Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          FP4VNiytF29bcYr/JW2SsNYbXYTXBlT1y3KObeI0ivw=
Subject key identifier:   57:EB:D5:66:FB:5F:2B:66:49:12:04:1E:C6:EC:E0:33:93:89:90:01
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       0196A0BFC03C31898D88CA815FD43546D23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          1104
Signing time:             Mon 05 May 2025 14:00:43 +0000
Manifest this update:     Mon 05 May 2025 14:00:43 +0000
Manifest next update:     Tue 06 May 2025 14:00:43 +0000
Files and hashes:         1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=)
                          2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=)
                          3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: Q6Uh47aSOQv/ziJGMugltC0tUFfsNdMrPKGPehBV9Ak=)
                          4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=)
                          5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=)
                          6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=)
                          7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=)
                          8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=)
                          9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=)
                          10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:bf:c0:3c:31:89:8d:88:ca:81:5f:d4:35:46:d2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: May  5 14:00:43 2025 GMT
            Not After : May  6 14:00:43 2025 GMT
        Subject: CN=57ebd566fb5f2b664912041ec6ece03393899001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8c:30:50:9d:bf:15:cb:6a:42:5d:a3:18:ce:
                    70:28:1c:f6:0c:2a:95:7a:80:8e:91:17:d1:80:4c:
                    7c:f2:18:82:d2:28:1b:bc:f9:2b:97:fb:13:c5:6a:
                    84:bc:a2:12:9e:5a:22:8d:e5:24:25:34:70:10:18:
                    c3:b0:af:fc:48:97:a7:67:be:7a:d7:96:d5:22:66:
                    3b:6e:b0:e2:40:ae:b1:63:bb:d8:87:b5:ad:16:ab:
                    f6:40:67:86:81:e0:75:55:b5:34:6b:9e:61:d8:63:
                    a2:bc:22:9d:f9:33:98:6c:1c:00:e8:8f:2f:e6:b9:
                    3f:f6:d4:57:1c:c3:0b:cc:b3:ef:0f:6e:83:e0:c7:
                    4d:85:42:84:4d:13:d5:7f:70:7b:3a:72:d8:d0:06:
                    9e:54:0e:e9:39:6a:e6:e0:fd:c0:f7:4e:71:b6:51:
                    12:35:52:c8:8c:3d:33:f2:f7:ed:f6:ec:e9:75:59:
                    dd:48:e4:64:d7:c7:f8:7b:fa:f0:b0:cd:b9:f3:42:
                    95:aa:99:4b:16:56:cc:87:dd:9d:92:31:62:49:c0:
                    6f:53:1b:d2:9f:12:fe:f7:0a:64:7a:84:1c:4c:b7:
                    9a:db:12:3b:7e:0e:21:6e:f2:21:c2:49:c8:33:d9:
                    6f:9a:ee:5a:6e:7a:51:e3:d3:25:a5:df:64:db:e8:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EB:D5:66:FB:5F:2B:66:49:12:04:1E:C6:EC:E0:33:93:89:90:01
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:79:82:be:3f:09:a8:77:6d:d2:b7:d3:ae:ce:ce:50:28:
         f2:fa:29:86:71:b7:2b:9b:d2:f4:8c:29:df:0f:57:eb:32:83:
         71:92:99:d1:c7:a7:50:25:09:44:34:c2:ca:bc:87:3b:8e:cf:
         3e:86:35:60:e7:ba:87:f5:f2:93:7e:24:b3:c3:2c:6e:33:c8:
         e5:6b:07:0b:0e:04:74:9c:2e:6e:79:b0:af:ed:b4:47:48:69:
         df:8b:27:a7:90:e6:ee:08:f0:22:b4:79:fe:ce:ca:a8:4e:59:
         d2:c0:c9:b6:22:08:a9:63:2b:e9:6a:22:84:64:59:7e:51:db:
         c5:53:49:03:4e:2d:44:d0:ef:44:a8:60:5d:17:c4:36:4f:67:
         b1:cd:c1:23:cc:22:fd:45:78:a5:43:bc:37:b4:18:78:1e:38:
         a6:87:4a:e5:f1:a5:71:96:ec:af:11:fd:80:f5:ba:11:f1:e9:
         39:7c:36:0e:8a:82:a6:2d:77:df:ac:d2:9a:8b:ff:cb:f5:6d:
         7e:74:8c:38:f1:4e:8e:ad:be:41:a9:cd:97:e7:31:6b:1a:8e:
         cc:de:56:48:f4:8a:c7:36:80:27:25:51:16:2e:cf:c5:42:6a:
         1f:c7:ac:0b:da:ec:31:eb:85:68:23:66:ed:77:c3:61:41:bf:
         03:a7:56:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagv8A8MYmNiMqBX9Q1RtI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl
MmM0ZDcwHhcNMjUwNTA1MTQwMDQzWhcNMjUwNTA2MTQwMDQzWjAzMTEwLwYDVQQD
Eyg1N2ViZDU2NmZiNWYyYjY2NDkxMjA0MWVjNmVjZTAzMzkzODk5MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIwwUJ2/FctqQl2jGM5wKBz2DCqV
eoCOkRfRgEx88hiC0igbvPkrl/sTxWqEvKISnloijeUkJTRwEBjDsK/8SJenZ756
15bVImY7brDiQK6xY7vYh7WtFqv2QGeGgeB1VbU0a55h2GOivCKd+TOYbBwA6I8v
5rk/9tRXHMMLzLPvD26D4MdNhUKETRPVf3B7OnLY0AaeVA7pOWrm4P3A905xtlES
NVLIjD0z8vft9uzpdVndSORk18f4e/rwsM2580KVqplLFlbMh92dkjFiScBvUxvS
nxL+9wpkeoQcTLea2xI7fg4hbvIhwknIM9lvmu5abnpR49Mlpd9k2+j9awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfr1Wb7XytmSRIEHsbs4DOTiZABMB8GA1UdIwQY
MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct
ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk
LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAe95gr4/
Cah3bdK3067OzlAo8vophnG3K5vS9Iwp3w9X6zKDcZKZ0cenUCUJRDTCyryHO47P
PoY1YOe6h/Xyk34ks8MsbjPI5WsHCw4EdJwubnmwr+20R0hp34snp5Dm7gjwIrR5
/s7KqE5Z0sDJtiIIqWMr6WoihGRZflHbxVNJA04tRNDvRKhgXRfENk9nsc3BI8wi
/UV4pUO8N7QYeB44podK5fGlcZbsrxH9gPW6EfHpOXw2DoqCpi1336zSmov/y/Vt
fnSMOPFOjq2+QanNl+cxaxqOzN5WSPSKxzaAJyVRFi7PxUJqH8esC9rsMeuFaCNm
7XfDYUG/A6dWVQ==
-----END CERTIFICATE-----
Generated at Mon May 5 17:03:25 2025 by rpki-client