Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File:                     Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier:          Vxzhj4ZY0kfIMoY7gvBvl2DIluJSNqXijsOTkgTxs2k=
Subject key identifier:   A5:19:4D:BB:56:DF:89:00:6A:F2:BC:CC:35:BA:A9:59:D1:41:69:3A
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer:       /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial:       0197B745071B9A9BCD66AD2074F834815BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number:          01A0
Signing time:             Sat 28 Jun 2025 16:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:43 +0000
Files and hashes:         1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: UgfMjCm5P6j7QBC8/l3GinlfHrp0rEU3zEmg+5hV6VY=)
                          2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:07:1b:9a:9b:cd:66:ad:20:74:f8:34:81:5b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
        Validity
            Not Before: Jun 28 16:00:43 2025 GMT
            Not After : Jun 29 16:00:43 2025 GMT
        Subject: CN=a5194dbb56df89006af2bccc35baa959d141693a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:17:7b:fb:0d:04:80:9e:19:99:89:de:99:
                    89:32:e2:94:36:d0:0d:65:11:2e:c8:b5:8d:09:cc:
                    bc:f8:d1:c4:a9:8d:a1:02:64:e2:87:0f:52:a0:84:
                    af:bc:81:75:19:6e:6c:e9:ae:4a:aa:f1:89:9c:a7:
                    29:3c:99:10:5a:27:82:69:a0:5e:f6:9f:63:5d:c1:
                    1f:fe:01:06:61:a6:ae:48:71:50:cb:c5:6a:dc:f5:
                    22:b1:8d:a6:df:99:94:cf:0d:46:dd:d7:2e:e5:89:
                    49:83:50:5f:09:9b:d5:8a:32:24:f1:cc:6e:0d:fd:
                    a0:f3:0f:b6:1e:84:9d:3f:a3:b8:ed:97:e5:61:1c:
                    63:56:ac:9c:97:df:8d:00:eb:2f:a7:66:3a:ce:19:
                    da:61:ed:a3:e3:ba:3d:bc:db:bd:47:d2:d6:d0:bf:
                    3a:01:81:2c:1c:51:41:ea:8f:38:05:11:a9:b0:ab:
                    de:66:9d:5a:cd:cd:75:1b:9e:fb:97:18:0a:bf:d9:
                    77:17:01:04:4c:39:f1:17:87:3b:52:66:4b:05:aa:
                    2b:46:36:7a:a0:21:6c:71:b4:cc:f9:39:96:5f:c2:
                    89:b9:25:a9:1d:38:5b:5f:73:2d:92:1c:23:30:e4:
                    9c:a2:a8:a3:f9:53:2f:99:a6:4d:86:a8:0c:3f:0c:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:19:4D:BB:56:DF:89:00:6A:F2:BC:CC:35:BA:A9:59:D1:41:69:3A
            X509v3 Authority Key Identifier:
                keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:62:61:0a:a1:44:1e:68:73:a7:77:c2:23:f6:92:3b:c5:
         7a:f3:db:01:16:f7:fb:fb:43:89:b9:23:9e:10:46:28:45:51:
         e9:9c:8e:d8:91:66:0e:59:37:90:14:66:b2:66:36:1a:d1:e3:
         9d:43:94:95:20:c9:5e:7f:12:bd:29:b5:06:59:7c:83:7c:a5:
         80:31:b3:02:8d:d3:a7:bf:6f:31:5a:5c:d4:fc:c8:29:d8:a4:
         34:cc:d3:30:77:53:50:8d:45:26:12:70:ec:50:51:46:c1:9a:
         86:9b:ce:eb:6d:36:f4:95:7f:ca:e0:ce:5e:21:de:6b:76:5a:
         65:37:65:32:f0:58:d4:69:8b:24:16:b2:8c:9e:67:c0:a4:57:
         23:9f:cc:7d:c7:d6:61:09:b2:95:94:7b:7b:e6:eb:23:25:07:
         25:11:f6:39:7c:be:ee:5f:df:bb:92:3c:48:30:7e:03:1e:f3:
         22:7d:cf:69:b7:10:86:fa:1e:ed:99:45:dc:eb:6f:a3:c2:17:
         9f:0c:58:2e:0b:59:33:b2:fa:48:75:95:7a:11:e3:9a:ee:d5:
         27:f7:e6:2d:57:c8:2d:11:ef:fb:74:97:c7:57:3a:f7:ad:48:
         be:a6:56:c7:f3:5a:52:90:28:f0:56:f2:22:f9:0b:c2:32:63:
         40:38:93:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RQcbmpvNZq0gdPg0gVvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx
YTcwM2MwHhcNMjUwNjI4MTYwMDQzWhcNMjUwNjI5MTYwMDQzWjAzMTEwLwYDVQQD
EyhhNTE5NGRiYjU2ZGY4OTAwNmFmMmJjY2MzNWJhYTk1OWQxNDE2OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA364Xe/sNBICeGZmJ3pmJMuKUNtAN
ZREuyLWNCcy8+NHEqY2hAmTihw9SoISvvIF1GW5s6a5KqvGJnKcpPJkQWieCaaBe
9p9jXcEf/gEGYaauSHFQy8Vq3PUisY2m35mUzw1G3dcu5YlJg1BfCZvVijIk8cxu
Df2g8w+2HoSdP6O47ZflYRxjVqycl9+NAOsvp2Y6zhnaYe2j47o9vNu9R9LW0L86
AYEsHFFB6o84BRGpsKveZp1azc11G577lxgKv9l3FwEETDnxF4c7UmZLBaorRjZ6
oCFscbTM+TmWX8KJuSWpHThbX3MtkhwjMOScoqij+VMvmaZNhqgMPwzOrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUZTbtW34kAavK8zDW6qVnRQWk6MB8GA1UdIwQY
MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt
MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm
LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNxiYQqh
RB5oc6d3wiP2kjvFevPbARb3+/tDibkjnhBGKEVR6ZyO2JFmDlk3kBRmsmY2GtHj
nUOUlSDJXn8SvSm1Bll8g3ylgDGzAo3Tp79vMVpc1PzIKdikNMzTMHdTUI1FJhJw
7FBRRsGahpvO62029JV/yuDOXiHea3ZaZTdlMvBY1GmLJBayjJ5nwKRXI5/MfcfW
YQmylZR7e+brIyUHJRH2OXy+7l/fu5I8SDB+Ax7zIn3PabcQhvoe7ZlF3Otvo8IX
nwxYLgtZM7L6SHWVehHjmu7VJ/fmLVfILRHv+3SXx1c6961IvqZWx/NaUpAo8Fby
IvkLwjJjQDiTzg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:15 2025 by rpki-client