Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          vgtSodrnaGfizJ8yEQ9TSwsAU8TDuGCYZWrywayakdE=
Subject key identifier:   E4:52:2F:23:99:64:0C:24:6A:04:A3:96:28:55:D7:DD:75:1B:33:74
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       01976C61E2B4FC6870FB1BFAF7779075A4AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          1047
Signing time:             Sat 14 Jun 2025 03:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:43 +0000
Files and hashes:         1: 1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa (hash: fltwqIioPSuzKLuXGtdMjJVRWOd9cnpy/Vmxbwnrchg=)
                          2: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
                          3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
                          4: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
                          5: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: hWN4aQy07BSFTOvkXltiWvxmk2s0wf4tZXSilpRXJak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:e2:b4:fc:68:70:fb:1b:fa:f7:77:90:75:a4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Jun 14 03:00:43 2025 GMT
            Not After : Jun 15 03:00:43 2025 GMT
        Subject: CN=e4522f2399640c246a04a3962855d7dd751b3374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:84:38:5f:a5:c8:61:32:8b:7b:86:70:be:
                    7c:55:08:11:d2:32:51:8e:51:66:ef:58:63:82:53:
                    a1:3e:c6:71:c3:9a:fd:9e:b2:35:ad:62:85:af:3b:
                    7b:26:9b:e1:f1:8b:bd:20:5b:82:c8:a9:44:04:36:
                    3e:d9:2c:f4:ae:e0:a3:c5:74:8f:2c:55:d5:02:32:
                    34:e0:3d:07:f8:c1:f3:0d:f9:bc:60:ab:07:d2:18:
                    33:75:fa:1a:cf:00:e4:7b:5e:32:24:b9:3a:ab:50:
                    fc:6e:14:cc:6d:74:ff:75:50:a9:0e:93:45:2a:72:
                    b5:f7:b0:25:2e:85:d6:0d:4b:94:a1:29:47:92:b4:
                    f9:76:cf:dd:f7:17:ab:9b:16:72:99:95:a3:18:1f:
                    eb:2d:a9:91:b5:44:56:47:d9:8a:fe:8d:9b:3b:f6:
                    6f:3c:6b:37:b5:0c:fb:0a:5f:01:33:d2:2a:fd:83:
                    dc:37:e1:a0:a6:f6:d5:e6:66:d0:f9:93:96:0e:55:
                    a1:58:9f:37:30:7e:ef:ff:b5:9c:03:5e:e8:28:e0:
                    2a:e1:bd:a1:f0:14:1e:d7:11:f1:68:15:98:4c:04:
                    15:c9:48:e7:0a:5d:57:6b:34:73:e9:85:29:5d:6b:
                    c7:2a:6d:a0:93:a7:93:17:6e:3f:6b:b8:ff:72:ad:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:2F:23:99:64:0C:24:6A:04:A3:96:28:55:D7:DD:75:1B:33:74
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:95:45:fb:bc:6d:9c:ce:6a:29:38:a0:5d:80:f1:2c:be:
         7e:7e:f8:bd:d3:71:88:4f:c2:b4:a5:54:d2:81:7b:a1:e2:95:
         0b:16:9c:28:90:39:f8:2f:b5:1c:95:26:d8:c8:06:f1:f0:f1:
         21:93:ce:ea:23:68:e1:a0:a2:3e:3f:54:9f:b9:26:0d:82:07:
         8c:c7:84:e5:46:e6:71:47:a3:05:b4:00:10:d7:2c:46:f3:70:
         59:26:2e:eb:8e:fc:2f:29:35:23:6e:d3:58:19:4d:6d:a7:79:
         9f:71:2b:e1:26:67:83:b5:23:7f:85:e9:55:16:95:34:91:2d:
         c5:2c:d3:98:3f:05:7d:0a:97:c1:26:1d:3b:1f:0e:78:30:a6:
         95:0d:5b:7d:26:5d:18:27:af:22:d1:35:ef:fc:32:3f:75:d3:
         66:c3:3d:5a:2d:7a:21:4f:07:a4:6b:bb:97:2c:6e:39:00:a0:
         36:04:70:df:41:42:2c:89:95:c3:66:66:ed:a0:1d:b1:95:b6:
         d5:17:58:89:0b:a1:c5:cb:ad:34:c5:19:74:bf:66:19:ee:55:
         1b:d5:f9:db:cc:cc:8d:c1:bb:ff:1f:28:f6:4b:15:84:0d:5a:
         90:68:ce:2c:a8:bc:5f:fd:8c:80:d5:6b:f9:e3:10:6c:5a:fe:
         2c:35:62:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYeK0/Ghw+xv693eQdaSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjUwNjE0MDMwMDQzWhcNMjUwNjE1MDMwMDQzWjAzMTEwLwYDVQQD
EyhlNDUyMmYyMzk5NjQwYzI0NmEwNGEzOTYyODU1ZDdkZDc1MWIzMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTSEOF+lyGEyi3uGcL58VQgR0jJR
jlFm71hjglOhPsZxw5r9nrI1rWKFrzt7Jpvh8Yu9IFuCyKlEBDY+2Sz0ruCjxXSP
LFXVAjI04D0H+MHzDfm8YKsH0hgzdfoazwDke14yJLk6q1D8bhTMbXT/dVCpDpNF
KnK197AlLoXWDUuUoSlHkrT5ds/d9xermxZymZWjGB/rLamRtURWR9mK/o2bO/Zv
PGs3tQz7Cl8BM9Iq/YPcN+GgpvbV5mbQ+ZOWDlWhWJ83MH7v/7WcA17oKOAq4b2h
8BQe1xHxaBWYTAQVyUjnCl1XazRz6YUpXWvHKm2gk6eTF24/a7j/cq2WMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORSLyOZZAwkagSjlihV1911GzN0MB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn2VRfu8
bZzOaik4oF2A8Sy+fn74vdNxiE/CtKVU0oF7oeKVCxacKJA5+C+1HJUm2MgG8fDx
IZPO6iNo4aCiPj9Un7kmDYIHjMeE5UbmcUejBbQAENcsRvNwWSYu6478Lyk1I27T
WBlNbad5n3Er4SZng7Ujf4XpVRaVNJEtxSzTmD8FfQqXwSYdOx8OeDCmlQ1bfSZd
GCevItE17/wyP3XTZsM9Wi16IU8HpGu7lyxuOQCgNgRw30FCLImVw2Zm7aAdsZW2
1RdYiQuhxcutNMUZdL9mGe5VG9X528zMjcG7/x8o9ksVhA1akGjOLKi8X/2MgNVr
+eMQbFr+LDViFw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:41 2025 by rpki-client