Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          5EwtK5lNLGjmbcPFmC/4+8IqHu6jik3mvjIgcdxCYSE=
Subject key identifier:   79:C4:7C:36:25:D6:A2:32:66:03:64:F0:5B:F3:B2:1C:4D:FF:41:2C
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       01976F2C9F1D4C9746D94723A5D3FB91FEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 16:01:24 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:24 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:24 +0000
Files and hashes:         1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=)
                          2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=)
                          3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: F0corSIEsDoCVoi3bVVWIMYCR6fEvKxMRg9nR5ap+aM=)
                          4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=)
                          5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:9f:1d:4c:97:46:d9:47:23:a5:d3:fb:91:fe:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Jun 14 16:01:24 2025 GMT
            Not After : Jun 15 16:01:24 2025 GMT
        Subject: CN=79c47c3625d6a232660364f05bf3b21c4dff412c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:e8:4c:45:e9:54:e9:02:86:98:df:f1:7d:
                    fa:54:5d:2f:08:a3:08:9f:66:d5:2e:dd:65:25:a8:
                    ff:f6:52:fc:98:f7:9b:4a:12:47:8a:c5:e2:fc:9f:
                    53:a1:f4:9d:2a:bb:12:ff:41:92:a3:b8:58:2c:01:
                    c0:46:66:27:39:7e:b5:13:64:aa:a6:0a:f5:b7:e3:
                    13:58:d4:e9:4a:ef:2f:ea:70:a2:e8:9f:fd:1f:da:
                    0e:5b:f5:42:26:19:3a:ae:60:51:97:ab:b7:fb:7d:
                    55:43:52:c8:e7:5d:77:e1:2c:2e:30:74:92:c9:be:
                    5b:79:71:bb:0e:a8:bd:76:02:28:6b:5e:f8:dd:6c:
                    7f:5a:6e:7b:30:03:c7:97:2b:c4:a2:6f:fe:a6:4d:
                    25:26:97:ca:b6:43:d4:79:35:a1:4c:5c:d7:2e:39:
                    7d:f0:8d:b2:f2:69:00:fc:6d:c2:ef:47:30:41:64:
                    fd:bf:0d:b7:b1:09:ae:0b:6b:bc:31:df:e4:e7:0a:
                    e0:ce:2d:59:a0:87:36:6f:f2:bf:d4:5c:c7:f8:97:
                    f0:9f:e1:68:4d:05:2e:0f:a7:f0:82:e0:d6:f8:f8:
                    1b:54:c4:b9:d3:4b:03:27:bf:19:a1:36:aa:0b:8a:
                    bc:f7:b7:a7:bb:2d:d5:b0:bf:b4:19:d5:e9:d2:fa:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:7C:36:25:D6:A2:32:66:03:64:F0:5B:F3:B2:1C:4D:FF:41:2C
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:a2:5b:d9:f2:9b:ec:2d:40:fe:5d:53:7e:d0:4b:08:71:
         7d:38:f5:5b:50:ba:c7:6b:85:f6:af:c8:70:97:b8:25:5f:3a:
         ef:f2:0e:88:a8:5c:47:dd:84:08:54:5f:4a:16:ef:f9:46:d3:
         1c:48:76:e2:f7:85:b1:51:66:fc:3e:2c:ab:8e:d0:8a:ca:7f:
         83:0e:a5:8b:38:3a:7e:f2:fc:76:47:b3:00:6a:6f:db:5c:a0:
         94:22:a1:e4:56:b9:c3:88:a3:de:e5:b5:c3:a6:0a:4e:94:85:
         1e:3c:2d:ee:11:eb:b1:05:31:e3:87:74:1c:b8:df:fb:0f:ae:
         5f:c2:88:31:fd:72:32:f2:45:60:62:14:9e:2d:45:3b:a2:c1:
         5b:c6:27:66:44:9a:44:b9:04:aa:5a:35:bb:24:01:1e:e6:06:
         17:b3:11:f3:4a:df:41:dd:fc:52:96:24:7c:13:74:14:59:36:
         44:13:8a:1f:c9:e8:6b:1b:65:32:2e:da:d3:00:90:99:7a:6a:
         bb:6a:ee:f4:d3:56:1e:0c:e3:89:47:ba:b3:2d:f4:10:85:a2:
         45:ae:8c:72:29:f6:46:b1:e0:8d:d0:23:72:fb:76:f1:62:6f:
         91:f3:f8:01:0d:79:64:5d:79:06:57:07:7d:ad:05:c7:34:f8:
         5c:e0:cc:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLJ8dTJdG2UcjpdP7kf67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk
MGE4YzQwHhcNMjUwNjE0MTYwMTI0WhcNMjUwNjE1MTYwMTI0WjAzMTEwLwYDVQQD
Eyg3OWM0N2MzNjI1ZDZhMjMyNjYwMzY0ZjA1YmYzYjIxYzRkZmY0MTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK7oTEXpVOkChpjf8X36VF0vCKMI
n2bVLt1lJaj/9lL8mPebShJHisXi/J9TofSdKrsS/0GSo7hYLAHARmYnOX61E2Sq
pgr1t+MTWNTpSu8v6nCi6J/9H9oOW/VCJhk6rmBRl6u3+31VQ1LI51134SwuMHSS
yb5beXG7Dqi9dgIoa1743Wx/Wm57MAPHlyvEom/+pk0lJpfKtkPUeTWhTFzXLjl9
8I2y8mkA/G3C70cwQWT9vw23sQmuC2u8Md/k5wrgzi1ZoIc2b/K/1FzH+Jfwn+Fo
TQUuD6fwguDW+PgbVMS500sDJ78ZoTaqC4q897enuy3VsL+0GdXp0voHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnEfDYl1qIyZgNk8FvzshxN/0EsMB8GA1UdIwQY
MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt
ODY2YjJiMDIxZmM1LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1
LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWGiW9ny
m+wtQP5dU37QSwhxfTj1W1C6x2uF9q/IcJe4JV867/IOiKhcR92ECFRfShbv+UbT
HEh24veFsVFm/D4sq47Qisp/gw6lizg6fvL8dkezAGpv21yglCKh5Fa5w4ij3uW1
w6YKTpSFHjwt7hHrsQUx44d0HLjf+w+uX8KIMf1yMvJFYGIUni1FO6LBW8YnZkSa
RLkEqlo1uyQBHuYGF7MR80rfQd38UpYkfBN0FFk2RBOKH8noaxtlMi7a0wCQmXpq
u2ru9NNWHgzjiUe6sy30EIWiRa6Mcin2RrHgjdAjcvt28WJvkfP4AQ15ZF15BlcH
fa0FxzT4XODMyA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:42 2025 by rpki-client