Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          aZMXbhgSG1v9C6aX1dPFFMzG7HBEdl2C179s0JUYHMk=
Subject key identifier:   57:38:3A:A1:5B:DA:00:D9:7F:46:67:E9:73:28:8D:DF:B6:8F:EE:FD
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       01967DFC93B88115826411E743B3BCC83F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          044D
Signing time:             Mon 28 Apr 2025 20:00:26 +0000
Manifest this update:     Mon 28 Apr 2025 20:00:26 +0000
Manifest next update:     Tue 29 Apr 2025 20:00:26 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          3: Rb4b2fJCublE-IL8HhGXicF9sEM.roa (hash: PyYAOqircy60MPWz4V06L7QvOxOEimKDajTYlawGVcc=)
                          4: TqZcftukadCZ12qs19wmP03-xes.crl (hash: 7QVRsiX4n5u/jhOKGj58BaEVualAkaQaFktmold/Yqg=)
                          5: VuQJMzsFIREp6bcpzuh2KiinwdM.roa (hash: h5bgZWq9bx9jHDxasYLYkys54j2HtJgByCCvySMD0lM=)
                          6: nPr9uZx_D8jJFj15etiyotIJZFA.roa (hash: pbSWt6WwR9cxpCQXd7EkLbNcjMbaXCcbiCmqJC5x8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:fc:93:b8:81:15:82:64:11:e7:43:b3:bc:c8:3f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Apr 28 20:00:26 2025 GMT
            Not After : Apr 29 20:00:26 2025 GMT
        Subject: CN=57383aa15bda00d97f4667e973288ddfb68feefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bf:a1:a7:03:57:88:55:2f:a5:03:c1:31:17:
                    97:9f:80:c2:09:4e:fd:f4:ad:b4:8a:39:a7:83:c1:
                    e0:57:be:cd:6b:0f:41:be:90:6b:5c:06:9e:17:0f:
                    5b:b2:59:52:cc:c2:05:c9:9c:81:25:34:09:4e:55:
                    b1:e3:dd:67:20:40:da:33:7d:0a:7f:bf:29:9d:fa:
                    a2:a5:6f:67:2c:34:ea:eb:79:da:bc:41:89:d9:e8:
                    c3:d8:f7:5d:ea:72:d2:62:a3:a8:b4:3e:bb:a2:e0:
                    d9:ab:37:7d:c7:68:98:30:18:3a:59:b8:2a:80:87:
                    8d:81:87:eb:40:34:c0:03:6c:20:a2:03:07:63:b8:
                    6d:71:bc:84:b2:29:9f:1a:c1:ff:5d:86:49:92:17:
                    fb:51:6e:64:46:c9:53:04:cd:a9:0b:f8:71:be:7b:
                    0e:a4:9c:6d:0b:a8:64:8f:9a:e9:3a:f3:57:b4:4e:
                    db:d7:77:4a:61:6f:fa:f4:f6:77:89:9b:fa:38:f8:
                    1a:95:99:51:90:b9:ee:68:a5:9f:19:e3:f4:f0:c7:
                    90:3f:24:b5:42:fc:2d:dc:b6:a4:a2:c4:4a:3e:30:
                    6f:14:bb:f9:fc:86:40:f4:61:60:c8:a8:a1:6d:11:
                    fa:0e:72:ae:3a:0b:bb:3e:2a:3a:01:9e:94:44:3b:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:38:3A:A1:5B:DA:00:D9:7F:46:67:E9:73:28:8D:DF:B6:8F:EE:FD
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e0:09:e6:d5:91:14:89:72:8a:03:b9:1a:8c:e9:55:14:f0:
         ee:1d:7e:93:74:d2:ca:98:5f:28:3a:fd:f1:7a:c1:c0:0b:e1:
         f4:7e:0d:ec:de:03:9b:d6:bc:06:35:7e:69:43:c6:8c:5b:16:
         e9:50:8c:e7:bc:8e:e0:30:a1:2e:9c:3c:54:e0:7a:81:0f:7b:
         3e:6d:ea:da:c8:e9:d0:b3:ad:72:57:a6:3b:de:0f:61:0c:4d:
         9f:75:d3:65:7a:5a:b1:56:d3:33:87:85:9d:35:92:33:b2:7a:
         a3:07:82:35:45:05:32:2f:21:29:41:c7:ce:8d:da:99:5b:6c:
         e9:e3:66:ad:d9:69:02:68:31:ef:9b:9e:d1:f9:95:b8:fd:53:
         1b:83:4b:8a:86:ed:60:f2:32:d9:df:e1:ea:e7:f6:c2:ad:7c:
         6b:e9:eb:1a:3d:0c:f3:1e:38:63:83:b8:64:98:82:9d:92:f3:
         b6:19:e0:29:4a:de:d9:ac:12:9a:a2:1e:7c:05:ab:c8:58:74:
         7f:f6:65:66:c5:32:57:a0:57:a6:8c:fb:58:b7:8b:0e:78:36:
         9d:30:46:2f:30:9d:5e:c2:95:79:f6:81:db:46:ed:d8:32:b9:
         c4:bd:db:90:f2:b1:1d:bf:6d:3c:37:a1:f5:b2:95:0b:c5:58:
         0b:f6:cc:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9/JO4gRWCZBHnQ7O8yD+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTY1YzdlZGJhNDY5ZDA5OWQ3NmFhY2Q3ZGMyNjNmNGRm
ZWM1ZWIwHhcNMjUwNDI4MjAwMDI2WhcNMjUwNDI5MjAwMDI2WjAzMTEwLwYDVQQD
Eyg1NzM4M2FhMTViZGEwMGQ5N2Y0NjY3ZTk3MzI4OGRkZmI2OGZlZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L+hpwNXiFUvpQPBMReXn4DCCU79
9K20ijmng8HgV77Naw9BvpBrXAaeFw9bsllSzMIFyZyBJTQJTlWx491nIEDaM30K
f78pnfqipW9nLDTq63navEGJ2ejD2Pdd6nLSYqOotD67ouDZqzd9x2iYMBg6Wbgq
gIeNgYfrQDTAA2wgogMHY7htcbyEsimfGsH/XYZJkhf7UW5kRslTBM2pC/hxvnsO
pJxtC6hkj5rpOvNXtE7b13dKYW/69PZ3iZv6OPgalZlRkLnuaKWfGeP08MeQPyS1
Qvwt3LakosRKPjBvFLv5/IZA9GFgyKihbRH6DnKuOgu7Pio6AZ6URDs6FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc4OqFb2gDZf0Zn6XMojd+2j+79MB8GA1UdIwQY
MBaAFE6mXH7bpGnQmddqrNfcJj9N/sXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYt
NTEwMGEyNmQyNzRiLzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYtNTEwMGEyNmQyNzRi
LzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+AJ5tWR
FIlyigO5GozpVRTw7h1+k3TSyphfKDr98XrBwAvh9H4N7N4Dm9a8BjV+aUPGjFsW
6VCM57yO4DChLpw8VOB6gQ97Pm3q2sjp0LOtclemO94PYQxNn3XTZXpasVbTM4eF
nTWSM7J6oweCNUUFMi8hKUHHzo3amVts6eNmrdlpAmgx75ue0fmVuP1TG4NLiobt
YPIy2d/h6uf2wq18a+nrGj0M8x44Y4O4ZJiCnZLzthngKUre2awSmqIefAWryFh0
f/ZlZsUyV6BXpoz7WLeLDng2nTBGLzCdXsKVefaB20bt2DK5xL3bkPKxHb9tPDeh
9bKVC8VYC/bMdw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:12:05 2025 by rpki-client