Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File:                     Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier:          0pj0o/VgxicQzxCo5tYk2bADbTBsoihz8D2uNEl/lAY=
Subject key identifier:   4D:56:9F:7D:A4:F5:2B:42:76:72:2D:30:B9:5B:21:D1:D1:C4:B4:66
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer:       /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial:       019773ADA8140885FF38704E524303E58902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number:          127A
Signing time:             Sun 15 Jun 2025 13:00:49 +0000
Manifest this update:     Sun 15 Jun 2025 13:00:49 +0000
Manifest next update:     Mon 16 Jun 2025 13:00:49 +0000
Files and hashes:         1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
                          2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: mpVESQazG8UIzEa9K4y3KFZfyCytRzFlNYjYCGV5P+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:ad:a8:14:08:85:ff:38:70:4e:52:43:03:e5:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
        Validity
            Not Before: Jun 15 13:00:49 2025 GMT
            Not After : Jun 16 13:00:49 2025 GMT
        Subject: CN=4d569f7da4f52b4276722d30b95b21d1d1c4b466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:b7:09:13:d6:13:27:57:36:f1:be:37:47:
                    29:4a:81:3f:25:a7:41:8e:ae:34:2c:73:b6:20:71:
                    72:70:ba:e9:89:38:48:c1:2d:98:56:55:16:6a:93:
                    78:a4:a0:22:12:7a:91:d6:0f:09:9a:5e:1a:96:55:
                    46:c8:8b:96:4d:d2:bf:e6:b8:01:b1:cd:ca:55:6f:
                    0c:2d:59:1e:d8:cf:e9:cf:34:1e:45:07:93:87:59:
                    f4:26:ad:bc:47:c1:a1:f1:5e:07:08:5a:b1:8a:48:
                    83:95:59:e7:7a:69:e7:3b:3a:be:2f:0c:58:b9:52:
                    1b:a0:00:f3:e5:31:94:a2:3d:11:31:de:46:30:c8:
                    bc:fd:04:64:e5:63:1e:f9:86:60:49:ad:f2:60:ed:
                    90:88:35:79:68:9f:55:a1:ef:09:d0:51:47:65:2f:
                    e2:ba:66:6f:9c:d0:d6:73:54:1b:2d:9f:9a:f1:88:
                    e1:b3:9a:d7:81:c1:89:2c:68:cd:0b:e9:ab:65:5a:
                    a1:95:4c:fd:40:1d:bf:7a:4e:c8:d1:ec:d8:9a:ea:
                    51:39:93:60:69:fb:6c:ea:df:f3:a3:60:6e:c3:51:
                    07:52:a3:b2:73:64:f0:26:90:68:c4:78:45:a8:0c:
                    f5:6c:56:36:0d:4b:eb:18:9e:fc:33:0e:d1:0f:c2:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:9F:7D:A4:F5:2B:42:76:72:2D:30:B9:5B:21:D1:D1:C4:B4:66
            X509v3 Authority Key Identifier:
                keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:12:97:5c:e5:94:90:c2:4b:6b:96:f7:3b:19:d7:a6:b0:
         84:1e:a4:42:3e:d6:2e:47:b6:ca:ed:0d:35:74:17:6a:36:95:
         56:d9:c8:b5:73:b2:71:29:76:f5:8a:70:3c:6c:bd:92:a7:d2:
         ec:f1:80:bd:47:a5:4b:d2:9c:a1:b5:00:7f:86:02:f6:19:06:
         e0:59:b3:da:a9:20:07:58:36:6c:13:9c:71:77:57:62:70:f3:
         30:42:d7:9b:57:35:3a:df:c3:cf:5c:0a:06:a0:5c:87:fe:e2:
         56:81:89:7a:1c:38:59:8b:02:39:da:a6:b3:39:d3:b2:4a:3b:
         78:bd:8a:f7:e0:ee:cb:3a:95:ff:58:43:61:65:78:20:5a:5c:
         5d:5a:03:3d:61:eb:81:18:fe:6e:79:db:4e:69:df:9e:c1:ea:
         fd:96:aa:7a:64:dc:bb:74:36:f9:f9:b3:d3:a0:60:7f:28:8c:
         e4:eb:68:ca:8c:fe:e9:fd:82:b1:14:bc:91:fa:ba:69:27:bb:
         82:6e:e1:d4:60:e9:87:d4:e6:15:ca:98:9f:af:c5:06:4b:7f:
         2c:99:1f:a0:2f:3f:35:1e:91:6b:97:f3:35:36:d3:5f:f9:09:
         bf:d2:3a:68:48:56:0d:ff:ef:36:68:2b:b6:81:17:b5:4a:79:
         24:d7:89:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzragUCIX/OHBOUkMD5YkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThiNTc3YjIyM2I1YTc2MzUxMjE5YTc0ZmRhNDQ2NzA0
ODkwZjcwHhcNMjUwNjE1MTMwMDQ5WhcNMjUwNjE2MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg0ZDU2OWY3ZGE0ZjUyYjQyNzY3MjJkMzBiOTViMjFkMWQxYzRiNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMS3CRPWEydXNvG+N0cpSoE/JadB
jq40LHO2IHFycLrpiThIwS2YVlUWapN4pKAiEnqR1g8Jml4allVGyIuWTdK/5rgB
sc3KVW8MLVke2M/pzzQeRQeTh1n0Jq28R8Gh8V4HCFqxikiDlVnnemnnOzq+LwxY
uVIboADz5TGUoj0RMd5GMMi8/QRk5WMe+YZgSa3yYO2QiDV5aJ9Voe8J0FFHZS/i
umZvnNDWc1QbLZ+a8Yjhs5rXgcGJLGjNC+mrZVqhlUz9QB2/ek7I0ezYmupROZNg
afts6t/zo2Buw1EHUqOyc2TwJpBoxHhFqAz1bFY2DUvrGJ78Mw7RD8K1FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1Wn32k9StCdnItMLlbIdHRxLRmMB8GA1UdIwQY
MBaAFEOYtXeyI7WnY1EhmnT9pEZwSJD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMt
N2JjNDUzNDBkZDI4LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMtN2JjNDUzNDBkZDI4
LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk0Sl1zl
lJDCS2uW9zsZ16awhB6kQj7WLke2yu0NNXQXajaVVtnItXOycSl29YpwPGy9kqfS
7PGAvUelS9KcobUAf4YC9hkG4Fmz2qkgB1g2bBOccXdXYnDzMELXm1c1Ot/Dz1wK
BqBch/7iVoGJehw4WYsCOdqmsznTsko7eL2K9+DuyzqV/1hDYWV4IFpcXVoDPWHr
gRj+bnnbTmnfnsHq/ZaqemTcu3Q2+fmz06BgfyiM5Otoyoz+6f2CsRS8kfq6aSe7
gm7h1GDph9TmFcqYn6/FBkt/LJkfoC8/NR6Ra5fzNTbTX/kJv9I6aEhWDf/vNmgr
toEXtUp5JNeJ+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:27 2025 by rpki-client