Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          MCOaQfV/l9tzS8wmqkWyNyk9gmY7Jc4wqbI6MZ9cPg0=
Subject key identifier:   45:9C:12:9B:C6:B5:98:DC:A0:82:6A:83:48:B5:66:3B:26:CD:DE:5B
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       0197488CDB82371B379C4EB5D232B6649C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 04:01:19 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:19 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:19 +0000
Files and hashes:         1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=)
                          2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=)
                          3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: FxCOn+jbp87PAmwKkHbD6HTxHLHNAynhUUtmcTkJ5h0=)
                          4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=)
                          5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:db:82:37:1b:37:9c:4e:b5:d2:32:b6:64:9c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Jun  7 04:01:19 2025 GMT
            Not After : Jun  8 04:01:19 2025 GMT
        Subject: CN=459c129bc6b598dca0826a8348b5663b26cdde5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:37:47:67:5c:8f:5e:43:f2:f3:cd:08:49:
                    24:73:82:6a:86:0c:c0:ea:ff:04:20:24:11:08:1f:
                    80:99:3f:ea:06:5c:9d:a6:68:69:1e:1e:4a:ab:85:
                    44:67:fb:9f:33:ac:b4:30:38:3e:fb:15:18:a0:41:
                    be:aa:97:e0:96:ce:c9:d1:61:16:6a:a1:91:80:cb:
                    f0:81:84:47:69:fd:4d:6f:c2:a2:98:1e:d1:2c:dc:
                    6d:e7:18:04:7f:7c:c4:77:25:de:0f:fd:35:cc:67:
                    1a:46:6d:b0:17:62:f2:35:c5:ba:59:3d:5c:08:cd:
                    98:8d:28:e7:34:bf:61:cc:47:7b:53:f3:d6:15:94:
                    b4:91:e0:df:d4:0c:50:25:ee:a4:45:5d:2a:27:6c:
                    d4:4d:01:67:f2:83:8f:36:ed:57:9e:cf:48:23:e8:
                    1b:92:31:0b:a3:64:50:68:ed:5f:bc:b8:5a:71:54:
                    f0:ff:a3:bb:c7:62:20:05:8e:5d:28:8c:e6:f2:05:
                    e7:08:19:93:4a:fa:9b:4c:e1:1e:cd:bf:7d:2f:ae:
                    44:01:7d:b4:8b:a6:68:00:4f:21:d0:b5:71:80:2a:
                    de:6d:59:dc:ca:15:5f:81:d7:2a:6f:5c:a2:3c:0b:
                    9e:45:64:9d:1a:f9:0b:cd:b6:a0:b9:27:c2:e5:09:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:12:9B:C6:B5:98:DC:A0:82:6A:83:48:B5:66:3B:26:CD:DE:5B
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:47:e7:77:81:96:5b:57:73:38:3a:f8:5b:fa:b3:7f:40:b6:
         56:91:1c:66:a4:de:80:c4:cf:aa:ab:1f:2f:38:5e:b7:9a:61:
         44:61:a5:55:d4:ca:56:62:ff:f2:df:69:f7:3b:e8:ce:7f:bd:
         30:5a:35:61:c8:32:02:29:ab:2b:db:29:ae:89:4e:00:7e:94:
         c5:5e:a6:5a:6e:78:56:ce:99:4f:26:68:17:4d:c1:2d:21:20:
         b7:c1:ce:33:32:50:e9:1a:5b:2a:3a:ca:e0:fb:75:3a:8c:7b:
         37:32:7f:de:c2:65:9d:5b:78:cb:ae:5c:1c:22:2f:7d:0b:07:
         22:df:23:0c:71:17:af:28:a3:f8:74:1f:11:ca:67:5a:32:e0:
         6f:b3:47:3a:2a:4d:9f:36:a6:42:95:2c:54:5d:82:9a:8c:d6:
         69:e0:66:18:72:9f:17:c9:1f:1a:9d:a2:46:ab:2e:70:90:67:
         19:3d:39:b0:a6:67:75:94:41:d1:bb:06:6a:89:8f:0d:50:0d:
         26:5b:28:e1:fe:a5:5c:e9:c6:4c:c2:55:56:63:c4:2d:56:b0:
         9f:3e:3a:3e:8d:40:c9:6d:1f:ba:0a:19:aa:61:ef:a6:7d:26:
         c8:35:63:23:12:a5:77:45:7f:f1:48:3f:b9:f0:a8:8e:9d:38:
         b7:40:83:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjNuCNxs3nE610jK2ZJwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk
MGE4YzQwHhcNMjUwNjA3MDQwMTE5WhcNMjUwNjA4MDQwMTE5WjAzMTEwLwYDVQQD
Eyg0NTljMTI5YmM2YjU5OGRjYTA4MjZhODM0OGI1NjYzYjI2Y2RkZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbk3R2dcj15D8vPNCEkkc4JqhgzA
6v8EICQRCB+AmT/qBlydpmhpHh5Kq4VEZ/ufM6y0MDg++xUYoEG+qpfgls7J0WEW
aqGRgMvwgYRHaf1Nb8KimB7RLNxt5xgEf3zEdyXeD/01zGcaRm2wF2LyNcW6WT1c
CM2YjSjnNL9hzEd7U/PWFZS0keDf1AxQJe6kRV0qJ2zUTQFn8oOPNu1Xns9II+gb
kjELo2RQaO1fvLhacVTw/6O7x2IgBY5dKIzm8gXnCBmTSvqbTOEezb99L65EAX20
i6ZoAE8h0LVxgCrebVncyhVfgdcqb1yiPAueRWSdGvkLzbaguSfC5Ql9wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWcEpvGtZjcoIJqg0i1Zjsmzd5bMB8GA1UdIwQY
MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt
ODY2YjJiMDIxZmM1LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1
LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEfnd4GW
W1dzODr4W/qzf0C2VpEcZqTegMTPqqsfLzhet5phRGGlVdTKVmL/8t9p9zvozn+9
MFo1YcgyAimrK9sprolOAH6UxV6mWm54Vs6ZTyZoF03BLSEgt8HOMzJQ6RpbKjrK
4Pt1Oox7NzJ/3sJlnVt4y65cHCIvfQsHIt8jDHEXryij+HQfEcpnWjLgb7NHOipN
nzamQpUsVF2CmozWaeBmGHKfF8kfGp2iRqsucJBnGT05sKZndZRB0bsGaomPDVAN
Jlso4f6lXOnGTMJVVmPELVawnz46Po1AyW0fugoZqmHvpn0myDVjIxKld0V/8Ug/
ufCojp04t0CDCg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:06 2025 by rpki-client