Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
File:                     NpABg88IpuW8gHhGKUpGBi4ZDjs.mft (raw, json)
Hash identifier:          eNCTJG9VKGTtyjKpD0n9uWVP2kpN8PYVL75oTHEnag4=
Subject key identifier:   C7:20:94:CF:AE:25:E5:AE:FC:BC:27:DD:70:DB:A9:D4:74:A8:12:C9
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Certificate issuer:       /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial:       018E85CB529662ADA12186E1AA7B85570C51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
Manifest number:          0970
Signing time:             Thu 28 Mar 2024 16:01:18 +0000
Manifest this update:     Thu 28 Mar 2024 16:01:18 +0000
Manifest next update:     Fri 29 Mar 2024 16:01:18 +0000
Files and hashes:         1: NpABg88IpuW8gHhGKUpGBi4ZDjs.crl (hash: 9lC48wsMBCQWO+no4A59nWcOgzsBNhU7Z3lhPR34mrg=)
                          2: OPyG9gQNe767Bw7fxhJVMkWBZrU.roa (hash: kumYWRRqLKFvct9mSNaliVeR/EMHCX7FEnynfX9VGWU=)
                          3: TcK18Oov25N70UM9Q1ULicom1ME.roa (hash: 7bL0dSBl+KEYpPExomsUvVTZj04A5lsrByj4CVD7Nnc=)
                          4: U44f0Esp89YGYMsCr5L_WhuoYPs.roa (hash: it5x4R4Sgb4MOAFRVJXf29dJr2GfGnQmDtpHT8UhDSI=)
                          5: Z2-U-IExtnGEdQsfonSjhM4W7z8.roa (hash: UhQnkH9NJ9393UpMTwTSHPSlAACgqbSYDvtl2HWWqJ8=)
                          6: e2MUp4KMYJE4J5I_GA9A8s2Ye0U.roa (hash: UKTxawnGHuklgR0qAx08LB6QoTrBI9V1J1TGEFxyUJ0=)
                          7: uqGP0_pjLf7WNtzdTqApRVX469g.roa (hash: TpKb6tkwaLsW20RtiRgNdc8jFkEyQypBZCG51DOOR3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:85:cb:52:96:62:ad:a1:21:86:e1:aa:7b:85:57:0c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
        Validity
            Not Before: Mar 28 16:01:18 2024 GMT
            Not After : Mar 29 16:01:18 2024 GMT
        Subject: CN=c72094cfae25e5aefcbc27dd70dba9d474a812c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:87:70:7c:28:fc:76:0b:e7:17:86:4c:5d:
                    9b:0b:94:8c:1e:68:f9:4d:ee:74:4c:94:03:eb:83:
                    1d:9d:6a:21:00:c1:97:cb:65:c7:f0:0c:f9:05:4f:
                    83:b6:ae:c0:5a:e4:01:e7:79:f6:5c:e1:d4:23:52:
                    04:33:17:d2:4a:04:a1:4f:81:90:15:5b:65:c0:c4:
                    1c:2f:27:bc:ae:1c:9a:43:dd:bf:b5:11:41:2e:a9:
                    e6:f6:4e:b0:23:57:3c:36:d5:b8:93:5d:cc:78:97:
                    8a:3d:3a:78:e2:1e:86:7c:73:31:13:26:1a:6f:4e:
                    73:31:c1:b8:9b:86:cb:d4:f1:69:18:7f:a4:68:d9:
                    dd:b4:7a:03:73:56:f5:7d:23:33:22:20:59:e2:50:
                    88:7a:31:61:86:1b:24:c8:58:13:74:37:e8:b7:49:
                    1e:8b:20:ec:0f:10:a1:7f:ae:94:b7:4d:7f:c7:a1:
                    59:af:4a:6c:5f:1c:d0:62:64:25:32:ad:6e:f6:9e:
                    c1:57:36:63:fd:d1:50:6c:19:74:39:e3:76:12:25:
