Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File:                     qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier:          1jv4HhAWY2Hr/0Vb7x5fMQYQ5Sa9wjI2z2zv+y8fyWk=
Subject key identifier:   11:87:2B:F9:25:51:DA:1A:6C:53:8E:F8:A5:5E:4D:C0:04:D2:A9:4D
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer:       /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial:       01974CA021D10D7EAD4731FF0BFD7B425689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 23:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:52 +0000
Files and hashes:         1: PW17_Y421OHbEdWMpqGOAItDAMQ.roa (hash: L2gpot5aAwJ9/O+fD4LlOhf1tqLhMij+IcuFZyDR7dA=)
                          2: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: hz7dT+KSY6rZti0hAjOCjl5OdAYjZkOaK8c7JSF/EtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:21:d1:0d:7e:ad:47:31:ff:0b:fd:7b:42:56:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
        Validity
            Not Before: Jun  7 23:00:52 2025 GMT
            Not After : Jun  8 23:00:52 2025 GMT
        Subject: CN=11872bf92551da1a6c538ef8a55e4dc004d2a94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:07:ac:78:a6:8f:f5:fa:0a:dc:bd:ee:1e:25:
                    ab:8c:89:b9:a2:f0:b9:ae:a4:ab:89:5f:33:b8:16:
                    0f:b2:a1:e0:9b:df:1d:2d:3c:4f:32:8c:13:a4:40:
                    70:06:59:55:b1:55:de:05:eb:2f:df:04:25:0c:10:
                    54:1b:c3:19:0a:f1:47:8b:33:f4:d2:81:5b:33:8d:
                    68:e0:54:2a:f1:35:38:c7:61:9d:21:f3:87:a3:32:
                    d7:cf:cd:6f:80:9a:5f:17:93:a7:98:8c:27:e1:1b:
                    08:43:2c:aa:6f:c7:04:9e:54:1c:d3:fe:23:da:3e:
                    cf:bf:32:9f:d0:a9:73:98:a5:70:b2:00:b5:0c:75:
                    1d:d7:ff:ae:b3:27:fa:c4:6a:c9:25:3f:f5:11:e7:
                    32:4a:2e:33:6d:fe:0b:41:ca:54:82:87:78:72:ff:
                    17:83:a0:cc:8f:da:0e:70:06:7d:49:4b:03:18:28:
                    eb:cd:1a:51:f7:c8:33:2b:59:10:a7:0f:bb:87:f3:
                    e4:cb:64:5d:9b:db:ea:e9:cc:fa:9c:2e:af:cd:87:
                    d3:69:21:88:08:36:a9:98:81:16:0d:96:47:94:0b:
                    62:d0:bb:5e:bb:dc:1d:71:ee:11:da:bd:8e:37:ec:
                    c9:ec:7d:c0:3a:28:d9:c3:d6:be:50:f7:d9:d2:bd:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:87:2B:F9:25:51:DA:1A:6C:53:8E:F8:A5:5E:4D:C0:04:D2:A9:4D
            X509v3 Authority Key Identifier:
                keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c5:4a:14:18:04:cf:db:5f:6d:18:45:a8:83:d0:04:b3:3e:
         3e:11:9f:fe:c2:1c:00:5c:36:c8:64:8f:8b:03:89:32:79:26:
         0b:84:10:5c:f2:8c:37:41:50:cb:10:7d:98:db:52:d1:f6:15:
         e2:22:e4:36:15:c5:af:00:1a:9e:8c:3e:d0:83:2c:b3:f2:6b:
         5f:f1:4a:c3:3c:58:09:e1:36:95:c5:6f:85:98:19:dd:dd:0e:
         c1:58:01:33:cc:a1:eb:d4:90:e9:94:17:f4:80:ae:c0:aa:56:
         49:cf:a9:aa:50:07:19:57:03:c7:a9:76:28:a2:15:84:ed:a6:
         d6:dc:c4:8d:7c:1a:63:1b:6a:65:64:47:01:d9:77:bf:f8:84:
         88:cc:f6:e1:c9:f1:59:b9:e8:67:ef:0b:f7:42:93:6c:4f:2a:
         89:67:94:2b:4f:8b:90:28:ba:77:a4:13:d2:b2:41:28:2c:7b:
         dc:fe:ac:b3:26:0b:4f:45:c7:0b:51:2e:b8:46:b4:e6:41:98:
         fc:31:a7:f8:00:67:67:f2:90:09:f6:80:a9:b1:49:69:0a:ed:
         f4:7c:50:45:2e:7c:d1:7e:b0:95:67:db:b9:09:77:12:69:5e:
         68:0e:ee:fb:8d:7b:d9:87:dc:8a:af:0c:88:06:61:25:d2:65:
         92:47:b6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoCHRDX6tRzH/C/17QlaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA1Nzg1OWQxNjYwZThkODcyOTc5ZWU2ZDZhNmIyYzQz
M2EzMDUwHhcNMjUwNjA3MjMwMDUyWhcNMjUwNjA4MjMwMDUyWjAzMTEwLwYDVQQD
EygxMTg3MmJmOTI1NTFkYTFhNmM1MzhlZjhhNTVlNGRjMDA0ZDJhOTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5geseKaP9foK3L3uHiWrjIm5ovC5
rqSriV8zuBYPsqHgm98dLTxPMowTpEBwBllVsVXeBesv3wQlDBBUG8MZCvFHizP0
0oFbM41o4FQq8TU4x2GdIfOHozLXz81vgJpfF5OnmIwn4RsIQyyqb8cEnlQc0/4j
2j7PvzKf0KlzmKVwsgC1DHUd1/+usyf6xGrJJT/1EecySi4zbf4LQcpUgod4cv8X
g6DMj9oOcAZ9SUsDGCjrzRpR98gzK1kQpw+7h/Pky2Rdm9vq6cz6nC6vzYfTaSGI
CDapmIEWDZZHlAti0Lteu9wdce4R2r2ON+zJ7H3AOijZw9a+UPfZ0r15owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGHK/klUdoabFOO+KVeTcAE0qlNMB8GA1UdIwQY
MBaAFKhgV4WdFmDo2HKXnubWprLEM6MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYt
ZDRlZGMyMGNjMWFjLzEvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYtZDRlZGMyMGNjMWFj
LzEvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsVKFBgE
z9tfbRhFqIPQBLM+PhGf/sIcAFw2yGSPiwOJMnkmC4QQXPKMN0FQyxB9mNtS0fYV
4iLkNhXFrwAanow+0IMss/JrX/FKwzxYCeE2lcVvhZgZ3d0OwVgBM8yh69SQ6ZQX
9ICuwKpWSc+pqlAHGVcDx6l2KKIVhO2m1tzEjXwaYxtqZWRHAdl3v/iEiMz24cnx
WbnoZ+8L90KTbE8qiWeUK0+LkCi6d6QT0rJBKCx73P6ssyYLT0XHC1EuuEa05kGY
/DGn+ABnZ/KQCfaAqbFJaQrt9HxQRS580X6wlWfbuQl3EmleaA7u+4172Yfciq8M
iAZhJdJlkke2Nw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:07 2025 by rpki-client