Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File:                     lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier:          39Lvi1F+s63ghRZceyN8axXryDqvh0iMPbTVv9U9jwQ=
Subject key identifier:   A3:CE:23:D4:05:35:99:05:6F:BA:F3:99:39:D2:B0:01:39:7D:B1:F1
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer:       /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial:       019846D1EE3635EC75AEADC42980E613DF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number:          0B30
Signing time:             Sat 26 Jul 2025 13:00:19 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:19 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:19 +0000
Files and hashes:         1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: MKhC3dFo/IIkHp4TAS8kRQs7HXXaLGUhLJCUWfA9/2M=)
                          2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d1:ee:36:35:ec:75:ae:ad:c4:29:80:e6:13:df:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
        Validity
            Not Before: Jul 26 13:00:19 2025 GMT
            Not After : Jul 27 13:00:19 2025 GMT
        Subject: CN=a3ce23d4053599056fbaf39939d2b001397db1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:e4:91:10:d4:43:1f:c1:f7:dd:5f:53:8b:
                    6e:ef:7d:63:6e:73:95:65:7e:80:82:4d:f2:cf:6e:
                    2f:ce:83:72:92:d4:9d:81:0d:75:e8:13:0e:e7:8a:
                    24:ac:4f:fd:dc:23:e3:bf:3f:24:6e:af:11:53:04:
                    fd:d6:80:72:f2:21:1e:ed:11:a4:f1:be:35:a1:c7:
                    6d:98:39:bc:8f:a0:72:ae:ee:60:dc:3c:7c:36:d6:
                    4a:57:77:21:3b:9d:88:d1:01:7e:20:02:5d:3b:f1:
                    8d:6c:6e:e9:09:0d:69:cb:23:aa:c9:b2:28:3d:9f:
                    82:d0:97:3c:ac:e9:65:a8:40:4a:7d:51:a1:75:5d:
                    e7:75:47:d3:aa:fe:df:59:dd:0d:5b:d5:17:48:ca:
                    32:c4:ea:3a:b8:ac:28:de:89:8a:f8:43:e8:c0:08:
                    9b:3f:a1:c6:fe:e9:8d:7b:41:c5:63:c3:84:cf:5e:
                    77:f4:69:45:79:86:51:ae:4f:2f:6b:af:83:87:8a:
                    5b:1a:ce:24:34:ad:0e:48:fe:2c:bb:0d:a1:d8:a0:
                    f4:da:20:b1:f9:b7:08:85:47:b1:81:7c:27:de:04:
                    19:13:ed:e0:20:a4:cc:3b:69:fd:64:b8:fe:67:c3:
                    55:ce:2d:ac:33:e0:aa:bb:8c:63:08:6d:5b:a3:9e:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:23:D4:05:35:99:05:6F:BA:F3:99:39:D2:B0:01:39:7D:B1:F1
            X509v3 Authority Key Identifier:
                keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:e8:22:0f:37:5f:c8:66:07:d3:5f:54:cc:f2:3b:5d:a0:
         52:bc:a6:ca:fb:5f:a8:84:4c:ae:63:af:31:ec:81:07:50:66:
         b6:85:25:06:20:19:8b:fd:22:bb:16:0d:19:5b:69:d9:8e:ef:
         65:cf:25:64:48:30:7b:d4:d5:5a:a7:bd:13:d2:4a:88:93:11:
         8f:c8:2b:ce:07:97:54:21:e3:6b:fd:dd:d5:8b:82:33:52:49:
         4f:54:1c:08:82:85:59:65:ff:30:af:3e:9a:a9:2f:d3:f1:87:
         9f:83:40:90:07:b8:3e:13:4a:4a:1a:00:b6:ac:df:f5:cb:dc:
         02:6b:72:8f:07:42:36:57:66:71:08:8f:38:d2:35:9c:47:bf:
         15:dd:28:6a:09:6d:e7:e7:c7:f5:a2:c6:05:9a:fa:c1:12:73:
         eb:4f:f8:28:e3:06:a7:18:23:2a:2a:6d:17:c5:a0:04:c2:17:
         c7:b8:85:8c:ce:b5:03:d6:8d:d4:a1:9b:f7:43:c1:f1:60:0f:
         9d:9b:71:c1:4b:54:3d:2b:dc:e5:e4:fe:05:a9:30:02:6a:f6:
         6f:61:51:68:f3:59:64:66:df:d9:26:64:75:8c:c0:2f:66:e9:
         ad:e9:fd:51:1f:55:de:ae:85:0f:8d:fe:25:31:18:16:6c:b1:
         db:b7:95:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0e42Nex1rq3EKYDmE98cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YWI0Njk3YTZhNDhmNmM2YzY5M2UzODM5YmZkNWIzZmIw
ZTNiZjEwHhcNMjUwNzI2MTMwMDE5WhcNMjUwNzI3MTMwMDE5WjAzMTEwLwYDVQQD
EyhhM2NlMjNkNDA1MzU5OTA1NmZiYWYzOTkzOWQyYjAwMTM5N2RiMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0nkkRDUQx/B991fU4tu731jbnOV
ZX6Agk3yz24vzoNyktSdgQ116BMO54okrE/93CPjvz8kbq8RUwT91oBy8iEe7RGk
8b41ocdtmDm8j6Byru5g3Dx8NtZKV3chO52I0QF+IAJdO/GNbG7pCQ1pyyOqybIo
PZ+C0Jc8rOllqEBKfVGhdV3ndUfTqv7fWd0NW9UXSMoyxOo6uKwo3omK+EPowAib
P6HG/umNe0HFY8OEz1539GlFeYZRrk8va6+Dh4pbGs4kNK0OSP4suw2h2KD02iCx
+bcIhUexgXwn3gQZE+3gIKTMO2n9ZLj+Z8NVzi2sM+Cqu4xjCG1bo55sAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPOI9QFNZkFb7rzmTnSsAE5fbHxMB8GA1UdIwQY
MBaAFJarRpempI9sbGk+ODm/1bP7DjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQt
M2IxZTcyMmE5ZGM4LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQtM2IxZTcyMmE5ZGM4
LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWvoIg83
X8hmB9NfVMzyO12gUrymyvtfqIRMrmOvMeyBB1BmtoUlBiAZi/0iuxYNGVtp2Y7v
Zc8lZEgwe9TVWqe9E9JKiJMRj8grzgeXVCHja/3d1YuCM1JJT1QcCIKFWWX/MK8+
mqkv0/GHn4NAkAe4PhNKShoAtqzf9cvcAmtyjwdCNldmcQiPONI1nEe/Fd0oaglt
5+fH9aLGBZr6wRJz60/4KOMGpxgjKiptF8WgBMIXx7iFjM61A9aN1KGb90PB8WAP
nZtxwUtUPSvc5eT+BakwAmr2b2FRaPNZZGbf2SZkdYzAL2bpren9UR9V3q6FD43+
JTEYFmyx27eVXQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:07 2025 by rpki-client