Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File:                     Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier:          KUQ8OBpIywQXwIXGw1KChd8LANd6IO0Ch8MsfH0U2hA=
Subject key identifier:   E8:AE:DF:DF:5E:BB:F6:BE:D6:48:18:35:6C:7F:6F:29:34:C0:4F:C7
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer:       /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial:       0196BF3817ED239396894185675B42A61563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number:          0F52
Signing time:             Sun 11 May 2025 12:00:46 +0000
Manifest this update:     Sun 11 May 2025 12:00:46 +0000
Manifest next update:     Mon 12 May 2025 12:00:46 +0000
Files and hashes:         1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: JLrj8y1ldCcYTkdpF7DbsBAhlXqvgbbrywYb8gDZzg4=)
                          2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:38:17:ed:23:93:96:89:41:85:67:5b:42:a6:15:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
        Validity
            Not Before: May 11 12:00:46 2025 GMT
            Not After : May 12 12:00:46 2025 GMT
        Subject: CN=e8aedfdf5ebbf6bed64818356c7f6f2934c04fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:f5:8c:41:06:43:21:f3:4c:73:87:ad:48:
                    f9:3f:91:cd:83:23:5d:50:c0:2a:6b:28:ff:38:39:
                    67:75:27:ae:e8:8e:e0:12:98:76:39:e7:bb:3b:e1:
                    f2:fb:0f:2c:7b:17:25:e7:8f:d8:13:68:fc:51:e4:
                    aa:2e:20:ec:32:92:da:20:47:08:81:e8:3d:ee:02:
                    79:56:7b:3e:b7:f9:6c:97:c2:9c:0f:b3:58:aa:56:
                    9e:d4:d0:85:24:92:d3:6c:7c:02:36:93:4d:57:7c:
                    4c:12:62:ba:ba:ed:00:64:8e:cf:2b:8f:9c:ab:e8:
                    22:fa:7c:7c:17:2a:bc:0d:c6:4d:9c:b1:af:36:71:
                    2e:df:df:23:cb:71:62:97:22:6b:a1:35:cb:c9:82:
                    87:36:69:b3:4d:db:7b:62:8f:a6:05:1a:57:a9:fd:
                    00:58:54:48:97:c9:c9:04:c9:c4:c6:35:f6:c2:f8:
                    b8:fd:1c:d3:12:80:aa:1e:29:12:4c:42:b2:57:25:
                    dd:cb:96:06:7a:39:7d:a1:d7:6c:6a:30:2e:e9:ff:
                    2f:46:36:c9:f3:10:0a:2f:61:3f:71:89:22:e5:a4:
                    ed:83:bd:b6:d7:af:71:c6:38:fb:80:ad:da:f7:30:
                    4a:20:a1:06:27:bf:58:82:16:6f:8f:ef:74:74:0f:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:DF:DF:5E:BB:F6:BE:D6:48:18:35:6C:7F:6F:29:34:C0:4F:C7
            X509v3 Authority Key Identifier:
                keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:da:a5:ec:ce:a3:26:c9:e0:35:94:17:1e:3f:6c:6f:6a:45:
         2a:9e:65:61:f9:f3:0a:00:6e:d1:d3:6d:b3:66:d5:6b:3a:db:
         7b:32:0b:4f:57:c2:e5:b7:a3:df:60:5f:fa:c8:de:89:22:e8:
         14:dc:3e:dd:cb:bd:a1:19:f2:f1:10:1b:15:fb:0b:0d:53:21:
         a2:b4:aa:6b:8f:bb:b8:3c:16:00:43:a8:54:88:61:2d:e9:7a:
         ab:1f:21:60:46:cb:73:b1:6d:f7:70:60:09:06:40:de:16:6d:
         2b:9c:cd:29:3a:bf:f1:2d:57:a7:e7:f8:f5:02:5c:ef:1c:f9:
         31:95:c5:e2:e3:84:a9:a2:7a:8c:8c:35:e7:47:0e:4b:b8:68:
         37:bb:25:e5:7c:76:75:13:aa:1e:31:fd:35:3a:ce:84:0f:0b:
         ff:e2:32:a5:4e:c8:b5:48:fa:d7:ef:37:9c:e2:f9:ec:fe:ac:
         e7:1d:6c:42:b2:72:8c:04:a0:c3:f0:f7:43:c0:38:06:7b:89:
         1e:89:b5:40:c3:10:2d:b1:cc:0c:8b:b0:ee:92:c2:e0:29:06:
         48:73:86:49:1d:e2:1a:5f:fe:83:95:61:63:85:09:e9:8c:6f:
         23:f7:c9:76:68:75:18:fd:02:5d:9f:63:92:7e:3b:3b:e9:30:
         df:88:48:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/OBftI5OWiUGFZ1tCphVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjdmYjg0NzgxNzdmNDhjZjQ1YmVkMDdjYmVjZjliNmU5
NWRlODgwHhcNMjUwNTExMTIwMDQ2WhcNMjUwNTEyMTIwMDQ2WjAzMTEwLwYDVQQD
EyhlOGFlZGZkZjVlYmJmNmJlZDY0ODE4MzU2YzdmNmYyOTM0YzA0ZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzub1jEEGQyHzTHOHrUj5P5HNgyNd
UMAqayj/ODlndSeu6I7gEph2Oee7O+Hy+w8sexcl54/YE2j8UeSqLiDsMpLaIEcI
geg97gJ5Vns+t/lsl8KcD7NYqlae1NCFJJLTbHwCNpNNV3xMEmK6uu0AZI7PK4+c
q+gi+nx8Fyq8DcZNnLGvNnEu398jy3FilyJroTXLyYKHNmmzTdt7Yo+mBRpXqf0A
WFRIl8nJBMnExjX2wvi4/RzTEoCqHikSTEKyVyXdy5YGejl9oddsajAu6f8vRjbJ
8xAKL2E/cYki5aTtg722169xxjj7gK3a9zBKIKEGJ79YghZvj+90dA+XGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiu399eu/a+1kgYNWx/byk0wE/HMB8GA1UdIwQY
MBaAFEL3+4R4F39Iz0W+0Hy+z5tuld6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYt
MWFjNGM1ZDQyOTJmLzEvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYtMWFjNGM1ZDQyOTJm
LzEvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9ql7M6j
JsngNZQXHj9sb2pFKp5lYfnzCgBu0dNts2bVazrbezILT1fC5bej32Bf+sjeiSLo
FNw+3cu9oRny8RAbFfsLDVMhorSqa4+7uDwWAEOoVIhhLel6qx8hYEbLc7Ft93Bg
CQZA3hZtK5zNKTq/8S1Xp+f49QJc7xz5MZXF4uOEqaJ6jIw150cOS7hoN7sl5Xx2
dROqHjH9NTrOhA8L/+IypU7ItUj61+83nOL57P6s5x1sQrJyjASgw/D3Q8A4BnuJ
Hom1QMMQLbHMDIuw7pLC4CkGSHOGSR3iGl/+g5VhY4UJ6YxvI/fJdmh1GP0CXZ9j
kn47O+kw34hIsQ==
-----END CERTIFICATE-----
Generated at Sun May 11 17:17:54 2025 by rpki-client