Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File:                     qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier:          rPAPcAV1vSiJpzI2IAyIt7FIgoKjbVOPgvzuEGJEZac=
Subject key identifier:   FC:D0:DE:34:E9:22:EC:07:9F:F1:6E:E3:BC:6B:AC:CE:3C:BD:A1:65
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer:       /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial:       01963FFA5F2BC94037AD6CC2ECB740F89DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 19:01:35 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:35 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:35 +0000
Files and hashes:         1: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (hash: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=)
                          2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: 8cNh6INDz45dYuqlqwYWoiGaTiUYDe2/FEBDC+ImnnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:fa:5f:2b:c9:40:37:ad:6c:c2:ec:b7:40:f8:9d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
        Validity
            Not Before: Apr 16 19:01:35 2025 GMT
            Not After : Apr 17 19:01:35 2025 GMT
        Subject: CN=fcd0de34e922ec079ff16ee3bc6bacce3cbda165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:12:d4:aa:f2:94:ee:81:84:09:11:d7:a0:
                    7c:ad:ca:51:f4:d5:a3:06:a3:80:1b:e2:c5:a2:4e:
                    ad:71:e9:ce:54:b9:9f:40:93:7e:6c:32:34:a6:55:
                    6d:a5:4d:e2:2c:5d:d2:03:ff:35:b2:78:c9:93:43:
                    2b:54:88:3d:ea:7c:0c:77:ac:56:75:aa:da:17:92:
                    9d:5e:9c:c8:b0:58:7e:c4:36:da:be:69:8b:02:84:
                    11:7d:5b:24:19:8e:e8:88:70:d0:37:8e:14:97:4c:
                    fb:6e:43:99:a8:b1:7d:99:44:3b:11:e5:48:2b:0e:
                    d1:1e:13:1a:41:bb:e2:96:42:0e:fb:7f:9f:b9:88:
                    f0:7a:c3:87:97:2a:28:98:51:f0:db:0a:c4:25:8b:
                    f1:0c:a8:44:9e:b5:4d:e5:60:44:6e:77:6c:fa:9d:
                    5c:28:c9:c7:ec:4c:2a:83:de:89:cf:86:8a:e6:a5:
                    3f:37:86:48:ec:3d:58:57:41:4c:f2:7e:2b:c0:5f:
                    79:ba:8a:52:ec:14:29:aa:8e:cd:95:e3:db:8d:5f:
                    8a:d9:e1:27:8f:3b:d5:41:8c:f2:71:01:75:e2:cc:
                    17:15:ff:ce:28:60:9d:c9:a5:07:12:0e:69:aa:af:
                    2d:7a:b8:9c:4f:fb:fa:3c:bc:06:20:26:99:ee:4c:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D0:DE:34:E9:22:EC:07:9F:F1:6E:E3:BC:6B:AC:CE:3C:BD:A1:65
            X509v3 Authority Key Identifier:
                keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:aa:02:03:75:c8:d4:0f:b9:12:99:6a:79:28:a3:2d:08:
         d0:fa:1f:0a:bf:d9:ec:22:fb:d8:b4:75:0a:97:9f:60:78:f6:
         82:ea:c9:38:05:14:f6:95:83:ce:12:28:13:a7:a5:99:f4:8b:
         dd:a8:5c:cf:7d:a1:e5:67:8a:d7:00:cc:46:8b:bc:a2:40:6a:
         53:e7:fd:c2:97:ec:87:a3:c6:ce:1d:18:5d:5b:9c:58:ca:c1:
         a0:fd:c5:ea:53:db:f1:17:21:c0:70:6d:9c:f4:64:2e:62:04:
         db:b0:b7:f8:78:ee:a9:a2:51:c8:48:75:4f:98:60:b2:18:04:
         4b:d1:34:0b:8c:37:5b:98:3c:57:d4:41:26:17:11:ae:b7:2b:
         f7:77:57:3b:4d:67:de:2b:d7:7c:74:04:cc:d1:12:c9:a3:22:
         88:78:0d:46:6b:94:2f:2f:3d:a6:91:4b:57:e7:dd:cd:8c:ba:
         be:85:54:c7:94:07:60:63:87:be:bd:64:e0:81:fd:9e:05:ee:
         61:fb:bd:6a:6c:17:b3:8f:63:99:8a:35:43:b5:5b:fa:7a:29:
         52:bc:c8:02:45:d7:6e:ed:b9:f4:17:a4:56:78:23:b6:1b:4c:
         1a:01:27:b5:22:d8:0d:4a:97:b5:21:d0:1c:76:74:b6:3e:11:
         d7:4c:ad:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+l8ryUA3rWzC7LdA+J3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw
YWRjNGMwHhcNMjUwNDE2MTkwMTM1WhcNMjUwNDE3MTkwMTM1WjAzMTEwLwYDVQQD
EyhmY2QwZGUzNGU5MjJlYzA3OWZmMTZlZTNiYzZiYWNjZTNjYmRhMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVUS1KrylO6BhAkR16B8rcpR9NWj
BqOAG+LFok6tcenOVLmfQJN+bDI0plVtpU3iLF3SA/81snjJk0MrVIg96nwMd6xW
daraF5KdXpzIsFh+xDbavmmLAoQRfVskGY7oiHDQN44Ul0z7bkOZqLF9mUQ7EeVI
Kw7RHhMaQbvilkIO+3+fuYjwesOHlyoomFHw2wrEJYvxDKhEnrVN5WBEbnds+p1c
KMnH7Ewqg96Jz4aK5qU/N4ZI7D1YV0FM8n4rwF95uopS7BQpqo7NlePbjV+K2eEn
jzvVQYzycQF14swXFf/OKGCdyaUHEg5pqq8tericT/v6PLwGICaZ7kxZJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzQ3jTpIuwHn/Fu47xrrM48vaFlMB8GA1UdIwQY
MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt
M2M3NzNhNmM0MmY5LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5
LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2SqAgN1
yNQPuRKZankooy0I0PofCr/Z7CL72LR1CpefYHj2gurJOAUU9pWDzhIoE6elmfSL
3ahcz32h5WeK1wDMRou8okBqU+f9wpfsh6PGzh0YXVucWMrBoP3F6lPb8RchwHBt
nPRkLmIE27C3+HjuqaJRyEh1T5hgshgES9E0C4w3W5g8V9RBJhcRrrcr93dXO01n
3ivXfHQEzNESyaMiiHgNRmuULy89ppFLV+fdzYy6voVUx5QHYGOHvr1k4IH9ngXu
Yfu9amwXs49jmYo1Q7Vb+nopUrzIAkXXbu259BekVngjthtMGgEntSLYDUqXtSHQ
HHZ0tj4R10ytZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:16 2025 by rpki-client