Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File:                     qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier:          0lN0+DT80iQgkiIJxPi9RjukgFfVBJidRqTa1rP/DbM=
Subject key identifier:   6B:7C:E1:A5:AF:17:5C:B1:20:2E:6F:C7:62:D6:A1:3F:B4:D2:72:DE
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer:       /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial:       0197499F057B3926C0EC1F184F1F69CE70CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 09:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:47 +0000
Files and hashes:         1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
                          2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: pJ0CRzTvz/JAr64VU9+JHgYOdlLsBQsYRH+v5K7KJMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:05:7b:39:26:c0:ec:1f:18:4f:1f:69:ce:70:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
        Validity
            Not Before: Jun  7 09:00:47 2025 GMT
            Not After : Jun  8 09:00:47 2025 GMT
        Subject: CN=6b7ce1a5af175cb1202e6fc762d6a13fb4d272de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:db:17:ab:1f:49:fc:f0:b7:a4:a3:6c:77:
                    e5:66:14:a1:c9:49:4d:ae:7f:5e:c3:be:94:07:d9:
                    29:d6:09:62:e3:03:d6:c6:c9:a0:cf:a7:97:1a:af:
                    ba:b3:75:c8:1e:11:5e:a4:78:9c:39:29:6e:9d:07:
                    d6:82:0c:95:76:5d:60:ed:d5:5c:fc:2d:89:d2:b5:
                    71:65:2b:c6:f2:6d:38:39:41:66:c5:bd:45:9a:1b:
                    23:e1:4e:db:20:2a:3b:e2:4d:85:70:1f:8b:db:c3:
                    77:e9:9d:4a:b9:ea:0d:e2:71:e6:2a:da:ac:42:e3:
                    2f:2f:62:c6:1d:d9:28:0c:52:af:33:89:04:ee:f9:
                    77:f1:e8:a3:b3:44:04:8b:69:87:8d:e8:31:d2:5e:
                    74:b7:3d:0c:7b:bf:80:91:80:9b:5d:82:62:c3:c1:
                    6e:b0:f7:15:bf:fe:90:66:d5:a3:5d:2c:4a:a0:87:
                    92:68:a3:40:93:36:e9:b8:53:8b:51:1a:d2:46:31:
                    fc:9f:1c:e6:9a:d0:cf:3d:3a:5d:ad:b8:cb:92:f7:
                    34:ab:e8:a7:04:77:86:f0:9c:38:64:54:d8:80:ad:
                    81:dc:fe:97:fc:92:da:ea:6d:be:2c:81:5a:3c:56:
                    8b:48:3f:e1:30:25:74:3a:8e:50:db:25:6c:ad:82:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7C:E1:A5:AF:17:5C:B1:20:2E:6F:C7:62:D6:A1:3F:B4:D2:72:DE
            X509v3 Authority Key Identifier:
                keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:66:e0:12:f3:63:d1:12:79:b0:2f:6d:a0:68:69:58:5b:
         ad:4a:e7:56:38:5c:b3:72:57:2c:5c:c4:c9:79:3b:46:9d:ec:
         06:d1:51:c3:c1:97:66:d0:31:00:10:8d:d1:5c:ec:d3:84:af:
         8d:21:f0:e7:ad:71:4e:ab:42:c5:0a:fc:43:60:fc:e2:49:59:
         fa:85:1c:68:2e:75:53:fe:1f:41:e5:82:16:88:b0:4f:c2:62:
         11:39:e5:aa:c3:bc:70:dd:95:1e:08:eb:b2:d7:c9:d0:cb:ca:
         35:64:00:a1:11:fa:cb:86:f4:e9:66:a4:b1:24:e8:8d:e1:2f:
         b7:71:44:d2:42:fe:fa:91:3d:ff:37:cb:13:03:5b:52:df:a2:
         6e:5e:ae:cc:db:bf:a0:d6:d3:40:18:05:4e:f0:09:b9:5e:f8:
         71:57:93:73:57:7c:3d:e8:12:b6:ea:1c:ca:d6:1d:ba:2d:b2:
         c9:1b:f5:b3:6b:80:86:9b:d6:bc:a2:38:d0:5a:c5:50:73:c0:
         bd:6d:83:24:a0:15:c3:a4:ad:08:a3:73:8d:43:75:2f:6c:eb:
         0a:12:a3:99:8a:ba:41:1a:2b:35:0e:af:53:c0:43:d7:bb:03:
         f2:28:6e:74:97:ca:38:65:aa:9b:d0:31:1c:4a:7b:9e:da:41:
         a8:df:2e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnwV7OSbA7B8YTx9pznDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDY5MDU4YjRkMzY3NjEyYmU0ODA3MzcyYjVlNTkzZTAz
NDc3NjYwHhcNMjUwNjA3MDkwMDQ3WhcNMjUwNjA4MDkwMDQ3WjAzMTEwLwYDVQQD
Eyg2YjdjZTFhNWFmMTc1Y2IxMjAyZTZmYzc2MmQ2YTEzZmI0ZDI3MmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzbF6sfSfzwt6SjbHflZhShyUlN
rn9ew76UB9kp1gli4wPWxsmgz6eXGq+6s3XIHhFepHicOSlunQfWggyVdl1g7dVc
/C2J0rVxZSvG8m04OUFmxb1Fmhsj4U7bICo74k2FcB+L28N36Z1KueoN4nHmKtqs
QuMvL2LGHdkoDFKvM4kE7vl38eijs0QEi2mHjegx0l50tz0Me7+AkYCbXYJiw8Fu
sPcVv/6QZtWjXSxKoIeSaKNAkzbpuFOLURrSRjH8nxzmmtDPPTpdrbjLkvc0q+in
BHeG8Jw4ZFTYgK2B3P6X/JLa6m2+LIFaPFaLSD/hMCV0Oo5Q2yVsrYLd1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt84aWvF1yxIC5vx2LWoT+00nLeMB8GA1UdIwQY
MBaAFKsGkFi002dhK+SAc3K15ZPgNHdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt
NTY2NzQxOWY0NGU4LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4
LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyNm4BLz
Y9ESebAvbaBoaVhbrUrnVjhcs3JXLFzEyXk7Rp3sBtFRw8GXZtAxABCN0Vzs04Sv
jSHw561xTqtCxQr8Q2D84klZ+oUcaC51U/4fQeWCFoiwT8JiETnlqsO8cN2VHgjr
stfJ0MvKNWQAoRH6y4b06WaksSTojeEvt3FE0kL++pE9/zfLEwNbUt+ibl6uzNu/
oNbTQBgFTvAJuV74cVeTc1d8PegStuocytYdui2yyRv1s2uAhpvWvKI40FrFUHPA
vW2DJKAVw6StCKNzjUN1L2zrChKjmYq6QRorNQ6vU8BD17sD8ihudJfKOGWqm9Ax
HEp7ntpBqN8uvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:14 2025 by rpki-client