Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File:                     Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier:          Ea3n0M+U0GzNfmGh5nlBxKbLO3ZCJEPMmXLjkxNhb4A=
Subject key identifier:   32:24:B3:EF:27:57:87:76:5F:D6:3D:71:5A:2E:39:C6:A5:98:7D:06
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer:       /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial:       0197B88F10D9DEC6E3348B812571542F5F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 22:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:13 +0000
Files and hashes:         1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: Y43BslojK7jer01iIST9LhhvGWGETeeh7Tnvy/wg74I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:10:d9:de:c6:e3:34:8b:81:25:71:54:2f:5f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
        Validity
            Not Before: Jun 28 22:01:13 2025 GMT
            Not After : Jun 29 22:01:13 2025 GMT
        Subject: CN=3224b3ef275787765fd63d715a2e39c6a5987d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:74:de:d9:56:12:b7:25:39:4d:b3:e0:b8:
                    0f:97:43:c0:5e:15:82:eb:69:ca:ac:61:41:5a:a9:
                    3f:41:ce:a7:1b:cf:08:ef:1f:ee:98:96:45:da:65:
                    91:92:b9:e8:1d:a3:0b:46:0f:67:5e:82:44:19:f5:
                    0d:b1:77:17:04:22:06:7f:ea:ee:5d:76:ac:25:c4:
                    08:ed:54:a5:db:74:a6:6f:a6:a1:4d:93:c1:0b:df:
                    aa:18:b4:a0:91:1b:fb:a8:b5:c0:76:19:cc:67:28:
                    62:f3:91:d1:fa:d7:f9:69:8e:b7:ee:0a:8b:df:71:
                    c2:ce:2b:3a:c6:14:f1:96:4a:6f:6b:e8:73:87:01:
                    cd:b9:ed:bb:77:99:14:79:64:ff:f3:b8:52:69:1a:
                    a8:e9:4c:95:34:76:3f:fd:3c:2a:d2:c0:6c:2e:b1:
                    3e:a2:aa:9e:c6:60:76:69:e7:de:b5:74:42:d0:a8:
                    7a:32:06:fe:b2:37:d9:e1:0d:a2:d4:dd:bb:f7:1b:
                    79:37:2d:6b:aa:9b:f2:a3:d3:26:9f:90:3d:8f:29:
                    82:2b:5f:0c:dc:81:56:3d:2e:62:ad:43:bf:e2:de:
                    5d:73:00:85:08:07:71:0b:c6:d6:6e:04:dd:8c:e1:
                    50:66:4f:00:bb:55:14:42:37:d4:4c:d6:df:88:3e:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:B3:EF:27:57:87:76:5F:D6:3D:71:5A:2E:39:C6:A5:98:7D:06
            X509v3 Authority Key Identifier:
                keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:8b:40:1c:89:a8:5a:43:3b:dc:63:32:f4:24:d6:75:45:
         a1:49:e0:94:68:3e:45:43:6a:5e:44:64:ca:96:8d:f9:84:c5:
         3a:b6:3a:ad:a1:5f:49:32:f6:de:51:80:2e:97:08:6e:39:cf:
         03:28:d0:49:9a:c1:46:e6:5e:08:69:d2:87:26:21:f4:a6:da:
         56:af:0a:a4:6d:51:a8:28:e5:ea:5d:bf:d9:e3:37:6d:5d:77:
         6b:17:93:21:2a:03:3f:9c:73:93:e7:14:0a:3f:7c:a1:be:e7:
         8f:44:d1:2a:c7:a5:f7:82:0b:62:2f:12:5d:68:4b:02:35:1e:
         9b:ee:f3:54:fa:04:48:5d:58:ca:e6:b7:ab:45:8a:89:1a:f4:
         04:4c:0f:cc:ef:39:20:58:7c:03:18:6a:9f:7c:7c:c8:a2:3f:
         4a:12:05:5a:6e:1a:e8:85:ca:ae:d1:de:c0:2c:2a:10:b8:24:
         5c:ae:a5:6f:96:18:95:bb:4c:6a:69:54:4e:da:2e:4c:e3:9e:
         f1:3e:d3:50:14:28:5b:0b:ba:5d:14:c5:34:b8:7c:7f:20:f1:
         02:f2:7e:a6:80:aa:23:91:a0:86:59:3e:a4:7a:5c:ad:ba:3f:
         45:df:9b:d1:47:9d:ae:3b:70:d8:f6:3d:73:f2:7f:91:ef:e4:
         ba:b4:24:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jxDZ3sbjNIuBJXFUL18nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNThhZjkzZTQxMzljZjM5ZTliNGE3MGUxNGE1YTliMmE4
ZWI2MWUwHhcNMjUwNjI4MjIwMTEzWhcNMjUwNjI5MjIwMTEzWjAzMTEwLwYDVQQD
EygzMjI0YjNlZjI3NTc4Nzc2NWZkNjNkNzE1YTJlMzljNmE1OTg3ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGF03tlWErclOU2z4LgPl0PAXhWC
62nKrGFBWqk/Qc6nG88I7x/umJZF2mWRkrnoHaMLRg9nXoJEGfUNsXcXBCIGf+ru
XXasJcQI7VSl23Smb6ahTZPBC9+qGLSgkRv7qLXAdhnMZyhi85HR+tf5aY637gqL
33HCzis6xhTxlkpva+hzhwHNue27d5kUeWT/87hSaRqo6UyVNHY//Twq0sBsLrE+
oqqexmB2aefetXRC0Kh6Mgb+sjfZ4Q2i1N279xt5Ny1rqpvyo9Mmn5A9jymCK18M
3IFWPS5irUO/4t5dcwCFCAdxC8bWbgTdjOFQZk8Au1UUQjfUTNbfiD6igwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIks+8nV4d2X9Y9cVouOcalmH0GMB8GA1UdIwQY
MBaAFEJYr5PkE5zznptKcOFKWpsqjrYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYt
YWUxZjNlNDkwYzY5LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYtYWUxZjNlNDkwYzY5
LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATteLQByJ
qFpDO9xjMvQk1nVFoUnglGg+RUNqXkRkypaN+YTFOrY6raFfSTL23lGALpcIbjnP
AyjQSZrBRuZeCGnShyYh9KbaVq8KpG1RqCjl6l2/2eM3bV13axeTISoDP5xzk+cU
Cj98ob7nj0TRKsel94ILYi8SXWhLAjUem+7zVPoESF1Yyua3q0WKiRr0BEwPzO85
IFh8Axhqn3x8yKI/ShIFWm4a6IXKrtHewCwqELgkXK6lb5YYlbtMamlUTtouTOOe
8T7TUBQoWwu6XRTFNLh8fyDxAvJ+poCqI5Gghlk+pHpcrbo/Rd+b0Uedrjtw2PY9
c/J/ke/kurQkzA==
-----END CERTIFICATE-----