Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File:                     DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier:          p6KbJDUC6iqKCqK+gfnBnTX8EeN7MzbSX7NUzhUhU1Q=
Subject key identifier:   4D:95:DD:C8:7C:88:CF:B1:03:A6:F5:66:17:2C:A2:9B:A4:FB:C5:5F
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer:       /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial:       01974C69F301A5EF6570E20FEBB04CC6E581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number:          0845
Signing time:             Sat 07 Jun 2025 22:01:41 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:41 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:41 +0000
Files and hashes:         1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: 0bDu7kiFMpFbgpdrwXLTyLCsZt8Xmoklr9bU9hQ+k/8=)
                          2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:f3:01:a5:ef:65:70:e2:0f:eb:b0:4c:c6:e5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
        Validity
            Not Before: Jun  7 22:01:41 2025 GMT
            Not After : Jun  8 22:01:41 2025 GMT
        Subject: CN=4d95ddc87c88cfb103a6f566172ca29ba4fbc55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:94:d8:13:9f:39:95:61:e6:0f:48:eb:48:
                    3f:ca:80:40:3c:19:88:df:db:27:6c:a9:9c:bf:4c:
                    cf:e9:ad:fb:bd:95:c1:97:d4:5b:1a:19:85:e9:f8:
                    6f:1f:fa:aa:ae:e0:0a:9c:8e:89:1f:8a:e7:91:3f:
                    03:f7:e1:61:39:90:1d:06:57:59:0c:60:da:43:43:
                    95:5f:f5:a1:dc:c4:22:97:89:1c:69:55:4b:66:01:
                    53:47:7f:a3:fa:62:56:3b:74:87:1a:dd:0c:89:34:
                    e3:29:c5:59:1e:4f:31:37:06:b9:a8:6f:95:10:8b:
                    cb:8f:57:ad:d0:d6:27:bf:c5:c3:a6:40:da:4c:3a:
                    85:b6:8e:bd:02:00:d1:b9:3d:40:2e:df:2f:98:bb:
                    43:77:57:d5:4f:b6:45:96:18:b1:50:88:c4:fb:0f:
                    29:52:43:df:b0:17:4c:bb:83:bb:9d:a4:e6:4a:1c:
                    d8:b7:ae:0c:f9:f5:a5:e1:35:80:7c:c5:55:a5:ea:
                    af:ee:32:b0:da:cf:fb:aa:a8:1f:00:d8:f4:75:71:
                    47:b5:32:ec:78:0d:09:b6:fa:34:83:21:b8:95:d5:
                    e7:42:9c:04:3f:1b:d3:77:06:85:60:2a:1f:5d:dd:
                    25:31:d9:f7:40:da:32:10:e5:93:a3:6e:9a:2c:51:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:DD:C8:7C:88:CF:B1:03:A6:F5:66:17:2C:A2:9B:A4:FB:C5:5F
            X509v3 Authority Key Identifier:
                keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:da:e5:01:c3:8c:ee:b5:28:b5:dd:e1:07:5b:2c:17:9a:98:
         2f:96:91:d6:88:27:fd:f0:ae:88:0d:a6:11:3c:5b:b7:9b:d9:
         c0:48:59:89:cc:1f:7b:41:8f:45:07:5d:d7:fb:b1:92:d2:af:
         e8:cb:d1:b2:9f:63:d8:7c:2c:b5:f5:cc:c1:1b:de:98:8a:66:
         59:d6:5f:2a:50:59:ef:cb:85:7e:11:ef:bb:62:c0:9a:09:0e:
         69:a5:7c:5a:e3:f1:44:aa:b6:38:32:33:19:f7:e7:c9:d9:d0:
         c2:3c:94:7e:26:b1:29:80:46:26:07:de:a1:39:0c:db:83:ea:
         dd:7b:eb:fb:dc:9d:b0:57:4b:d4:d9:84:a9:c0:94:a9:0d:51:
         22:63:82:ad:c9:cb:b2:68:48:cf:1a:9e:40:4e:30:15:68:83:
         2c:c8:d4:80:a5:17:12:c6:ea:2f:f7:68:17:6a:2d:07:2f:9d:
         fc:38:35:80:11:9a:79:c1:8e:b2:f1:2d:2e:49:1f:25:c2:ae:
         75:52:98:f9:c5:f1:ce:b2:66:7e:0d:90:40:5a:c3:6c:36:fe:
         10:e5:4b:6f:56:ec:d6:51:08:c9:31:11:6b:65:4c:57:27:4d:
         e8:25:c9:2d:ef:38:f0:c6:9c:71:06:02:35:ce:31:09:cd:e7:
         f5:b2:cf:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMafMBpe9lcOIP67BMxuWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx
ZDA0NzUwHhcNMjUwNjA3MjIwMTQxWhcNMjUwNjA4MjIwMTQxWjAzMTEwLwYDVQQD
Eyg0ZDk1ZGRjODdjODhjZmIxMDNhNmY1NjYxNzJjYTI5YmE0ZmJjNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBaU2BOfOZVh5g9I60g/yoBAPBmI
39snbKmcv0zP6a37vZXBl9RbGhmF6fhvH/qqruAKnI6JH4rnkT8D9+FhOZAdBldZ
DGDaQ0OVX/Wh3MQil4kcaVVLZgFTR3+j+mJWO3SHGt0MiTTjKcVZHk8xNwa5qG+V
EIvLj1et0NYnv8XDpkDaTDqFto69AgDRuT1ALt8vmLtDd1fVT7ZFlhixUIjE+w8p
UkPfsBdMu4O7naTmShzYt64M+fWl4TWAfMVVpeqv7jKw2s/7qqgfANj0dXFHtTLs
eA0Jtvo0gyG4ldXnQpwEPxvTdwaFYCofXd0lMdn3QNoyEOWTo26aLFG1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2V3ch8iM+xA6b1Zhcsopuk+8VfMB8GA1UdIwQY
MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt
MjVjYjA5MmY1Y2FjLzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj
LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4trlAcOM
7rUotd3hB1ssF5qYL5aR1ogn/fCuiA2mETxbt5vZwEhZicwfe0GPRQdd1/uxktKv
6MvRsp9j2HwstfXMwRvemIpmWdZfKlBZ78uFfhHvu2LAmgkOaaV8WuPxRKq2ODIz
GffnydnQwjyUfiaxKYBGJgfeoTkM24Pq3Xvr+9ydsFdL1NmEqcCUqQ1RImOCrcnL
smhIzxqeQE4wFWiDLMjUgKUXEsbqL/doF2otBy+d/Dg1gBGaecGOsvEtLkkfJcKu
dVKY+cXxzrJmfg2QQFrDbDb+EOVLb1bs1lEIyTERa2VMVydN6CXJLe848MaccQYC
Nc4xCc3n9bLPhg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:12:15 2025 by rpki-client