Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File:                     sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier:          DwxXiVyyTPhqnVwlyoeM0frClz7aTg8xCsN5DUCg+Ro=
Subject key identifier:   0C:E3:CF:89:EA:43:B3:1F:29:CD:79:17:FF:21:2E:7C:C0:A6:DC:85
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer:       /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial:       0198D5F17B7EA96D43BA3E8C149A7AE0764E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number:          01FD
Signing time:             Sat 23 Aug 2025 08:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:29 +0000
Files and hashes:         1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
                          2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: 72KEkiEatyFisyXCMdP8V7U7CvpOb782y/me5CIpLCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:7b:7e:a9:6d:43:ba:3e:8c:14:9a:7a:e0:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
        Validity
            Not Before: Aug 23 08:00:29 2025 GMT
            Not After : Aug 24 08:00:29 2025 GMT
        Subject: CN=0ce3cf89ea43b31f29cd7917ff212e7cc0a6dc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:e6:a4:58:1a:f7:56:b5:6b:06:94:a8:59:
                    da:fe:47:59:55:18:ab:2b:7e:77:ff:09:5d:aa:97:
                    d8:5b:d8:7f:65:aa:01:84:36:47:1e:17:0e:e0:48:
                    62:82:4a:e9:07:1d:8a:e8:36:28:64:e2:54:82:5c:
                    4e:ad:cd:2b:35:f0:99:90:02:30:06:78:df:4f:f2:
                    03:0b:6d:37:ac:ec:4a:79:56:45:75:da:84:a4:69:
                    bb:d2:89:1b:43:8a:e3:22:cd:7f:53:11:ce:41:dc:
                    b2:95:9e:4f:63:37:83:75:91:6b:f5:62:58:f5:e2:
                    a6:f0:56:ba:83:18:c6:a8:c1:7f:74:1a:cd:30:6a:
                    8c:60:1e:84:f7:31:6b:c4:e5:db:22:7d:cf:50:0a:
                    eb:95:bd:37:14:c3:63:fb:da:a2:8b:eb:04:f9:a2:
                    e3:d2:1e:99:a5:b2:1f:54:72:4f:80:8e:7d:51:83:
                    4a:52:99:eb:d7:20:b7:aa:55:a3:dd:a4:41:a7:ba:
                    66:e8:23:9e:2a:62:97:c3:b7:c5:31:d7:fe:97:86:
                    36:e1:43:5d:d1:d4:7f:81:c0:6e:dc:7d:fb:83:3a:
                    99:91:5a:93:52:3a:0e:98:dc:33:e6:75:6d:5f:78:
                    70:bc:c6:0d:16:e6:67:e6:1e:88:d0:22:cd:f6:61:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E3:CF:89:EA:43:B3:1F:29:CD:79:17:FF:21:2E:7C:C0:A6:DC:85
            X509v3 Authority Key Identifier:
                keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:21:20:9d:38:d3:76:e0:13:93:96:92:dd:78:9f:e2:16:4f:
         18:59:a3:f0:27:90:1c:9a:6e:2b:f7:63:b3:2e:a1:d1:85:e7:
         69:14:83:1e:b5:d5:af:bb:82:fb:c9:bb:6d:71:10:50:da:fe:
         5a:1a:ef:02:d6:cb:b6:ff:4a:e8:0a:5a:3a:8a:96:87:f9:45:
         df:a1:12:fc:29:cb:b5:9a:20:c8:a7:c4:f7:af:ca:d6:89:64:
         e3:b3:6e:dc:c5:7b:02:25:cd:61:73:5d:a1:fe:f8:6e:a7:ea:
         58:75:1b:b9:49:38:5e:3b:49:ad:31:2e:bc:68:88:ff:b5:70:
         38:14:38:18:1d:85:d6:52:28:f0:d2:74:d4:a7:de:93:f6:4d:
         61:a5:4e:2c:4a:57:5d:73:75:45:7b:d3:f1:62:b1:64:b8:f8:
         ea:2b:a0:bf:24:14:c8:98:3c:d3:41:bd:0b:47:f0:0c:0e:fa:
         4c:3d:26:59:f4:13:d2:c3:38:5f:67:9d:e6:88:7b:ed:20:26:
         e2:c7:b1:9f:88:a9:d5:7a:20:e0:1e:4d:4e:63:b0:93:f3:b4:
         9b:61:f7:69:08:02:4a:8a:a4:e6:9c:bc:dd:33:e5:3c:0a:5c:
         80:1b:d9:84:76:a0:d4:8f:79:b8:41:b0:b9:1a:43:e8:48:49:
         9b:fc:d4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Xt+qW1Duj6MFJp64HZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj
NThlZTIwHhcNMjUwODIzMDgwMDI5WhcNMjUwODI0MDgwMDI5WjAzMTEwLwYDVQQD
EygwY2UzY2Y4OWVhNDNiMzFmMjljZDc5MTdmZjIxMmU3Y2MwYTZkYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnHmpFga91a1awaUqFna/kdZVRir
K353/wldqpfYW9h/ZaoBhDZHHhcO4EhigkrpBx2K6DYoZOJUglxOrc0rNfCZkAIw
BnjfT/IDC203rOxKeVZFddqEpGm70okbQ4rjIs1/UxHOQdyylZ5PYzeDdZFr9WJY
9eKm8Fa6gxjGqMF/dBrNMGqMYB6E9zFrxOXbIn3PUArrlb03FMNj+9qii+sE+aLj
0h6ZpbIfVHJPgI59UYNKUpnr1yC3qlWj3aRBp7pm6COeKmKXw7fFMdf+l4Y24UNd
0dR/gcBu3H37gzqZkVqTUjoOmNwz5nVtX3hwvMYNFuZn5h6I0CLN9mHUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzjz4nqQ7MfKc15F/8hLnzAptyFMB8GA1UdIwQY
MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt
YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh
LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACEgnTjT
duATk5aS3Xif4hZPGFmj8CeQHJpuK/djsy6h0YXnaRSDHrXVr7uC+8m7bXEQUNr+
WhrvAtbLtv9K6ApaOoqWh/lF36ES/CnLtZogyKfE96/K1olk47Nu3MV7AiXNYXNd
of74bqfqWHUbuUk4XjtJrTEuvGiI/7VwOBQ4GB2F1lIo8NJ01Kfek/ZNYaVOLEpX
XXN1RXvT8WKxZLj46iugvyQUyJg800G9C0fwDA76TD0mWfQT0sM4X2ed5oh77SAm
4sexn4ip1Xog4B5NTmOwk/O0m2H3aQgCSoqk5py83TPlPApcgBvZhHag1I95uEGw
uRpD6EhJm/zUhA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:37 2025 by rpki-client