Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File:                     NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier:          c9x9LL8b9W6xabN3e6v00h2ci43AMe7AH+34M9jNXJA=
Subject key identifier:   1F:EB:5C:40:1D:74:09:F1:DA:0D:A6:BA:55:95:07:D0:57:63:E5:53
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer:       /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial:       01962B98077F89EEC5D5EEBF0E56576F16B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number:          0581
Signing time:             Sat 12 Apr 2025 20:01:45 +0000
Manifest this update:     Sat 12 Apr 2025 20:01:45 +0000
Manifest next update:     Sun 13 Apr 2025 20:01:45 +0000
Files and hashes:         1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: ZFP+jZCcayS5VNK8FZHncgGudqTcM7J5Nt9nNYqDL+w=)
                          2: jCF0UZxubcg2boAXKn66J2n2ZyE.roa (hash: Jnz70fxzRetWB+WwfJpKB4S2++FXBxK+gp589kR2o6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:98:07:7f:89:ee:c5:d5:ee:bf:0e:56:57:6f:16:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
        Validity
            Not Before: Apr 12 20:01:45 2025 GMT
            Not After : Apr 13 20:01:45 2025 GMT
        Subject: CN=1feb5c401d7409f1da0da6ba559507d05763e553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:bf:b2:96:ed:ed:6f:65:6d:f3:f1:be:e5:
                    76:a0:98:84:86:88:cc:cb:c2:bd:3b:69:60:3a:6d:
                    d0:35:4e:0b:ad:43:69:5d:9b:36:c2:b8:61:85:e2:
                    74:d0:bd:a8:3a:5e:66:cd:d9:49:6c:b5:bc:b2:95:
                    74:c8:08:d9:6a:f3:b7:1a:5d:b0:c5:e4:15:e6:d7:
                    c7:67:83:cb:e3:66:1f:63:c4:93:86:d1:0a:5c:57:
                    09:f2:25:0a:12:8c:48:66:cd:92:d2:98:fa:c0:1a:
                    b6:3e:10:e7:f7:34:b4:56:3a:c8:74:f2:c2:20:13:
                    14:8e:72:6e:60:9f:96:59:0f:44:cb:89:5e:ee:1e:
                    d4:65:3a:4e:4e:4e:16:e9:f6:28:a8:d5:a9:5f:6b:
                    78:cb:45:93:f0:2a:71:66:4f:a9:32:5a:aa:d7:c4:
                    4b:57:52:f4:84:ec:19:cf:8c:ed:72:2a:1f:a8:5a:
                    3d:d7:5d:91:c8:f7:1a:7d:53:5d:d9:b1:4d:0c:23:
                    17:d8:4f:7c:48:d9:5b:dc:1a:a8:d2:8a:6c:55:c3:
                    c1:18:f9:e6:ff:50:00:48:12:5c:1a:1d:d5:be:27:
                    3d:a7:fc:94:d9:86:0d:cb:95:8b:86:7e:d1:21:c8:
                    9c:15:75:46:c8:ba:ab:61:c6:0c:5b:bb:f9:05:88:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:5C:40:1D:74:09:F1:DA:0D:A6:BA:55:95:07:D0:57:63:E5:53
            X509v3 Authority Key Identifier:
                keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:41:18:ce:0e:56:0e:1a:5c:70:b6:f5:42:58:de:e7:3f:
         3b:84:9f:f6:94:b8:8e:40:3e:cb:96:74:94:d8:ec:c3:5b:2c:
         89:79:79:4f:93:2c:1a:88:80:ea:b1:f3:d5:02:2d:74:1a:ca:
         7b:53:e4:d9:b9:89:ca:b3:3a:5e:8b:b6:a9:c6:81:18:6f:bb:
         c9:01:83:41:c2:0c:27:59:2c:72:74:d9:e1:26:38:fd:66:93:
         13:36:48:19:95:9d:6e:18:b0:19:00:e2:f7:f8:d3:f2:df:9a:
         82:db:44:ae:79:e7:9b:ee:f9:71:29:84:77:f4:d0:52:6d:a6:
         62:78:38:e9:14:4b:13:1f:67:bd:63:c3:76:63:56:0e:95:2c:
         d5:80:8d:ba:db:2f:66:e4:21:6f:30:b5:9f:48:cf:37:ca:27:
         0f:c5:4e:66:a0:c1:f3:28:69:b3:17:35:10:6f:88:04:d8:42:
         7a:4f:a4:c9:03:7d:03:03:85:1d:07:8e:7d:c8:e8:a8:51:5a:
         7f:9b:89:75:bd:a4:63:54:b9:c0:16:4d:c9:69:21:cd:f7:44:
         18:fe:5e:1e:1b:a0:94:de:5c:ab:48:89:ea:54:86:72:12:79:
         54:26:0d:81:d6:2f:40:cf:bb:cd:fe:4e:0b:64:20:74:bd:5f:
         5f:a7:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:36:29 2025 by rpki-client