Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          rLJmaPCkV7eISe8TxoEwLA9hteGoFBTD6JBArHtUTuQ=
Subject key identifier:   22:E2:18:F3:B9:41:22:EA:C0:A9:A4:21:24:DB:31:F7:1F:11:2B:1E
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       019671C207AFA52D5E94DB57A15504A5CAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 11:01:03 +0000
Manifest this update:     Sat 26 Apr 2025 11:01:03 +0000
Manifest next update:     Sun 27 Apr 2025 11:01:03 +0000
Files and hashes:         1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
                          2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
                          3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: DF8+qH6MSycLkIBCUoRqmuDacxJOQehXwmbO8i850rs=)
                          4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
                          5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
                          6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c2:07:af:a5:2d:5e:94:db:57:a1:55:04:a5:ca:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Apr 26 11:01:03 2025 GMT
            Not After : Apr 27 11:01:03 2025 GMT
        Subject: CN=22e218f3b94122eac0a9a42124db31f71f112b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:43:54:94:3c:d8:a7:07:31:26:68:25:d9:
                    80:ff:23:4d:e4:b2:fc:49:11:ac:7a:38:11:06:11:
                    6f:87:98:0c:dd:29:0c:cb:30:a4:7b:3b:26:3a:a2:
                    4d:c2:36:57:42:d3:e8:f9:3d:a4:9e:85:96:7c:bc:
                    82:41:81:50:d4:2d:31:48:bf:7c:23:64:47:22:ba:
                    f0:2e:d2:29:19:47:d2:80:f5:9e:03:18:ac:d5:e2:
                    3d:6d:16:87:b6:b0:95:c2:d5:0f:66:bd:bd:a3:92:
                    e4:b9:47:c2:19:1c:b5:b3:dd:af:ff:4b:c5:60:36:
                    f5:28:ab:48:ea:52:2b:5e:3c:28:a5:3c:f1:5c:13:
                    0d:a6:50:fc:9d:44:e5:9b:d1:7b:ce:e8:e3:76:7d:
                    2a:35:6c:20:7b:af:2c:63:26:e4:7b:b8:12:af:71:
                    f0:ff:4b:e8:06:19:36:2c:7b:45:fc:92:ef:d6:f5:
                    90:db:c9:a1:ce:04:9a:b5:e2:b3:13:fd:c0:62:fb:
                    1b:c6:ea:04:4b:97:5a:66:0f:b8:83:a4:19:42:b5:
                    77:0b:cd:8c:b6:63:fd:71:16:7e:c3:e1:f5:49:96:
                    7d:1c:97:45:93:55:58:bd:4f:9a:13:5c:89:87:ed:
                    a2:b5:e5:d6:49:94:e4:04:a4:a4:2a:64:a9:f0:ed:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:18:F3:B9:41:22:EA:C0:A9:A4:21:24:DB:31:F7:1F:11:2B:1E
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:45:43:37:88:70:43:cd:f3:1f:07:5f:e9:47:a3:5a:df:
         41:20:5b:3b:c6:94:2d:ea:1c:41:35:9a:98:bc:99:d6:8a:84:
         9a:19:67:40:9d:6c:5f:d5:9c:d5:78:69:68:86:cb:ba:94:4e:
         48:b1:e9:78:ca:55:04:31:51:35:3b:3d:cb:80:7a:43:af:62:
         7e:92:b9:0e:9d:25:27:0e:23:78:7f:db:8d:2f:aa:a6:9f:cd:
         c5:55:f1:5e:88:aa:b5:77:62:85:61:4c:7e:a9:b2:8b:fa:c1:
         3c:d9:f4:a7:fe:08:8a:0e:c9:89:90:9f:ed:7c:fe:cb:ba:4f:
         f1:52:d5:43:0d:cb:bd:ce:2b:d1:34:9f:8b:64:63:97:39:9a:
         17:2b:3e:6d:b1:c2:a7:7e:15:fc:9c:27:07:8a:8f:ad:f9:88:
         76:30:cd:66:fe:94:a7:ce:7c:19:2e:c6:f8:b3:8b:aa:2c:d8:
         d5:0e:fe:16:00:30:8c:a5:28:19:02:c8:15:33:fc:57:48:df:
         77:71:b2:f9:23:c2:b7:ff:98:0d:e2:82:ce:91:50:19:7b:14:
         45:86:9b:b9:38:3f:db:d5:f5:a6:c0:d3:5a:8b:55:e6:2c:b2:
         bd:0d:a0:43:54:0d:96:ad:e9:34:25:6d:62:48:2e:ff:d8:e9:
         93:05:57:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwgevpS1elNtXoVUEpcrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2
YmQ2MzkwHhcNMjUwNDI2MTEwMTAzWhcNMjUwNDI3MTEwMTAzWjAzMTEwLwYDVQQD
EygyMmUyMThmM2I5NDEyMmVhYzBhOWE0MjEyNGRiMzFmNzFmMTEyYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx5DVJQ82KcHMSZoJdmA/yNN5LL8
SRGsejgRBhFvh5gM3SkMyzCkezsmOqJNwjZXQtPo+T2knoWWfLyCQYFQ1C0xSL98
I2RHIrrwLtIpGUfSgPWeAxis1eI9bRaHtrCVwtUPZr29o5LkuUfCGRy1s92v/0vF
YDb1KKtI6lIrXjwopTzxXBMNplD8nUTlm9F7zujjdn0qNWwge68sYybke7gSr3Hw
/0voBhk2LHtF/JLv1vWQ28mhzgSateKzE/3AYvsbxuoES5daZg+4g6QZQrV3C82M
tmP9cRZ+w+H1SZZ9HJdFk1VYvU+aE1yJh+2iteXWSZTkBKSkKmSp8O2a3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLiGPO5QSLqwKmkISTbMfcfESseMB8GA1UdIwQY
MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt
MDkxYzJkMzAzZmU4LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4
LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOxFQzeI
cEPN8x8HX+lHo1rfQSBbO8aULeocQTWamLyZ1oqEmhlnQJ1sX9Wc1XhpaIbLupRO
SLHpeMpVBDFRNTs9y4B6Q69ifpK5Dp0lJw4jeH/bjS+qpp/NxVXxXoiqtXdihWFM
fqmyi/rBPNn0p/4Iig7JiZCf7Xz+y7pP8VLVQw3Lvc4r0TSfi2RjlzmaFys+bbHC
p34V/JwnB4qPrfmIdjDNZv6Up858GS7G+LOLqizY1Q7+FgAwjKUoGQLIFTP8V0jf
d3Gy+SPCt/+YDeKCzpFQGXsURYabuTg/29X1psDTWotV5iyyvQ2gQ1QNlq3pNCVt
Ykgu/9jpkwVX+A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:48 2025 by rpki-client