Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File:                     aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier:          FXwAmYfxMG9sJyYLpgpcyfqfshsuLHawSuW+/xLbBYA=
Subject key identifier:   3D:98:8A:F4:9D:35:91:E1:8F:BD:68:CE:69:9A:79:93:2E:2D:E7:61
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer:       /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial:       0197673BBA9DAC7F0A13AAF4032B46E9E921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 03:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 03:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 03:00:56 +0000
Files and hashes:         1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
                          2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: WaMBmdarBCy4RD8J0EfwD8w3C+rdXJ6nEAdJqqCNfLE=)
                          3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
                          4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:3b:ba:9d:ac:7f:0a:13:aa:f4:03:2b:46:e9:e9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
        Validity
            Not Before: Jun 13 03:00:56 2025 GMT
            Not After : Jun 14 03:00:56 2025 GMT
        Subject: CN=3d988af49d3591e18fbd68ce699a79932e2de761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:12:96:7f:e0:5f:e3:a6:00:73:77:c0:f1:
                    b7:be:00:3c:88:4e:2d:eb:72:49:d4:2f:ed:07:ec:
                    39:4c:1f:9d:6b:d6:72:67:0c:da:8f:f6:75:2a:82:
                    4a:9e:d2:f7:81:2f:c3:2d:57:12:52:58:2d:2a:18:
                    a2:de:ff:7e:cc:c8:74:3f:b2:f2:72:b2:41:47:8a:
                    41:4a:f8:2b:cc:73:34:75:05:03:ab:f3:e5:24:60:
                    70:fa:ed:96:23:4e:c5:68:82:b6:72:03:aa:70:19:
                    3f:d7:1d:09:33:98:b4:68:e0:ce:22:28:11:10:4f:
                    69:4c:fc:fd:0e:1e:7f:4f:67:33:cd:78:bb:aa:27:
                    16:69:b6:88:05:f3:3f:1d:33:09:51:9d:c9:21:b1:
                    52:91:59:91:03:e1:4e:03:6b:0f:35:2a:56:93:74:
                    fd:80:49:b4:a1:25:78:3a:c0:51:02:70:d2:58:33:
                    9e:76:fe:2f:d2:c2:c6:04:5c:d1:d8:ac:ef:64:b0:
                    84:8b:43:f8:03:c3:6f:24:84:60:1a:84:82:65:f6:
                    46:f1:8f:8a:23:dc:fc:0d:d4:ca:3b:6c:8b:2d:48:
                    4c:c2:81:73:f6:98:82:06:73:da:af:9a:81:94:34:
                    cf:7b:5d:72:f0:f2:94:ff:30:d2:3d:3b:f3:a8:88:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:8A:F4:9D:35:91:E1:8F:BD:68:CE:69:9A:79:93:2E:2D:E7:61
            X509v3 Authority Key Identifier:
                keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0e:ed:d0:49:e3:36:83:8c:4e:6f:67:46:fb:50:95:c3:d0:
         ad:89:be:ce:45:7f:79:21:44:b6:ab:36:34:02:69:b3:f5:9e:
         dd:72:30:a8:cd:d6:c0:b9:89:f0:c9:4b:b7:3f:d4:81:f3:83:
         fa:09:eb:c7:e8:d4:a6:60:c9:3d:45:8d:88:32:42:77:76:54:
         64:47:11:18:03:a4:2f:3f:1a:88:66:ce:43:91:d1:ca:52:ef:
         45:f5:e5:ec:2e:ec:25:0a:15:6c:a1:b7:f1:5a:73:44:55:0b:
         15:88:bb:1c:25:a6:e0:e4:b8:99:d8:61:92:9c:aa:84:44:ea:
         c2:6f:c3:28:fd:44:05:3c:19:88:67:d1:0a:31:b6:a9:19:69:
         fc:db:a1:48:63:b3:4f:58:62:6c:09:3f:dd:16:ae:a0:7b:c0:
         f1:ce:3f:fb:f8:99:35:ab:1c:d0:e9:59:0e:4d:69:26:34:75:
         dc:5c:43:63:b9:a3:b9:2c:58:33:da:b2:e5:82:28:27:1f:1a:
         58:e2:58:24:de:93:9d:1b:8b:03:da:48:8f:b5:75:d0:e9:6a:
         22:9b:7c:42:ca:a6:20:1a:cc:ee:d9:38:2c:2d:b5:fc:db:ad:
         de:3b:73:f2:ab:ea:00:86:88:91:2d:b7:de:46:e7:8e:75:5a:
         cf:96:ec:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnO7qdrH8KE6r0AytG6ekhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTZmOWUzZTI2MjJhNzgxNWEyNTllNThkNTUyNDM5YzI1
NWEzMWIwHhcNMjUwNjEzMDMwMDU2WhcNMjUwNjE0MDMwMDU2WjAzMTEwLwYDVQQD
EygzZDk4OGFmNDlkMzU5MWUxOGZiZDY4Y2U2OTlhNzk5MzJlMmRlNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw64Sln/gX+OmAHN3wPG3vgA8iE4t
63JJ1C/tB+w5TB+da9ZyZwzaj/Z1KoJKntL3gS/DLVcSUlgtKhii3v9+zMh0P7Ly
crJBR4pBSvgrzHM0dQUDq/PlJGBw+u2WI07FaIK2cgOqcBk/1x0JM5i0aODOIigR
EE9pTPz9Dh5/T2czzXi7qicWabaIBfM/HTMJUZ3JIbFSkVmRA+FOA2sPNSpWk3T9
gEm0oSV4OsBRAnDSWDOedv4v0sLGBFzR2KzvZLCEi0P4A8NvJIRgGoSCZfZG8Y+K
I9z8DdTKO2yLLUhMwoFz9piCBnPar5qBlDTPe11y8PKU/zDSPTvzqIg+CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2YivSdNZHhj71ozmmaeZMuLedhMB8GA1UdIwQY
MBaAFGqm+ePiYip4FaJZ5Y1VJDnCVaMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4Mzct
YzUwNzM0ZDAyMGYwLzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4MzctYzUwNzM0ZDAyMGYw
LzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ7t0Enj
NoOMTm9nRvtQlcPQrYm+zkV/eSFEtqs2NAJps/We3XIwqM3WwLmJ8MlLtz/UgfOD
+gnrx+jUpmDJPUWNiDJCd3ZUZEcRGAOkLz8aiGbOQ5HRylLvRfXl7C7sJQoVbKG3
8VpzRFULFYi7HCWm4OS4mdhhkpyqhETqwm/DKP1EBTwZiGfRCjG2qRlp/NuhSGOz
T1hibAk/3RauoHvA8c4/+/iZNasc0OlZDk1pJjR13FxDY7mjuSxYM9qy5YIoJx8a
WOJYJN6TnRuLA9pIj7V10OlqIpt8QsqmIBrM7tk4LC21/Nut3jtz8qvqAIaIkS23
3kbnjnVaz5bsVg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 05:59:36 2025 by rpki-client