Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File:                     Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier:          caX5Hc/qAgNqwKlni7Bq/CJ6RjFH3qbExyBBRJ6XSmU=
Subject key identifier:   80:F9:49:05:26:0E:07:39:31:30:FA:07:DC:3B:98:ED:45:58:79:41
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer:       /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial:       019769CED04FA418749B5118AC788EA4CC48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number:          01F2
Signing time:             Fri 13 Jun 2025 15:00:50 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:50 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:50 +0000
Files and hashes:         1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: em3B0OGgXLzcji4jRsGhg5V+Rd4COdO5lLtpLEJgrCI=)
                          2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:d0:4f:a4:18:74:9b:51:18:ac:78:8e:a4:cc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
        Validity
            Not Before: Jun 13 15:00:50 2025 GMT
            Not After : Jun 14 15:00:50 2025 GMT
        Subject: CN=80f94905260e07393130fa07dc3b98ed45587941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:18:a4:b7:2b:28:55:fb:cb:00:41:82:65:
                    1a:f6:99:9a:1f:e3:3a:e6:31:5e:3e:53:f2:a8:c0:
                    47:be:2d:51:e7:4e:1c:c5:2e:76:54:f1:ae:b0:fd:
                    fb:bc:49:d3:85:03:67:73:a0:de:a5:79:a3:a5:76:
                    86:31:1c:e5:fb:b5:3e:3e:4d:88:b5:d0:2c:c2:f4:
                    ac:2a:d8:84:0f:60:b4:e6:63:68:20:42:58:af:94:
                    62:f1:b8:e8:6a:e5:1b:e2:72:91:a7:be:ea:ed:08:
                    9c:8d:61:b0:17:b6:e1:ac:08:4c:ce:87:ee:a8:c0:
                    ec:ce:b9:ab:d2:9e:fa:9f:db:5a:fe:f1:f5:e0:f1:
                    1e:0a:c5:c9:be:6d:71:22:51:a4:b4:5d:ae:98:a5:
                    af:3d:27:b9:34:d8:2a:8e:b4:54:f3:0b:85:5a:d9:
                    ea:55:8c:41:d6:63:ba:42:0d:74:32:28:03:52:99:
                    83:aa:c0:1c:48:cf:f3:13:b7:96:30:72:1c:9a:15:
                    81:3e:1e:30:60:f9:39:fa:d9:3b:d8:c0:16:7d:8f:
                    a8:fc:ac:49:0f:85:43:90:31:2b:de:31:a2:c9:44:
                    34:4f:ad:f4:80:f0:ae:8e:c0:17:a9:c6:0b:98:c8:
                    ad:97:de:a8:16:13:a8:b8:67:5c:10:4d:34:1b:30:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F9:49:05:26:0E:07:39:31:30:FA:07:DC:3B:98:ED:45:58:79:41
            X509v3 Authority Key Identifier:
                keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:2e:ad:67:91:8a:6e:ae:ba:d8:73:22:c7:9f:4b:36:9c:
         b3:e3:ca:63:27:59:84:df:a0:6d:c9:d7:fc:86:45:92:65:43:
         e9:34:f6:11:73:6c:97:ef:a4:30:50:05:65:9c:e2:54:ea:f3:
         02:b0:00:cc:c9:b5:94:d4:06:ff:3f:de:87:8b:66:ea:9c:a7:
         35:05:ad:13:05:8b:5b:35:09:3b:df:91:18:c3:d6:77:91:43:
         45:11:99:e3:16:22:65:eb:2f:0e:8c:9f:9a:83:0e:12:c5:c0:
         a4:22:74:53:80:d9:91:18:47:11:65:f2:3f:b5:97:67:17:af:
         1d:3a:1f:a6:3a:f1:cf:af:91:f3:b3:fc:4c:08:1e:7f:20:27:
         ec:22:3d:ab:4a:8a:ef:5d:6f:04:91:0c:86:46:6b:7f:55:ca:
         a7:ab:05:d9:34:0b:27:c4:e7:2d:60:13:0b:3c:c6:74:62:9f:
         b1:0f:c0:dd:42:2f:d3:1e:c5:78:20:6a:1e:f3:6e:a9:a6:0c:
         1e:30:3c:c0:1f:63:56:f6:07:cf:cd:4c:07:2f:5c:84:35:65:
         f8:b1:f7:f0:17:db:c6:3d:2b:04:9d:ab:f9:df:d9:09:a7:06:
         30:f8:f8:98:ce:95:86:97:a2:de:d7:e5:99:31:f8:79:86:9d:
         61:86:f3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpztBPpBh0m1EYrHiOpMxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjUwNjEzMTUwMDUwWhcNMjUwNjE0MTUwMDUwWjAzMTEwLwYDVQQD
Eyg4MGY5NDkwNTI2MGUwNzM5MzEzMGZhMDdkYzNiOThlZDQ1NTg3OTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgEYpLcrKFX7ywBBgmUa9pmaH+M6
5jFePlPyqMBHvi1R504cxS52VPGusP37vEnThQNnc6DepXmjpXaGMRzl+7U+Pk2I
tdAswvSsKtiED2C05mNoIEJYr5Ri8bjoauUb4nKRp77q7QicjWGwF7bhrAhMzofu
qMDszrmr0p76n9ta/vH14PEeCsXJvm1xIlGktF2umKWvPSe5NNgqjrRU8wuFWtnq
VYxB1mO6Qg10MigDUpmDqsAcSM/zE7eWMHIcmhWBPh4wYPk5+tk72MAWfY+o/KxJ
D4VDkDEr3jGiyUQ0T630gPCujsAXqcYLmMitl96oFhOouGdcEE00GzAMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID5SQUmDgc5MTD6B9w7mO1FWHlBMB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdUurWeR
im6uuthzIsefSzacs+PKYydZhN+gbcnX/IZFkmVD6TT2EXNsl++kMFAFZZziVOrz
ArAAzMm1lNQG/z/eh4tm6pynNQWtEwWLWzUJO9+RGMPWd5FDRRGZ4xYiZesvDoyf
moMOEsXApCJ0U4DZkRhHEWXyP7WXZxevHTofpjrxz6+R87P8TAgefyAn7CI9q0qK
711vBJEMhkZrf1XKp6sF2TQLJ8TnLWATCzzGdGKfsQ/A3UIv0x7FeCBqHvNuqaYM
HjA8wB9jVvYHz81MBy9chDVl+LH38Bfbxj0rBJ2r+d/ZCacGMPj4mM6Vhpei3tfl
mTH4eYadYYbzZg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:57 2025 by rpki-client