Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File:                     MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier:          jG4hdkr4bC1CejKz0UnjZ4K9pBlE3Kjj6+SzGP2PSk4=
Subject key identifier:   E1:B7:18:95:7F:DA:85:EA:B2:CD:DF:E9:3E:2B:24:9C:BF:B6:3F:47
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer:       /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial:       01976FD0C096DB32B74FF2F644765E8EB958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number:          0CED
Signing time:             Sat 14 Jun 2025 19:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:41 +0000
Files and hashes:         1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: HH4J/HFD8hzzB60S7kmX3Zz6PWTkDplhErpX+JsA7Tw=)
                          2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:c0:96:db:32:b7:4f:f2:f6:44:76:5e:8e:b9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
        Validity
            Not Before: Jun 14 19:00:41 2025 GMT
            Not After : Jun 15 19:00:41 2025 GMT
        Subject: CN=e1b718957fda85eab2cddfe93e2b249cbfb63f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:2a:76:a3:49:ea:50:2f:da:9a:20:5e:47:
                    c9:02:cb:e6:f6:fd:09:79:ab:83:24:06:22:81:bb:
                    72:a3:95:4d:fa:3a:9e:a3:a7:14:e7:2c:4b:5c:dd:
                    31:e4:73:0e:ee:52:fa:02:4e:7a:1e:7b:8f:80:92:
                    20:0a:fd:a1:a7:91:ed:c3:d5:cc:55:07:aa:08:79:
                    53:ba:31:e4:ba:aa:05:d9:ff:0e:54:14:bc:0e:7a:
                    79:f2:b5:f2:b9:a2:bf:5c:b0:4f:54:8f:46:cc:d9:
                    62:1b:a9:c8:32:0d:5a:58:e7:71:81:a2:ce:28:be:
                    3f:8f:ca:ff:a3:a3:8b:51:2f:ac:ce:b4:4f:3c:20:
                    d6:7f:7c:21:ef:ad:42:6b:b6:3e:81:41:e4:d8:92:
                    ba:a1:24:4d:eb:2b:a4:0e:f6:25:54:a7:f4:a2:f0:
                    00:a9:39:f1:de:e7:61:2b:6b:d2:8c:af:a1:c5:d9:
                    0f:5f:10:ba:5c:94:ad:9c:df:3f:82:f0:10:3f:8f:
                    16:3d:3a:f5:49:9e:41:62:e1:f3:5b:ed:69:75:97:
                    a4:d0:86:31:2b:2c:6d:44:19:dc:ab:d9:d3:ed:f1:
                    8d:bf:92:98:1d:2e:78:a5:eb:04:fa:24:2e:69:90:
                    06:fc:41:18:30:18:7a:3e:d5:e0:84:13:93:2a:28:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:18:95:7F:DA:85:EA:B2:CD:DF:E9:3E:2B:24:9C:BF:B6:3F:47
            X509v3 Authority Key Identifier:
                keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:75:1f:24:c5:74:96:e9:ef:bf:1b:2f:da:6d:73:25:16:
         f8:36:78:0c:e4:50:55:c9:64:e3:62:59:9e:b1:55:6e:b3:de:
         a3:b6:86:4a:69:74:a9:ea:c6:1b:9b:25:42:f7:6e:a5:b4:90:
         63:34:3d:8b:a5:b5:cc:0a:c9:16:fb:2b:ca:d6:16:ea:36:26:
         ec:08:91:ca:ef:46:34:a0:79:92:07:d4:a0:91:5b:5a:db:f6:
         f9:78:f6:7f:cc:fe:d0:38:e9:d1:92:13:06:48:c0:d8:95:3b:
         e8:f9:e9:ad:d7:e4:c9:e3:20:50:67:56:59:ef:ad:e2:7f:35:
         18:3e:09:43:b4:53:62:a5:3a:03:9b:ca:ea:73:25:66:0a:df:
         d8:20:61:bf:98:0f:8b:c6:94:1b:3f:16:f3:a5:b4:91:97:c8:
         eb:67:b6:0b:b8:f3:ef:b0:89:44:e8:c4:af:7b:2e:46:d9:6c:
         85:9a:cc:32:20:73:f2:e7:09:c0:83:1c:b6:bd:57:94:b6:e4:
         48:c2:19:39:39:d5:07:4d:6d:3e:dc:85:62:9e:9a:f0:90:9a:
         51:4f:1f:98:86:7f:a2:11:9d:f3:8a:e0:48:d2:78:9f:7c:ab:
         ca:10:bb:62:84:36:eb:0d:b4:77:cc:9e:28:e0:cb:05:e8:3c:
         ed:ab:3c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0MCW2zK3T/L2RHZejrlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYTAzZmVkNWRjN2EwYzM0ZTRkODU3NzRmZjcwMDVkMzNl
NmVmMTMwHhcNMjUwNjE0MTkwMDQxWhcNMjUwNjE1MTkwMDQxWjAzMTEwLwYDVQQD
EyhlMWI3MTg5NTdmZGE4NWVhYjJjZGRmZTkzZTJiMjQ5Y2JmYjYzZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9sqdqNJ6lAv2pogXkfJAsvm9v0J
eauDJAYigbtyo5VN+jqeo6cU5yxLXN0x5HMO7lL6Ak56HnuPgJIgCv2hp5Htw9XM
VQeqCHlTujHkuqoF2f8OVBS8Dnp58rXyuaK/XLBPVI9GzNliG6nIMg1aWOdxgaLO
KL4/j8r/o6OLUS+szrRPPCDWf3wh761Ca7Y+gUHk2JK6oSRN6yukDvYlVKf0ovAA
qTnx3udhK2vSjK+hxdkPXxC6XJStnN8/gvAQP48WPTr1SZ5BYuHzW+1pdZek0IYx
KyxtRBncq9nT7fGNv5KYHS54pesE+iQuaZAG/EEYMBh6PtXghBOTKiiGhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG3GJV/2oXqss3f6T4rJJy/tj9HMB8GA1UdIwQY
MBaAFDKgP+1dx6DDTk2Fd0/3AF0z5u8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTct
MWFhNTAwYjk5NDhhLzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTctMWFhNTAwYjk5NDhh
LzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeB1HyTF
dJbp778bL9ptcyUW+DZ4DORQVclk42JZnrFVbrPeo7aGSml0qerGG5slQvdupbSQ
YzQ9i6W1zArJFvsrytYW6jYm7AiRyu9GNKB5kgfUoJFbWtv2+Xj2f8z+0Djp0ZIT
BkjA2JU76PnprdfkyeMgUGdWWe+t4n81GD4JQ7RTYqU6A5vK6nMlZgrf2CBhv5gP
i8aUGz8W86W0kZfI62e2C7jz77CJROjEr3suRtlshZrMMiBz8ucJwIMctr1XlLbk
SMIZOTnVB01tPtyFYp6a8JCaUU8fmIZ/ohGd84rgSNJ4n3yryhC7YoQ26w20d8ye
KODLBeg87as8FA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:34 2025 by rpki-client