Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File:                     Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier:          1ejBan8OYEZtr4PwmxNFAAfAU7EGWQtpdZVTFxiUEoI=
Subject key identifier:   4D:07:E3:63:A0:A1:DD:B6:A9:B8:D2:37:42:3C:21:8F:44:C6:20:A2
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer:       /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial:       01976B4F4AA73072E94959C055D6360A02BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number:          047D
Signing time:             Fri 13 Jun 2025 22:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 22:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 22:00:47 +0000
Files and hashes:         1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: Sh/67agDHo7P+7A3/HeXGRyulYnqiB5Qzm5+YhvbQks=)
                          2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 18:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:4f:4a:a7:30:72:e9:49:59:c0:55:d6:36:0a:02:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
        Validity
            Not Before: Jun 13 22:00:47 2025 GMT
            Not After : Jun 14 22:00:47 2025 GMT
        Subject: CN=4d07e363a0a1ddb6a9b8d237423c218f44c620a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:2c:1c:19:14:6a:ab:5a:52:ac:72:5b:08:
                    7b:9c:61:92:33:3f:8f:03:48:53:76:6c:e0:b9:f5:
                    28:79:00:c1:7e:17:fc:aa:2c:f2:05:1f:8a:07:5d:
                    5a:90:9c:47:03:9b:bc:c2:f8:f9:4f:08:56:9e:06:
                    43:5e:e8:f4:c1:35:c1:6f:33:b7:be:9d:ad:bd:a1:
                    3e:31:92:09:04:d3:fb:1e:c0:32:16:28:f6:69:61:
                    a3:8f:37:24:b3:c4:d7:01:1f:36:8e:46:dd:4f:f2:
                    b1:ae:1a:70:7d:3c:32:fa:b4:a4:5d:09:e2:02:7c:
                    c8:5f:45:f1:11:ff:91:98:7c:61:bb:86:72:08:d0:
                    b7:3e:83:7e:84:41:0f:d8:49:ad:3f:2b:6a:21:b1:
                    22:ec:45:10:53:94:77:d5:2e:dd:48:10:ac:5d:b6:
                    cf:27:8e:16:90:54:66:a7:ac:03:c5:13:5c:88:38:
                    0a:ee:5f:6b:7f:6d:1e:46:ce:c0:a7:23:aa:98:d9:
                    e5:0b:33:e7:3d:11:89:9e:f0:69:5f:50:5f:54:c4:
                    af:34:b7:3e:0a:cd:a2:73:d6:29:94:cb:10:4a:ae:
                    c9:eb:5b:a5:89:f1:23:ab:e1:17:f2:1c:14:73:b7:
                    12:01:55:97:fc:88:d6:b0:e8:c9:71:11:9a:46:38:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:07:E3:63:A0:A1:DD:B6:A9:B8:D2:37:42:3C:21:8F:44:C6:20:A2
            X509v3 Authority Key Identifier:
                keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:6a:62:ba:5e:bc:4c:7e:40:ac:dc:1a:d7:af:f0:75:1b:
         a2:59:77:87:f0:de:96:81:13:d9:7e:50:76:13:60:f8:91:9c:
         18:64:9a:44:b9:7b:bb:96:49:50:0c:b8:db:e4:dd:c2:74:18:
         01:62:d3:d4:a9:cb:db:6c:b5:f4:ac:16:a1:e1:cb:12:e5:5a:
         7c:cf:68:b6:47:d8:aa:b5:b9:77:28:81:42:9f:0a:5d:03:66:
         66:c2:e9:23:ed:ce:dd:76:6f:bc:9e:1f:cf:9c:39:92:ee:e5:
         2c:46:77:ec:51:5e:b5:83:2d:e2:b4:af:9b:86:fb:86:cd:0d:
         bf:d7:41:6c:78:48:7a:a9:98:e6:4e:e4:94:96:6e:f7:f4:67:
         22:10:49:a5:1d:9c:2f:9e:cf:bb:e2:c3:63:f2:66:15:81:96:
         c4:cb:c5:0a:fc:df:6b:2a:5b:96:c6:bf:81:be:67:78:22:36:
         c0:76:48:c4:1b:f8:fe:f4:cc:39:30:73:53:9f:6f:84:ef:4b:
         5c:b4:88:45:06:41:5b:c8:d8:df:e0:42:d8:8d:b2:ba:e6:7e:
         ba:b5:a5:8b:96:36:c1:d2:eb:88:da:53:bf:52:6a:a6:07:cb:
         29:71:de:05:46:5e:31:e8:ab:9b:fb:c7:ad:d5:64:4d:79:a6:
         6d:c7:91:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrT0qnMHLpSVnAVdY2CgK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx
NjE4MjIwHhcNMjUwNjEzMjIwMDQ3WhcNMjUwNjE0MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZDA3ZTM2M2EwYTFkZGI2YTliOGQyMzc0MjNjMjE4ZjQ0YzYyMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc0sHBkUaqtaUqxyWwh7nGGSMz+P
A0hTdmzgufUoeQDBfhf8qizyBR+KB11akJxHA5u8wvj5TwhWngZDXuj0wTXBbzO3
vp2tvaE+MZIJBNP7HsAyFij2aWGjjzcks8TXAR82jkbdT/KxrhpwfTwy+rSkXQni
AnzIX0XxEf+RmHxhu4ZyCNC3PoN+hEEP2EmtPytqIbEi7EUQU5R31S7dSBCsXbbP
J44WkFRmp6wDxRNciDgK7l9rf20eRs7ApyOqmNnlCzPnPRGJnvBpX1BfVMSvNLc+
Cs2ic9YplMsQSq7J61ulifEjq+EX8hwUc7cSAVWX/IjWsOjJcRGaRjj0cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0H42Ogod22qbjSN0I8IY9ExiCiMB8GA1UdIwQY
MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt
Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw
LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy5qYrpe
vEx+QKzcGtev8HUboll3h/DeloET2X5QdhNg+JGcGGSaRLl7u5ZJUAy42+TdwnQY
AWLT1KnL22y19KwWoeHLEuVafM9otkfYqrW5dyiBQp8KXQNmZsLpI+3O3XZvvJ4f
z5w5ku7lLEZ37FFetYMt4rSvm4b7hs0Nv9dBbHhIeqmY5k7klJZu9/RnIhBJpR2c
L57Pu+LDY/JmFYGWxMvFCvzfaypblsa/gb5neCI2wHZIxBv4/vTMOTBzU59vhO9L
XLSIRQZBW8jY3+BC2I2yuuZ+urWli5Y2wdLriNpTv1JqpgfLKXHeBUZeMeirm/vH
rdVkTXmmbceR1w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 03:27:02 2025 by rpki-client