Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
File:                     8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json)
Hash identifier:          bsZwNGZxqJu0I3JenqgFrUKmp//n6/xCX3e/3tdFMyg=
Subject key identifier:   42:DE:00:F4:22:51:BA:36:AB:2D:0C:D5:B9:DA:A0:4B:F2:5A:EB:23
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Certificate issuer:       /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial:       01976997805B16ECCECD3FF64B8994A9E69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
Manifest number:          0538
Signing time:             Fri 13 Jun 2025 14:00:25 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:25 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:25 +0000
Files and hashes:         1: 1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa (hash: g97v9R+PoC4iu0w5rkLd1FzagNbwQyMIzICsh2OGkRc=)
                          2: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: RrQvAVwX5voQqdCJmhVoSKm36sL7Rlh3DFSSnGTnq4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:80:5b:16:ec:ce:cd:3f:f6:4b:89:94:a9:e6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
        Validity
            Not Before: Jun 13 14:00:25 2025 GMT
            Not After : Jun 14 14:00:25 2025 GMT
        Subject: CN=42de00f42251ba36ab2d0cd5b9daa04bf25aeb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:53:85:93:bb:05:6e:5c:68:27:61:50:cd:
                    f5:fe:fd:49:24:6d:74:c0:70:f8:b5:f9:2c:28:42:
                    ed:0a:d6:d7:2d:8d:d8:87:e2:ef:b6:c6:43:d9:fc:
                    79:e7:13:8c:83:6d:3a:9b:61:b6:f6:a2:5d:5a:d2:
                    e3:8e:20:98:2b:d8:b4:c3:38:0a:40:c4:f8:da:61:
                    70:fa:fc:0a:54:67:8a:6d:f9:30:7b:14:7b:43:1c:
                    1f:c2:b6:34:71:85:42:e1:f8:11:6b:50:91:c4:9c:
                    68:af:b5:65:d8:79:53:f1:3a:18:3d:00:f4:c6:59:
                    9f:02:51:19:00:a2:de:bb:cb:86:63:d2:c1:e0:cb:
                    b6:df:18:d3:fb:64:f2:32:e8:88:97:a8:71:46:1f:
                    52:9f:a8:3d:4c:96:23:d0:27:14:04:c7:f1:58:d5:
                    9c:01:99:83:6b:89:cb:f4:68:a9:5a:b9:d1:07:20:
                    a2:b9:c9:4a:8c:fd:69:93:f7:18:a0:90:48:e0:22:
                    0e:a8:e6:80:3b:27:d8:bc:56:6f:6f:11:f0:d8:19:
                    0c:a7:81:e1:3e:15:01:16:43:63:52:9e:f4:7f:f5:
                    a5:e8:2c:c9:9c:7c:1e:df:7c:04:89:bf:7e:81:fb:
                    75:0d:b5:c6:13:b4:d7:32:18:fe:b4:62:b8:36:94:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:00:F4:22:51:BA:36:AB:2D:0C:D5:B9:DA:A0:4B:F2:5A:EB:23
            X509v3 Authority Key Identifier:
                keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:73:a3:c6:c5:f1:59:b4:e5:41:c5:32:d2:e5:09:3f:4d:6a:
         dd:4e:3b:2a:b8:cb:da:2c:27:f7:50:5f:93:57:a3:1f:0e:31:
         20:4a:e9:9a:af:61:db:ad:80:ba:48:79:f0:48:b7:24:bc:cc:
         6b:d6:b9:6c:70:fb:4f:82:13:4a:84:10:af:95:e1:6c:14:5f:
         e3:f9:af:94:6d:3b:5a:74:38:e5:db:e7:92:ff:1a:d7:5f:f6:
         7d:78:47:06:26:23:a7:68:6e:95:49:cc:51:1e:6f:2c:00:7a:
         f1:5f:ee:ce:f9:ec:d8:e0:6a:88:12:b6:a6:51:97:9f:32:82:
         4f:a7:70:fd:c9:24:16:ad:f2:ce:a6:ec:af:34:64:90:43:48:
         18:46:fb:db:45:71:f0:ed:4a:b2:59:48:a9:17:f8:f7:4c:65:
         b4:4f:c6:ae:03:87:df:2a:11:a5:66:fe:6c:7e:eb:ea:fb:60:
         87:31:68:6c:10:d8:0c:b3:e9:b1:4d:5a:b6:2d:d3:fb:c7:f5:
         1a:69:0e:84:20:1a:f3:01:79:85:2c:00:a1:a0:67:be:51:be:
         e0:44:78:f5:fc:98:0c:18:77:7c:15:07:7e:5e:74:5b:09:8a:
         d4:8f:5d:f5:9f:ef:ed:a9:c7:05:7f:3c:23:25:dc:dd:43:e8:
         60:f2:91:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl4BbFuzOzT/2S4mUqeafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDEwMWZiZmE4NjNmZTQ1ZWFlMmJmNmI5N2UwZWZlN2Vj
ODMxMjUwHhcNMjUwNjEzMTQwMDI1WhcNMjUwNjE0MTQwMDI1WjAzMTEwLwYDVQQD
Eyg0MmRlMDBmNDIyNTFiYTM2YWIyZDBjZDViOWRhYTA0YmYyNWFlYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRFThZO7BW5caCdhUM31/v1JJG10
wHD4tfksKELtCtbXLY3Yh+LvtsZD2fx55xOMg206m2G29qJdWtLjjiCYK9i0wzgK
QMT42mFw+vwKVGeKbfkwexR7QxwfwrY0cYVC4fgRa1CRxJxor7Vl2HlT8ToYPQD0
xlmfAlEZAKLeu8uGY9LB4Mu23xjT+2TyMuiIl6hxRh9Sn6g9TJYj0CcUBMfxWNWc
AZmDa4nL9GipWrnRByCiuclKjP1pk/cYoJBI4CIOqOaAOyfYvFZvbxHw2BkMp4Hh
PhUBFkNjUp70f/Wl6CzJnHwe33wEib9+gft1DbXGE7TXMhj+tGK4NpQNPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELeAPQiUbo2qy0M1bnaoEvyWusjMB8GA1UdIwQY
MBaAFPEBAfv6hj/kXq4r9rl+Dv5+yDElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFFQi1fcUdQLVJlcml2MnVYNE9fbjdJTVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMWY4MGMtZDkyMC00MmQ0LTg5MWYt
ZGUyNjQxZDQ0ZmEwLzEvOFFFQi1fcUdQLVJlcml2MnVYNE9fbjdJTVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lMWY4MGMtZDkyMC00MmQ0LTg5MWYtZGUyNjQxZDQ0ZmEw
LzEvOFFFQi1fcUdQLVJlcml2MnVYNE9fbjdJTVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnOjxsXx
WbTlQcUy0uUJP01q3U47KrjL2iwn91Bfk1ejHw4xIErpmq9h262Aukh58Ei3JLzM
a9a5bHD7T4ITSoQQr5XhbBRf4/mvlG07WnQ45dvnkv8a11/2fXhHBiYjp2hulUnM
UR5vLAB68V/uzvns2OBqiBK2plGXnzKCT6dw/ckkFq3yzqbsrzRkkENIGEb720Vx
8O1KsllIqRf490xltE/GrgOH3yoRpWb+bH7r6vtghzFobBDYDLPpsU1ati3T+8f1
GmkOhCAa8wF5hSwAoaBnvlG+4ER49fyYDBh3fBUHfl50WwmK1I9d9Z/v7anHBX88
IyXc3UPoYPKRnw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:55 2025 by rpki-client