Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
File:                     Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json)
Hash identifier:          c7l2o3Y5wTw9x/a6zcLd+y7A5GKrksKet/bqmPQrfa0=
Subject key identifier:   D0:B3:BD:E4:89:31:48:DD:FE:B7:E5:27:D5:2A:A5:13:22:E7:A3:40
Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Certificate issuer:       /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Certificate serial:       0198816808EB353AFDAC91A0497F1FD657D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
Manifest number:          096A
Signing time:             Wed 06 Aug 2025 22:02:15 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:15 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:15 +0000
Files and hashes:         1: 1hk2beP_0noowMbOmNtoNb3trEI.roa (hash: yPaUkjXMWXPL0Y518Fz9alSB7qRK1+1Dm8ayCL/j/eg=)
                          2: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: +mEJrJuPDrBF8JQs7y3KmiV+MSFGZrkxt/scrliVn/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:08:eb:35:3a:fd:ac:91:a0:49:7f:1f:d6:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
        Validity
            Not Before: Aug  6 22:02:15 2025 GMT
            Not After : Aug  7 22:02:15 2025 GMT
        Subject: CN=d0b3bde4893148ddfeb7e527d52aa51322e7a340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:f6:7f:62:ea:42:cf:a6:93:a4:f4:b3:92:
                    93:b3:88:70:20:35:d6:89:29:fd:e5:1b:f8:43:5f:
                    d6:1a:79:a6:07:29:47:4a:bd:01:9d:3d:5e:25:d7:
                    c6:53:59:46:0b:95:a2:99:c6:1a:2f:b9:c6:fc:a9:
                    9b:dd:49:fc:67:31:17:40:8f:fc:da:93:71:af:ae:
                    9b:bf:68:70:ca:7e:a2:86:e4:2b:1c:2e:1a:a6:c1:
                    c3:15:21:64:c3:85:0c:a3:5b:8a:68:74:c4:40:c2:
                    7e:4b:c9:bc:19:be:17:50:c4:cf:fa:00:8d:ee:0a:
                    1c:ef:ca:b5:35:f3:55:52:a3:9e:d1:62:0e:eb:06:
                    71:4d:29:9b:da:33:df:19:5b:50:5c:c4:5e:99:6b:
                    e4:40:bc:c4:40:34:fa:51:36:2c:66:05:05:a7:80:
                    fb:d9:66:35:2c:b7:61:12:aa:1e:80:ed:7f:8b:cd:
                    c9:ec:9b:b6:a4:9e:e5:a3:4e:4f:02:10:3e:42:c2:
                    e0:78:a1:15:7c:ad:cc:49:7f:56:dc:c9:c0:b3:70:
                    8a:98:a9:d2:f5:29:a7:12:4d:60:7c:49:10:3d:b0:
                    cf:f5:13:e1:58:76:bf:b4:38:f4:66:bf:4d:69:e0:
                    bd:c0:ff:95:28:3f:7f:95:b1:fd:e7:92:59:2b:bc:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:BD:E4:89:31:48:DD:FE:B7:E5:27:D5:2A:A5:13:22:E7:A3:40
            X509v3 Authority Key Identifier:
                keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:06:e3:f3:c6:af:b8:59:b9:26:0b:5f:69:7e:27:7b:75:f8:
         4a:27:ad:23:7d:26:a2:80:db:d0:c8:af:9e:dd:87:c4:07:8b:
         a6:1c:33:c3:85:33:5f:b2:2a:aa:97:d5:ce:94:86:1d:02:6a:
         72:8c:b3:d1:90:1a:77:6b:49:ce:2f:f4:50:50:81:3d:1e:63:
         ee:64:9b:5f:75:6b:b2:a8:1e:d2:15:ba:61:0c:e3:00:fa:99:
         ee:e3:62:1c:f0:be:85:f0:e8:c4:cb:95:6a:63:10:33:83:bd:
         88:8d:1b:0a:7b:64:c1:30:bd:df:1d:83:3c:74:2f:50:ec:72:
         dc:ba:84:95:fe:b3:64:ab:c6:72:ab:88:59:d9:98:75:c4:69:
         bb:e4:b4:cf:bb:ce:c7:a5:95:bf:f2:f2:6a:b3:6d:5d:b4:53:
         12:e8:cd:f8:a4:58:e3:6a:5f:0e:6c:ea:c4:f1:8f:95:de:b7:
         20:c7:19:81:8c:63:95:d6:04:d2:0f:3e:1a:eb:70:c7:bf:83:
         33:a4:c0:f5:ea:99:8e:d6:4d:c7:7c:ac:13:2a:45:59:74:c4:
         72:e6:b6:1e:f2:38:9b:45:fe:c5:cc:54:3a:ab:bb:de:22:95:
         33:5c:f7:8d:41:80:e5:f8:5a:e1:23:bd:e5:1b:97:3f:5b:98:
         74:b3:d6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaAjrNTr9rJGgSX8f1lfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZmU1NWU2Mjg4YTFiNDcwMmY5ZWJlN2Y4YzYwNjBiNmNm
YmIxYmMwHhcNMjUwODA2MjIwMjE1WhcNMjUwODA3MjIwMjE1WjAzMTEwLwYDVQQD
EyhkMGIzYmRlNDg5MzE0OGRkZmViN2U1MjdkNTJhYTUxMzIyZTdhMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0n2f2LqQs+mk6T0s5KTs4hwIDXW
iSn95Rv4Q1/WGnmmBylHSr0BnT1eJdfGU1lGC5WimcYaL7nG/Kmb3Un8ZzEXQI/8
2pNxr66bv2hwyn6ihuQrHC4apsHDFSFkw4UMo1uKaHTEQMJ+S8m8Gb4XUMTP+gCN
7goc78q1NfNVUqOe0WIO6wZxTSmb2jPfGVtQXMRemWvkQLzEQDT6UTYsZgUFp4D7
2WY1LLdhEqoegO1/i83J7Ju2pJ7lo05PAhA+QsLgeKEVfK3MSX9W3MnAs3CKmKnS
9SmnEk1gfEkQPbDP9RPhWHa/tDj0Zr9NaeC9wP+VKD9/lbH955JZK7zQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCzveSJMUjd/rflJ9UqpRMi56NAMB8GA1UdIwQY
MBaAFEL+VeYoihtHAvnr5/jGBgts+7G8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEt
ZDYxOTBjY2Y3ODU3LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEtZDYxOTBjY2Y3ODU3
LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAbj88av
uFm5JgtfaX4ne3X4SietI30mooDb0Mivnt2HxAeLphwzw4UzX7IqqpfVzpSGHQJq
coyz0ZAad2tJzi/0UFCBPR5j7mSbX3Vrsqge0hW6YQzjAPqZ7uNiHPC+hfDoxMuV
amMQM4O9iI0bCntkwTC93x2DPHQvUOxy3LqElf6zZKvGcquIWdmYdcRpu+S0z7vO
x6WVv/LyarNtXbRTEujN+KRY42pfDmzqxPGPld63IMcZgYxjldYE0g8+Gutwx7+D
M6TA9eqZjtZNx3ysEypFWXTEcua2HvI4m0X+xcxUOqu73iKVM1z3jUGA5fha4SO9
5RuXP1uYdLPWMQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:03 2025 by rpki-client