Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File:                     qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier:          r30ryphIz2O5Xxo1twJaH5GAQHTG40ve3Sw84nBfENA=
Subject key identifier:   8E:24:C6:33:12:5C:B0:3B:55:CB:22:34:31:93:54:28:9C:8A:78:23
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer:       /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial:       0196729DB8BD55E7DB7384D9DC9A133704E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number:          098F
Signing time:             Sat 26 Apr 2025 15:01:00 +0000
Manifest this update:     Sat 26 Apr 2025 15:01:00 +0000
Manifest next update:     Sun 27 Apr 2025 15:01:00 +0000
Files and hashes:         1: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: Wq8gISvfZhAXwnV3C2CS4jgRzZsPqjg2HQdamu0p5U4=)
                          2: svg34J6rFMVB3i_8SEjkmyJCwjg.roa (hash: sxr7df0i+WFpR1Zcb5aW78WjZKAtxDkC7tuYAw5Z5pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:b8:bd:55:e7:db:73:84:d9:dc:9a:13:37:04:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
        Validity
            Not Before: Apr 26 15:01:00 2025 GMT
            Not After : Apr 27 15:01:00 2025 GMT
        Subject: CN=8e24c633125cb03b55cb2234319354289c8a7823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:d6:c8:4e:8b:32:ab:20:8a:79:0d:b9:5d:
                    12:5a:12:e5:42:1c:c4:1e:73:39:45:7a:4d:70:cd:
                    51:43:02:6f:77:18:a9:46:4a:1c:52:93:c6:de:85:
                    de:b3:bf:bc:bc:8f:d1:a9:02:7c:be:88:e4:bc:ee:
                    ad:05:71:13:84:79:39:1d:f8:c1:8f:bd:d0:26:14:
                    9f:a9:b0:4f:05:a4:57:f9:c1:50:8b:0c:e8:de:ba:
                    27:0d:45:29:4a:c4:64:6c:3c:ed:21:d7:d8:06:95:
                    a1:f8:46:58:0d:38:6f:5a:0b:f0:41:f4:fa:bf:b3:
                    37:0a:89:c5:a5:17:e3:bb:b7:63:14:7b:40:87:66:
                    93:c0:56:a4:5a:8e:90:10:6e:d5:0e:1e:32:00:92:
                    7d:43:d6:f2:87:9a:21:7b:d2:3b:2c:78:0f:0c:3e:
                    96:a1:76:78:82:25:4c:87:11:9c:3e:5d:06:41:82:
                    65:c4:30:8c:c7:fe:f1:51:b8:6c:61:3b:6f:20:77:
                    47:1d:8d:ce:01:7d:a0:e8:ff:cc:20:60:b0:81:de:
                    28:f6:8a:2f:71:47:ef:7f:63:cd:e4:83:6b:45:dd:
                    66:1e:61:95:ba:0b:82:0f:35:dc:8c:c4:0b:01:0d:
                    7d:68:50:57:9b:f1:1e:20:d8:67:d3:42:6a:8c:d0:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:24:C6:33:12:5C:B0:3B:55:CB:22:34:31:93:54:28:9C:8A:78:23
            X509v3 Authority Key Identifier:
                keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:60:de:80:69:ee:07:46:cb:09:0c:3a:6c:f3:c7:8d:2d:b3:
         1c:52:d0:3f:50:4e:83:01:24:5a:e3:45:bd:8e:26:e8:6e:6e:
         ba:d0:3a:96:13:34:3e:dc:5a:01:a4:87:1c:d5:0a:7c:5b:e2:
         e1:c6:09:71:9a:6b:3a:7c:ba:52:79:1b:7d:9e:67:4b:be:c6:
         fa:b8:a6:c7:7f:3f:79:8c:7d:e8:54:f6:36:8e:eb:d8:d7:06:
         11:16:51:a8:7b:34:3a:e4:48:3b:ea:a5:5e:85:1a:45:9b:00:
         fa:46:a6:4f:c2:ad:64:3c:de:4f:a2:b3:89:cf:a6:19:da:aa:
         bd:49:45:b3:87:d6:33:68:03:95:3a:1d:dd:81:c2:f1:2a:74:
         57:30:9a:eb:73:77:bc:dc:fd:69:e3:11:12:a7:89:0f:5b:61:
         9d:43:52:44:27:73:53:8e:53:6b:26:41:5d:d5:4f:2c:0b:b6:
         01:dd:54:a0:84:d1:44:34:b2:46:9c:88:d0:04:58:83:ca:d5:
         df:7d:3e:4e:7f:a2:47:dc:c6:21:62:1e:9e:dd:e2:b3:2c:ec:
         5e:c7:ab:66:bd:5f:02:33:54:db:b6:95:b3:e9:e8:d1:47:ad:
         5e:93:9f:a0:7b:06:05:cd:3b:cf:0a:36:8c:3f:e3:fc:4c:53:
         9b:20:bc:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynbi9Vefbc4TZ3JoTNwTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTMxNDU5MmVmNWVhOGJiZTg0ZDA2NGIyNTYxNzFmZTJh
ZmM4M2UwHhcNMjUwNDI2MTUwMTAwWhcNMjUwNDI3MTUwMTAwWjAzMTEwLwYDVQQD
Eyg4ZTI0YzYzMzEyNWNiMDNiNTVjYjIyMzQzMTkzNTQyODljOGE3ODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX/WyE6LMqsginkNuV0SWhLlQhzE
HnM5RXpNcM1RQwJvdxipRkocUpPG3oXes7+8vI/RqQJ8vojkvO6tBXEThHk5HfjB
j73QJhSfqbBPBaRX+cFQiwzo3ronDUUpSsRkbDztIdfYBpWh+EZYDThvWgvwQfT6
v7M3ConFpRfju7djFHtAh2aTwFakWo6QEG7VDh4yAJJ9Q9byh5ohe9I7LHgPDD6W
oXZ4giVMhxGcPl0GQYJlxDCMx/7xUbhsYTtvIHdHHY3OAX2g6P/MIGCwgd4o9oov
cUfvf2PN5INrRd1mHmGVuguCDzXcjMQLAQ19aFBXm/EeINhn00JqjNASzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4kxjMSXLA7VcsiNDGTVCicingjMB8GA1UdIwQY
MBaAFKqjFFku9eqLvoTQZLJWFx/ir8g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYt
ZjBkZjIzODk4ZjY0LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYtZjBkZjIzODk4ZjY0
LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2DegGnu
B0bLCQw6bPPHjS2zHFLQP1BOgwEkWuNFvY4m6G5uutA6lhM0PtxaAaSHHNUKfFvi
4cYJcZprOny6UnkbfZ5nS77G+rimx38/eYx96FT2No7r2NcGERZRqHs0OuRIO+ql
XoUaRZsA+kamT8KtZDzeT6Kzic+mGdqqvUlFs4fWM2gDlTod3YHC8Sp0VzCa63N3
vNz9aeMREqeJD1thnUNSRCdzU45TayZBXdVPLAu2Ad1UoITRRDSyRpyI0ARYg8rV
330+Tn+iR9zGIWIent3isyzsXserZr1fAjNU27aVs+no0UetXpOfoHsGBc07zwo2
jD/j/ExTmyC8hQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:58 2025 by rpki-client