Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          6w5QFiy5ymWDj7CQPZ0UcfoBHZxhaMSBj/ug7Gm3jKo=
Subject key identifier:   B6:9B:1B:1B:FD:12:23:43:34:1F:40:11:9C:D0:CC:2A:1E:6A:BB:A8
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       01974CA0070A81B369B42323687FC384C87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0A10
Signing time:             Sat 07 Jun 2025 23:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:45 +0000
Files and hashes:         1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: wbFYfLqpArHviUajwt+KsLVjQ+TyEbG4tLwtlNNZaDY=)
                          2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:07:0a:81:b3:69:b4:23:23:68:7f:c3:84:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Jun  7 23:00:45 2025 GMT
            Not After : Jun  8 23:00:45 2025 GMT
        Subject: CN=b69b1b1bfd122343341f40119cd0cc2a1e6abba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:b5:f3:ed:c4:86:ad:c2:67:37:79:3e:ba:
                    b6:99:c1:b8:3f:c9:19:ea:9d:56:f1:e4:10:59:4a:
                    c4:d1:64:26:1b:af:dc:57:2f:aa:3d:43:54:16:19:
                    b0:c1:b0:15:08:4c:cf:26:13:b0:2d:61:7e:74:c4:
                    c7:03:ab:5e:a9:c9:ea:ec:4d:19:2f:33:7c:fd:69:
                    0a:b0:10:bf:ae:d8:0e:34:60:f1:2c:ab:05:a3:66:
                    b6:9f:ac:ac:a3:5f:b9:fd:fa:a3:9a:38:3a:6d:7e:
                    11:4d:58:15:cf:f3:3c:70:00:dc:cb:62:53:39:17:
                    c7:bf:36:06:6b:0f:3e:33:f0:7a:8e:46:09:a3:72:
                    6c:21:bb:48:c3:e9:eb:ca:b3:4c:b6:8c:e2:d6:80:
                    4b:2d:db:43:a4:0e:65:fe:79:37:37:1b:46:d0:a0:
                    ba:c6:d0:a2:d5:fa:eb:a7:d0:e8:95:5a:b6:41:44:
                    1a:d6:61:81:0f:90:4a:f0:6d:b6:29:e3:ad:0e:f6:
                    7d:c5:4f:6a:25:35:6b:a5:a1:03:6e:2a:b8:2a:4d:
                    cf:5f:a1:c7:b7:85:ca:04:60:5d:b1:6c:41:52:56:
                    01:d2:96:53:0b:a2:44:68:6d:cc:8a:79:b3:c5:f5:
                    75:ca:47:20:5f:68:4a:0a:61:d0:a0:29:b5:59:6f:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9B:1B:1B:FD:12:23:43:34:1F:40:11:9C:D0:CC:2A:1E:6A:BB:A8
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:d3:f0:c5:69:15:07:12:e5:b9:07:23:66:f4:77:26:27:
         aa:dd:25:2d:95:68:a5:08:5a:ca:ca:50:a4:4f:06:30:e0:1f:
         b1:fb:e7:dc:bb:5b:21:a3:76:8b:47:21:48:7b:5c:7b:16:eb:
         ad:f5:57:4e:d8:40:86:88:fb:e8:e8:31:e4:45:b5:e1:a6:77:
         d6:b5:55:37:fc:43:e5:8d:86:42:50:c9:fb:0e:2c:85:f1:02:
         80:06:c3:e5:6a:75:b4:2b:b6:10:d4:fb:ad:df:bd:8e:25:b7:
         09:a2:3e:75:f9:17:46:29:d0:f1:9b:1c:91:54:11:a9:3a:85:
         12:a8:11:c0:62:ca:53:7e:3c:ca:3a:2a:65:ca:7a:37:86:85:
         44:f5:46:f6:de:9e:06:2c:c5:5d:83:d0:98:0a:ba:73:99:ee:
         fe:0c:a4:97:c7:c4:82:82:a1:a0:d3:7d:29:4b:34:89:0e:7d:
         be:44:31:ee:13:3b:4b:e5:21:80:74:55:a3:41:b4:1d:46:d4:
         d1:7e:06:76:3e:f6:a6:74:76:13:fa:fd:5f:80:97:a7:ed:44:
         f6:4a:64:b9:d8:49:2b:58:73:a7:9e:ff:0e:5c:b4:5d:de:d0:
         90:b9:84:00:02:15:6c:06:5a:21:53:62:23:cb:96:6b:31:c1:
         98:06:3c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoAcKgbNptCMjaH/DhMh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjUwNjA3MjMwMDQ1WhcNMjUwNjA4MjMwMDQ1WjAzMTEwLwYDVQQD
EyhiNjliMWIxYmZkMTIyMzQzMzQxZjQwMTE5Y2QwY2MyYTFlNmFiYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE618+3Ehq3CZzd5Prq2mcG4P8kZ
6p1W8eQQWUrE0WQmG6/cVy+qPUNUFhmwwbAVCEzPJhOwLWF+dMTHA6teqcnq7E0Z
LzN8/WkKsBC/rtgONGDxLKsFo2a2n6yso1+5/fqjmjg6bX4RTVgVz/M8cADcy2JT
ORfHvzYGaw8+M/B6jkYJo3JsIbtIw+nryrNMtozi1oBLLdtDpA5l/nk3NxtG0KC6
xtCi1frrp9DolVq2QUQa1mGBD5BK8G22KeOtDvZ9xU9qJTVrpaEDbiq4Kk3PX6HH
t4XKBGBdsWxBUlYB0pZTC6JEaG3MinmzxfV1ykcgX2hKCmHQoCm1WW8aIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLabGxv9EiNDNB9AEZzQzCoearuoMB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrXT8MVp
FQcS5bkHI2b0dyYnqt0lLZVopQhayspQpE8GMOAfsfvn3LtbIaN2i0chSHtcexbr
rfVXTthAhoj76Ogx5EW14aZ31rVVN/xD5Y2GQlDJ+w4shfECgAbD5Wp1tCu2ENT7
rd+9jiW3CaI+dfkXRinQ8ZsckVQRqTqFEqgRwGLKU348yjoqZcp6N4aFRPVG9t6e
BizFXYPQmAq6c5nu/gykl8fEgoKhoNN9KUs0iQ59vkQx7hM7S+UhgHRVo0G0HUbU
0X4Gdj72pnR2E/r9X4CXp+1E9kpkudhJK1hzp57/Dly0Xd7QkLmEAAIVbAZaIVNi
I8uWazHBmAY87Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:21 2025 by rpki-client