Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File:                     qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier:          ftp1I9YYA7eg1qDQ4IxnzCkAdYnbAn5tcDuYNq+H3Fk=
Subject key identifier:   B8:6B:00:BA:A8:1A:C9:B9:F0:47:77:59:99:88:15:95:2B:B1:4C:6D
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer:       /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial:       0196BBFFB3DCDFA2D411BAED51355B3982AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number:          07E9
Signing time:             Sat 10 May 2025 21:00:19 +0000
Manifest this update:     Sat 10 May 2025 21:00:19 +0000
Manifest next update:     Sun 11 May 2025 21:00:19 +0000
Files and hashes:         1: Ln1C_YgxE2WGWgP1KdQJY5Zikas.roa (hash: 3EUFd8IxwHmwZnC3ljBW7KIOpmaBqqwxBLml7yaPCxE=)
                          2: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: pRBbftqbbGeTokqlasuTfGzdZxB4rXKKAiAUxkXSOHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:b3:dc:df:a2:d4:11:ba:ed:51:35:5b:39:82:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
        Validity
            Not Before: May 10 21:00:19 2025 GMT
            Not After : May 11 21:00:19 2025 GMT
        Subject: CN=b86b00baa81ac9b9f0477759998815952bb14c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:d2:5c:67:7a:b4:89:28:13:6f:d0:fa:70:
                    2d:af:e4:df:d3:b6:0a:74:fc:45:60:7d:60:88:4f:
                    cd:fc:9d:90:39:95:c6:ac:9c:5f:24:d8:b9:36:95:
                    8d:0b:98:c5:b8:a9:b6:01:21:d5:c2:44:8d:dc:c2:
                    62:b4:fa:77:df:fc:bc:be:10:ad:5a:f6:36:f9:bb:
                    82:3e:7b:e4:f2:91:7e:69:df:f9:3b:9f:51:6e:0e:
                    8d:60:64:fb:15:5c:41:ec:e1:a8:4f:5a:4a:6e:1d:
                    df:11:0b:b2:71:fc:43:e5:5f:22:35:dd:dc:ea:48:
                    2b:76:b3:a6:0b:03:2f:ee:c0:27:46:f2:4a:7e:f7:
                    16:19:0e:f5:0e:a8:bd:a3:50:84:b4:f6:90:09:56:
                    0c:26:20:4a:03:02:52:fc:5b:28:45:4f:e3:79:19:
                    6d:f2:db:6e:c7:6b:4d:7f:58:f4:da:9c:c2:b5:ae:
                    f5:c6:1d:4e:10:2d:8d:c3:a6:66:eb:ff:46:72:0f:
                    c0:fe:d2:93:80:15:87:c0:72:4f:fc:3a:97:35:ca:
                    98:f5:5d:85:de:d7:14:6d:87:ef:dd:d0:d5:55:98:
                    7a:e9:bb:1b:c2:c1:a8:0e:4c:4c:84:c5:54:fa:8d:
                    8b:1d:cc:b1:ec:b7:51:18:67:54:d2:ac:3b:4b:de:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6B:00:BA:A8:1A:C9:B9:F0:47:77:59:99:88:15:95:2B:B1:4C:6D
            X509v3 Authority Key Identifier:
                keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:f2:f4:a0:23:0e:ed:bc:4b:2e:23:08:31:74:88:84:ab:
         18:1a:94:fd:9c:66:27:54:0c:70:ab:72:dd:00:e0:d2:e1:c4:
         9f:51:1e:43:63:dd:01:83:9e:78:c3:24:3d:fe:a0:8b:32:93:
         a5:eb:01:64:a0:92:db:97:ba:4a:9b:5d:ef:ed:22:09:ee:eb:
         30:de:65:ee:a5:fd:d5:f2:2c:60:a5:b3:e5:dc:09:00:e7:ae:
         b4:02:a2:2b:89:c9:e6:fd:f2:fc:0d:c4:0a:f3:24:42:42:6b:
         1f:2a:eb:61:71:c1:07:bc:df:a9:dc:f7:3e:4b:23:54:3b:2c:
         5d:a0:ff:97:b5:16:3a:3b:f0:69:9b:d0:d4:5e:8e:3c:24:9f:
         ea:54:58:c8:a7:51:b5:23:a6:50:09:7b:6f:23:59:fd:e6:04:
         45:5d:e1:ce:10:12:4a:d9:eb:81:12:10:91:1a:cb:2b:cb:1d:
         fe:4b:94:06:b1:ca:d7:97:df:cd:15:21:58:c5:73:ca:20:56:
         7e:a2:5b:79:f6:1b:0e:8c:e3:aa:d7:54:98:5d:57:51:36:cc:
         d6:44:86:ea:72:9f:9d:d2:7b:ad:86:85:6c:18:26:63:49:47:
         53:a3:c4:60:ef:f7:16:21:27:5d:94:4b:4f:51:b9:80:89:79:
         4d:bd:3f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7/7Pc36LUEbrtUTVbOYKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NjhhZGYxMjBhNzRhNWQxMDgwOWNmZDNjYjY4MTRmYzg5
YjFmNDYwHhcNMjUwNTEwMjEwMDE5WhcNMjUwNTExMjEwMDE5WjAzMTEwLwYDVQQD
EyhiODZiMDBiYWE4MWFjOWI5ZjA0Nzc3NTk5OTg4MTU5NTJiYjE0YzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb3SXGd6tIkoE2/Q+nAtr+Tf07YK
dPxFYH1giE/N/J2QOZXGrJxfJNi5NpWNC5jFuKm2ASHVwkSN3MJitPp33/y8vhCt
WvY2+buCPnvk8pF+ad/5O59Rbg6NYGT7FVxB7OGoT1pKbh3fEQuycfxD5V8iNd3c
6kgrdrOmCwMv7sAnRvJKfvcWGQ71Dqi9o1CEtPaQCVYMJiBKAwJS/FsoRU/jeRlt
8ttux2tNf1j02pzCta71xh1OEC2Nw6Zm6/9Gcg/A/tKTgBWHwHJP/DqXNcqY9V2F
3tcUbYfv3dDVVZh66bsbwsGoDkxMhMVU+o2LHcyx7LdRGGdU0qw7S976+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhrALqoGsm58Ed3WZmIFZUrsUxtMB8GA1UdIwQY
MBaAFKlorfEgp0pdEICc/Ty2gU/Imx9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2It
ODBjZTQ1ODYxMjM5LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2ItODBjZTQ1ODYxMjM5
LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcW3y9KAj
Du28Sy4jCDF0iISrGBqU/ZxmJ1QMcKty3QDg0uHEn1EeQ2PdAYOeeMMkPf6gizKT
pesBZKCS25e6Sptd7+0iCe7rMN5l7qX91fIsYKWz5dwJAOeutAKiK4nJ5v3y/A3E
CvMkQkJrHyrrYXHBB7zfqdz3PksjVDssXaD/l7UWOjvwaZvQ1F6OPCSf6lRYyKdR
tSOmUAl7byNZ/eYERV3hzhASStnrgRIQkRrLK8sd/kuUBrHK15ffzRUhWMVzyiBW
fqJbefYbDozjqtdUmF1XUTbM1kSG6nKfndJ7rYaFbBgmY0lHU6PEYO/3FiEnXZRL
T1G5gIl5Tb0/IA==
-----END CERTIFICATE-----
Generated at Sun May 11 06:16:17 2025 by rpki-client