Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File:                     q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier:          HwxaPpMeHLy8tIY5fAP2u8Tze3KLTXxV0GD7npWaYmE=
Subject key identifier:   90:45:39:49:9A:8A:96:72:3A:24:6E:4D:42:11:98:4E:C7:E4:D6:0A
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       019771F606108E99993557339F094FA32CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number:          0AF9
Signing time:             Sun 15 Jun 2025 05:00:38 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:38 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:38 +0000
Files and hashes:         1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=)
                          2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=)
                          3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=)
                          4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=)
                          5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: bMfCjs4oom3a0e63BJ0gzhNKQSiFQFJi3G3hA4tFQc0=)
                          6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:06:10:8e:99:99:35:57:33:9f:09:4f:a3:2c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Jun 15 05:00:38 2025 GMT
            Not After : Jun 16 05:00:38 2025 GMT
        Subject: CN=904539499a8a96723a246e4d4211984ec7e4d60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:a9:d5:bd:55:ea:bb:76:42:f5:02:20:3d:
                    76:f3:09:3c:92:00:a9:69:22:5c:51:80:7d:90:a6:
                    51:e3:77:7c:86:7d:1e:74:ec:89:bc:51:ab:bd:af:
                    6c:d5:21:40:e7:3a:92:42:e8:9a:f9:a7:bc:15:31:
                    db:8a:7d:80:dc:d3:32:16:2f:1a:5f:68:3a:9d:2f:
                    37:f2:e1:b6:d3:59:d0:52:cb:34:a4:f5:30:b1:68:
                    81:0a:47:84:66:7a:d9:55:a1:30:b8:1f:80:65:d2:
                    48:1e:a6:af:43:d2:60:74:45:61:5f:6d:09:72:7c:
                    2f:5e:16:22:59:af:1b:b0:01:10:11:96:49:7f:f3:
                    22:0c:b7:47:16:2a:10:b5:61:66:86:da:3d:28:e2:
                    81:69:dd:a4:40:c2:67:c3:ba:07:00:39:23:fb:6c:
                    86:70:18:e5:4d:d0:70:a9:eb:f3:ba:a2:26:ca:0f:
                    ea:df:dc:f9:f4:46:a0:ec:a6:9d:3d:9b:4c:df:b9:
                    ff:b9:9d:d2:f4:6b:e3:bb:f2:12:52:2f:6b:8e:66:
                    67:78:e4:f8:5e:9a:97:dc:a0:16:16:f2:fb:17:3b:
                    c4:74:d5:3d:8a:fb:99:1f:09:da:15:35:27:43:1e:
                    dd:1a:f0:1f:f3:2d:69:a8:87:cf:30:24:a9:c3:fd:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:45:39:49:9A:8A:96:72:3A:24:6E:4D:42:11:98:4E:C7:E4:D6:0A
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:10:4b:ea:7e:ee:3b:ea:e2:a4:e1:76:99:b8:bc:de:81:ef:
         b0:47:e4:d0:6a:93:a9:1f:13:c2:5e:0d:c4:03:d9:16:4a:12:
         0c:7a:25:01:a3:32:90:55:6a:c4:01:96:f2:01:e7:6e:9c:e5:
         b2:2c:66:08:81:35:37:38:d1:7e:7b:ee:24:b2:98:da:1d:8e:
         b2:1d:ce:c8:5c:95:6d:c9:b6:cf:0e:1b:c8:e9:89:95:45:ed:
         6b:9c:91:35:76:f7:3c:11:1a:08:8e:e4:69:8f:66:b2:21:8d:
         b6:ff:64:93:5b:27:31:05:4c:24:05:de:95:d4:31:f8:2d:4b:
         85:5b:ce:69:e6:bf:f8:b8:cd:a9:9a:47:75:f8:4c:26:47:4d:
         ff:e0:ce:68:32:db:26:00:34:a7:ba:97:50:90:93:dd:14:ed:
         66:ea:54:7e:3d:c8:04:f1:70:50:e8:5a:c0:05:6d:db:ed:fe:
         60:f5:2e:5b:e8:6f:15:ba:76:0e:cf:51:46:78:65:77:f0:ad:
         d7:da:6c:6c:fe:4c:3e:a7:a4:dc:c4:25:2c:d0:c3:4a:9f:78:
         3a:0e:a4:d2:9e:4f:f5:18:b7:71:00:1e:99:5d:f3:db:0c:71:
         ea:6d:eb:19:08:8f:ce:76:8a:7b:b3:23:21:eb:64:fc:41:f4:
         07:9b:5b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9gYQjpmZNVcznwlPoyyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjUwNjE1MDUwMDM4WhcNMjUwNjE2MDUwMDM4WjAzMTEwLwYDVQQD
Eyg5MDQ1Mzk0OTlhOGE5NjcyM2EyNDZlNGQ0MjExOTg0ZWM3ZTRkNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGGp1b1V6rt2QvUCID128wk8kgCp
aSJcUYB9kKZR43d8hn0edOyJvFGrva9s1SFA5zqSQuia+ae8FTHbin2A3NMyFi8a
X2g6nS838uG201nQUss0pPUwsWiBCkeEZnrZVaEwuB+AZdJIHqavQ9JgdEVhX20J
cnwvXhYiWa8bsAEQEZZJf/MiDLdHFioQtWFmhto9KOKBad2kQMJnw7oHADkj+2yG
cBjlTdBwqevzuqImyg/q39z59Eag7KadPZtM37n/uZ3S9Gvju/ISUi9rjmZneOT4
XpqX3KAWFvL7FzvEdNU9ivuZHwnaFTUnQx7dGvAf8y1pqIfPMCSpw/0O0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBFOUmaipZyOiRuTUIRmE7H5NYKMB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhBL6n7u
O+ripOF2mbi83oHvsEfk0GqTqR8Twl4NxAPZFkoSDHolAaMykFVqxAGW8gHnbpzl
sixmCIE1NzjRfnvuJLKY2h2Osh3OyFyVbcm2zw4byOmJlUXta5yRNXb3PBEaCI7k
aY9msiGNtv9kk1snMQVMJAXeldQx+C1LhVvOaea/+LjNqZpHdfhMJkdN/+DOaDLb
JgA0p7qXUJCT3RTtZupUfj3IBPFwUOhawAVt2+3+YPUuW+hvFbp2Ds9RRnhld/Ct
19psbP5MPqek3MQlLNDDSp94Og6k0p5P9Ri3cQAemV3z2wxx6m3rGQiPznaKe7Mj
Ietk/EH0B5tbXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:32 2025 by rpki-client