Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          lcg6lg1zXQeA1ipqCSjgUyyNgmwXLI8QiRaZkAbuXMA=
Subject key identifier:   61:FE:5A:FA:5B:0C:98:F8:85:BC:32:D6:FC:27:79:A8:9B:8C:8B:E2
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       01976D743B5A4DF0C71D17602006D67BA4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0A21
Signing time:             Sat 14 Jun 2025 08:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:23 +0000
Files and hashes:         1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: xxDd1rOXMf3oOnUvfnQaD/YNGReoiZtvyYp20MjqCvQ=)
                          2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:3b:5a:4d:f0:c7:1d:17:60:20:06:d6:7b:a4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Jun 14 08:00:23 2025 GMT
            Not After : Jun 15 08:00:23 2025 GMT
        Subject: CN=61fe5afa5b0c98f885bc32d6fc2779a89b8c8be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:be:65:4a:90:c7:c1:31:65:97:02:ae:eb:
                    42:b7:07:93:fc:04:c8:9d:2f:fe:db:e9:90:5d:9a:
                    e0:82:00:5f:32:cc:0d:e3:ee:ad:cc:9f:70:b8:00:
                    ea:bf:9d:8d:f8:58:95:10:00:e9:dd:bf:26:e2:11:
                    3e:63:7d:f5:a7:0f:66:7c:34:fa:5e:62:77:12:dc:
                    be:31:66:3e:fc:c8:16:01:f0:da:26:9a:78:65:f6:
                    46:e0:29:46:03:16:8c:b5:42:7b:de:00:ce:6d:a9:
                    c6:30:e4:77:b5:a3:ac:75:a0:98:ac:ea:1a:77:a4:
                    b4:50:f7:66:3d:d8:ae:58:30:f1:06:07:aa:f2:fe:
                    a8:c0:39:ce:25:ec:34:83:ce:ac:f0:e8:f2:b5:f6:
                    21:6b:08:a2:18:18:96:ba:62:56:fa:ed:1d:a0:d5:
                    48:71:81:f9:89:e9:a1:56:67:8e:bc:ce:eb:68:e2:
                    54:d2:49:f4:fc:07:5d:2d:7e:12:a3:6e:d2:88:bd:
                    e3:2d:a3:e9:2d:cd:94:62:b6:99:33:86:df:24:b2:
                    71:e6:b2:e1:26:02:9c:0f:83:cb:54:31:ca:53:a8:
                    5e:63:cd:c9:5d:0e:5c:7e:fa:4e:3a:99:05:23:e6:
                    6a:5e:2d:c9:6a:8e:21:d3:49:e1:4e:c5:f9:14:11:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FE:5A:FA:5B:0C:98:F8:85:BC:32:D6:FC:27:79:A8:9B:8C:8B:E2
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:72:ee:0a:2b:6e:8d:3d:da:c2:57:ad:ea:ec:eb:99:74:
         ae:c8:94:06:d9:4f:7c:8a:76:f9:b9:36:4d:24:ca:8d:ae:65:
         c9:7a:56:52:92:4c:c4:6e:91:20:14:c9:74:02:d5:32:d3:12:
         47:37:f2:99:d1:77:45:2f:77:4c:21:d0:b9:05:50:6f:d6:34:
         a4:15:45:93:db:5f:5e:6c:7a:49:da:4c:4e:90:3a:11:6e:7e:
         b5:2c:55:ec:a9:b3:c6:7f:7c:b6:eb:93:9c:49:ae:e3:7d:d7:
         db:8d:ac:a6:42:a6:2c:dd:ce:f5:67:2a:20:cb:da:e9:7c:dc:
         80:30:e3:05:13:ff:8b:e1:01:8c:8a:a2:9d:4a:65:c6:80:0a:
         f0:bd:78:79:e6:75:a0:b4:b2:ba:b5:2a:01:1a:3d:37:19:40:
         ad:09:e0:21:b2:d3:7f:c5:00:81:87:a9:80:5d:fc:26:54:69:
         d8:5f:62:96:50:58:cf:43:81:a2:ac:a0:25:af:35:99:80:e7:
         cf:da:bf:65:8d:c8:34:a9:4d:5c:55:d6:b8:a8:4a:a6:60:18:
         cd:6d:a1:8f:e2:30:3f:22:b6:9b:6b:5d:f0:76:3a:8b:90:9e:
         66:3e:30:94:e4:63:bc:3c:48:62:c2:8e:9c:e1:b5:ea:95:78:
         2b:68:37:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdDtaTfDHHRdgIAbWe6TcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjUwNjE0MDgwMDIzWhcNMjUwNjE1MDgwMDIzWjAzMTEwLwYDVQQD
Eyg2MWZlNWFmYTViMGM5OGY4ODViYzMyZDZmYzI3NzlhODliOGM4YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8G+ZUqQx8ExZZcCrutCtweT/ATI
nS/+2+mQXZrgggBfMswN4+6tzJ9wuADqv52N+FiVEADp3b8m4hE+Y331pw9mfDT6
XmJ3Ety+MWY+/MgWAfDaJpp4ZfZG4ClGAxaMtUJ73gDObanGMOR3taOsdaCYrOoa
d6S0UPdmPdiuWDDxBgeq8v6owDnOJew0g86s8OjytfYhawiiGBiWumJW+u0doNVI
cYH5iemhVmeOvM7raOJU0kn0/AddLX4So27SiL3jLaPpLc2UYraZM4bfJLJx5rLh
JgKcD4PLVDHKU6heY83JXQ5cfvpOOpkFI+ZqXi3Jao4h00nhTsX5FBH2YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH+WvpbDJj4hbwy1vwneaibjIviMB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+dy7gor
bo092sJXrers65l0rsiUBtlPfIp2+bk2TSTKja5lyXpWUpJMxG6RIBTJdALVMtMS
RzfymdF3RS93TCHQuQVQb9Y0pBVFk9tfXmx6SdpMTpA6EW5+tSxV7Kmzxn98tuuT
nEmu433X242spkKmLN3O9WcqIMva6XzcgDDjBRP/i+EBjIqinUplxoAK8L14eeZ1
oLSyurUqARo9NxlArQngIbLTf8UAgYepgF38JlRp2F9illBYz0OBoqygJa81mYDn
z9q/ZY3INKlNXFXWuKhKpmAYzW2hj+IwPyK2m2td8HY6i5CeZj4wlORjvDxIYsKO
nOG16pV4K2g3Vw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:24 2025 by rpki-client