Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File:                     QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier:          MLyD66bkTKpUuGNpQEjhZf4PYHtjchIXGz+rouwB/LI=
Subject key identifier:   F6:C5:03:E7:9B:69:86:5B:86:5F:EE:3D:11:D3:13:49:27:6A:D8:11
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer:       /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial:       0196B47D4E18D743B9B9027FA728F70FD5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number:          14BD
Signing time:             Fri 09 May 2025 10:00:32 +0000
Manifest this update:     Fri 09 May 2025 10:00:32 +0000
Manifest next update:     Sat 10 May 2025 10:00:32 +0000
Files and hashes:         1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
                          2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: w+uIpmDxYmLXChGxZbRxc0VyMH6cpfJ4Bn282gkaZC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:7d:4e:18:d7:43:b9:b9:02:7f:a7:28:f7:0f:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
        Validity
            Not Before: May  9 10:00:32 2025 GMT
            Not After : May 10 10:00:32 2025 GMT
        Subject: CN=f6c503e79b69865b865fee3d11d31349276ad811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:8d:5d:ba:2c:42:3e:76:79:33:c8:25:a7:
                    26:4e:43:08:52:2c:17:fa:db:ee:98:28:b7:4b:f9:
                    80:a4:67:ee:4f:76:2b:7a:a3:19:ee:89:36:20:ae:
                    07:b3:6a:68:c8:9b:39:0b:12:dc:64:39:ae:7a:16:
                    93:ef:96:e0:13:e1:6c:16:68:ba:4d:52:f7:b7:20:
                    fe:73:8b:89:48:71:29:aa:af:02:04:66:40:fa:92:
                    8e:08:13:c7:23:01:f0:06:b7:19:52:e0:16:6b:c9:
                    70:0b:47:c4:6b:38:b0:21:0e:af:df:f2:73:5e:30:
                    bd:3f:a1:af:a4:40:ea:f0:2c:26:4a:aa:42:17:52:
                    e0:99:66:25:3c:4b:83:d7:68:b7:82:17:d8:55:ff:
                    5d:97:eb:dc:44:35:2e:7c:8e:40:49:ba:ee:ad:4c:
                    a7:23:25:75:cd:1b:6c:4c:b2:63:8d:1f:0b:d7:83:
                    d0:ee:ee:55:ba:94:7a:e1:6a:1a:8c:d8:5f:3d:0c:
                    66:6d:e3:62:7a:53:04:7a:41:d7:e0:9b:11:98:4d:
                    51:34:90:28:e6:5c:2a:a3:07:ae:93:02:d7:74:96:
                    fc:1f:96:1c:47:a1:28:bd:7c:82:8d:46:7a:dc:0a:
                    fd:31:23:6d:9f:c6:fc:29:3b:86:a8:cb:66:d4:2f:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:03:E7:9B:69:86:5B:86:5F:EE:3D:11:D3:13:49:27:6A:D8:11
            X509v3 Authority Key Identifier:
                keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:6a:84:a3:c5:26:47:f4:a4:18:48:69:66:fd:a8:ec:63:
         94:a5:ab:c2:9b:de:31:7f:b7:8e:47:48:60:53:e6:24:8e:dc:
         13:e2:87:1e:05:ee:13:4f:2d:ec:09:98:95:da:a4:f9:e2:8b:
         5d:73:8e:30:ed:bc:70:e4:cf:41:33:4e:db:b8:4f:0d:08:97:
         6f:84:6f:ef:51:29:d7:f2:4b:f3:82:4b:7c:93:d7:a2:ae:24:
         73:92:a7:fe:df:07:a0:6c:1b:30:fb:9c:26:ed:8a:7d:02:54:
         75:65:ee:b3:58:a4:8d:fb:b6:14:8f:a5:23:86:79:cd:c4:09:
         5f:bb:77:05:5e:90:64:75:e8:e1:af:86:91:26:56:19:24:63:
         9a:77:15:f2:07:7a:c9:74:dd:54:3f:ef:e3:53:7e:a5:fe:07:
         fb:a6:9a:db:3c:0d:6b:ef:0a:b8:05:b7:45:97:3c:78:74:ab:
         0d:ca:d1:c7:b7:20:c6:69:36:71:15:23:ce:0f:96:07:72:23:
         e7:fe:be:89:f2:19:af:43:fa:65:18:01:b1:12:bf:c4:db:f3:
         97:18:3f:ab:bd:51:e3:bf:97:04:83:ef:f5:c7:97:25:97:73:
         a3:50:14:e8:12:7e:48:a0:7d:96:b0:73:08:52:ba:e4:35:32:
         ca:09:d2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0fU4Y10O5uQJ/pyj3D9W0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzczZTVmMWQ2OWRlYTBjMDFmMzEzOTc5NjJlN2Q3NGI0
M2Q3YmEwHhcNMjUwNTA5MTAwMDMyWhcNMjUwNTEwMTAwMDMyWjAzMTEwLwYDVQQD
EyhmNmM1MDNlNzliNjk4NjViODY1ZmVlM2QxMWQzMTM0OTI3NmFkODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BWNXbosQj52eTPIJacmTkMIUiwX
+tvumCi3S/mApGfuT3YreqMZ7ok2IK4Hs2poyJs5CxLcZDmuehaT75bgE+FsFmi6
TVL3tyD+c4uJSHEpqq8CBGZA+pKOCBPHIwHwBrcZUuAWa8lwC0fEaziwIQ6v3/Jz
XjC9P6GvpEDq8CwmSqpCF1LgmWYlPEuD12i3ghfYVf9dl+vcRDUufI5ASbrurUyn
IyV1zRtsTLJjjR8L14PQ7u5VupR64WoajNhfPQxmbeNielMEekHX4JsRmE1RNJAo
5lwqoweukwLXdJb8H5YcR6EovXyCjUZ63Ar9MSNtn8b8KTuGqMtm1C+hTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbFA+ebaYZbhl/uPRHTE0knatgRMB8GA1UdIwQY
MBaAFEF3Pl8dad6gwB8xOXli59dLQ9e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjIt
MWJmNmM1MDlkMGM1LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjItMWJmNmM1MDlkMGM1
LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8xqhKPF
Jkf0pBhIaWb9qOxjlKWrwpveMX+3jkdIYFPmJI7cE+KHHgXuE08t7AmYldqk+eKL
XXOOMO28cOTPQTNO27hPDQiXb4Rv71Ep1/JL84JLfJPXoq4kc5Kn/t8HoGwbMPuc
Ju2KfQJUdWXus1ikjfu2FI+lI4Z5zcQJX7t3BV6QZHXo4a+GkSZWGSRjmncV8gd6
yXTdVD/v41N+pf4H+6aa2zwNa+8KuAW3RZc8eHSrDcrRx7cgxmk2cRUjzg+WB3Ij
5/6+ifIZr0P6ZRgBsRK/xNvzlxg/q71R47+XBIPv9ceXJZdzo1AU6BJ+SKB9lrBz
CFK65DUyygnSow==
-----END CERTIFICATE-----
Generated at Fri May 9 16:37:58 2025 by rpki-client