Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File:                     QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier:          rfHUMwz/ULWzKUmsLqulgk39BlTq5Q50DlU8WAl/0fc=
Subject key identifier:   00:57:E1:50:70:38:10:74:70:7D:D8:2B:42:7C:A1:66:19:E6:8F:E4
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer:       /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial:       019838A8E4E08748ED5D33037990BCEC0B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number:          15FB
Signing time:             Wed 23 Jul 2025 19:00:49 +0000
Manifest this update:     Wed 23 Jul 2025 19:00:49 +0000
Manifest next update:     Thu 24 Jul 2025 19:00:49 +0000
Files and hashes:         1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
                          2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: CaSflv4COz5QGnUclyZBBLzq0ZpFy48eT3RlL1gfzWc=)
                          3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
                          4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:a8:e4:e0:87:48:ed:5d:33:03:79:90:bc:ec:0b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
        Validity
            Not Before: Jul 23 19:00:49 2025 GMT
            Not After : Jul 24 19:00:49 2025 GMT
        Subject: CN=0057e15070381074707dd82b427ca16619e68fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:18:a6:41:4f:e8:4e:5d:f5:db:96:18:aa:
                    ae:43:b8:7b:8b:40:04:ae:52:dd:dc:e0:21:f5:a8:
                    a2:2e:d2:b4:cc:f6:41:8e:91:d5:46:09:b3:af:38:
                    80:cf:2f:c9:6c:7f:cb:8d:0e:3e:99:81:89:69:62:
                    68:26:ee:db:1c:11:7f:32:09:a2:5a:23:93:df:10:
                    e6:5b:f4:26:f2:76:62:01:9d:c5:7a:6b:6d:f0:62:
                    b4:e7:3a:50:c2:a9:f8:22:fb:c9:cd:aa:22:1a:cb:
                    c4:ec:ab:33:42:8a:96:69:84:26:f7:74:8e:b2:76:
                    f1:63:e2:fb:13:61:aa:f3:44:ec:54:61:18:9a:a8:
                    09:a5:06:8f:6e:cc:83:52:b1:96:7e:8f:0a:c6:2d:
                    b8:23:cb:77:10:a3:70:07:ce:dc:48:95:61:39:f5:
                    00:4d:af:de:ee:b4:46:4f:e5:72:74:e0:86:dc:ac:
                    21:1b:83:a4:e0:14:0b:15:d0:71:3d:5f:ae:06:c5:
                    0d:07:63:8b:0a:e6:64:90:90:80:2c:2d:00:c7:c1:
                    c4:e1:64:a7:d9:e8:e7:b3:1f:d6:77:1d:e2:f9:3b:
                    ab:2b:22:9e:f2:f2:8a:55:46:90:62:e9:2b:14:85:
                    dc:bd:39:48:68:e4:a6:59:3d:88:87:91:c8:35:99:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:E1:50:70:38:10:74:70:7D:D8:2B:42:7C:A1:66:19:E6:8F:E4
            X509v3 Authority Key Identifier:
                keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f5:49:21:db:e4:6c:1a:34:06:be:d5:b8:05:80:c8:ab:24:
         c0:e9:ad:c6:2c:e2:d4:fa:0f:b7:a8:cc:ba:6e:50:f5:ad:32:
         25:df:9b:8e:54:68:f1:b8:22:fe:34:45:e5:5b:11:63:8d:76:
         81:27:33:ff:f9:f6:a4:86:2c:e6:0a:e0:8e:b5:62:fd:b0:2f:
         39:e9:af:3c:0b:3a:bb:1c:cb:44:d5:8d:bb:a3:86:37:c4:04:
         22:0e:76:95:3b:0d:0b:50:9e:39:fd:8a:e4:6e:ae:db:f3:26:
         98:a3:62:40:f4:d8:3e:19:55:db:bb:2d:a9:a3:7f:7a:14:30:
         70:ce:87:b3:ac:d3:1d:47:db:1c:ad:37:46:6a:04:4a:0d:f6:
         6e:0b:34:01:85:79:73:46:ef:c2:8d:46:70:8b:2a:0e:41:c9:
         5c:f6:5d:64:8a:38:c5:83:58:b7:73:8c:be:1b:7d:ea:59:35:
         7e:ee:61:c5:c3:64:4b:00:aa:4f:0b:cb:b8:a1:48:09:c0:97:
         ad:fd:d6:18:79:ef:cc:f0:db:8e:77:b4:36:3e:83:fc:d6:14:
         9c:25:f0:b6:10:5e:e0:74:4b:ce:e5:11:ed:c9:3e:0e:6c:2a:
         e9:9b:f2:64:18:46:3f:65:4e:ce:bf:78:63:54:aa:17:ed:f7:
         24:4c:10:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4qOTgh0jtXTMDeZC87AtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzYzZGIxZWQzMzRhN2M1MjgwYWI5ODU0NzQyOTE0YWUw
YzRjNTIwHhcNMjUwNzIzMTkwMDQ5WhcNMjUwNzI0MTkwMDQ5WjAzMTEwLwYDVQQD
EygwMDU3ZTE1MDcwMzgxMDc0NzA3ZGQ4MmI0MjdjYTE2NjE5ZTY4ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0QYpkFP6E5d9duWGKquQ7h7i0AE
rlLd3OAh9aiiLtK0zPZBjpHVRgmzrziAzy/JbH/LjQ4+mYGJaWJoJu7bHBF/Mgmi
WiOT3xDmW/Qm8nZiAZ3Femtt8GK05zpQwqn4IvvJzaoiGsvE7KszQoqWaYQm93SO
snbxY+L7E2Gq80TsVGEYmqgJpQaPbsyDUrGWfo8Kxi24I8t3EKNwB87cSJVhOfUA
Ta/e7rRGT+VydOCG3KwhG4Ok4BQLFdBxPV+uBsUNB2OLCuZkkJCALC0Ax8HE4WSn
2ejnsx/Wdx3i+TurKyKe8vKKVUaQYukrFIXcvTlIaOSmWT2Ih5HINZn2YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABX4VBwOBB0cH3YK0J8oWYZ5o/kMB8GA1UdIwQY
MBaAFEF2PbHtM0p8UoCrmFR0KRSuDExSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMt
NDljOTVlZWFjODEyLzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMtNDljOTVlZWFjODEy
LzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfVJIdvk
bBo0Br7VuAWAyKskwOmtxizi1PoPt6jMum5Q9a0yJd+bjlRo8bgi/jRF5VsRY412
gScz//n2pIYs5grgjrVi/bAvOemvPAs6uxzLRNWNu6OGN8QEIg52lTsNC1CeOf2K
5G6u2/MmmKNiQPTYPhlV27stqaN/ehQwcM6Hs6zTHUfbHK03RmoESg32bgs0AYV5
c0bvwo1GcIsqDkHJXPZdZIo4xYNYt3OMvht96lk1fu5hxcNkSwCqTwvLuKFICcCX
rf3WGHnvzPDbjne0Nj6D/NYUnCXwthBe4HRLzuUR7ck+Dmwq6ZvyZBhGP2VOzr94
Y1SqF+33JEwQBw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:36 2025 by rpki-client