Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
File:                     Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json)
Hash identifier:          zMSruYShLeuXLvlTw6L0OKGcdPrgRbqjz8puQ6k9Id8=
Subject key identifier:   CA:B7:45:3B:A7:50:15:F3:35:70:FB:73:CB:06:16:B8:1D:2D:FD:8E
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Certificate issuer:       /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial:       01976C2B72AE4047DB179E3D819DB3B9C9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
Manifest number:          1374
Signing time:             Sat 14 Jun 2025 02:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:16 +0000
Files and hashes:         1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: sKH44498+bWpDOxaFDXIWkcuCnXG4aj4z4igHgZNdO4=)
                          2: M6kd2OZVwbLsznfkTpr9P9tvc9U.roa (hash: Jp9yH5OnFSN9zDtKINo+7/MzPgxLUFZmRYughYu+MLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:72:ae:40:47:db:17:9e:3d:81:9d:b3:b9:c9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
        Validity
            Not Before: Jun 14 02:01:16 2025 GMT
            Not After : Jun 15 02:01:16 2025 GMT
        Subject: CN=cab7453ba75015f33570fb73cb0616b81d2dfd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:de:18:51:d0:a9:2d:c1:04:82:08:bf:7e:
                    bf:df:f2:37:bf:8a:96:30:07:a2:88:63:bc:3e:8e:
                    1b:5b:52:4f:1e:75:f7:17:36:1f:43:96:ab:74:c5:
                    d5:23:25:1f:b7:0d:7b:1e:39:fb:7f:6f:b4:c4:e3:
                    83:b1:23:9a:c7:d0:9c:99:1b:d2:d1:2e:24:04:f7:
                    b3:43:a0:cf:05:42:63:9e:4f:30:eb:43:51:2b:89:
                    70:41:be:63:ab:e8:d3:07:85:d0:1a:79:d3:5c:d4:
                    6b:51:bc:81:38:a3:8d:b6:3a:e0:71:97:b4:5c:af:
                    a1:15:ff:ed:ae:9e:1f:56:84:86:e0:f2:58:8c:ec:
                    7d:7d:34:64:90:94:a8:a9:44:bd:da:9b:50:6f:0c:
                    e6:70:df:6a:17:e1:0b:d5:9f:55:07:72:82:2a:f2:
                    2b:82:3a:10:bd:7a:88:81:ca:bf:83:a0:04:bb:3e:
                    c6:ba:a0:56:dd:9a:d2:ec:d4:79:c3:de:53:f1:82:
                    71:32:1f:7f:3d:4a:49:5e:9d:d2:90:8e:77:b9:d7:
                    4c:58:91:14:46:96:4e:34:80:b1:84:06:c1:82:fa:
                    03:a2:02:24:97:ad:6d:47:9a:c3:24:73:da:1f:59:
                    60:e5:56:8f:5a:32:4e:3f:72:6a:82:42:8c:76:5b:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B7:45:3B:A7:50:15:F3:35:70:FB:73:CB:06:16:B8:1D:2D:FD:8E
            X509v3 Authority Key Identifier:
                keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:0a:25:2d:b1:02:4a:6a:a6:1b:d8:e1:ee:e8:e0:f3:15:
         10:ae:b9:17:28:a7:e0:5a:f1:38:2b:14:0e:2b:e9:7a:9a:2e:
         28:1f:3d:92:e1:1e:1f:fd:e2:dc:40:91:fa:de:d6:8f:62:28:
         9d:a1:84:3b:f5:4f:bd:38:3b:02:6c:f8:03:a5:a8:20:7a:5f:
         d3:19:0c:4a:cd:ab:e6:16:d0:0c:e8:55:ca:8a:7b:29:12:be:
         47:55:6e:cd:e9:4b:a8:06:62:76:7b:f0:88:85:e1:1b:80:31:
         f9:cf:a5:0c:5b:f0:e3:4a:71:56:8e:16:08:4d:19:74:c0:08:
         75:6e:6a:07:6b:ea:4a:be:a6:da:71:0b:54:6b:7e:3e:dc:bc:
         a5:b0:b3:7e:dc:c4:eb:42:5e:46:75:57:ce:95:7c:cd:8e:b9:
         dc:9a:7c:bb:f5:52:25:1a:1d:2b:9a:72:3c:c7:ed:1f:be:4f:
         a1:0f:6c:26:3e:24:f9:84:9f:ce:79:55:8e:59:94:2f:50:d4:
         e3:b8:23:32:6b:a6:29:6c:78:08:2a:1a:3d:4d:99:97:d4:00:
         b3:52:f0:f8:27:65:56:34:e2:16:eb:f2:b6:0e:fe:ba:2f:cf:
         f4:f0:82:da:2f:ff:7f:a6:03:3d:ef:26:4d:da:bb:4d:2a:a8:
         e6:08:dc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK3KuQEfbF549gZ2zucmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjlmOTI4YjBhYzY3NzMxOTkxZjM3NGI4ZTE5NGViNjU0
MmFjMjQwHhcNMjUwNjE0MDIwMTE2WhcNMjUwNjE1MDIwMTE2WjAzMTEwLwYDVQQD
EyhjYWI3NDUzYmE3NTAxNWYzMzU3MGZiNzNjYjA2MTZiODFkMmRmZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSDeGFHQqS3BBIIIv36/3/I3v4qW
MAeiiGO8Po4bW1JPHnX3FzYfQ5ardMXVIyUftw17Hjn7f2+0xOODsSOax9CcmRvS
0S4kBPezQ6DPBUJjnk8w60NRK4lwQb5jq+jTB4XQGnnTXNRrUbyBOKONtjrgcZe0
XK+hFf/trp4fVoSG4PJYjOx9fTRkkJSoqUS92ptQbwzmcN9qF+EL1Z9VB3KCKvIr
gjoQvXqIgcq/g6AEuz7GuqBW3ZrS7NR5w95T8YJxMh9/PUpJXp3SkI53uddMWJEU
RpZONICxhAbBgvoDogIkl61tR5rDJHPaH1lg5VaPWjJOP3JqgkKMdlt9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq3RTunUBXzNXD7c8sGFrgdLf2OMB8GA1UdIwQY
MBaAFBb5+SiwrGdzGZHzdLjhlOtlQqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYt
NDJlYWFiYmZiZmQyLzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYtNDJlYWFiYmZiZmQy
LzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcQKJS2x
AkpqphvY4e7o4PMVEK65Fyin4FrxOCsUDivpepouKB89kuEeH/3i3ECR+t7Wj2Io
naGEO/VPvTg7Amz4A6WoIHpf0xkMSs2r5hbQDOhVyop7KRK+R1VuzelLqAZidnvw
iIXhG4Ax+c+lDFvw40pxVo4WCE0ZdMAIdW5qB2vqSr6m2nELVGt+Pty8pbCzftzE
60JeRnVXzpV8zY653Jp8u/VSJRodK5pyPMftH75PoQ9sJj4k+YSfznlVjlmUL1DU
47gjMmumKWx4CCoaPU2Zl9QAs1Lw+CdlVjTiFuvytg7+ui/P9PCC2i//f6YDPe8m
Tdq7TSqo5gjcog==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:29 2025 by rpki-client