Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File:                     NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier:          t61xaByKvjjOKROYTgY6Z46ot4zIoh71QlfpTGNP7eA=
Subject key identifier:   F7:3B:F8:6B:10:97:3E:84:F3:B6:BC:C9:35:BC:95:79:51:9F:E6:DD
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer:       /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial:       019649D81E45FCF93A3EFE1B6AACE1D97366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number:          14F8
Signing time:             Fri 18 Apr 2025 17:00:22 +0000
Manifest this update:     Fri 18 Apr 2025 17:00:22 +0000
Manifest next update:     Sat 19 Apr 2025 17:00:22 +0000
Files and hashes:         1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: +tsAuR1JAqS6vOnq5BXhRm0LWSCdutOb9T6Ygkv5ytI=)
                          2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:d8:1e:45:fc:f9:3a:3e:fe:1b:6a:ac:e1:d9:73:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340551ace81314829351a27e399aeddb33246155
        Validity
            Not Before: Apr 18 17:00:22 2025 GMT
            Not After : Apr 19 17:00:22 2025 GMT
        Subject: CN=f73bf86b10973e84f3b6bcc935bc9579519fe6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:16:70:9d:99:cf:96:bb:d4:4e:b1:49:bc:
                    82:01:44:48:1d:c6:c1:a0:96:57:1c:a0:c1:6a:54:
                    1f:44:5a:1a:b5:51:4e:f9:f3:b2:b2:52:2a:86:d1:
                    31:18:2a:4f:08:a4:b9:9f:25:21:26:cd:36:6f:43:
                    d5:0c:f1:6f:1b:9e:6f:ad:2a:2d:6a:ee:28:0a:4f:
                    38:e6:8f:c2:28:14:b2:0d:ea:97:38:2f:f0:c4:43:
                    6c:38:12:2c:91:c2:ca:19:e7:54:73:e8:74:fb:51:
                    5e:85:a0:ea:f2:00:87:bd:5c:dd:f3:4d:83:d6:eb:
                    b2:04:c1:05:95:e6:a3:54:ae:ac:e6:95:92:b0:bb:
                    6c:7f:cd:fc:43:c5:76:57:6d:f6:15:74:fe:06:72:
                    ef:9e:e9:29:4a:3b:df:11:06:45:d7:83:94:c2:16:
                    55:59:02:10:00:71:4c:c8:ae:0a:d8:d7:e2:24:b9:
                    1f:81:29:03:71:c7:19:81:8c:e7:6c:a3:98:66:94:
                    07:1f:a0:53:1c:0e:a2:6a:15:58:b2:be:d8:53:95:
                    ad:28:1f:d8:7e:66:79:25:7a:4c:a8:3c:f0:8e:fb:
                    a5:28:05:91:15:2c:9d:98:ec:12:4e:13:dd:4c:1a:
                    ca:6a:63:c1:c6:4a:3a:83:96:3a:69:eb:81:6b:d5:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3B:F8:6B:10:97:3E:84:F3:B6:BC:C9:35:BC:95:79:51:9F:E6:DD
            X509v3 Authority Key Identifier:
                keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:60:d2:10:07:be:b2:ac:ed:d9:54:6c:00:0f:8d:85:f5:
         71:e0:95:3f:9e:37:64:76:c2:9c:ab:16:f9:89:b8:eb:1f:3f:
         df:a0:93:b5:04:00:77:48:fb:dd:7d:49:ca:6c:08:ac:92:ad:
         1c:a6:e3:97:62:82:7c:81:d1:ed:62:d0:b7:58:e8:00:1c:4f:
         90:e3:87:e5:05:b6:c1:3f:89:41:4e:bb:be:26:02:75:de:45:
         66:c1:7e:42:7c:05:ee:0c:7b:28:4e:77:ae:90:53:ef:b2:7d:
         86:ac:5b:76:3c:41:e9:e2:18:f1:4d:a3:8b:e0:64:bc:06:80:
         d0:ec:bb:20:f6:3d:56:5a:4a:49:87:79:76:6b:2a:79:b5:2b:
         ad:5d:77:be:ab:25:e3:11:2c:f6:27:05:c3:f7:54:93:ad:67:
         7a:d2:3c:a5:89:6d:ab:b2:c3:1a:7d:32:fd:e0:13:49:0a:63:
         d5:5c:9d:6e:d7:f2:5d:f7:e8:c6:89:51:10:01:c5:6a:4e:9e:
         48:90:5e:db:85:bd:19:21:0c:c2:eb:bb:ca:b8:0a:1c:27:74:
         e3:a8:7b:0e:9b:e4:ec:e4:c4:07:eb:77:b5:9a:8a:25:d7:56:
         dc:30:91:04:7a:3d:73:33:fd:1c:21:be:8b:90:1e:22:ea:c9:
         de:35:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:37:53 2025 by rpki-client