                    d7:60:3f:23:be:0e:76:b9:ba:42:01:8f:3a:ab:f5:
                    b8:0e:13:da:38:99:5f:63:88:0f:71:df:90:f1:4e:
                    6a:82:7c:7c:cc:80:a4:88:b2:b6:9b:6e:75:64:50:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:20:94:CF:AE:25:E5:AE:FC:BC:27:DD:70:DB:A9:D4:74:A8:12:C9
            X509v3 Authority Key Identifier:
                keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:15:e2:b6:ad:6a:38:67:83:52:78:03:d7:dd:14:cc:cf:
         61:08:09:43:b8:3e:de:c3:e7:43:24:38:94:d5:6d:d1:80:af:
         8b:7d:7e:c3:11:34:9e:7a:36:44:65:71:6d:1c:48:18:cc:5f:
         30:e1:b4:91:98:18:f5:49:be:5c:e0:c6:63:63:32:74:8e:cf:
         10:15:fd:72:2c:47:77:5e:09:58:fb:dd:65:d7:e6:16:3f:47:
         31:29:73:73:73:7e:2c:4e:db:fa:dc:10:41:bb:b1:60:87:30:
         e1:36:48:9a:df:10:a8:4c:50:fd:ad:d4:86:b5:8c:44:5b:23:
         c2:9f:2a:dd:e9:b9:bb:d8:b0:2a:46:ce:87:34:8f:30:99:68:
         ad:a5:1d:61:9d:b1:ba:9a:17:65:ee:e0:9e:c4:26:06:42:87:
         8a:eb:fc:53:bb:43:51:3d:a8:24:52:f4:62:ef:6a:33:f9:42:
         98:3f:5d:3c:5c:cd:10:81:a6:43:26:a7:73:a2:09:c9:1f:bf:
         9f:53:3f:f2:e5:df:7e:46:15:54:67:17:3b:6b:86:a0:d9:32:
         a1:73:c9:56:b0:b2:8a:aa:c8:0e:66:d0:ea:f5:76:06:f4:64:
         ba:47:5a:36:5f:2e:fd:6a:cb:31:cb:c7:8c:c9:72:c2:df:41:
         b0:54:bd:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY6Fy1KWYq2hIYbhqnuFVwxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTAwMTgzY2YwOGE2ZTViYzgwNzg0NjI5NGE0NjA2MmUx
OTBlM2IwHhcNMjQwMzI4MTYwMTE4WhcNMjQwMzI5MTYwMTE4WjAzMTEwLwYDVQQD
EyhjNzIwOTRjZmFlMjVlNWFlZmNiYzI3ZGQ3MGRiYTlkNDc0YTgxMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoCHcHwo/HYL5xeGTF2bC5SMHmj5
Te50TJQD64MdnWohAMGXy2XH8Az5BU+Dtq7AWuQB53n2XOHUI1IEMxfSSgShT4GQ
FVtlwMQcLye8rhyaQ92/tRFBLqnm9k6wI1c8NtW4k13MeJeKPTp44h6GfHMxEyYa
b05zMcG4m4bL1PFpGH+kaNndtHoDc1b1fSMzIiBZ4lCIejFhhhskyFgTdDfot0ke
iyDsDxChf66Ut01/x6FZr0psXxzQYmQlMq1u9p7BVzZj/dFQbBl0OeN2EiXXYD8j
vg52ubpCAY86q/W4DhPaOJlfY4gPcd+Q8U5qgnx8zICkiLK2m251ZFBJ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcglM+uJeWu/Lwn3XDbqdR0qBLJMB8GA1UdIwQY
MBaAFDaQAYPPCKblvIB4RilKRgYuGQ47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMt
MmY1YjZhODNmYWYzLzEvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMtMmY1YjZhODNmYWYz
LzEvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+kV4rat
ajhng1J4A9fdFMzPYQgJQ7g+3sPnQyQ4lNVt0YCvi31+wxE0nno2RGVxbRxIGMxf
MOG0kZgY9Um+XODGY2MydI7PEBX9cixHd14JWPvdZdfmFj9HMSlzc3N+LE7b+twQ
QbuxYIcw4TZImt8QqExQ/a3UhrWMRFsjwp8q3em5u9iwKkbOhzSPMJloraUdYZ2x
upoXZe7gnsQmBkKHiuv8U7tDUT2oJFL0Yu9qM/lCmD9dPFzNEIGmQyanc6IJyR+/
n1M/8uXffkYVVGcXO2uGoNkyoXPJVrCyiqrIDmbQ6vV2BvRkukdaNl8u/WrLMcvH
jMlywt9BsFS9zw==
-----END CERTIFICATE-----
Generated at Fri Mar 29 00:06:37 2024 by rpki-client on console-fra.rpki-client.org