Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File:                     FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier:          YyvdOPs7nbw0WLPLXt+c1yl5dUPj98tqF8atyxU2/7M=
Subject key identifier:   01:27:AE:2A:7B:08:D9:C2:C8:5F:FF:A4:D4:2B:BC:41:37:DC:D5:B2
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer:       /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial:       0198A0F17A7B03DCB0BD4E7C61908DAD3902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number:          162B
Signing time:             Wed 13 Aug 2025 01:00:36 +0000
Manifest this update:     Wed 13 Aug 2025 01:00:36 +0000
Manifest next update:     Thu 14 Aug 2025 01:00:36 +0000
Files and hashes:         1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: cjIXljtWxQvTGyix4JoJyb3QK4nBkkvmCQuFFKDab+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f1:7a:7b:03:dc:b0:bd:4e:7c:61:90:8d:ad:39:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
        Validity
            Not Before: Aug 13 01:00:36 2025 GMT
            Not After : Aug 14 01:00:36 2025 GMT
        Subject: CN=0127ae2a7b08d9c2c85fffa4d42bbc4137dcd5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6d:7c:7c:09:05:e2:c2:5d:65:cc:be:a3:f7:
                    aa:72:6b:4b:7f:b6:5e:60:5b:f2:58:ed:15:49:0f:
                    2b:00:85:3c:3e:4b:02:ba:a4:c6:b9:cd:44:bd:04:
                    c7:17:18:f1:99:ef:35:bc:2e:74:58:a6:e3:f1:5f:
                    b9:32:da:10:d0:02:49:f5:7a:d9:91:5b:39:39:3a:
                    29:22:e7:b5:d3:67:53:6f:5c:54:47:ea:2b:da:64:
                    f0:e1:fb:16:60:1d:15:6d:1c:de:9f:f7:18:52:64:
                    9c:1b:ca:31:72:a1:39:9b:04:5a:04:ce:29:e2:fb:
                    f1:a1:21:53:62:51:a8:38:2f:46:e4:32:7e:86:80:
                    4b:3a:8b:e4:19:81:ba:9e:3e:73:61:50:11:c1:5b:
                    b8:28:52:4d:44:d1:10:31:61:98:00:8e:34:3a:b4:
                    81:bc:1f:0f:92:e5:ab:e1:e3:51:8a:e7:7b:b5:fb:
                    b2:a8:04:c6:91:40:53:52:6a:d7:22:bb:ad:1e:3e:
                    e4:40:91:ab:01:03:48:01:0e:ff:14:47:2e:8e:58:
                    49:9c:19:32:e9:47:27:86:8b:7c:5a:49:93:18:d8:
                    a5:54:32:43:f5:c6:08:84:b1:6c:44:5e:b3:53:db:
                    8a:12:39:23:36:a1:76:57:da:d1:15:20:d6:e7:2c:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:AE:2A:7B:08:D9:C2:C8:5F:FF:A4:D4:2B:BC:41:37:DC:D5:B2
            X509v3 Authority Key Identifier:
                keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6d:a4:36:04:dd:f4:7f:55:3d:76:b9:e0:10:a1:60:94:1b:
         8b:05:22:5c:43:6a:66:d1:7d:ba:3c:ae:0d:ef:f6:c1:94:00:
         89:90:55:52:e1:b2:1e:21:32:7e:41:e4:7e:da:39:91:d9:1a:
         a5:56:a9:df:4e:0f:67:2d:30:d2:30:95:6c:23:b3:44:ea:d7:
         7a:12:75:2d:90:a7:af:a6:34:e6:91:ca:d8:7e:c7:ef:c2:d7:
         b1:12:58:63:84:d9:7a:05:0d:e9:a1:12:c0:5d:b6:83:d0:fc:
         d5:89:da:fe:c2:dd:7f:b9:21:97:00:50:04:a3:0e:c7:d6:f8:
         a4:48:db:31:f4:5b:dc:4a:cb:c5:d1:10:3d:93:15:85:1d:6a:
         7b:49:1e:9d:05:5a:54:a2:07:0b:38:41:81:de:f9:46:32:a5:
         da:09:dd:b3:67:d6:dc:f3:16:c3:4f:11:c1:4e:e6:d0:68:7f:
         c0:65:37:f4:65:3d:d7:8d:f3:e8:50:3d:7a:8c:66:47:28:b7:
         35:fc:35:a3:54:68:83:37:ca:d6:39:ac:eb:57:cc:6d:b4:32:
         f4:d8:0b:51:ec:cd:51:eb:d2:24:83:a1:4c:63:9f:6b:60:b1:
         b8:87:c1:36:ba:0d:fd:14:af:e8:24:e3:e4:6c:12:a2:96:e2:
         d0:2d:ea:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8Xp7A9ywvU58YZCNrTkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Nzc2ZGY2YzI2YTBmZjM5YzQzNTM5ZDAyNDcyOTIxYjg2
MWU0ZWMwHhcNMjUwODEzMDEwMDM2WhcNMjUwODE0MDEwMDM2WjAzMTEwLwYDVQQD
EygwMTI3YWUyYTdiMDhkOWMyYzg1ZmZmYTRkNDJiYmM0MTM3ZGNkNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW18fAkF4sJdZcy+o/eqcmtLf7Ze
YFvyWO0VSQ8rAIU8PksCuqTGuc1EvQTHFxjxme81vC50WKbj8V+5MtoQ0AJJ9XrZ
kVs5OTopIue102dTb1xUR+or2mTw4fsWYB0VbRzen/cYUmScG8oxcqE5mwRaBM4p
4vvxoSFTYlGoOC9G5DJ+hoBLOovkGYG6nj5zYVARwVu4KFJNRNEQMWGYAI40OrSB
vB8PkuWr4eNRiud7tfuyqATGkUBTUmrXIrutHj7kQJGrAQNIAQ7/FEcujlhJnBky
6Ucnhot8WkmTGNilVDJD9cYIhLFsRF6zU9uKEjkjNqF2V9rRFSDW5yzGRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEnrip7CNnCyF//pNQrvEE33NWyMB8GA1UdIwQY
MBaAFBV3bfbCag/znENTnQJHKSG4YeTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUt
NGFjY2Y5ZjUzOTI3LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUtNGFjY2Y5ZjUzOTI3
LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG2kNgTd
9H9VPXa54BChYJQbiwUiXENqZtF9ujyuDe/2wZQAiZBVUuGyHiEyfkHkfto5kdka
pVap304PZy0w0jCVbCOzROrXehJ1LZCnr6Y05pHK2H7H78LXsRJYY4TZegUN6aES
wF22g9D81Yna/sLdf7khlwBQBKMOx9b4pEjbMfRb3ErLxdEQPZMVhR1qe0kenQVa
VKIHCzhBgd75RjKl2gnds2fW3PMWw08RwU7m0Gh/wGU39GU9143z6FA9eoxmRyi3
Nfw1o1RogzfK1jms61fMbbQy9NgLUezNUevSJIOhTGOfa2CxuIfBNroN/RSv6CTj
5GwSopbi0C3qRg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:02 2025 by rpki-client