Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File:                     r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier:          SMl3ic7I5svi8QnaDyumsKwr8zShMEDIoTM4NYSUSsQ=
Subject key identifier:   73:A7:11:97:14:41:C8:35:BD:50:21:09:89:F2:7B:71:7F:D7:A1:BC
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer:       /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial:       01987298418227E41B26438070A739E9F4C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number:          130B
Signing time:             Mon 04 Aug 2025 01:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:37 +0000
Files and hashes:         1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
                          2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
                          3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: hF1GwLFuxLw9GeC7JgHKPQwtcYeMLUNLrDS6Gap7RX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:41:82:27:e4:1b:26:43:80:70:a7:39:e9:f4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
        Validity
            Not Before: Aug  4 01:00:37 2025 GMT
            Not After : Aug  5 01:00:37 2025 GMT
        Subject: CN=73a711971441c835bd50210989f27b717fd7a1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:d3:d3:75:4c:00:54:d6:3e:a7:dd:1e:b0:
                    e1:71:ae:20:e0:5e:e3:f4:ac:34:ad:88:61:00:32:
                    ae:83:eb:0d:e2:d4:0f:2d:e2:e0:92:18:b6:42:33:
                    83:43:f6:0d:9b:11:c4:e7:ed:bb:24:38:10:b6:4f:
                    39:d3:d3:d7:82:dd:cf:5a:4d:ac:1a:6a:19:cf:48:
                    ff:15:1c:75:6b:0a:f0:c9:88:5d:3f:0d:1c:02:c4:
                    14:1d:5d:e5:05:a5:3d:9b:eb:7f:1a:66:5e:91:99:
                    b2:2c:95:77:dd:1d:81:74:27:f8:69:47:00:0d:c1:
                    58:46:37:d4:3a:6f:07:07:56:c9:2b:10:b8:d7:ed:
                    f9:e1:fc:5b:b5:02:ff:2e:58:b6:07:9a:29:69:b5:
                    24:dd:71:a7:1f:23:05:82:d9:a3:4c:8b:90:20:3f:
                    18:ed:bb:11:f9:11:08:89:ec:73:b7:d2:c2:e5:bd:
                    35:ed:da:ea:44:dd:a2:a2:03:73:8b:8c:31:37:5a:
                    22:24:1c:28:b3:c8:6f:69:9f:57:9f:8a:29:4b:88:
                    e8:ee:fb:d6:b4:d3:0c:3b:04:ce:58:2f:78:8e:67:
                    bf:7a:46:f2:ae:c4:28:03:21:b2:f2:6e:59:1c:b9:
                    53:75:a6:3c:e7:8a:90:75:6f:8c:87:3f:c4:14:00:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A7:11:97:14:41:C8:35:BD:50:21:09:89:F2:7B:71:7F:D7:A1:BC
            X509v3 Authority Key Identifier:
                keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:58:3f:82:7c:06:67:5a:49:6d:8f:32:20:11:0b:c7:85:e8:
         25:12:10:5d:9b:bc:60:90:bb:16:8a:7f:d1:b6:2c:16:51:b7:
         16:23:de:58:c8:9e:bc:e0:44:08:f9:93:14:15:63:da:0c:0e:
         fe:31:47:40:04:15:b4:ee:b9:e7:61:8e:37:cd:02:83:3f:58:
         dc:6d:75:40:08:20:0f:20:28:12:d7:80:2a:49:75:7f:2f:65:
         ba:fa:fe:e5:d0:0a:dc:72:5d:b8:a4:38:40:96:6c:bd:92:b9:
         8b:d6:c4:6b:5c:01:72:38:5b:78:ef:01:ea:cc:72:99:6c:1a:
         32:d3:73:1d:23:72:c8:59:30:a2:0f:11:bd:10:98:a1:3f:56:
         35:56:d0:98:83:37:57:76:7a:d1:e2:bb:2f:97:44:1c:56:76:
         5d:87:14:9f:22:6c:7e:df:3f:41:3c:cf:0e:39:be:4a:cc:36:
         ce:9a:3c:eb:0d:b8:6f:61:a1:78:4d:42:35:2b:34:ed:2f:f7:
         6e:30:3a:77:fc:50:c2:b0:3a:d6:69:e9:35:2a:c0:2c:d4:72:
         e7:22:32:cf:9a:fa:b5:6f:21:98:fd:f6:60:08:f5:cc:ff:e0:
         c2:18:73:12:db:e3:e7:b6:a7:57:9f:ef:06:09:9e:e4:69:9f:
         d3:6b:e9:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymEGCJ+QbJkOAcKc56fTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh
MmE1ZWQwHhcNMjUwODA0MDEwMDM3WhcNMjUwODA1MDEwMDM3WjAzMTEwLwYDVQQD
Eyg3M2E3MTE5NzE0NDFjODM1YmQ1MDIxMDk4OWYyN2I3MTdmZDdhMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaPT03VMAFTWPqfdHrDhca4g4F7j
9Kw0rYhhADKug+sN4tQPLeLgkhi2QjODQ/YNmxHE5+27JDgQtk8509PXgt3PWk2s
GmoZz0j/FRx1awrwyYhdPw0cAsQUHV3lBaU9m+t/GmZekZmyLJV33R2BdCf4aUcA
DcFYRjfUOm8HB1bJKxC41+354fxbtQL/Lli2B5opabUk3XGnHyMFgtmjTIuQID8Y
7bsR+REIiexzt9LC5b017drqRN2iogNzi4wxN1oiJBwos8hvaZ9Xn4opS4jo7vvW
tNMMOwTOWC94jme/ekbyrsQoAyGy8m5ZHLlTdaY854qQdW+Mhz/EFACV4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOnEZcUQcg1vVAhCYnye3F/16G8MB8GA1UdIwQY
MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt
ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh
LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1g/gnwG
Z1pJbY8yIBELx4XoJRIQXZu8YJC7Fop/0bYsFlG3FiPeWMievOBECPmTFBVj2gwO
/jFHQAQVtO6552GON80Cgz9Y3G11QAggDyAoEteAKkl1fy9luvr+5dAK3HJduKQ4
QJZsvZK5i9bEa1wBcjhbeO8B6sxymWwaMtNzHSNyyFkwog8RvRCYoT9WNVbQmIM3
V3Z60eK7L5dEHFZ2XYcUnyJsft8/QTzPDjm+Ssw2zpo86w24b2GheE1CNSs07S/3
bjA6d/xQwrA61mnpNSrALNRy5yIyz5r6tW8hmP32YAj1zP/gwhhzEtvj57anV5/v
Bgme5Gmf02vpuA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:26 2025 by rpki-client