Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
File:                     sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json)
Hash identifier:          84OfQMsJ/ULUz+oS9EBB+jo0WK+qkI7xWJ3P+94F8bY=
Subject key identifier:   D9:8C:16:DF:20:29:AB:DF:A3:53:0F:95:87:A1:5E:18:8F:E3:68:83
Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
Certificate issuer:       /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Certificate serial:       0196D21A187666B521ADB503006683313EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
Manifest number:          03CC
Signing time:             Thu 15 May 2025 04:00:47 +0000
Manifest this update:     Thu 15 May 2025 04:00:47 +0000
Manifest next update:     Fri 16 May 2025 04:00:47 +0000
Files and hashes:         1: 53_H80-AjcuM7a-7V7Ni8CDVxmc.roa (hash: TnMZlgDSn2wGls3cni5JDswiMtfBk15EprIHZOUPW18=)
                          2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: MEMmN24I5gfSy81kcGk88lqUUzCOjyHnOjoKX14h0B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:1a:18:76:66:b5:21:ad:b5:03:00:66:83:31:3e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
        Validity
            Not Before: May 15 04:00:47 2025 GMT
            Not After : May 16 04:00:47 2025 GMT
        Subject: CN=d98c16df2029abdfa3530f9587a15e188fe36883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:6c:aa:66:57:c3:cc:54:24:31:1b:fa:b1:
                    31:8b:cd:7d:96:a5:45:8d:dd:1d:ad:e3:a7:86:96:
                    74:db:8e:5e:72:8f:65:fa:21:25:4a:aa:c9:20:92:
                    a3:bc:be:6b:9c:c7:31:17:a3:3e:f3:ca:e2:12:30:
                    85:2e:cf:57:9e:19:5a:13:73:09:24:c6:62:a7:38:
                    d2:0d:bc:a5:a8:5a:0b:be:be:cc:bf:0a:ee:e5:2a:
                    22:e2:64:ce:f3:64:df:fb:e0:f0:77:80:1e:86:5b:
                    4f:29:06:6d:eb:a2:b7:ef:cc:62:d2:1a:7e:2f:e9:
                    a7:c2:5c:eb:37:5e:85:8a:d2:cd:d8:2f:33:0d:0e:
                    fc:97:ee:d4:e0:d3:8a:49:91:42:ef:f7:91:5b:e2:
                    f3:78:8b:15:cb:a2:37:e2:81:9d:65:7a:b8:86:8d:
                    ca:4f:89:ef:cb:d3:73:f4:dd:4a:72:76:94:a2:e2:
                    0e:e1:b7:b7:6f:1b:00:8d:be:fb:6a:4a:7b:e9:c0:
                    5a:bf:d7:5f:6c:f5:b9:70:1f:6a:6d:2e:57:a2:71:
                    9b:5c:f5:a5:b2:d9:4e:a3:78:0a:58:b0:38:20:cd:
                    36:30:8e:83:53:94:d1:16:51:15:bf:9b:6c:21:5a:
                    f8:9d:33:cc:df:c7:6d:d5:7a:8f:1c:7a:74:10:05:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8C:16:DF:20:29:AB:DF:A3:53:0F:95:87:A1:5E:18:8F:E3:68:83
            X509v3 Authority Key Identifier:
                keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:33:19:3a:96:7b:3e:33:de:0e:1d:49:0a:44:08:1d:20:
         3a:ed:f4:5e:a6:8e:2a:99:79:3f:2d:b2:66:64:30:b4:76:85:
         a7:a9:df:ec:a9:f2:a1:f7:69:9a:43:b0:2a:3d:35:7a:1f:05:
         31:fc:4f:c0:44:52:42:8c:a9:6a:76:20:b2:3f:56:90:96:68:
         66:e0:67:8e:e2:af:94:fa:0a:c8:45:e1:64:e6:2d:70:ae:7c:
         f5:09:11:04:97:38:f7:8a:99:b9:9b:8b:d5:00:99:80:16:0d:
         45:82:cb:e9:be:d0:ab:e6:2c:a1:69:05:5b:cf:f8:2a:bf:d2:
         c0:24:6f:5e:b9:7f:3e:43:c1:3b:a1:7d:a0:29:26:2c:2b:08:
         f1:f1:4a:21:b4:42:a0:0a:25:83:c4:d9:ed:eb:5e:aa:4d:c7:
         24:d7:ae:dc:d6:80:2b:f4:99:41:a2:95:aa:40:b2:10:17:76:
         39:4d:4f:6c:bf:06:16:8f:e7:1e:77:75:cb:eb:26:6d:69:83:
         cd:08:02:9a:4f:6f:ab:0a:4c:59:c7:e6:3c:6b:f0:01:ef:d8:
         a7:a5:f9:42:93:28:89:8b:c9:96:5c:9c:19:33:9b:71:a1:1c:
         ae:8c:eb:ec:8b:ad:35:1c:aa:3b:6b:d8:6d:3c:41:35:ff:c8:
         bc:6a:f8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSGhh2ZrUhrbUDAGaDMT6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWYzZDY1OGI0OTRjYjE3MTUyMDZjNWNkNzZlNzkyZTcy
NDdlZjcwHhcNMjUwNTE1MDQwMDQ3WhcNMjUwNTE2MDQwMDQ3WjAzMTEwLwYDVQQD
EyhkOThjMTZkZjIwMjlhYmRmYTM1MzBmOTU4N2ExNWUxODhmZTM2ODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU5sqmZXw8xUJDEb+rExi819lqVF
jd0dreOnhpZ0245eco9l+iElSqrJIJKjvL5rnMcxF6M+88riEjCFLs9XnhlaE3MJ
JMZipzjSDbylqFoLvr7Mvwru5Soi4mTO82Tf++Dwd4AehltPKQZt66K378xi0hp+
L+mnwlzrN16FitLN2C8zDQ78l+7U4NOKSZFC7/eRW+LzeIsVy6I34oGdZXq4ho3K
T4nvy9Nz9N1KcnaUouIO4be3bxsAjb77akp76cBav9dfbPW5cB9qbS5XonGbXPWl
stlOo3gKWLA4IM02MI6DU5TRFlEVv5tsIVr4nTPM38dt1XqPHHp0EAXwjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmMFt8gKavfo1MPlYehXhiP42iDMB8GA1UdIwQY
MBaAFLKvPWWLSUyxcVIGxc1255LnJH73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQt
YTJlZWJiMTY2ZmM4LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQtYTJlZWJiMTY2ZmM4
LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWO8zGTqW
ez4z3g4dSQpECB0gOu30XqaOKpl5Py2yZmQwtHaFp6nf7KnyofdpmkOwKj01eh8F
MfxPwERSQoypanYgsj9WkJZoZuBnjuKvlPoKyEXhZOYtcK589QkRBJc494qZuZuL
1QCZgBYNRYLL6b7Qq+YsoWkFW8/4Kr/SwCRvXrl/PkPBO6F9oCkmLCsI8fFKIbRC
oAolg8TZ7eteqk3HJNeu3NaAK/SZQaKVqkCyEBd2OU1PbL8GFo/nHnd1y+smbWmD
zQgCmk9vqwpMWcfmPGvwAe/Yp6X5QpMoiYvJllycGTObcaEcrozr7IutNRyqO2vY
bTxBNf/IvGr4MA==
-----END CERTIFICATE-----
Generated at Thu May 15 10:26:20 2025 by rpki-client