Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File:                     qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier:          I0D/MsvdTx80neEIOG4OcCCg3xCDLOcmwVN0oGl4CF0=
Subject key identifier:   F9:1A:1D:38:F8:F5:14:34:AA:BF:32:CE:2B:1E:B9:AD:89:D2:8C:47
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer:       /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial:       01962C05BF8A70A3CCB6F70495E60A570EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number:          03D4
Signing time:             Sat 12 Apr 2025 22:01:36 +0000
Manifest this update:     Sat 12 Apr 2025 22:01:36 +0000
Manifest next update:     Sun 13 Apr 2025 22:01:36 +0000
Files and hashes:         1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
                          2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: NJfX3S8RRVfG6T8LPm76Ak559KMOsYrLplnYtZKKgwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:05:bf:8a:70:a3:cc:b6:f7:04:95:e6:0a:57:0e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
        Validity
            Not Before: Apr 12 22:01:36 2025 GMT
            Not After : Apr 13 22:01:36 2025 GMT
        Subject: CN=f91a1d38f8f51434aabf32ce2b1eb9ad89d28c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:34:12:af:e8:ea:f6:f7:24:62:5f:a4:74:
                    7b:42:d7:ae:4b:b4:0c:14:3d:cd:5f:ce:59:09:cd:
                    81:d1:aa:5e:5b:06:c6:91:24:c5:45:02:d5:8f:ba:
                    b3:83:5b:d1:f6:66:72:64:7e:f2:ee:3d:d6:81:d0:
                    f5:d2:a0:be:cf:67:36:57:cc:8e:85:cd:3e:56:7c:
                    c4:46:d7:20:f3:3b:f3:36:e0:5a:db:da:f0:0a:fc:
                    e1:07:b4:1a:cb:34:dc:f6:af:ba:c7:8f:10:8a:34:
                    50:06:e7:55:de:04:b1:0c:0f:73:91:c3:87:83:fe:
                    fe:8a:ac:b9:bd:7c:28:ca:62:9b:56:b4:50:9d:81:
                    8c:e2:3a:a1:8b:2b:5b:50:cc:b0:42:6d:93:97:86:
                    f4:4e:41:f4:99:94:43:39:05:d2:a3:4b:66:31:8c:
                    68:78:16:c9:fa:b1:05:f9:ff:a0:1d:69:c2:15:a1:
                    5e:3e:07:5a:b9:4e:0e:f4:f7:d5:e9:d6:cd:e8:f1:
                    6f:7d:56:c2:2a:85:3d:1f:cf:62:c8:bf:ed:a9:c5:
                    e4:f0:ef:4e:e0:d9:c5:29:90:97:46:34:f2:26:8f:
                    3b:50:d0:d0:97:7d:ba:3a:b3:cf:3e:69:79:0c:60:
                    bf:f1:c1:af:47:83:2c:a8:bd:fe:f0:20:9f:60:f2:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:1D:38:F8:F5:14:34:AA:BF:32:CE:2B:1E:B9:AD:89:D2:8C:47
            X509v3 Authority Key Identifier:
                keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8b:7a:c8:19:2b:b5:ef:1d:ea:20:a0:f1:73:47:fc:f9:0c:
         8a:b8:1b:98:a5:2f:9d:c7:24:2d:ec:f6:6b:ee:ff:36:c1:79:
         b0:d1:33:30:dd:e3:7f:7b:a9:76:94:25:76:b8:dc:c3:63:f5:
         36:d1:58:f2:4a:49:e9:fe:9d:f5:51:cb:75:34:13:70:f1:2b:
         85:28:3c:ff:f3:09:75:d2:27:d2:e1:1c:ff:1e:f7:7a:8e:d7:
         1a:79:ee:ff:3d:d1:a9:3d:f8:7e:06:12:3d:57:91:49:1a:80:
         53:93:f4:44:d1:38:fe:a2:78:5f:1b:6f:7f:ed:21:bd:a3:be:
         5f:12:bf:60:9f:17:0b:3a:13:39:54:f9:6a:7c:34:e9:07:15:
         b1:07:79:31:5a:db:74:11:ad:d0:c3:8a:2a:43:06:ab:62:7d:
         4d:fc:b2:01:7d:cb:67:5e:5c:ad:2c:a0:00:2f:40:7a:cb:25:
         7f:6b:5b:c4:59:4e:c8:f0:f6:c2:39:68:f3:1c:e2:ca:cb:c3:
         c6:f2:14:9c:b9:de:03:4d:b7:cf:2f:34:47:4e:06:97:4d:14:
         ff:bd:c4:0c:7f:07:4e:65:2c:90:b2:93:92:db:87:f9:2d:63:
         d2:a5:4c:ba:0f:aa:7f:8a:ec:04:d9:2f:b4:b7:4c:12:15:07:
         30:4b:a2:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsBb+KcKPMtvcEleYKVw70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YmJkNGQ5ODU4YWI1MjgwNzAwZWY3ZTk1YzA0MTYwZjNk
MmNiNDgwHhcNMjUwNDEyMjIwMTM2WhcNMjUwNDEzMjIwMTM2WjAzMTEwLwYDVQQD
EyhmOTFhMWQzOGY4ZjUxNDM0YWFiZjMyY2UyYjFlYjlhZDg5ZDI4YzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9M0Eq/o6vb3JGJfpHR7QteuS7QM
FD3NX85ZCc2B0apeWwbGkSTFRQLVj7qzg1vR9mZyZH7y7j3WgdD10qC+z2c2V8yO
hc0+VnzERtcg8zvzNuBa29rwCvzhB7QayzTc9q+6x48QijRQBudV3gSxDA9zkcOH
g/7+iqy5vXwoymKbVrRQnYGM4jqhiytbUMywQm2Tl4b0TkH0mZRDOQXSo0tmMYxo
eBbJ+rEF+f+gHWnCFaFePgdauU4O9PfV6dbN6PFvfVbCKoU9H89iyL/tqcXk8O9O
4NnFKZCXRjTyJo87UNDQl326OrPPPml5DGC/8cGvR4MsqL3+8CCfYPID3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkaHTj49RQ0qr8yziseua2J0oxHMB8GA1UdIwQY
MBaAFKi71NmFirUoBwDvfpXAQWDz0stIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYt
MThiMmZkNDMyMGY1LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYtMThiMmZkNDMyMGY1
LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIt6yBkr
te8d6iCg8XNH/PkMirgbmKUvncckLez2a+7/NsF5sNEzMN3jf3updpQldrjcw2P1
NtFY8kpJ6f6d9VHLdTQTcPErhSg8//MJddIn0uEc/x73eo7XGnnu/z3RqT34fgYS
PVeRSRqAU5P0RNE4/qJ4Xxtvf+0hvaO+XxK/YJ8XCzoTOVT5anw06QcVsQd5MVrb
dBGt0MOKKkMGq2J9TfyyAX3LZ15crSygAC9Aesslf2tbxFlOyPD2wjlo8xziysvD
xvIUnLneA023zy80R04Gl00U/73EDH8HTmUskLKTktuH+S1j0qVMug+qf4rsBNkv
tLdMEhUHMEuiqw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:47:18 2025 by rpki-client