Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File:                     Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier:          BbAI4ASuKYHeRFdavHDvJWBmKoYmV8+cpIw0yNceO0I=
Subject key identifier:   3F:32:EF:D8:69:88:85:2C:A0:8E:35:39:D3:96:B4:1C:85:EB:C5:B6
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer:       /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial:       0196BA7F4263E4A0A6278BBD663070ADD996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 14:00:24 +0000
Manifest this update:     Sat 10 May 2025 14:00:24 +0000
Manifest next update:     Sun 11 May 2025 14:00:24 +0000
Files and hashes:         1: LV0PrwUwApuyDUZikJDi74P4PbM.roa (hash: CRURkBwcTmvzFW2izVL5pwlfr/5l3k8aD0Pamg8MVGM=)
                          2: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: Eb/47qupkl+lyMdsTRR2DVUxQn80axf0PqPjwVkCQ00=)
                          3: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
                          4: z3CwNMmW91OeZadetIEGWrLgAV8.roa (hash: TBa7E7IHnq9QvWerYacnX6IUM0n0LVVjA36Ue+17mgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:42:63:e4:a0:a6:27:8b:bd:66:30:70:ad:d9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
        Validity
            Not Before: May 10 14:00:24 2025 GMT
            Not After : May 11 14:00:24 2025 GMT
        Subject: CN=3f32efd86988852ca08e3539d396b41c85ebc5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:ae:43:51:e1:86:a2:f6:8d:0d:94:fb:27:
                    8b:19:35:a7:af:f4:14:70:85:dc:eb:95:4f:01:65:
                    93:fb:93:9c:f1:97:5a:35:7d:d5:ad:64:86:6f:d7:
                    70:7f:84:82:0c:44:13:65:0c:bd:8a:05:92:b5:c4:
                    b8:50:bc:14:3f:70:28:c9:f8:da:69:cb:9f:d4:59:
                    6b:f1:27:9b:61:a0:60:0d:4b:93:3e:84:29:05:8b:
                    87:f1:e8:de:fe:69:11:a1:0f:7a:38:29:12:e9:a9:
                    e3:66:99:cf:65:ce:fa:06:d6:d3:8d:84:58:a4:d0:
                    ae:65:23:0d:10:7d:53:32:65:f3:82:4a:40:db:9c:
                    df:fe:22:e9:4f:81:0e:c4:2c:6b:a7:86:59:ca:ba:
                    75:12:8f:d7:bb:8a:66:c1:58:05:29:6e:11:a0:0f:
                    fe:82:41:80:9c:7e:37:77:a6:89:e5:05:f2:47:fb:
                    d0:92:c9:c4:46:b5:f4:df:46:2c:d6:12:72:64:74:
                    87:d3:b7:15:96:3c:40:b4:52:4f:b2:2a:84:81:96:
                    16:39:4a:0f:c8:3f:66:24:1d:94:13:31:12:de:5e:
                    ac:84:2d:dd:86:65:e7:a0:ba:52:89:90:cb:9b:f6:
                    76:a2:9d:90:a8:aa:5a:f1:13:1d:bf:a8:5c:1d:f8:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:32:EF:D8:69:88:85:2C:A0:8E:35:39:D3:96:B4:1C:85:EB:C5:B6
            X509v3 Authority Key Identifier:
                keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:1f:a4:b0:0e:dc:05:d4:66:9a:26:df:77:e9:8a:b0:0c:
         3b:08:6f:e4:01:85:f0:6e:42:03:2e:36:75:6e:f4:93:bb:f4:
         b2:9c:71:35:e2:4d:c1:6f:85:0b:3b:4a:f5:41:b9:37:75:fa:
         0b:a2:e3:f9:a1:17:a0:15:03:e0:61:5b:16:fe:20:91:09:9e:
         3a:bf:0e:92:06:4b:3f:80:82:99:6b:8a:16:46:83:90:ae:73:
         fd:64:f4:be:8f:9d:dd:ec:91:ec:4f:42:c8:66:83:55:83:1c:
         c8:9f:47:66:01:d5:25:21:e3:8a:f0:ee:11:8d:d4:e1:bd:fc:
         65:93:da:7a:26:9c:a5:b9:4a:17:f9:5a:b5:dc:86:b4:99:bd:
         fa:2b:b7:31:67:c8:e9:c5:65:6f:2a:e5:88:e3:0e:e7:fb:d3:
         b7:75:70:c3:ce:ce:1f:e7:18:64:68:02:9e:00:2c:7a:a4:0b:
         b8:25:14:90:f9:77:d9:05:a8:99:df:fb:b9:fd:03:05:9b:bd:
         aa:f2:d8:3c:ff:99:c3:00:d2:e4:81:35:d4:23:37:9c:6c:8f:
         24:36:ca:1e:9d:41:5b:e8:a5:fa:19:36:83:f6:95:0e:80:3d:
         ca:61:30:77:2c:ba:c0:d1:d6:42:0d:5f:24:05:3d:47:01:01:
         eb:4c:64:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6f0Jj5KCmJ4u9ZjBwrdmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi
NTUwMTMwHhcNMjUwNTEwMTQwMDI0WhcNMjUwNTExMTQwMDI0WjAzMTEwLwYDVQQD
EygzZjMyZWZkODY5ODg4NTJjYTA4ZTM1MzlkMzk2YjQxYzg1ZWJjNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfauQ1HhhqL2jQ2U+yeLGTWnr/QU
cIXc65VPAWWT+5Oc8ZdaNX3VrWSGb9dwf4SCDEQTZQy9igWStcS4ULwUP3Aoyfja
acuf1Flr8SebYaBgDUuTPoQpBYuH8eje/mkRoQ96OCkS6anjZpnPZc76BtbTjYRY
pNCuZSMNEH1TMmXzgkpA25zf/iLpT4EOxCxrp4ZZyrp1Eo/Xu4pmwVgFKW4RoA/+
gkGAnH43d6aJ5QXyR/vQksnERrX030Ys1hJyZHSH07cVljxAtFJPsiqEgZYWOUoP
yD9mJB2UEzES3l6shC3dhmXnoLpSiZDLm/Z2op2QqKpa8RMdv6hcHfifqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8y79hpiIUsoI41OdOWtByF68W2MB8GA1UdIwQY
MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt
ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl
LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEcfpLAO
3AXUZpom33fpirAMOwhv5AGF8G5CAy42dW70k7v0spxxNeJNwW+FCztK9UG5N3X6
C6Lj+aEXoBUD4GFbFv4gkQmeOr8OkgZLP4CCmWuKFkaDkK5z/WT0vo+d3eyR7E9C
yGaDVYMcyJ9HZgHVJSHjivDuEY3U4b38ZZPaeiacpblKF/latdyGtJm9+iu3MWfI
6cVlbyrliOMO5/vTt3Vww87OH+cYZGgCngAseqQLuCUUkPl32QWomd/7uf0DBZu9
qvLYPP+ZwwDS5IE11CM3nGyPJDbKHp1BW+il+hk2g/aVDoA9ymEwdyy6wNHWQg1f
JAU9RwEB60xkgQ==
-----END CERTIFICATE-----
Generated at Sat May 10 19:27:22 2025 by rpki-client