Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File:                     Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier:          nS76qFL/riWHLtEg6HRzUfBlUbXa4/B0d3Uzh10gkKc=
Subject key identifier:   A3:FC:47:31:96:E6:D8:51:DA:CF:68:B5:0C:FC:47:D1:02:24:6C:73
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer:       /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial:       0198843122823E8F6FE73EC0F6A4D20AB723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number:          0DCF
Signing time:             Thu 07 Aug 2025 11:01:09 +0000
Manifest this update:     Thu 07 Aug 2025 11:01:09 +0000
Manifest next update:     Fri 08 Aug 2025 11:01:09 +0000
Files and hashes:         1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: NU/wn+3BiEoIyC3tsN6QKODoImmB5AC8MYIqaJT/1es=)
                          2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:31:22:82:3e:8f:6f:e7:3e:c0:f6:a4:d2:0a:b7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
        Validity
            Not Before: Aug  7 11:01:09 2025 GMT
            Not After : Aug  8 11:01:09 2025 GMT
        Subject: CN=a3fc473196e6d851dacf68b50cfc47d102246c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:c3:b7:40:0e:b4:d6:98:dd:c8:37:22:5d:
                    0f:9b:62:0b:f6:3a:36:fc:87:47:4a:9e:56:e4:cc:
                    b9:44:f1:9a:9e:14:24:77:b6:87:89:de:76:ce:41:
                    37:71:d1:24:53:ac:7c:78:ba:07:db:02:9b:95:30:
                    54:8e:31:b3:3f:f9:a2:1b:7b:4e:37:4a:c9:da:3b:
                    53:22:9a:33:aa:23:e6:3b:a6:80:af:02:bc:56:5b:
                    46:fc:b6:30:2c:80:12:ba:d8:5b:03:97:70:47:15:
                    3c:bb:d4:39:83:bb:1c:c5:64:4d:4c:9e:cc:f8:15:
                    67:69:06:ea:6e:29:3e:c0:01:d5:fb:d5:0b:9a:24:
                    33:4a:91:6a:ba:22:52:92:de:75:64:fa:8a:a5:b1:
                    e2:cd:7c:04:23:a4:30:45:15:52:12:00:6f:0e:88:
                    5f:67:91:cf:0f:da:bc:d4:20:dd:14:1f:41:3f:53:
                    3a:49:29:22:5a:01:05:93:4d:8e:93:73:54:7c:7a:
                    12:dc:44:af:4c:86:0e:5b:97:a5:14:b9:06:cb:0d:
                    3e:b0:ff:4c:c2:db:5a:50:c5:51:76:e5:61:60:88:
                    4a:e0:be:3a:5f:2c:97:ac:66:36:5f:e8:0e:a7:cf:
                    80:22:2d:b4:5e:c5:01:f2:bf:ac:22:7f:ea:ab:bf:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FC:47:31:96:E6:D8:51:DA:CF:68:B5:0C:FC:47:D1:02:24:6C:73
            X509v3 Authority Key Identifier:
                keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2c:7b:ac:bc:50:92:25:81:ea:94:fb:55:16:f0:4d:dc:1a:
         68:0c:45:d5:10:d1:e0:a5:b3:99:f8:14:aa:63:d1:e9:3c:29:
         4b:73:20:fa:c3:8e:d9:a1:61:be:cf:ba:40:a0:2f:52:57:7a:
         36:03:2b:33:59:0b:85:4b:a3:b1:7d:57:ea:4b:c8:0e:32:ff:
         6b:a9:7c:70:0c:be:80:17:7d:e4:e9:a8:89:7a:9c:8d:ff:d5:
         a0:bd:c8:ce:20:ef:1a:36:45:59:5a:14:40:3e:1e:c7:69:f5:
         a9:d3:1b:97:d6:9d:14:4d:d7:23:de:75:d7:4e:89:97:06:ac:
         49:a9:67:60:a1:21:c1:cd:95:d2:f2:66:43:11:6d:a5:43:5a:
         4c:31:38:61:2e:cf:a9:a7:0e:87:1f:34:c0:57:0f:9a:f1:4d:
         c2:1c:98:0b:63:48:2e:8d:1f:a7:db:24:c0:6f:45:98:06:22:
         59:61:40:e8:17:6b:a7:94:35:2b:aa:f0:21:67:dd:28:b1:a8:
         67:4c:f3:28:f6:34:87:f1:64:26:99:0e:96:01:e5:95:ac:a1:
         9d:db:91:d8:22:6a:8d:65:82:73:c7:0c:d3:df:a7:0e:fb:b1:
         45:6d:fc:e6:2b:cf:c6:dd:7d:b2:d2:0d:c9:c4:b4:93:24:ab:
         46:90:f1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMSKCPo9v5z7A9qTSCrcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjg4ZmYxZWRmYjY3MjA2NjAzMDI2NzcxYWFhZWM4NGI4
YjFlYjgwHhcNMjUwODA3MTEwMTA5WhcNMjUwODA4MTEwMTA5WjAzMTEwLwYDVQQD
EyhhM2ZjNDczMTk2ZTZkODUxZGFjZjY4YjUwY2ZjNDdkMTAyMjQ2YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypPDt0AOtNaY3cg3Il0Pm2IL9jo2
/IdHSp5W5My5RPGanhQkd7aHid52zkE3cdEkU6x8eLoH2wKblTBUjjGzP/miG3tO
N0rJ2jtTIpozqiPmO6aArwK8VltG/LYwLIASuthbA5dwRxU8u9Q5g7scxWRNTJ7M
+BVnaQbqbik+wAHV+9ULmiQzSpFquiJSkt51ZPqKpbHizXwEI6QwRRVSEgBvDohf
Z5HPD9q81CDdFB9BP1M6SSkiWgEFk02Ok3NUfHoS3ESvTIYOW5elFLkGyw0+sP9M
wttaUMVRduVhYIhK4L46XyyXrGY2X+gOp8+AIi20XsUB8r+sIn/qq78gFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP8RzGW5thR2s9otQz8R9ECJGxzMB8GA1UdIwQY
MBaAFEO4j/Ht+2cgZgMCZ3GqrshLix64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQt
YzFiZTVkYzAxYmJlLzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQtYzFiZTVkYzAxYmJl
LzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCx7rLxQ
kiWB6pT7VRbwTdwaaAxF1RDR4KWzmfgUqmPR6TwpS3Mg+sOO2aFhvs+6QKAvUld6
NgMrM1kLhUujsX1X6kvIDjL/a6l8cAy+gBd95OmoiXqcjf/VoL3IziDvGjZFWVoU
QD4ex2n1qdMbl9adFE3XI951106JlwasSalnYKEhwc2V0vJmQxFtpUNaTDE4YS7P
qacOhx80wFcPmvFNwhyYC2NILo0fp9skwG9FmAYiWWFA6Bdrp5Q1K6rwIWfdKLGo
Z0zzKPY0h/FkJpkOlgHllayhnduR2CJqjWWCc8cM09+nDvuxRW385ivPxt19stIN
ycS0kySrRpDxWg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:54 2025 by rpki-client