Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File:                     qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier:          mQL/yZHZL9VHmaa5FUyiKgbCSbNU30EtgHjwJp2Aum4=
Subject key identifier:   45:D6:A5:EF:EF:6F:53:70:CB:C1:57:83:8E:CB:F1:4A:8F:AF:F1:BD
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer:       /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial:       019788B53BA30D87E26AABE71536481CD683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number:          074F
Signing time:             Thu 19 Jun 2025 15:01:08 +0000
Manifest this update:     Thu 19 Jun 2025 15:01:08 +0000
Manifest next update:     Fri 20 Jun 2025 15:01:08 +0000
Files and hashes:         1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
                          2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: AMPcAVrlS5y0XH53k9YfbASZFMS/JSgUO+vAAv5+Z7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:88:b5:3b:a3:0d:87:e2:6a:ab:e7:15:36:48:1c:d6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
        Validity
            Not Before: Jun 19 15:01:08 2025 GMT
            Not After : Jun 20 15:01:08 2025 GMT
        Subject: CN=45d6a5efef6f5370cbc157838ecbf14a8faff1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:c4:df:1a:2c:94:43:67:48:90:b6:b8:d5:
                    56:a7:25:a6:52:af:5c:81:0a:86:2a:84:9a:92:40:
                    01:89:37:4d:18:34:4d:be:b9:e5:e3:b8:71:5d:27:
                    4c:a7:7e:8b:2f:58:98:7f:dc:cb:c5:7c:e0:e3:42:
                    2b:9d:14:91:f6:f6:d8:99:84:36:50:30:9b:23:0b:
                    a0:11:b6:2e:34:9f:4d:3f:b6:d2:2e:44:12:01:88:
                    a3:55:5f:e2:37:6f:c8:e0:f8:d3:8b:6a:b6:9f:6e:
                    c2:6a:08:9a:e3:70:34:5e:05:8e:f1:b7:f5:8a:d6:
                    3b:eb:8c:b9:4c:5c:ad:fa:42:29:b9:a6:6b:32:66:
                    88:c4:91:d8:18:39:ef:0f:72:c3:00:d7:b0:5f:fe:
                    0d:a1:b9:b0:78:d0:da:5f:89:3f:9c:dd:61:27:2f:
                    43:67:e3:c0:94:5a:af:4b:b1:11:a7:db:c5:53:70:
                    26:5f:25:20:c9:fc:59:15:2c:4c:5c:a6:6e:f4:b6:
                    eb:51:75:d5:2d:73:d3:bc:e7:e9:0b:5a:40:4e:09:
                    a8:4f:17:45:73:1c:72:7a:9d:78:24:63:2b:70:18:
                    22:98:4c:b1:91:ec:cb:23:ca:af:d0:30:65:88:9c:
                    09:7c:10:ab:32:4e:75:3c:b2:ff:f1:01:91:3f:de:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D6:A5:EF:EF:6F:53:70:CB:C1:57:83:8E:CB:F1:4A:8F:AF:F1:BD
            X509v3 Authority Key Identifier:
                keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ef:2f:5e:9b:aa:d1:00:9a:c4:8a:c4:91:76:cc:0c:c5:5e:
         f5:4e:a3:f8:e2:98:0e:5f:6d:da:8f:ae:13:ea:1f:2d:b1:46:
         a4:6c:44:51:a4:3a:1c:c7:a9:8c:62:00:3d:eb:43:c7:fb:70:
         46:74:60:cc:a7:bf:d5:a0:fc:e5:2b:aa:4f:10:4b:97:71:54:
         ac:6a:c0:c2:22:74:75:05:49:06:d4:b9:94:9c:8d:d3:64:04:
         d9:bd:3e:10:15:dc:84:1e:1e:90:c8:cf:e5:d2:5e:8f:b6:62:
         a3:94:68:13:66:a3:35:c5:d9:74:07:a4:8c:91:32:04:a6:07:
         32:59:c7:f6:31:dd:a0:6e:8c:31:b5:d3:8d:a8:9b:5b:8b:73:
         1a:0c:92:2b:af:47:7e:a2:d7:77:35:84:b7:07:08:a1:30:b3:
         e0:8f:26:76:94:53:e3:f7:1a:7c:01:ba:76:81:a3:7d:62:d1:
         c7:53:6d:ef:d2:73:71:41:ec:f5:b8:c0:bc:34:0a:44:b7:1a:
         1f:0b:72:3a:1e:28:9f:05:ec:d4:44:eb:4b:c9:49:72:1e:8b:
         c9:4a:b1:29:05:f5:97:b4:3a:3e:de:b3:a4:7f:12:30:15:1d:
         db:ee:0d:11:36:45:89:ae:7f:42:b7:c9:0a:64:f7:a7:dd:bd:
         a3:44:02:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeItTujDYfiaqvnFTZIHNaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0
YWUyOWQwHhcNMjUwNjE5MTUwMTA4WhcNMjUwNjIwMTUwMTA4WjAzMTEwLwYDVQQD
Eyg0NWQ2YTVlZmVmNmY1MzcwY2JjMTU3ODM4ZWNiZjE0YThmYWZmMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk7E3xoslENnSJC2uNVWpyWmUq9c
gQqGKoSakkABiTdNGDRNvrnl47hxXSdMp36LL1iYf9zLxXzg40IrnRSR9vbYmYQ2
UDCbIwugEbYuNJ9NP7bSLkQSAYijVV/iN2/I4PjTi2q2n27Cagia43A0XgWO8bf1
itY764y5TFyt+kIpuaZrMmaIxJHYGDnvD3LDANewX/4NobmweNDaX4k/nN1hJy9D
Z+PAlFqvS7ERp9vFU3AmXyUgyfxZFSxMXKZu9LbrUXXVLXPTvOfpC1pATgmoTxdF
cxxyep14JGMrcBgimEyxkezLI8qv0DBliJwJfBCrMk51PLL/8QGRP95BJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXWpe/vb1Nwy8FXg47L8UqPr/G9MB8GA1UdIwQY
MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt
ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0
LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu8vXpuq
0QCaxIrEkXbMDMVe9U6j+OKYDl9t2o+uE+ofLbFGpGxEUaQ6HMepjGIAPetDx/tw
RnRgzKe/1aD85SuqTxBLl3FUrGrAwiJ0dQVJBtS5lJyN02QE2b0+EBXchB4ekMjP
5dJej7Zio5RoE2ajNcXZdAekjJEyBKYHMlnH9jHdoG6MMbXTjaibW4tzGgySK69H
fqLXdzWEtwcIoTCz4I8mdpRT4/cafAG6doGjfWLRx1Nt79JzcUHs9bjAvDQKRLca
HwtyOh4onwXs1ETrS8lJch6LyUqxKQX1l7Q6Pt6zpH8SMBUd2+4NETZFia5/QrfJ
CmT3p929o0QCvA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 01:21:36 2025 by rpki-client