Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File:                     qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier:          +A2uKWXY5tTJ3/gGNdNQVo4yKJRj4XsplAIERVehlTs=
Subject key identifier:   F4:CF:E1:FB:AE:7D:6A:BE:4F:02:FD:F6:BC:7E:5A:98:D7:EE:5F:A0
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer:       /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial:       01976F9995262F91C910C1CC8F4B5D7FFA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number:          126F
Signing time:             Sat 14 Jun 2025 18:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:25 +0000
Files and hashes:         1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
                          2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
                          3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
                          4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: fTErvaThu0ML/1bf2lnzh9wPYWHc9w1Y1CbXlxuD4rM=)
                          5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:95:26:2f:91:c9:10:c1:cc:8f:4b:5d:7f:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
        Validity
            Not Before: Jun 14 18:00:25 2025 GMT
            Not After : Jun 15 18:00:25 2025 GMT
        Subject: CN=f4cfe1fbae7d6abe4f02fdf6bc7e5a98d7ee5fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:7a:83:e7:2d:85:06:f2:6b:10:2d:1e:34:
                    31:a8:a1:41:f6:84:8a:d2:57:ab:cb:7c:7b:ad:60:
                    ee:87:96:ba:0e:c2:04:d2:bf:f2:74:cf:25:0a:4b:
                    84:36:b2:30:d5:62:de:18:a0:33:8f:51:5b:cf:04:
                    fb:9f:ac:f2:87:3f:d6:ab:f8:41:d8:54:6f:9d:b8:
                    71:e9:80:c4:9a:0f:bc:97:0c:71:30:b6:94:e6:f8:
                    c6:25:32:0e:32:9b:44:bd:b3:d1:65:17:ec:35:03:
                    9b:49:41:10:cd:bd:83:5f:ae:db:e6:46:7d:de:ab:
                    47:60:36:f1:f6:ca:67:a2:bb:b3:78:4b:02:19:bf:
                    15:d6:34:12:fd:1f:7d:6b:8e:9a:5d:62:9f:c6:1d:
                    d9:ea:84:51:03:f4:35:18:c1:01:41:65:72:3d:0a:
                    91:de:86:e4:b5:d4:28:2d:46:8d:79:14:8f:6b:43:
                    73:11:aa:31:e1:f0:bd:ab:06:6b:b4:f5:1d:64:27:
                    a0:ea:cf:14:a5:9b:12:cb:c2:93:b3:a8:d1:48:4f:
                    0a:39:9d:08:49:f9:71:2f:17:d4:ff:1a:95:17:ad:
                    5d:0f:87:37:d2:92:fb:2f:23:7c:6d:e6:af:46:9d:
                    08:3e:1c:17:43:38:5f:ff:bf:57:95:04:c9:56:a1:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:E1:FB:AE:7D:6A:BE:4F:02:FD:F6:BC:7E:5A:98:D7:EE:5F:A0
            X509v3 Authority Key Identifier:
                keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:e3:aa:06:ea:da:07:29:a5:0d:ae:22:77:7e:21:57:ac:
         3d:16:69:78:3b:06:9b:5b:1e:c8:78:09:87:15:6f:cd:5e:10:
         99:60:c9:26:a7:18:2d:aa:37:c5:60:be:f6:35:b1:45:ea:08:
         ad:88:fd:1d:03:04:76:f3:b9:b5:44:fb:7d:2e:17:f6:9b:d7:
         4f:59:42:01:7e:f5:b8:82:81:bf:68:fb:bb:4d:0c:97:20:4f:
         4e:5f:11:b7:fc:46:16:d1:e7:0e:38:5a:45:a2:c0:cb:ed:fc:
         4f:7c:bb:1b:51:13:f2:c5:98:7e:98:fe:8d:d2:b3:d5:2f:22:
         80:93:4d:25:b5:12:61:4b:60:83:0a:bb:c7:a3:20:0d:9e:9b:
         28:36:51:e2:68:32:42:ef:4c:38:41:ed:b4:32:9f:41:f9:b5:
         c1:8d:f2:38:ad:0e:b9:1e:23:22:ae:c3:f7:d8:ef:30:8e:1e:
         de:12:e1:8c:7a:4e:37:d3:1b:eb:8b:fc:ef:95:5e:a7:c4:71:
         0e:33:83:38:ff:c8:d1:a8:c1:1d:79:63:3b:34:84:8e:bb:24:
         e8:45:20:20:9f:51:15:d8:85:0f:c8:74:cd:d0:e6:d7:7c:90:
         d3:28:48:db:38:4f:85:c1:7c:7d:39:c5:98:ca:c6:19:09:68:
         c2:e1:4e:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmZUmL5HJEMHMj0tdf/o/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi
MWIwNjYwHhcNMjUwNjE0MTgwMDI1WhcNMjUwNjE1MTgwMDI1WjAzMTEwLwYDVQQD
EyhmNGNmZTFmYmFlN2Q2YWJlNGYwMmZkZjZiYzdlNWE5OGQ3ZWU1ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzct6g+cthQbyaxAtHjQxqKFB9oSK
0lery3x7rWDuh5a6DsIE0r/ydM8lCkuENrIw1WLeGKAzj1FbzwT7n6zyhz/Wq/hB
2FRvnbhx6YDEmg+8lwxxMLaU5vjGJTIOMptEvbPRZRfsNQObSUEQzb2DX67b5kZ9
3qtHYDbx9spnoruzeEsCGb8V1jQS/R99a46aXWKfxh3Z6oRRA/Q1GMEBQWVyPQqR
3obktdQoLUaNeRSPa0NzEaox4fC9qwZrtPUdZCeg6s8UpZsSy8KTs6jRSE8KOZ0I
SflxLxfU/xqVF61dD4c30pL7LyN8beavRp0IPhwXQzhf/79XlQTJVqE8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTP4fuufWq+TwL99rx+WpjX7l+gMB8GA1UdIwQY
MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt
ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj
LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaTjqgbq
2gcppQ2uInd+IVesPRZpeDsGm1seyHgJhxVvzV4QmWDJJqcYLao3xWC+9jWxReoI
rYj9HQMEdvO5tUT7fS4X9pvXT1lCAX71uIKBv2j7u00MlyBPTl8Rt/xGFtHnDjha
RaLAy+38T3y7G1ET8sWYfpj+jdKz1S8igJNNJbUSYUtggwq7x6MgDZ6bKDZR4mgy
Qu9MOEHttDKfQfm1wY3yOK0OuR4jIq7D99jvMI4e3hLhjHpON9Mb64v875Vep8Rx
DjODOP/I0ajBHXljOzSEjrsk6EUgIJ9RFdiFD8h0zdDm13yQ0yhI2zhPhcF8fTnF
mMrGGQlowuFO2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:52 2025 by rpki-client