Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File:                     qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier:          wdoHHjYiaTkOpvWv8B8FcqjB10QYSzLoFAka3aUoa28=
Subject key identifier:   37:84:39:2F:68:F7:F1:D5:95:F3:2B:CF:39:4C:26:A1:DD:2E:79:89
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer:       /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial:       0197B7B2EF176560E44023B163942CCCB98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number:          1212
Signing time:             Sat 28 Jun 2025 18:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:46 +0000
Files and hashes:         1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=)
                          2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=)
                          3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=)
                          4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: 1ki5rF23hYvQD0baMdoonjVVLe/9OUVNMUM0/8tcCcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:ef:17:65:60:e4:40:23:b1:63:94:2c:cc:b9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
        Validity
            Not Before: Jun 28 18:00:46 2025 GMT
            Not After : Jun 29 18:00:46 2025 GMT
        Subject: CN=3784392f68f7f1d595f32bcf394c26a1dd2e7989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:0a:bf:3f:83:08:8f:d2:84:0b:b9:f2:04:
                    81:3a:75:4d:af:33:03:8e:2a:f9:09:fa:b4:b7:fe:
                    42:ff:f1:a9:2f:b6:90:c3:e8:da:0e:41:e9:68:2e:
                    fb:a0:17:ad:6a:70:e4:01:7e:fc:0c:72:79:37:6f:
                    48:f5:de:a9:02:81:d8:ab:b8:6b:68:23:f9:85:af:
                    fe:4f:52:7d:04:fb:01:e2:31:20:96:69:45:ec:ff:
                    d2:9e:07:26:ec:0c:f1:b5:42:44:7d:50:72:5f:b3:
                    ad:fc:56:cb:9a:ec:e8:1a:31:a3:f7:1b:89:aa:e3:
                    07:62:5e:92:5f:7a:37:62:db:f2:cd:ff:13:32:74:
                    08:4b:cc:ad:b5:9a:62:ef:7f:2d:44:01:55:37:63:
                    2d:83:eb:1f:3c:68:3d:26:d0:3f:15:2d:37:67:ba:
                    d6:39:1a:cc:c9:e5:c9:6f:01:a2:be:ff:96:58:e0:
                    6f:f3:82:f2:71:84:49:86:91:34:f2:c3:42:39:46:
                    2a:1c:64:29:58:0d:2e:c6:92:f7:7d:14:b7:86:97:
                    e5:19:04:33:28:68:22:56:37:1c:04:b4:8c:87:3a:
                    2e:e1:8a:7e:08:50:84:74:10:3f:af:30:42:58:af:
                    3c:b7:69:1e:97:46:86:94:7e:cf:6a:17:55:6c:58:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:84:39:2F:68:F7:F1:D5:95:F3:2B:CF:39:4C:26:A1:DD:2E:79:89
            X509v3 Authority Key Identifier:
                keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:a8:a3:6b:b2:d9:ba:be:90:eb:c8:43:9e:72:6a:5a:08:
         13:0b:77:83:c5:23:48:a7:be:e7:35:af:b1:12:ad:43:02:fe:
         f0:77:8e:db:aa:3c:5a:10:a2:22:5e:a9:53:19:ab:c7:08:b5:
         46:51:43:42:e2:50:d8:c2:f1:26:e2:6e:e9:ad:d1:0e:b5:05:
         3e:d8:d5:a7:4f:0d:9a:6b:68:dc:35:0e:9b:81:03:cc:46:71:
         21:77:cd:11:df:e8:c3:d3:47:b7:7c:e7:5e:c4:9f:f5:e1:fc:
         2f:d1:f1:60:f0:13:c8:06:ee:ef:09:7c:1f:52:d0:29:f6:59:
         0e:27:73:5f:3b:26:f8:28:2a:75:4a:59:69:0e:d9:79:c3:8a:
         ed:4c:40:62:4f:85:99:95:5f:be:44:1a:6b:32:30:91:f4:2e:
         4b:98:1a:09:fa:32:7b:c5:b0:74:79:88:cb:ba:33:a7:98:f7:
         61:55:49:70:06:9e:81:81:1d:86:f8:af:89:18:bb:9d:0b:16:
         41:58:46:7d:50:26:c7:ed:5c:bc:f3:51:e1:3b:d9:df:a2:9d:
         6f:90:a5:4f:e0:f7:7d:c2:02:05:be:b6:3d:5c:68:a7:ca:cb:
         d4:d8:00:38:29:12:59:96:39:a7:b1:50:76:fd:70:fc:b9:0c:
         30:b6:98:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3su8XZWDkQCOxY5QszLmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh
NjVjYTMwHhcNMjUwNjI4MTgwMDQ2WhcNMjUwNjI5MTgwMDQ2WjAzMTEwLwYDVQQD
EygzNzg0MzkyZjY4ZjdmMWQ1OTVmMzJiY2YzOTRjMjZhMWRkMmU3OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KcKvz+DCI/ShAu58gSBOnVNrzMD
jir5Cfq0t/5C//GpL7aQw+jaDkHpaC77oBetanDkAX78DHJ5N29I9d6pAoHYq7hr
aCP5ha/+T1J9BPsB4jEglmlF7P/Sngcm7AzxtUJEfVByX7Ot/FbLmuzoGjGj9xuJ
quMHYl6SX3o3Ytvyzf8TMnQIS8yttZpi738tRAFVN2Mtg+sfPGg9JtA/FS03Z7rW
ORrMyeXJbwGivv+WWOBv84LycYRJhpE08sNCOUYqHGQpWA0uxpL3fRS3hpflGQQz
KGgiVjccBLSMhzou4Yp+CFCEdBA/rzBCWK88t2kel0aGlH7PahdVbFgKRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeEOS9o9/HVlfMrzzlMJqHdLnmJMB8GA1UdIwQY
MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt
ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2
LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl2oo2uy
2bq+kOvIQ55yaloIEwt3g8UjSKe+5zWvsRKtQwL+8HeO26o8WhCiIl6pUxmrxwi1
RlFDQuJQ2MLxJuJu6a3RDrUFPtjVp08Nmmto3DUOm4EDzEZxIXfNEd/ow9NHt3zn
XsSf9eH8L9HxYPATyAbu7wl8H1LQKfZZDidzXzsm+CgqdUpZaQ7ZecOK7UxAYk+F
mZVfvkQaazIwkfQuS5gaCfoye8WwdHmIy7ozp5j3YVVJcAaegYEdhviviRi7nQsW
QVhGfVAmx+1cvPNR4TvZ36Kdb5ClT+D3fcICBb62PVxop8rL1NgAOCkSWZY5p7FQ
dv1w/LkMMLaYxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:50 2025 by rpki-client