Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File:                     q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier:          hxM3lxJWC3V2DvnnMX78jyOunGayRcapOiQm6pZdxqE=
Subject key identifier:   A2:9A:25:69:1E:B4:7B:37:1F:C2:73:53:DA:F2:6E:E8:71:2F:43:B7
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       0197470C3CE298B431456A980FB69FDDA8DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number:          0451
Signing time:             Fri 06 Jun 2025 21:01:13 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:13 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:13 +0000
Files and hashes:         1: auh_CELZVQItOo9vbdk8bNA5drU.roa (hash: lsZhhuWVu0Ccaib1jj0SXulSIcbRTpNBfg+1fElDPKs=)
                          2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: GA3EBU8W8MiRmzI32rvDfzurMZccXBb0uFtSZccHZWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:3c:e2:98:b4:31:45:6a:98:0f:b6:9f:dd:a8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: Jun  6 21:01:13 2025 GMT
            Not After : Jun  7 21:01:13 2025 GMT
        Subject: CN=a29a25691eb47b371fc27353daf26ee8712f43b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:ab:8a:15:7c:59:57:63:3d:2d:1c:e0:48:
                    04:e1:14:3d:d0:ea:20:6a:19:e0:1d:d1:4d:6c:8e:
                    fb:6c:b5:aa:b8:d4:06:16:8a:d8:b8:a6:d4:bc:a4:
                    b8:8b:1d:00:a4:2e:01:b6:cc:57:b4:4e:1b:69:3c:
                    a2:f2:eb:dd:1b:e6:0a:72:d9:c1:00:36:9b:66:01:
                    df:ff:d6:9a:59:64:2b:ed:96:79:01:d2:5d:90:6c:
                    55:37:1a:eb:9b:a1:31:b6:d1:5b:30:bb:dc:56:21:
                    fd:26:de:62:58:bc:a3:3d:00:e0:7c:80:18:52:61:
                    09:80:5c:d0:e3:cb:62:b4:e8:cb:ba:49:bf:9e:7d:
                    f3:87:e7:70:9c:7b:dc:5c:c3:75:94:8a:09:6f:e1:
                    3f:2b:06:75:2c:a1:6f:79:71:69:a8:62:08:ec:8d:
                    2e:2a:cc:54:11:89:21:92:4d:03:eb:fe:87:cb:11:
                    7b:54:c0:86:66:a9:84:33:51:86:5a:5a:91:c7:9c:
                    29:1d:98:5a:35:65:93:30:04:82:28:ca:16:44:01:
                    a4:f6:8b:8e:ae:22:a5:60:5a:f5:ca:0d:5a:7e:f8:
                    39:d0:d5:03:6c:f4:4c:95:0c:18:64:bd:02:a1:d4:
                    7a:c6:98:75:09:dd:aa:73:c6:0a:ba:b2:1b:be:93:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9A:25:69:1E:B4:7B:37:1F:C2:73:53:DA:F2:6E:E8:71:2F:43:B7
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:69:f6:02:0f:4b:db:52:ba:fd:53:f8:a4:86:ec:75:5f:
         a4:67:25:4d:08:47:13:20:4a:70:60:ca:ce:82:68:b3:4f:db:
         6e:0c:9d:4f:2a:10:91:23:65:ad:eb:f8:d5:0c:4c:3a:33:ec:
         54:bd:c4:be:40:14:5e:e7:b6:4e:8b:46:d7:b4:96:12:c0:ad:
         8d:ac:a8:d3:7a:ff:79:1e:9c:74:82:58:93:63:fd:ab:e3:f5:
         80:df:0c:9d:3c:b8:38:95:41:ba:9a:22:a5:a2:b2:45:6e:39:
         73:fb:67:d7:16:5a:2f:0f:7c:25:97:12:93:35:d0:f5:5e:76:
         07:dc:92:35:db:dc:d3:22:59:e1:a2:c8:b3:a4:34:78:b6:0d:
         e4:0d:10:d3:f2:76:db:36:23:9b:8b:2d:28:97:8e:65:26:25:
         00:1f:3b:be:5d:6d:8e:b1:96:19:20:bf:71:95:ae:f9:61:2b:
         e9:73:7b:29:a6:7a:b7:a8:62:ea:8f:71:6e:fb:56:96:f4:da:
         75:b4:e5:76:89:e3:32:1d:6a:40:57:d4:4a:73:69:3e:66:de:
         bb:88:6a:94:64:1d:b4:aa:ca:ec:4d:1e:f9:57:73:62:3b:f6:
         83:cf:a2:6c:fe:c7:05:a1:fd:b9:c9:8f:17:42:ef:81:a6:87:
         21:71:a8:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDDzimLQxRWqYD7af3ajaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODYzMjY3YjViNzNkYjA3YzgwZTc0ZDcxNWI2NzM2ZDRm
YmE5ZmIwHhcNMjUwNjA2MjEwMTEzWhcNMjUwNjA3MjEwMTEzWjAzMTEwLwYDVQQD
EyhhMjlhMjU2OTFlYjQ3YjM3MWZjMjczNTNkYWYyNmVlODcxMmY0M2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAmrihV8WVdjPS0c4EgE4RQ90Oog
ahngHdFNbI77bLWquNQGForYuKbUvKS4ix0ApC4BtsxXtE4baTyi8uvdG+YKctnB
ADabZgHf/9aaWWQr7ZZ5AdJdkGxVNxrrm6ExttFbMLvcViH9Jt5iWLyjPQDgfIAY
UmEJgFzQ48titOjLukm/nn3zh+dwnHvcXMN1lIoJb+E/KwZ1LKFveXFpqGII7I0u
KsxUEYkhkk0D6/6HyxF7VMCGZqmEM1GGWlqRx5wpHZhaNWWTMASCKMoWRAGk9ouO
riKlYFr1yg1afvg50NUDbPRMlQwYZL0CodR6xph1Cd2qc8YKurIbvpN8MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKaJWketHs3H8JzU9rybuhxL0O3MB8GA1UdIwQY
MBaAFKuGMme1tz2wfIDnTXFbZzbU+6n7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jNWJiNjEtYTYxNy00MTRhLWEzNGMt
YTVlNDM1YzE5MGUzLzEvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jNWJiNjEtYTYxNy00MTRhLWEzNGMtYTVlNDM1YzE5MGUz
LzEvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6Bp9gIP
S9tSuv1T+KSG7HVfpGclTQhHEyBKcGDKzoJos0/bbgydTyoQkSNlrev41QxMOjPs
VL3EvkAUXue2TotG17SWEsCtjayo03r/eR6cdIJYk2P9q+P1gN8MnTy4OJVBupoi
paKyRW45c/tn1xZaLw98JZcSkzXQ9V52B9ySNdvc0yJZ4aLIs6Q0eLYN5A0Q0/J2
2zYjm4stKJeOZSYlAB87vl1tjrGWGSC/cZWu+WEr6XN7KaZ6t6hi6o9xbvtWlvTa
dbTldonjMh1qQFfUSnNpPmbeu4hqlGQdtKrK7E0e+VdzYjv2g8+ibP7HBaH9ucmP
F0LvgaaHIXGoFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:02 2025 by rpki-client