Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File:                     QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier:          4R2uOqrn0edTE89f2/cEgMNu9TecoAnF1YsS0tbwfHE=
Subject key identifier:   97:DA:61:FC:24:39:78:07:EF:D1:77:97:32:74:AA:49:D5:F8:5C:A6
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer:       /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial:       01976D3D836550B8FB712474F6AD15B2B1BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number:          0B8E
Signing time:             Sat 14 Jun 2025 07:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:36 +0000
Files and hashes:         1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
                          2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: Yun6QIvzyfxeYVGw4qjPK9fBqVJj+Vvhi78Mt48TfUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:83:65:50:b8:fb:71:24:74:f6:ad:15:b2:b1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
        Validity
            Not Before: Jun 14 07:00:36 2025 GMT
            Not After : Jun 15 07:00:36 2025 GMT
        Subject: CN=97da61fc24397807efd177973274aa49d5f85ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:b5:de:3a:82:f5:02:4b:9e:af:f6:a9:74:
                    71:58:2f:b2:31:a7:b1:27:93:1c:c8:3c:81:30:64:
                    dd:4a:12:d3:38:1a:d0:cf:64:e4:01:af:16:a8:9f:
                    2f:09:ce:19:2b:99:e2:8b:3a:8c:a8:5a:75:a8:e0:
                    5b:1a:ff:a8:db:16:e8:1c:05:74:33:fb:f4:7e:1c:
                    1b:aa:02:b9:f1:90:68:5d:99:7a:a6:46:e6:f0:2b:
                    af:ec:94:f9:b5:10:bf:65:05:7b:12:4c:f6:b1:7d:
                    64:d8:19:c3:f0:b9:7b:4b:7b:b3:35:01:51:40:da:
                    7c:0b:b7:81:cf:41:e2:77:b2:2e:0b:29:c0:eb:14:
                    bb:5e:2b:ea:76:89:ce:1d:c7:c8:2c:57:af:eb:2a:
                    f0:2e:8b:05:e0:31:1e:d7:7b:57:a3:a5:0d:ce:eb:
                    b6:1a:b7:d8:00:b1:3f:82:0e:68:8a:32:f5:bf:a5:
                    49:51:37:6f:0d:15:cd:1a:26:9c:e7:8f:da:ab:c4:
                    6f:1c:4c:04:6e:29:c3:ea:b9:dd:8c:f9:5e:61:db:
                    cb:1c:59:8c:14:93:ff:43:d3:15:e3:13:64:2a:03:
                    39:8f:e6:48:19:e0:df:8a:55:3e:76:41:7a:d7:e2:
                    c7:86:07:0d:3a:5f:68:39:00:7e:9f:a3:b0:3f:6f:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DA:61:FC:24:39:78:07:EF:D1:77:97:32:74:AA:49:D5:F8:5C:A6
            X509v3 Authority Key Identifier:
                keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:67:27:2c:ac:6e:e7:1a:e0:29:de:b7:57:35:ad:ea:65:36:
         89:8e:42:b0:6e:2c:ab:f3:d4:dd:ba:58:d5:da:f2:ef:48:68:
         19:41:6d:39:75:53:e8:8e:71:4a:2d:f9:6f:77:4e:07:18:2d:
         94:1e:cf:56:3a:a3:6b:1e:85:d0:c0:97:35:6a:38:94:58:2a:
         ba:0e:77:85:12:ba:90:da:46:40:e8:1c:38:97:3b:4c:ad:45:
         05:c1:07:3a:cd:c4:7b:4e:26:03:6b:70:50:25:b2:ee:54:7f:
         21:31:e4:47:33:32:a3:ca:08:21:66:4c:80:1b:d4:46:45:d5:
         84:37:ec:69:f9:d3:8f:c9:63:e6:f1:24:a5:de:c1:46:30:1a:
         76:58:5d:2d:4f:2f:23:94:af:64:97:04:f8:37:9c:cd:38:89:
         97:5a:30:aa:9a:8f:86:12:10:85:63:31:81:85:db:e5:9f:8b:
         ad:0f:ba:91:aa:fa:44:ef:fe:17:61:61:6e:36:a9:f9:c7:fb:
         96:df:0f:d6:80:da:20:40:f4:69:da:ed:cc:33:64:a2:50:6b:
         c5:c2:dd:06:8a:de:98:14:e6:a6:bc:c8:ef:23:6f:8c:c6:bd:
         15:e8:0c:66:66:0e:28:9d:c0:f0:b3:e7:b7:da:05:22:35:f0:
         ed:6e:51:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPYNlULj7cSR09q0VsrG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDBlYjJmOGZkMDEzOGM0Mzc3ZjU0MDAwNmNmYzhiNzY1
YzRhNzYwHhcNMjUwNjE0MDcwMDM2WhcNMjUwNjE1MDcwMDM2WjAzMTEwLwYDVQQD
Eyg5N2RhNjFmYzI0Mzk3ODA3ZWZkMTc3OTczMjc0YWE0OWQ1Zjg1Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNi13jqC9QJLnq/2qXRxWC+yMaex
J5McyDyBMGTdShLTOBrQz2TkAa8WqJ8vCc4ZK5niizqMqFp1qOBbGv+o2xboHAV0
M/v0fhwbqgK58ZBoXZl6pkbm8Cuv7JT5tRC/ZQV7Ekz2sX1k2BnD8Ll7S3uzNQFR
QNp8C7eBz0Hid7IuCynA6xS7XivqdonOHcfILFev6yrwLosF4DEe13tXo6UNzuu2
GrfYALE/gg5oijL1v6VJUTdvDRXNGiac54/aq8RvHEwEbinD6rndjPleYdvLHFmM
FJP/Q9MV4xNkKgM5j+ZIGeDfilU+dkF61+LHhgcNOl9oOQB+n6OwP282MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfaYfwkOXgH79F3lzJ0qknV+FymMB8GA1UdIwQY
MBaAFEIA6y+P0BOMQ3f1QABs/It2XEp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdEckw0X1FFNHhEZF9WQUFHejhpM1pjU25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNTViZTMtYzExYy00MWM4LWE4OWEt
ZDE0Mjk4MzdkYWJmLzEvUWdEckw0X1FFNHhEZF9WQUFHejhpM1pjU25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNTViZTMtYzExYy00MWM4LWE4OWEtZDE0Mjk4MzdkYWJm
LzEvUWdEckw0X1FFNHhEZF9WQUFHejhpM1pjU25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGcnLKxu
5xrgKd63VzWt6mU2iY5CsG4sq/PU3bpY1dry70hoGUFtOXVT6I5xSi35b3dOBxgt
lB7PVjqjax6F0MCXNWo4lFgqug53hRK6kNpGQOgcOJc7TK1FBcEHOs3Ee04mA2tw
UCWy7lR/ITHkRzMyo8oIIWZMgBvURkXVhDfsafnTj8lj5vEkpd7BRjAadlhdLU8v
I5SvZJcE+DeczTiJl1owqpqPhhIQhWMxgYXb5Z+LrQ+6kar6RO/+F2Fhbjap+cf7
lt8P1oDaIED0adrtzDNkolBrxcLdBoremBTmprzI7yNvjMa9FegMZmYOKJ3A8LPn
t9oFIjXw7W5R1g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:32 2025 by rpki-client