Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File:                     NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier:          ZRDNaPUAtPfBPf2OPv5wv+64KZI0FCiRVhEFS4gXhrI=
Subject key identifier:   50:A8:2D:CB:90:74:FE:EA:E4:C0:1C:2D:85:70:2A:FB:63:76:7A:90
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer:       /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial:       01963CF8A0A7230D6E3C01C77E499F0537EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number:          09E7
Signing time:             Wed 16 Apr 2025 05:00:49 +0000
Manifest this update:     Wed 16 Apr 2025 05:00:49 +0000
Manifest next update:     Thu 17 Apr 2025 05:00:49 +0000
Files and hashes:         1: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: CTZYo/d7FHgF45n4udyjXIsNw8uGtEyDcmkyojqvONI=)
                          2: rAVoUvT6eIAoJ9DaPocwQDvvkoc.roa (hash: 1BFZOwvrkIRFql6imBqxsdk52Ly1yvo/6JadLNNcDZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:f8:a0:a7:23:0d:6e:3c:01:c7:7e:49:9f:05:37:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
        Validity
            Not Before: Apr 16 05:00:49 2025 GMT
            Not After : Apr 17 05:00:49 2025 GMT
        Subject: CN=50a82dcb9074feeae4c01c2d85702afb63767a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:fd:26:3c:b8:7f:26:20:33:b1:33:dd:e9:
                    9a:43:ae:17:cb:7c:96:f0:ba:38:95:fb:a4:d8:3a:
                    76:0f:78:3b:f5:64:e6:4f:a2:9a:ba:09:f2:95:a7:
                    87:df:d7:2b:25:03:3e:a3:74:59:4a:53:55:e6:d4:
                    ab:0c:96:ad:9e:21:8f:82:75:0c:76:c3:cb:7e:9a:
                    c3:74:5d:31:5d:74:d7:3f:2f:16:dc:31:7c:c1:33:
                    83:59:f5:84:5a:3f:08:55:40:5c:c6:68:67:73:c8:
                    57:73:3c:9c:db:13:0e:82:6b:1b:41:88:1b:13:a4:
                    8a:c3:73:65:ad:7c:aa:ec:b0:55:34:a2:3f:00:f3:
                    1e:0b:d1:a3:b1:7c:48:07:3e:b7:e6:66:69:14:4a:
                    53:3f:2c:7d:a8:b4:eb:33:db:8b:71:a6:fe:ef:f7:
                    23:cb:23:17:e4:fe:cb:81:c9:89:41:32:eb:57:5c:
                    82:32:8a:48:3a:7c:9b:3c:45:b0:2e:14:8e:54:7b:
                    81:af:5b:71:2e:0a:d8:89:a0:1e:33:12:d8:37:fc:
                    e8:1b:f3:a2:02:7a:ef:9c:21:e8:bf:5e:dc:bb:bc:
                    fe:9f:73:47:37:b6:26:8c:bc:25:c9:13:79:61:a9:
                    23:18:2f:ce:ca:94:a7:ac:f8:7e:17:ff:e8:30:03:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A8:2D:CB:90:74:FE:EA:E4:C0:1C:2D:85:70:2A:FB:63:76:7A:90
            X509v3 Authority Key Identifier:
                keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d8:a5:29:8a:fa:ab:26:24:d1:6f:5a:79:28:2e:0a:1b:d6:
         4c:21:7a:88:48:09:fa:2b:dc:47:5d:4d:c1:ed:48:0d:bc:49:
         9a:91:14:9c:62:bc:d0:3b:d5:2a:14:41:4e:df:6a:61:a9:34:
         98:de:bd:be:0c:c5:d2:d7:06:85:7c:0b:4c:f5:62:1d:99:c9:
         40:61:a2:80:54:a9:59:a4:b4:28:26:da:4d:37:9d:f6:01:a4:
         58:4e:fd:92:ab:36:eb:94:c3:3e:d2:32:b7:a6:12:cd:d1:88:
         b7:03:23:af:be:0a:8e:75:88:5f:7f:14:2d:34:fb:61:a8:b6:
         15:cf:06:4d:83:7e:95:7a:ff:ba:04:f9:df:a1:0b:3b:b9:b1:
         b9:e3:68:d1:38:4b:e3:56:9f:65:6c:16:d7:16:21:c0:9f:4e:
         14:3f:e6:d8:50:72:c8:12:b7:4e:f7:7c:ee:cd:f4:21:3b:f9:
         19:6d:c2:16:73:33:fc:1f:1b:40:a3:3f:81:c1:b1:3e:3c:27:
         58:3b:7f:f2:7a:76:1d:1a:4a:27:fb:25:eb:22:2e:80:cb:1a:
         8f:98:11:59:bb:ce:9a:b0:07:a6:2a:e8:25:c2:03:b7:a5:fd:
         ef:f9:94:e8:3e:89:2b:5a:b0:f9:b7:dd:5c:92:ff:cb:e9:a1:
         2c:6d:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:30:37 2025 by rpki-client