Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File:                     qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier:          BVR9Nz2veQXM8sJFhIt4UD7zx17Fk6C9KePL4nWJ/vU=
Subject key identifier:   0B:BF:A2:64:E8:01:07:6A:25:CB:38:42:30:02:AC:10:70:E3:0B:F5
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer:       /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial:       01964CD9628333F21BC36B91CF0AEF44E9FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number:          06A6
Signing time:             Sat 19 Apr 2025 07:00:36 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:36 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:36 +0000
Files and hashes:         1: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (hash: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=)
                          2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: Oz4UIGEL0AKeDcNSYTgNnODlvqyO+4V/4WqVn1az/DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:62:83:33:f2:1b:c3:6b:91:cf:0a:ef:44:e9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
        Validity
            Not Before: Apr 19 07:00:36 2025 GMT
            Not After : Apr 20 07:00:36 2025 GMT
        Subject: CN=0bbfa264e801076a25cb38423002ac1070e30bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:61:b9:15:9f:a2:6e:19:02:0c:31:ec:f1:
                    10:a5:52:a2:75:66:d3:ce:3c:2b:79:53:e3:54:92:
                    ff:79:79:a0:36:bc:f9:11:ae:bc:de:bc:04:82:2a:
                    44:16:ee:d6:9e:9f:ff:f6:eb:fc:bf:66:76:55:b4:
                    90:c9:7f:45:c2:e6:5b:5e:0d:fe:3e:a5:ec:bf:df:
                    6c:61:6d:3a:7f:79:e5:e9:97:97:7d:40:80:ce:27:
                    2c:d3:23:6e:e4:a9:e4:7f:49:a4:10:d1:ac:16:58:
                    8c:b2:e0:c9:02:63:8e:99:f4:9e:8e:28:79:23:cf:
                    98:5c:f0:99:e1:29:c9:bc:93:01:68:32:dc:02:95:
                    0c:92:14:42:52:06:dd:d6:bb:1a:21:12:9e:ea:a5:
                    3d:9c:8e:db:51:4e:49:10:9f:12:06:06:16:12:be:
                    88:de:e0:7c:2e:82:ac:92:37:e1:73:49:32:ec:01:
                    7b:9b:4e:80:57:f5:6c:fa:c4:e6:f8:ca:f1:4a:6b:
                    8b:9d:05:6d:7f:dc:08:89:e9:c4:14:5f:be:f8:49:
                    79:31:27:3f:ed:b0:26:0f:54:61:e2:8e:10:10:f2:
                    32:09:cc:e1:a7:05:0a:7e:0b:33:fc:fb:13:8f:13:
                    43:c4:b7:f0:40:6c:bd:56:99:ff:7f:84:8d:bc:fa:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:A2:64:E8:01:07:6A:25:CB:38:42:30:02:AC:10:70:E3:0B:F5
            X509v3 Authority Key Identifier:
                keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:7d:99:6c:b9:26:64:a7:d9:7b:32:da:43:a2:4e:69:63:
         54:39:5f:5c:83:12:5c:0a:9b:56:0f:6a:46:58:36:24:1f:e4:
         ad:7d:0a:ef:a6:6e:b9:68:66:b4:d4:26:c0:d0:ad:91:0d:96:
         98:d1:52:be:0e:92:d6:14:82:7f:b3:e0:4b:59:0c:3f:56:64:
         6f:48:91:61:38:92:0e:4b:ec:9f:2a:f2:ce:f5:74:ab:cc:e2:
         53:de:9f:b4:39:8a:19:fd:14:c6:68:fc:c7:67:7a:18:2d:dd:
         03:67:99:75:06:a2:92:32:16:d6:74:5d:df:b9:a9:9a:98:f2:
         12:aa:11:df:ea:eb:95:95:df:38:55:b7:ef:72:15:ab:20:00:
         9a:ac:f2:36:e8:fc:34:bb:bf:c9:43:61:2a:c5:45:34:b8:d9:
         6b:74:8f:2b:a2:69:9c:13:4a:1f:fb:51:5b:16:81:a8:44:ab:
         77:f9:4a:a9:cb:69:42:3a:bb:84:4b:42:6a:64:a2:3e:9b:96:
         67:f1:55:35:46:ad:13:e6:e5:db:a2:e7:63:1a:e2:59:ac:5b:
         68:63:cb:4e:6c:15:f0:a9:e8:71:b0:e2:ff:2a:bc:06:f8:a3:
         3d:2a:c9:07:ad:f9:ff:e0:10:97:48:b1:44:73:f7:75:95:52:
         df:dd:99:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2WKDM/Ibw2uRzwrvROn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNGFhYzE5NDhjZWUyM2RkZjRkNzE1ZjgwMzUyMmY5M2Iw
Y2RkYjQwHhcNMjUwNDE5MDcwMDM2WhcNMjUwNDIwMDcwMDM2WjAzMTEwLwYDVQQD
EygwYmJmYTI2NGU4MDEwNzZhMjVjYjM4NDIzMDAyYWMxMDcwZTMwYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwZhuRWfom4ZAgwx7PEQpVKidWbT
zjwreVPjVJL/eXmgNrz5Ea683rwEgipEFu7Wnp//9uv8v2Z2VbSQyX9FwuZbXg3+
PqXsv99sYW06f3nl6ZeXfUCAzics0yNu5Knkf0mkENGsFliMsuDJAmOOmfSejih5
I8+YXPCZ4SnJvJMBaDLcApUMkhRCUgbd1rsaIRKe6qU9nI7bUU5JEJ8SBgYWEr6I
3uB8LoKskjfhc0ky7AF7m06AV/Vs+sTm+MrxSmuLnQVtf9wIienEFF+++El5MSc/
7bAmD1Rh4o4QEPIyCczhpwUKfgsz/PsTjxNDxLfwQGy9Vpn/f4SNvPqdFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu/omToAQdqJcs4QjACrBBw4wv1MB8GA1UdIwQY
MBaAFKpKrBlIzuI9301xX4A1Ivk7DN20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUt
ZjliZDY0Y2E2ZTRjLzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUtZjliZDY0Y2E2ZTRj
LzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMN9mWy5
JmSn2Xsy2kOiTmljVDlfXIMSXAqbVg9qRlg2JB/krX0K76ZuuWhmtNQmwNCtkQ2W
mNFSvg6S1hSCf7PgS1kMP1Zkb0iRYTiSDkvsnyryzvV0q8ziU96ftDmKGf0Uxmj8
x2d6GC3dA2eZdQaikjIW1nRd37mpmpjyEqoR3+rrlZXfOFW373IVqyAAmqzyNuj8
NLu/yUNhKsVFNLjZa3SPK6JpnBNKH/tRWxaBqESrd/lKqctpQjq7hEtCamSiPpuW
Z/FVNUatE+bl26LnYxriWaxbaGPLTmwV8KnocbDi/yq8BvijPSrJB635/+AQl0ix
RHP3dZVS392ZFw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:29 2025 by rpki-client