Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
File:                     NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json)
Hash identifier:          l4QVSTIBoJwmZ9eS6lcPqMNav25wkv4nDOGkNCxsy+E=
Subject key identifier:   83:83:B9:9E:06:94:5B:B4:CF:69:8E:5E:F9:A6:4E:09:BD:F5:17:62
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Certificate issuer:       /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial:       01958BBB67E98562889105122C531260581F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
Manifest number:          1497
Signing time:             Wed 12 Mar 2025 19:01:09 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:09 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:09 +0000
Files and hashes:         1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: vueKSl39Zo3raZfDB2TPBjpnK3xILyV+lrBKYEcxt3A=)
                          2: ugIdAnD72uDX1xk6AnCHQeEOh1Y.roa (hash: QffGW9BNMmaT3r0VD1GTXNsWErI53h66jEjYScdrUso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:67:e9:85:62:88:91:05:12:2c:53:12:60:58:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
        Validity
            Not Before: Mar 12 19:01:09 2025 GMT
            Not After : Mar 13 19:01:09 2025 GMT
        Subject: CN=8383b99e06945bb4cf698e5ef9a64e09bdf51762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:38:00:7f:7c:b1:cb:6b:c8:ad:d3:18:4f:
                    a8:22:af:6d:a9:1a:92:7f:3a:f8:d4:39:67:9f:96:
                    ea:92:0a:0f:7d:4c:28:86:61:89:b9:5b:4e:b1:97:
                    c4:d6:57:23:26:9b:07:f0:52:d9:d7:cc:f4:6b:8a:
                    fc:10:f7:75:e4:93:13:03:09:e4:ca:08:55:e4:95:
                    19:99:c2:55:b9:79:98:47:c9:68:cc:43:f3:39:e5:
                    44:99:ac:40:41:ef:59:45:68:2d:c2:67:dd:7a:2d:
                    87:b8:83:eb:03:a8:a9:12:af:53:02:72:aa:f1:71:
                    a5:a6:db:b0:a5:6e:f0:ae:28:8d:ab:9e:a5:0c:a0:
                    bc:77:e5:9f:77:a0:5d:f8:3e:e3:71:7d:32:17:e5:
                    ac:3a:e0:e2:e8:5c:91:89:e2:f5:64:d8:b7:9a:01:
                    e9:85:60:8b:32:56:dc:75:d2:de:f0:ad:73:41:11:
                    4e:87:9e:9c:48:d0:c7:d1:e3:96:78:77:0c:1b:3f:
                    a6:b5:b0:22:79:9a:9e:85:c6:e0:cc:c6:00:f8:b9:
                    de:50:83:f8:92:2e:7b:52:8f:5f:86:18:65:fe:17:
                    41:f0:63:09:b8:cf:22:94:89:28:c4:08:97:08:3d:
                    10:1f:32:dc:1d:c8:0f:19:53:4c:e3:e4:f4:44:99:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:B9:9E:06:94:5B:B4:CF:69:8E:5E:F9:A6:4E:09:BD:F5:17:62
            X509v3 Authority Key Identifier:
                keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:2b:43:10:e2:91:5e:37:a8:c9:65:3e:cb:d6:6a:44:73:
         04:ec:d8:8f:00:4b:97:16:1d:16:db:d1:98:9e:c5:90:0f:4f:
         b0:e1:ae:3f:72:8a:2b:fa:46:ce:5b:87:86:ad:7b:ea:f4:ab:
         9a:1a:87:97:ec:33:d2:4d:2e:ff:4c:0a:60:3f:76:02:d9:b4:
         7a:9c:e7:bd:79:45:6b:87:e1:a4:39:b8:43:da:f2:d2:f0:8e:
         f4:14:21:d7:a6:70:9e:82:7c:62:94:cc:0d:44:f1:11:e7:9a:
         7e:ef:a3:8f:ea:4f:b7:97:22:38:1c:48:b4:d4:0f:d5:4a:e9:
         e8:de:f2:34:e8:cc:d8:f5:57:44:51:65:62:0c:bb:4c:a2:36:
         cf:08:42:53:bb:44:7d:77:39:7d:e2:5d:d7:ec:89:2e:d3:ef:
         22:ea:cf:0a:a6:ea:3b:6d:5d:3b:7e:0e:d2:23:7c:f8:d9:59:
         a8:02:27:af:bd:64:de:71:54:58:7f:f0:39:a6:2f:20:65:56:
         17:64:a9:fb:91:3e:5b:89:3c:bd:d5:2f:f6:b6:81:98:cf:61:
         90:7f:2f:67:ae:54:c0:6f:18:f9:69:6d:69:78:07:5d:86:25:
         2b:59:b2:97:a1:b4:58:7d:f0:33:8e:c1:90:d5:ef:21:3e:15:
         ec:c7:93:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLu2fphWKIkQUSLFMSYFgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjU5ZWEyZmE0N2E5ZDYzMTFiMWM4Y2M1YTg2YTViOWEw
ZTQ3YTcwHhcNMjUwMzEyMTkwMTA5WhcNMjUwMzEzMTkwMTA5WjAzMTEwLwYDVQQD
Eyg4MzgzYjk5ZTA2OTQ1YmI0Y2Y2OThlNWVmOWE2NGUwOWJkZjUxNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sU4AH98sctryK3TGE+oIq9tqRqS
fzr41Dlnn5bqkgoPfUwohmGJuVtOsZfE1lcjJpsH8FLZ18z0a4r8EPd15JMTAwnk
yghV5JUZmcJVuXmYR8lozEPzOeVEmaxAQe9ZRWgtwmfdei2HuIPrA6ipEq9TAnKq
8XGlptuwpW7wriiNq56lDKC8d+Wfd6Bd+D7jcX0yF+WsOuDi6FyRieL1ZNi3mgHp
hWCLMlbcddLe8K1zQRFOh56cSNDH0eOWeHcMGz+mtbAieZqehcbgzMYA+LneUIP4
ki57Uo9fhhhl/hdB8GMJuM8ilIkoxAiXCD0QHzLcHcgPGVNM4+T0RJlTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIODuZ4GlFu0z2mOXvmmTgm99RdiMB8GA1UdIwQY
MBaAFDT1nqL6R6nWMRscjMWoaluaDkenMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mODljOWUtM2U5YS00MWJhLTliNDUt
MzU2MTRlOTE3OGZjLzEvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mODljOWUtM2U5YS00MWJhLTliNDUtMzU2MTRlOTE3OGZj
LzEvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoErQxDi
kV43qMllPsvWakRzBOzYjwBLlxYdFtvRmJ7FkA9PsOGuP3KKK/pGzluHhq176vSr
mhqHl+wz0k0u/0wKYD92Atm0epznvXlFa4fhpDm4Q9ry0vCO9BQh16ZwnoJ8YpTM
DUTxEeeafu+jj+pPt5ciOBxItNQP1Urp6N7yNOjM2PVXRFFlYgy7TKI2zwhCU7tE
fXc5feJd1+yJLtPvIurPCqbqO21dO34O0iN8+NlZqAInr71k3nFUWH/wOaYvIGVW
F2Sp+5E+W4k8vdUv9raBmM9hkH8vZ65UwG8Y+WltaXgHXYYlK1myl6G0WH3wM47B
kNXvIT4V7MeTHw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:11:25 2025 by rpki-client