Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File:                     NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier:          EA9SnYLbb1FZ7uwxmK3Z9zVQfA86AkAJ5my2kLK2Dko=
Subject key identifier:   A1:97:B0:F1:6F:A1:23:ED:1F:DC:48:91:DF:08:54:56:2C:E9:86:5D
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer:       /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial:       01964669871F54532426D6BB4B32BB0C0499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number:          0E6B
Signing time:             Fri 18 Apr 2025 01:00:43 +0000
Manifest this update:     Fri 18 Apr 2025 01:00:43 +0000
Manifest next update:     Sat 19 Apr 2025 01:00:43 +0000
Files and hashes:         1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
                          2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: ftw1PrMlDrxZKovqMLF8WEr/yf4cl5F8mzfwhohI+54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:87:1f:54:53:24:26:d6:bb:4b:32:bb:0c:04:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
        Validity
            Not Before: Apr 18 01:00:43 2025 GMT
            Not After : Apr 19 01:00:43 2025 GMT
        Subject: CN=a197b0f16fa123ed1fdc4891df0854562ce9865d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:11:e5:d2:2b:7a:fd:97:8e:2d:1a:2f:29:
                    fd:67:8e:8b:09:ad:66:35:56:5b:a8:ae:e9:e3:b7:
                    9c:3e:cf:3e:96:87:4c:9c:8f:d7:b6:64:c8:db:8d:
                    62:46:1f:7d:aa:44:5d:43:b9:9b:4f:5a:bc:da:59:
                    08:a7:ab:65:8b:56:0a:95:b8:48:75:2f:db:b6:95:
                    9b:d6:a4:33:93:5d:d0:5d:8c:65:c4:05:ae:52:c7:
                    45:c4:af:4a:0b:f3:f2:ab:d5:b9:be:36:99:e2:b9:
                    a7:34:ed:43:a8:da:19:0f:2c:c7:77:d2:6c:4e:c6:
                    37:f7:d1:e0:a3:1f:fd:bc:f3:63:6b:2d:b5:fd:82:
                    91:3c:b9:b3:86:30:b4:2b:7a:d9:23:d2:94:60:15:
                    43:2e:69:11:78:3b:64:b3:f6:d9:a6:38:e5:1b:c9:
                    23:f8:cd:86:bc:6f:cd:84:ba:54:2a:04:1e:f2:de:
                    00:f3:51:5d:2f:8b:1b:c1:ac:e6:25:cc:86:48:7b:
                    01:d6:bb:34:7e:c2:5c:17:cd:1a:c8:92:aa:23:4b:
                    c4:01:05:0f:9b:23:d1:db:1a:fe:1d:05:f3:2c:2f:
                    ad:28:77:b0:96:5a:ff:68:d8:c8:11:e7:f3:71:35:
                    22:0f:5c:12:f6:86:de:66:a3:e2:cb:e0:d1:6c:3e:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:B0:F1:6F:A1:23:ED:1F:DC:48:91:DF:08:54:56:2C:E9:86:5D
            X509v3 Authority Key Identifier:
                keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:fa:53:a1:5c:c4:07:b8:f3:a4:0f:41:84:28:4f:ae:d5:cf:
         4a:0f:c0:2d:47:59:b6:a2:b8:50:73:eb:23:55:80:4b:3c:69:
         a7:03:01:f2:3c:d8:50:f9:c7:40:b7:c5:6b:52:1a:74:fd:9a:
         3b:94:0c:34:66:10:e0:15:46:ca:19:15:59:d5:7b:de:71:f1:
         88:da:ba:10:d3:46:3b:fd:3d:55:dd:49:fc:54:ae:0f:9a:8e:
         ab:2d:3a:cf:37:6b:ed:67:c7:68:92:9e:af:c0:7c:60:80:df:
         34:c9:1a:9c:cc:64:32:4c:94:ce:f8:88:80:92:82:d1:01:77:
         9c:ba:23:08:be:7e:0d:39:96:8c:6b:13:aa:d4:12:e4:e1:35:
         20:39:4d:6a:c1:e0:ed:cd:a9:4b:c8:5d:91:15:48:4a:24:28:
         c6:67:1c:92:70:17:d8:53:70:9e:73:0f:1a:1a:e6:05:95:4d:
         6a:b8:ba:41:37:dd:25:90:dc:bb:95:2c:1c:53:ab:16:75:35:
         b8:75:25:7d:95:c3:b5:a2:4a:e9:c8:e1:cf:27:62:52:d4:6f:
         ad:ba:66:c9:10:43:29:b1:50:fe:92:bb:8b:72:26:68:9d:a4:
         e9:73:34:c7:ef:05:ef:a1:fd:06:28:ac:64:30:fb:e2:2a:45:
         4c:4f:43:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGaYcfVFMkJta7SzK7DASZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzQ5NzIwMDQwMGIwZjFhYWU3YTg3ZmNhMzZmMDc3ZTBl
ZDYyY2UwHhcNMjUwNDE4MDEwMDQzWhcNMjUwNDE5MDEwMDQzWjAzMTEwLwYDVQQD
EyhhMTk3YjBmMTZmYTEyM2VkMWZkYzQ4OTFkZjA4NTQ1NjJjZTk4NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGUR5dIrev2Xji0aLyn9Z46LCa1m
NVZbqK7p47ecPs8+lodMnI/XtmTI241iRh99qkRdQ7mbT1q82lkIp6tli1YKlbhI
dS/btpWb1qQzk13QXYxlxAWuUsdFxK9KC/Pyq9W5vjaZ4rmnNO1DqNoZDyzHd9Js
TsY399Hgox/9vPNjay21/YKRPLmzhjC0K3rZI9KUYBVDLmkReDtks/bZpjjlG8kj
+M2GvG/NhLpUKgQe8t4A81FdL4sbwazmJcyGSHsB1rs0fsJcF80ayJKqI0vEAQUP
myPR2xr+HQXzLC+tKHewllr/aNjIEefzcTUiD1wS9obeZqPiy+DRbD4V2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGXsPFvoSPtH9xIkd8IVFYs6YZdMB8GA1UdIwQY
MBaAFDY0lyAEALDxqueof8o28Hfg7WLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEt
MTlhMTk5OWQ5ZDdlLzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEtMTlhMTk5OWQ5ZDdl
LzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/pToVzE
B7jzpA9BhChPrtXPSg/ALUdZtqK4UHPrI1WASzxppwMB8jzYUPnHQLfFa1IadP2a
O5QMNGYQ4BVGyhkVWdV73nHxiNq6ENNGO/09Vd1J/FSuD5qOqy06zzdr7WfHaJKe
r8B8YIDfNMkanMxkMkyUzviIgJKC0QF3nLojCL5+DTmWjGsTqtQS5OE1IDlNasHg
7c2pS8hdkRVISiQoxmccknAX2FNwnnMPGhrmBZVNari6QTfdJZDcu5UsHFOrFnU1
uHUlfZXDtaJK6cjhzydiUtRvrbpmyRBDKbFQ/pK7i3ImaJ2k6XM0x+8F76H9Biis
ZDD74ipFTE9Dbw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:56:50 2025 by rpki-client