Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File:                     qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier:          lKOYvdgM8PLRZzJKGfiOgj/DcSpyv9qlYykWacViLIU=
Subject key identifier:   9F:0D:15:EA:C7:6E:6F:45:88:C7:93:D0:08:E4:C5:71:11:AB:85:CE
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer:       /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial:       0197B9336B0F05F874AFE1C8C0EA6239AD55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number:          15B9
Signing time:             Sun 29 Jun 2025 01:00:43 +0000
Manifest this update:     Sun 29 Jun 2025 01:00:43 +0000
Manifest next update:     Mon 30 Jun 2025 01:00:43 +0000
Files and hashes:         1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=)
                          2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: sDLwFSTOhXqqgFs/FoV4k8hwTy8rOt+jo3n22aiHIeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:33:6b:0f:05:f8:74:af:e1:c8:c0:ea:62:39:ad:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
        Validity
            Not Before: Jun 29 01:00:43 2025 GMT
            Not After : Jun 30 01:00:43 2025 GMT
        Subject: CN=9f0d15eac76e6f4588c793d008e4c57111ab85ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:f6:7d:2f:2d:ca:55:0b:c1:bd:45:61:44:
                    c7:f7:e4:0f:a5:83:a0:bd:07:7d:98:e3:da:9f:5b:
                    75:2b:1f:30:f6:30:63:ff:96:f9:35:1a:dc:f7:61:
                    b0:44:75:79:02:11:96:1b:f8:49:26:00:ed:f5:88:
                    a3:72:9e:f4:b9:a2:e3:a2:bd:59:62:74:e1:e3:f0:
                    fd:be:10:5e:32:c6:a2:0b:ed:18:a0:e0:18:b7:4c:
                    d6:3d:1b:e5:11:9f:d3:99:8f:62:d2:a4:80:57:c6:
                    3d:28:68:86:42:7a:0a:2d:21:f7:af:36:74:14:03:
                    ab:5c:c7:36:e2:fa:fa:4c:44:51:a5:b6:40:7c:da:
                    6b:ae:37:47:af:3a:e0:8a:49:54:40:69:27:29:42:
                    18:02:2b:91:e4:75:31:14:a5:81:f1:db:ee:7b:80:
                    6c:aa:b1:69:11:ec:2e:cc:d7:40:11:0e:20:13:02:
                    db:8f:42:5d:eb:23:52:bc:96:32:7b:7c:e2:57:49:
                    b3:ee:9f:ed:64:fa:fb:68:0a:28:7b:17:58:ac:69:
                    22:9e:fd:7f:f2:4e:80:8c:d0:4c:02:ce:cb:81:18:
                    fb:39:1a:89:93:ff:2c:cf:f9:f1:45:33:06:32:6d:
                    99:bd:b9:4c:0b:f3:b4:88:9c:91:60:88:e0:34:ff:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:15:EA:C7:6E:6F:45:88:C7:93:D0:08:E4:C5:71:11:AB:85:CE
            X509v3 Authority Key Identifier:
                keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:23:2c:14:50:07:34:33:a3:95:66:16:09:42:c3:a4:03:1c:
         12:93:13:fd:86:bd:a5:9b:7f:9e:02:33:59:4d:2d:1d:77:19:
         81:d8:fc:4c:83:f1:23:e5:c8:2a:da:12:80:f5:93:b3:76:c5:
         51:45:88:be:15:11:dc:00:85:79:9e:fb:77:3a:fe:38:92:87:
         db:92:fd:ba:54:a8:0a:53:87:44:c4:bc:ca:15:ed:1d:0d:db:
         99:5f:5b:d3:a0:bd:f8:49:56:20:57:85:d1:0a:46:e4:3e:26:
         39:cd:11:15:0c:76:2e:bf:24:e3:b1:89:dc:e7:02:ab:cc:ba:
         f4:16:4c:ee:d0:1c:fa:df:bf:16:de:5b:0a:21:e1:57:c5:b7:
         ac:60:1f:14:99:90:cc:73:cf:45:ac:cb:5d:4b:13:79:9c:40:
         90:c0:51:0f:6e:4e:03:68:67:c2:2d:44:4c:e4:bd:49:59:51:
         59:c7:2f:a5:bc:cc:78:07:d1:c1:ed:e1:dc:46:32:d3:a4:9f:
         a8:69:82:81:88:44:e7:6a:34:68:70:1b:6b:7a:49:c7:69:aa:
         e0:99:46:65:95:9b:c5:f0:88:8e:d9:63:00:99:82:60:d5:4d:
         e5:f1:19:9c:ee:c7:77:f2:65:0f:d4:1c:78:79:bc:c8:11:12:
         90:74:bc:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M2sPBfh0r+HIwOpiOa1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmE0NWE2MmM1ZTg1MGFiOWM4NzI2YTU5YTliZmE5OTJk
MzcxYjIwHhcNMjUwNjI5MDEwMDQzWhcNMjUwNjMwMDEwMDQzWjAzMTEwLwYDVQQD
Eyg5ZjBkMTVlYWM3NmU2ZjQ1ODhjNzkzZDAwOGU0YzU3MTExYWI4NWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1b2fS8tylULwb1FYUTH9+QPpYOg
vQd9mOPan1t1Kx8w9jBj/5b5NRrc92GwRHV5AhGWG/hJJgDt9Yijcp70uaLjor1Z
YnTh4/D9vhBeMsaiC+0YoOAYt0zWPRvlEZ/TmY9i0qSAV8Y9KGiGQnoKLSH3rzZ0
FAOrXMc24vr6TERRpbZAfNprrjdHrzrgiklUQGknKUIYAiuR5HUxFKWB8dvue4Bs
qrFpEewuzNdAEQ4gEwLbj0Jd6yNSvJYye3ziV0mz7p/tZPr7aAooexdYrGkinv1/
8k6AjNBMAs7LgRj7ORqJk/8sz/nxRTMGMm2ZvblMC/O0iJyRYIjgNP+fMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8NFerHbm9FiMeT0AjkxXERq4XOMB8GA1UdIwQY
MBaAFKr6RaYsXoUKuchyalmpv6mS03GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEt
MmIzZGRiY2I3MjM4LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEtMmIzZGRiY2I3MjM4
LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiMsFFAH
NDOjlWYWCULDpAMcEpMT/Ya9pZt/ngIzWU0tHXcZgdj8TIPxI+XIKtoSgPWTs3bF
UUWIvhUR3ACFeZ77dzr+OJKH25L9ulSoClOHRMS8yhXtHQ3bmV9b06C9+ElWIFeF
0QpG5D4mOc0RFQx2Lr8k47GJ3OcCq8y69BZM7tAc+t+/Ft5bCiHhV8W3rGAfFJmQ
zHPPRazLXUsTeZxAkMBRD25OA2hnwi1ETOS9SVlRWccvpbzMeAfRwe3h3EYy06Sf
qGmCgYhE52o0aHAba3pJx2mq4JlGZZWbxfCIjtljAJmCYNVN5fEZnO7Hd/JlD9Qc
eHm8yBESkHS8nQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:43 2025 by rpki-client