcNMjUwNjE2MDIwMDU1WjAzMTEwLwYDVQQD
Eyg0ZGJkYjQ2OTA2NjBjYzkyMWRiODE1YjY3NGVjZjZkMGFmYTFlZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvqIHdJoPTgbPduwxo/qIYZ81lWr
sRk9nAhDU925p0h3My3CT8Dt2BWLekIwmtyjGLyn3G5ynycRyxB4n8k3G65FQAhj
2KGxFXKLecHo52eqyD/yiHpAARk4rkabpRYl6zQkHjw2YZI08kaaSoNYSg56zeIi
wsDdykwC8WCdZjtTtIUQZnW3T69GSZ6P9y+C1o12kpFb961LDRGJRzgs3GaukARW
5GXbq1NpFPzqQfkxEQahAuM+x7j+/clFpjjT/AEwFF1MISaNO257RWVqmwGghAZx
k/NJ+lIWowFeJJ9S9CgPkFKkp1Yz7aGa14ke92H/loI14nWljFRhemgtuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE29tGkGYMySHbgVtnTs9tCvoe9oMB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXo3Rl8P
E6mhFxY/REeBG/RQDYo4EdrLZ2A0lnRRYGI3n56LZNnOcsWnQqM4mp2A7dnZWpPi
q6VtSxodpsAyb8fuAZc45V/uhVMhCLE96BsNnDRCpXgliURAdXM1msinA0xvf+Rj
ccIGtgM6bGl0XaPrjhY0hJVYpZxc7ii4ldIuGW11tLCdaM4iq83gxceTOAlGWEAQ
u4DID0xcbK76QEjAm5hd77jh4pnZXIIKmilXp1DnKSHoU+qSm2fLwzediLClNhd1
YFwNAefqSNKFUyguJ/bqFY0ahkAaFwhSutmNs144i57AomOM7dO/PeeFt9pifqEG
ckJTLXO1gFB7Ww==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:17:59 2025 by rpki-client