Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
File:                     Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft (raw, json)
Hash identifier:          DDZhTgelPsbVmYWdge3bE2ePxSo0BIFC9wwsPsQ/dGE=
Subject key identifier:   DF:99:73:8B:1A:8E:6D:34:D2:10:E4:4E:ED:A6:D5:F9:9E:C6:1E:81
Authority key identifier: 42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
Certificate issuer:       /CN=429fe46633e4d3276251b3b261af727d35d4dffb
Certificate serial:       0197469DC25640295901E9C7BE248125C6C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
Manifest number:          04F7
Signing time:             Fri 06 Jun 2025 19:00:33 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:33 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:33 +0000
Files and hashes:         1: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl (hash: rghtRjLZxq4mW8ori866S3bopt3Lw1WcXuyZjYGI2pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:c2:56:40:29:59:01:e9:c7:be:24:81:25:c6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429fe46633e4d3276251b3b261af727d35d4dffb
        Validity
            Not Before: Jun  6 19:00:33 2025 GMT
            Not After : Jun  7 19:00:33 2025 GMT
        Subject: CN=df99738b1a8e6d34d210e44eeda6d5f99ec61e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ce:5c:ff:b8:f2:59:1a:c4:93:f6:61:2a:68:
                    3b:6d:f5:fc:3a:5f:eb:78:d6:7d:bf:7f:7c:6c:7e:
                    5a:28:ab:61:d6:ed:45:5e:e3:01:fc:8c:8a:26:09:
                    40:f9:cf:38:68:ff:b0:28:81:5b:b9:b3:e8:48:22:
                    a6:13:d0:c8:b0:9e:b1:23:f7:0a:4b:db:85:a2:6e:
                    d8:bc:32:06:ac:43:7c:1e:30:0d:41:2b:14:e8:62:
                    6b:bc:3a:52:50:06:b1:d0:82:64:0e:13:96:1a:39:
                    50:cf:d0:89:2c:e0:fd:c8:6d:4a:f1:1c:39:00:40:
                    8c:dd:2a:77:30:79:80:ff:a8:56:6b:01:85:2c:37:
                    c3:dc:ea:81:6c:c0:eb:3d:3a:c4:cd:28:0a:11:db:
                    2f:bf:9c:0c:31:87:99:af:4d:32:fa:3e:52:99:3d:
                    01:4c:91:d7:32:a7:c5:9d:2f:96:5d:b3:74:67:99:
                    a1:67:18:ef:21:22:f1:ca:10:cf:76:ed:1f:c9:2f:
                    4f:a5:a7:71:73:fb:7e:de:81:3f:f1:a5:81:d4:ef:
                    2e:60:d9:cc:ff:ac:d3:60:d4:15:d2:b6:46:73:6d:
                    ee:f5:bd:e1:4f:a2:60:03:71:2e:19:27:4a:ad:27:
                    30:02:2c:fd:18:5c:b9:54:6b:ee:07:3d:cb:93:c4:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:73:8B:1A:8E:6D:34:D2:10:E4:4E:ED:A6:D5:F9:9E:C6:1E:81
            X509v3 Authority Key Identifier:
                keyid:42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:21:7b:40:75:8e:8d:49:c7:ef:1b:52:57:6a:2f:7b:4e:80:
         15:fa:22:1c:9c:81:ba:b9:55:cc:f0:ce:79:9c:a1:41:f9:fa:
         1a:25:f5:4f:ad:18:46:14:f2:36:ea:d1:42:79:bd:5b:6f:bf:
         ca:1b:e0:60:2f:c5:4e:16:a3:85:8b:3c:d6:8b:0a:95:41:86:
         c8:59:52:69:d2:34:8a:1b:1a:b6:ef:56:9e:f2:ce:ef:d3:b6:
         90:87:29:a4:f2:59:53:52:0f:6e:e4:25:c1:7f:2b:dd:55:ea:
         9f:33:fd:e8:c1:92:92:90:f4:bd:24:a3:e0:73:ae:4f:23:42:
         9f:91:b7:02:17:b3:22:fe:03:e2:8c:48:32:ed:dd:74:3b:58:
         1a:94:cd:ee:b2:16:35:9b:2d:54:58:db:54:d4:37:18:fa:28:
         c8:ac:38:04:45:22:9e:e4:d7:de:79:c7:26:04:a7:2c:06:db:
         84:66:60:76:8d:88:cd:ad:0f:47:c8:1e:08:74:5d:a7:62:eb:
         c8:e1:2d:63:78:80:0a:d0:f0:de:4f:a7:ab:04:c6:19:e9:13:
         61:23:ed:b9:a4:22:9f:b5:ae:ae:e9:81:f7:37:df:71:95:64:
         51:e6:a7:bc:04:1c:93:82:cf:7d:0d:9d:5c:d1:f1:86:55:b5:
         7f:cb:61:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGncJWQClZAenHviSBJcbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWZlNDY2MzNlNGQzMjc2MjUxYjNiMjYxYWY3MjdkMzVk
NGRmZmIwHhcNMjUwNjA2MTkwMDMzWhcNMjUwNjA3MTkwMDMzWjAzMTEwLwYDVQQD
EyhkZjk5NzM4YjFhOGU2ZDM0ZDIxMGU0NGVlZGE2ZDVmOTllYzYxZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs5c/7jyWRrEk/ZhKmg7bfX8Ol/r
eNZ9v398bH5aKKth1u1FXuMB/IyKJglA+c84aP+wKIFbubPoSCKmE9DIsJ6xI/cK
S9uFom7YvDIGrEN8HjANQSsU6GJrvDpSUAax0IJkDhOWGjlQz9CJLOD9yG1K8Rw5
AECM3Sp3MHmA/6hWawGFLDfD3OqBbMDrPTrEzSgKEdsvv5wMMYeZr00y+j5SmT0B
TJHXMqfFnS+WXbN0Z5mhZxjvISLxyhDPdu0fyS9Ppadxc/t+3oE/8aWB1O8uYNnM
/6zTYNQV0rZGc23u9b3hT6JgA3EuGSdKrScwAiz9GFy5VGvuBz3Lk8TXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+Zc4sajm000hDkTu2m1fmexh6BMB8GA1UdIwQY
MBaAFEKf5GYz5NMnYlGzsmGvcn011N/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzRlZDctNGUxMi00NmZmLWJmMzAt
MDY5ZGFjMTE5MTY2LzEvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mYzRlZDctNGUxMi00NmZmLWJmMzAtMDY5ZGFjMTE5MTY2
LzEvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciF7QHWO
jUnH7xtSV2ove06AFfoiHJyBurlVzPDOeZyhQfn6GiX1T60YRhTyNurRQnm9W2+/
yhvgYC/FThajhYs81osKlUGGyFlSadI0ihsatu9WnvLO79O2kIcppPJZU1IPbuQl
wX8r3VXqnzP96MGSkpD0vSSj4HOuTyNCn5G3AhezIv4D4oxIMu3ddDtYGpTN7rIW
NZstVFjbVNQ3GPooyKw4BEUinuTX3nnHJgSnLAbbhGZgdo2Iza0PR8geCHRdp2Lr
yOEtY3iACtDw3k+nqwTGGekTYSPtuaQin7WurumB9zffcZVkUeanvAQck4LPfQ2d
XNHxhlW1f8thug==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:18 2025 by rpki-client