Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File:                     1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier:          xJtGDWBU+7YGAgs60fI1UzWF8V3FlnBYXDTyVQBT3Gs=
Subject key identifier:   CB:6A:EF:DD:CF:B3:EA:3B:81:3C:C3:FF:B1:A5:71:B8:58:CD:88:99
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer:       /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial:       01976BBD496B0EB55CCC3D14E2142DF2C7B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number:          1082
Signing time:             Sat 14 Jun 2025 00:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:56 +0000
Files and hashes:         1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: xe5nHPxBIZwL5sZQJdJ4SNLYFL35C6vYWhBem8Y26gw=)
                          2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
                          3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
                          4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:49:6b:0e:b5:5c:cc:3d:14:e2:14:2d:f2:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
        Validity
            Not Before: Jun 14 00:00:56 2025 GMT
            Not After : Jun 15 00:00:56 2025 GMT
        Subject: CN=cb6aefddcfb3ea3b813cc3ffb1a571b858cd8899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:68:91:00:be:a8:06:5b:d5:37:f0:22:78:
                    de:8a:08:0b:9a:a3:e4:7a:da:d6:a8:6e:3e:e0:b0:
                    aa:b4:e7:6a:f7:e9:d7:a0:58:c6:fa:db:2c:20:a5:
                    0f:35:17:9c:c2:69:7e:8d:f0:65:22:2b:6a:82:6e:
                    40:aa:c0:c5:82:d8:b7:c4:ba:b7:10:e3:d7:8b:c9:
                    33:c5:46:0c:fa:ad:fd:b0:76:57:98:5c:37:b2:e5:
                    2a:67:98:ac:ed:17:5c:98:83:cf:b0:ad:f3:ab:76:
                    bf:d1:0c:61:a9:e5:99:c2:0c:d3:11:fc:2a:07:75:
                    bb:95:8c:fb:08:50:71:b0:83:e1:76:f1:32:95:1b:
                    d2:b0:3e:cf:2a:98:18:eb:02:37:01:ff:e4:08:a6:
                    d3:dd:6e:7f:ef:4b:39:25:3c:0f:6f:f7:93:27:1d:
                    57:74:fc:3b:4e:5e:33:e1:90:2e:e3:e3:f7:f8:ac:
                    75:a9:f4:e8:4f:59:d2:b7:59:05:3c:a4:8e:f3:bc:
                    64:68:66:d2:93:d9:6c:e9:53:9a:c2:de:bc:f2:4f:
                    c4:cd:8b:63:f0:09:f9:10:0e:28:04:38:3a:b8:6e:
                    d2:a5:dc:d6:98:2e:9c:af:ca:bb:df:9f:01:df:48:
                    ee:65:cf:1f:80:e3:f5:34:a6:29:e6:dc:b2:4a:3d:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6A:EF:DD:CF:B3:EA:3B:81:3C:C3:FF:B1:A5:71:B8:58:CD:88:99
            X509v3 Authority Key Identifier:
                keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:5f:b4:2a:54:4e:3a:bc:fa:02:e4:77:29:7b:c8:6c:40:
         98:9d:7e:6a:90:5c:8f:90:e3:47:1c:b7:54:4b:c4:7e:b5:59:
         e3:3b:52:e5:32:ef:f0:04:9a:e7:46:f1:bf:4b:33:7a:78:fe:
         b7:98:5f:6b:1c:41:75:ec:14:af:e6:e4:de:d8:bd:4e:45:67:
         fa:9f:54:13:29:4a:ea:b0:b4:7e:0b:2b:78:32:87:80:95:56:
         e7:6a:04:1c:63:56:94:66:64:fd:49:be:4a:43:57:b2:0b:78:
         8c:44:f2:c1:f7:ec:7a:fb:0e:13:d2:c4:c9:63:6c:c9:51:c7:
         11:aa:be:b9:0c:0c:d6:7b:24:37:71:51:53:a8:7d:7e:3b:80:
         06:b9:46:10:35:e5:4d:dd:d0:da:b9:54:f1:a2:41:9d:d0:39:
         f1:16:92:43:38:5e:27:45:19:4d:44:e1:bd:fc:1d:60:d6:76:
         fb:e9:89:74:52:af:6c:3a:20:01:ac:c0:6d:12:6e:6c:ed:56:
         28:93:d9:2a:fd:16:50:c6:e5:42:f1:ff:3e:31:45:1c:af:93:
         2b:0f:52:8e:f7:40:78:f8:36:ec:fe:d3:7a:66:3c:f7:ce:f3:
         a5:29:5f:e2:e9:d1:0f:21:40:54:cb:43:f0:b9:4e:d6:9c:a6:
         e2:d5:ac:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvUlrDrVczD0U4hQt8se1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy
ZDY1MDEwHhcNMjUwNjE0MDAwMDU2WhcNMjUwNjE1MDAwMDU2WjAzMTEwLwYDVQQD
EyhjYjZhZWZkZGNmYjNlYTNiODEzY2MzZmZiMWE1NzFiODU4Y2Q4ODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyVokQC+qAZb1TfwInjeiggLmqPk
etrWqG4+4LCqtOdq9+nXoFjG+tssIKUPNRecwml+jfBlIitqgm5AqsDFgti3xLq3
EOPXi8kzxUYM+q39sHZXmFw3suUqZ5is7RdcmIPPsK3zq3a/0QxhqeWZwgzTEfwq
B3W7lYz7CFBxsIPhdvEylRvSsD7PKpgY6wI3Af/kCKbT3W5/70s5JTwPb/eTJx1X
dPw7Tl4z4ZAu4+P3+Kx1qfToT1nSt1kFPKSO87xkaGbSk9ls6VOawt688k/EzYtj
8An5EA4oBDg6uG7SpdzWmC6cr8q7358B30juZc8fgOP1NKYp5tyySj3vgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtq793Ps+o7gTzD/7GlcbhYzYiZMB8GA1UdIwQY
MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt
OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm
LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBNftCpU
Tjq8+gLkdyl7yGxAmJ1+apBcj5DjRxy3VEvEfrVZ4ztS5TLv8ASa50bxv0szenj+
t5hfaxxBdewUr+bk3ti9TkVn+p9UEylK6rC0fgsreDKHgJVW52oEHGNWlGZk/Um+
SkNXsgt4jETywffsevsOE9LEyWNsyVHHEaq+uQwM1nskN3FRU6h9fjuABrlGEDXl
Td3Q2rlU8aJBndA58RaSQzheJ0UZTUThvfwdYNZ2++mJdFKvbDogAazAbRJubO1W
KJPZKv0WUMblQvH/PjFFHK+TKw9SjvdAePg27P7TemY8987zpSlf4unRDyFAVMtD
8LlO1pym4tWsJg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:40:54 2025 by rpki-client