Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File:                     NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier:          Xw51nFBRS+o+cohEkJN7kckmX70OEf2ICB/ADAcrlEY=
Subject key identifier:   8A:AF:90:0F:1A:DC:C4:59:E3:49:68:F8:C6:D0:BC:9F:88:7E:A4:67
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer:       /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial:       019655DD18616BCBC9A0F948AED116651258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number:          06FE
Signing time:             Mon 21 Apr 2025 01:01:15 +0000
Manifest this update:     Mon 21 Apr 2025 01:01:15 +0000
Manifest next update:     Tue 22 Apr 2025 01:01:15 +0000
Files and hashes:         1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: SGaiy0i30ZpErM7QPL1JDysxbzTxVx9DZP06O8glQa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:dd:18:61:6b:cb:c9:a0:f9:48:ae:d1:16:65:12:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
        Validity
            Not Before: Apr 21 01:01:15 2025 GMT
            Not After : Apr 22 01:01:15 2025 GMT
        Subject: CN=8aaf900f1adcc459e34968f8c6d0bc9f887ea467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:ca:d8:90:ef:5d:55:fb:35:fb:de:99:6d:
                    5d:cd:f9:af:9b:36:62:0b:1c:38:8a:08:7b:1e:ce:
                    0f:44:93:1a:88:63:27:4b:db:1a:2f:53:f5:59:11:
                    3e:1f:db:da:3f:28:e9:e6:bf:c0:4a:00:30:f2:fc:
                    84:cb:99:dc:9d:a1:cd:19:03:fa:15:f0:86:94:1e:
                    f1:2f:6a:b7:b0:9b:a0:64:a1:ac:be:fb:6f:29:7f:
                    3d:19:72:c1:ee:0d:91:5e:f9:4a:e9:21:d4:33:1b:
                    15:ef:e0:53:b2:65:0a:bb:cd:01:08:c6:46:7c:29:
                    be:c2:c7:00:f3:6d:e3:24:f3:77:d2:97:0e:09:a7:
                    63:b7:2e:d9:2a:78:91:52:03:61:08:69:e5:0c:08:
                    e8:d6:79:1c:b9:4c:1f:eb:a3:e1:80:03:2c:1d:54:
                    7c:9d:52:e5:c0:ac:85:e5:1c:8f:f6:da:5d:6e:75:
                    19:89:f7:be:ea:ca:45:22:81:90:b5:22:63:74:3b:
                    26:e3:68:9c:21:d3:9e:ef:41:5e:5b:be:fd:f7:52:
                    58:1e:7a:26:02:47:d8:60:3e:51:5a:0b:18:25:38:
                    9e:21:42:1c:0a:01:14:fa:95:49:9f:bb:5f:fe:63:
                    96:d0:ea:67:cf:c8:13:e9:bb:08:57:7b:f8:6d:08:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AF:90:0F:1A:DC:C4:59:E3:49:68:F8:C6:D0:BC:9F:88:7E:A4:67
            X509v3 Authority Key Identifier:
                keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7b:62:c0:63:64:00:90:e5:7a:ec:ef:b8:0f:06:bb:6f:ce:
         e6:7c:8f:08:31:1f:03:b6:c8:53:51:ef:f4:93:95:60:10:18:
         39:0c:8b:75:37:5e:d9:b1:d7:6b:d1:d2:56:8c:32:9e:e9:9c:
         0e:4b:53:db:4c:c5:c9:42:a6:3e:34:1e:ab:6a:bf:f5:c8:b0:
         04:1d:fb:f4:e9:cc:ce:37:17:01:02:c7:c3:c3:c9:8f:bc:05:
         d3:45:a6:9b:29:64:e3:f1:ef:39:94:01:cc:7c:3c:de:cf:9e:
         16:1c:bc:ab:aa:de:a6:81:2e:31:8a:6e:5b:c0:95:fb:74:44:
         55:fc:84:6e:63:a5:64:ae:3f:7b:77:e6:96:b0:78:4e:ce:3f:
         7d:a7:19:6e:80:8d:e6:c3:b5:4a:42:bf:c4:9a:0f:05:b1:5b:
         96:a3:86:fb:33:65:2b:1b:c0:b3:04:f8:53:b7:9b:a4:5c:12:
         6a:c5:be:a5:87:97:29:fa:c2:76:74:f1:2d:fb:46:dd:78:82:
         36:24:83:36:ab:3c:56:7e:a6:58:76:7d:1d:0e:4c:64:74:44:
         36:9a:2f:bc:dc:16:41:8b:21:62:97:a5:11:a2:11:99:98:aa:
         fc:b9:cc:c2:5e:63:a4:94:b1:84:9a:a1:15:a1:d1:c6:35:32:
         e6:9b:61:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3Rhha8vJoPlIrtEWZRJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmYwMGFlMmE2ZmVlZWQ2YTQ5ODdjYmM5MTM0NjdmZGZl
ZjgzZTgwHhcNMjUwNDIxMDEwMTE1WhcNMjUwNDIyMDEwMTE1WjAzMTEwLwYDVQQD
Eyg4YWFmOTAwZjFhZGNjNDU5ZTM0OTY4ZjhjNmQwYmM5Zjg4N2VhNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+PK2JDvXVX7NfvemW1dzfmvmzZi
Cxw4igh7Hs4PRJMaiGMnS9saL1P1WRE+H9vaPyjp5r/ASgAw8vyEy5ncnaHNGQP6
FfCGlB7xL2q3sJugZKGsvvtvKX89GXLB7g2RXvlK6SHUMxsV7+BTsmUKu80BCMZG
fCm+wscA823jJPN30pcOCadjty7ZKniRUgNhCGnlDAjo1nkcuUwf66PhgAMsHVR8
nVLlwKyF5RyP9tpdbnUZife+6spFIoGQtSJjdDsm42icIdOe70FeW77991JYHnom
AkfYYD5RWgsYJTieIUIcCgEU+pVJn7tf/mOW0Opnz8gT6bsIV3v4bQjvvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqvkA8a3MRZ40lo+MbQvJ+IfqRnMB8GA1UdIwQY
MBaAFDT/AK4qb+7takmHy8kTRn/f74PoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUt
OGIzZTQwMDYzODU4LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUtOGIzZTQwMDYzODU4
LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3tiwGNk
AJDleuzvuA8Gu2/O5nyPCDEfA7bIU1Hv9JOVYBAYOQyLdTde2bHXa9HSVowynumc
DktT20zFyUKmPjQeq2q/9ciwBB379OnMzjcXAQLHw8PJj7wF00Wmmylk4/HvOZQB
zHw83s+eFhy8q6repoEuMYpuW8CV+3REVfyEbmOlZK4/e3fmlrB4Ts4/facZboCN
5sO1SkK/xJoPBbFblqOG+zNlKxvAswT4U7ebpFwSasW+pYeXKfrCdnTxLftG3XiC
NiSDNqs8Vn6mWHZ9HQ5MZHRENpovvNwWQYshYpelEaIRmZiq/LnMwl5jpJSxhJqh
FaHRxjUy5pthiA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:37 2025 by rpki-client