Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File:                     QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier:          60sKh/KrbhUnqW3jNNExd08hwTB1Cl/0A95ygGRwbhQ=
Subject key identifier:   8A:95:05:88:49:E7:15:9D:4F:7A:64:C7:C2:98:51:67:F8:CE:C4:ED
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer:       /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial:       0197B77CB588C8A41A85EDE5395734778F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number:          15BE
Signing time:             Sat 28 Jun 2025 17:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:32 +0000
Files and hashes:         1: GYkYwSyMjSff2hGRE7TeYNMjHAA.roa (hash: L63ZPeMKf3x9Sz6aPgJwaNunh2cW66rmUBDYxNx9F1E=)
                          2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: b6GzEm2y6rWOsQeh/oQ879f9GLaRUuZ07Oz7PdXnKPE=)
                          3: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
                          4: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
                          5: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:b5:88:c8:a4:1a:85:ed:e5:39:57:34:77:8f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
        Validity
            Not Before: Jun 28 17:01:32 2025 GMT
            Not After : Jun 29 17:01:32 2025 GMT
        Subject: CN=8a95058849e7159d4f7a64c7c2985167f8cec4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:b2:6d:0a:0a:bc:6d:37:06:18:15:f5:ac:
                    b2:7a:86:4c:a6:d4:db:9a:90:95:52:1a:bf:09:02:
                    a0:78:ce:4a:74:4e:9b:37:c6:24:00:56:8c:2e:26:
                    8e:de:64:0c:13:ee:72:82:52:4e:51:e9:40:4d:b4:
                    44:20:99:cc:c6:71:35:ec:dd:e9:08:38:d1:2d:59:
                    75:7d:10:bd:50:9d:77:82:5e:90:99:fd:1b:a2:b5:
                    37:60:9c:26:fd:9d:68:d3:11:52:77:45:7e:68:2b:
                    15:35:73:5b:25:ed:be:b0:00:fa:71:dc:cf:2b:ac:
                    fd:07:e8:48:9c:da:da:28:c0:8a:cb:28:65:0b:20:
                    20:90:bb:d9:7c:a4:bb:c5:8b:99:ac:07:0b:80:9c:
                    a8:dd:17:bd:0c:93:82:5f:a9:2e:97:66:f8:ab:d7:
                    3a:db:03:74:3a:a7:0f:76:8c:36:f4:ea:0e:05:64:
                    2b:82:45:77:1b:b6:a3:2e:56:4f:e7:e3:92:6f:34:
                    c3:d6:7a:4d:70:71:31:df:8b:4d:84:81:2c:52:fb:
                    03:f1:e9:88:b5:65:2e:5b:d3:5e:37:74:48:ae:4c:
                    76:be:cc:6c:45:4d:e5:ce:44:cd:ef:f1:25:01:0e:
                    bd:1d:05:c8:e3:82:cf:c1:16:b4:b4:8f:7e:cf:6e:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:05:88:49:E7:15:9D:4F:7A:64:C7:C2:98:51:67:F8:CE:C4:ED
            X509v3 Authority Key Identifier:
                keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d7:d6:07:3f:f2:aa:b0:cc:a0:1c:08:61:3c:a8:c9:77:1a:
         8f:5b:bc:15:9f:91:67:7d:e8:96:09:b9:27:67:d8:68:f7:b2:
         79:d2:c9:64:6e:25:7b:67:0a:2c:26:c3:b0:d4:ee:fa:08:db:
         b2:a6:75:1b:82:88:22:46:ff:c6:65:c1:5d:34:2c:ba:8d:b6:
         25:5a:de:71:14:91:e3:a5:f0:6e:53:c9:2e:d7:5c:9b:b2:a0:
         81:35:b8:24:6f:ca:c8:b7:cc:af:d3:7a:79:a4:ed:90:fa:f4:
         8a:20:99:7f:b5:ee:34:6a:72:a2:0d:20:d3:4d:c5:8b:1e:a4:
         f4:89:b0:4e:a8:77:5f:25:b3:1f:df:b2:83:bf:85:dd:f2:26:
         7e:e8:40:fb:36:42:63:5e:64:76:8d:fa:fc:62:f3:69:24:5d:
         9c:73:d2:40:9f:78:c0:06:67:4b:16:5c:70:8e:df:d0:59:d4:
         36:c5:10:d1:b8:cd:dc:46:ff:61:f3:f2:a6:86:e1:28:39:d8:
         87:70:51:24:7f:a8:1a:32:1c:93:be:90:12:9e:74:00:11:6f:
         29:19:ca:fd:03:5a:8c:30:bb:b4:46:68:cb:18:35:e5:fa:12:
         18:71:a6:f8:0e:5f:d4:b5:1b:93:8f:7d:e7:9e:5c:3b:99:b5:
         e7:a7:32:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fLWIyKQahe3lOVc0d4+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjUwNjI4MTcwMTMyWhcNMjUwNjI5MTcwMTMyWjAzMTEwLwYDVQQD
Eyg4YTk1MDU4ODQ5ZTcxNTlkNGY3YTY0YzdjMjk4NTE2N2Y4Y2VjNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzseybQoKvG03BhgV9ayyeoZMptTb
mpCVUhq/CQKgeM5KdE6bN8YkAFaMLiaO3mQME+5yglJOUelATbREIJnMxnE17N3p
CDjRLVl1fRC9UJ13gl6Qmf0borU3YJwm/Z1o0xFSd0V+aCsVNXNbJe2+sAD6cdzP
K6z9B+hInNraKMCKyyhlCyAgkLvZfKS7xYuZrAcLgJyo3Re9DJOCX6kul2b4q9c6
2wN0OqcPdow29OoOBWQrgkV3G7ajLlZP5+OSbzTD1npNcHEx34tNhIEsUvsD8emI
tWUuW9NeN3RIrkx2vsxsRU3lzkTN7/ElAQ69HQXI44LPwRa0tI9+z26TvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqVBYhJ5xWdT3pkx8KYUWf4zsTtMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9fWBz/y
qrDMoBwIYTyoyXcaj1u8FZ+RZ33olgm5J2fYaPeyedLJZG4le2cKLCbDsNTu+gjb
sqZ1G4KIIkb/xmXBXTQsuo22JVrecRSR46XwblPJLtdcm7KggTW4JG/KyLfMr9N6
eaTtkPr0iiCZf7XuNGpyog0g003Fix6k9ImwTqh3XyWzH9+yg7+F3fImfuhA+zZC
Y15kdo36/GLzaSRdnHPSQJ94wAZnSxZccI7f0FnUNsUQ0bjN3Eb/YfPypobhKDnY
h3BRJH+oGjIck76QEp50ABFvKRnK/QNajDC7tEZoyxg15foSGHGm+A5f1LUbk499
555cO5m156cypQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:45 2025 by rpki-client