Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File:                     qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier:          /6GZ0dpEByyf7JjniTKbN8ZNrgSJ2QlRIYOg33iKQI0=
Subject key identifier:   DB:81:3C:C8:CC:6A:10:EA:11:4B:F2:97:0C:4F:38:0D:56:E0:51:56
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer:       /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial:       01967454AB7AC3832A6CDFF2FAD02C7C6E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number:          03F7
Signing time:             Sat 26 Apr 2025 23:00:27 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:27 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:27 +0000
Files and hashes:         1: n5eJkZFicuorP_7YUyglUyaxuUw.roa (hash: X7lChHAuDqiBzbpN9aFseejb0s7SiAcnR2Lo7vuWZMI=)
                          2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: CV4xy96D4xQqIsauYSd0ziYHWp+qW0VcUzJbKyyDtBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:ab:7a:c3:83:2a:6c:df:f2:fa:d0:2c:7c:6e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
        Validity
            Not Before: Apr 26 23:00:27 2025 GMT
            Not After : Apr 27 23:00:27 2025 GMT
        Subject: CN=db813cc8cc6a10ea114bf2970c4f380d56e05156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:f5:6c:16:a9:91:f3:da:26:bb:6f:6e:64:
                    8d:9a:cb:51:e0:b1:bc:71:fe:2c:e2:b7:4b:25:7a:
                    44:4e:4a:57:a3:d5:c0:64:cc:7a:58:a6:96:54:e9:
                    0c:a1:d8:d9:c0:56:75:8d:75:9f:e2:90:2e:10:bd:
                    23:45:c4:26:f6:23:52:32:8f:ad:05:15:be:45:78:
                    e5:0b:cb:f2:bf:6c:a4:f9:88:e7:7e:2e:4c:4c:76:
                    b7:4a:5a:6c:72:bf:9f:6d:cf:8e:25:57:fe:ec:b4:
                    6a:7a:9f:2b:ab:53:4a:0f:d6:33:4b:d5:8d:0e:75:
                    4d:41:60:10:dc:00:8e:14:83:b1:fa:07:9b:8c:fd:
                    f5:72:c5:bf:af:35:2b:45:bf:95:b9:f9:6d:e0:1b:
                    32:e7:11:32:a7:86:f3:e9:57:3a:cb:ef:c3:85:bb:
                    c0:5a:ff:59:bf:4f:ad:e2:1f:dd:80:bf:22:6a:c1:
                    e6:b1:c8:a1:60:1b:98:c4:4a:c2:93:ec:83:75:c4:
                    42:66:e7:79:94:5d:5e:79:13:b3:3c:de:cb:e1:ac:
                    32:94:c7:88:39:34:ab:22:50:c0:b1:09:cc:78:81:
                    8a:f9:56:fd:3c:7e:26:bf:48:e9:f2:59:02:a6:ca:
                    b7:ca:db:07:1b:06:e1:96:81:9c:6a:15:c9:a4:19:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:3C:C8:CC:6A:10:EA:11:4B:F2:97:0C:4F:38:0D:56:E0:51:56
            X509v3 Authority Key Identifier:
                keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:ad:c6:c1:45:17:f2:ac:b4:73:1a:13:39:70:72:74:b2:
         42:74:12:8f:80:2a:0a:6c:b9:56:d1:4c:5f:ea:2d:b3:a4:1e:
         09:7f:65:f2:37:59:77:f4:d0:fc:f4:9f:7c:40:d3:f4:6a:86:
         8f:84:75:3e:1d:cd:da:ec:24:9e:1d:e7:db:fd:2e:2c:f8:5c:
         53:f9:d1:fe:7e:11:b7:be:72:29:c4:35:7b:31:e7:77:e3:b3:
         9f:e7:7e:f2:89:c6:76:78:e6:a6:f4:2b:a2:75:f4:66:80:24:
         ee:98:0c:2d:2d:e5:66:9d:46:48:74:b3:11:f2:89:19:59:4d:
         5e:57:90:b2:61:4f:c1:39:49:58:b1:e3:9b:e7:18:42:0d:45:
         8a:09:be:9d:df:b5:e3:7a:50:34:e8:8b:be:1d:98:17:6d:5a:
         e0:65:43:8a:8c:88:b0:30:6e:95:91:bd:66:53:7d:3c:32:7d:
         8c:bf:b0:a6:f0:ca:6b:76:44:f9:55:a1:f6:8d:6d:b4:45:7b:
         41:1b:83:16:be:ef:02:da:1a:d8:59:90:8f:52:88:42:54:29:
         a8:17:89:37:fb:05:7e:21:e4:47:67:a6:69:93:8c:36:2b:cc:
         c0:fb:24:02:36:5e:48:2b:f8:b8:cc:8c:af:61:52:ac:8f:71:
         7b:97:c4:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VKt6w4MqbN/y+tAsfG5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTgwYmYxYTc3NTBiM2QyMmY5MzU4NTU2ZTExZjBmZjc2
NmE2MTkwHhcNMjUwNDI2MjMwMDI3WhcNMjUwNDI3MjMwMDI3WjAzMTEwLwYDVQQD
EyhkYjgxM2NjOGNjNmExMGVhMTE0YmYyOTcwYzRmMzgwZDU2ZTA1MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+X1bBapkfPaJrtvbmSNmstR4LG8
cf4s4rdLJXpETkpXo9XAZMx6WKaWVOkModjZwFZ1jXWf4pAuEL0jRcQm9iNSMo+t
BRW+RXjlC8vyv2yk+Yjnfi5MTHa3Slpscr+fbc+OJVf+7LRqep8rq1NKD9YzS9WN
DnVNQWAQ3ACOFIOx+gebjP31csW/rzUrRb+Vuflt4Bsy5xEyp4bz6Vc6y+/DhbvA
Wv9Zv0+t4h/dgL8iasHmscihYBuYxErCk+yDdcRCZud5lF1eeROzPN7L4awylMeI
OTSrIlDAsQnMeIGK+Vb9PH4mv0jp8lkCpsq3ytsHGwbhloGcahXJpBkDDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuBPMjMahDqEUvylwxPOA1W4FFWMB8GA1UdIwQY
MBaAFKgYC/GndQs9Ivk1hVbhHw/3ZqYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJnTDhhZDFDejBpLVRXRlZ1RWZEX2RtcGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81NDdmNTEtMGIzOS00YjhlLWFkZTYt
ZjQwMGRhYmI5YmMyLzEvcUJnTDhhZDFDejBpLVRXRlZ1RWZEX2RtcGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81NDdmNTEtMGIzOS00YjhlLWFkZTYtZjQwMGRhYmI5YmMy
LzEvcUJnTDhhZDFDejBpLVRXRlZ1RWZEX2RtcGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw6txsFF
F/KstHMaEzlwcnSyQnQSj4AqCmy5VtFMX+ots6QeCX9l8jdZd/TQ/PSffEDT9GqG
j4R1Ph3N2uwknh3n2/0uLPhcU/nR/n4Rt75yKcQ1ezHnd+Ozn+d+8onGdnjmpvQr
onX0ZoAk7pgMLS3lZp1GSHSzEfKJGVlNXleQsmFPwTlJWLHjm+cYQg1Figm+nd+1
43pQNOiLvh2YF21a4GVDioyIsDBulZG9ZlN9PDJ9jL+wpvDKa3ZE+VWh9o1ttEV7
QRuDFr7vAtoa2FmQj1KIQlQpqBeJN/sFfiHkR2emaZOMNivMwPskAjZeSCv4uMyM
r2FSrI9xe5fEYA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:58 2025 by rpki-client