Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          e3/uyvwOsN8WYMcld4nCIik5OIpjoL1ukYYAOSBzvKA=
Subject key identifier:   18:63:CC:1B:51:AE:43:0D:76:85:00:45:53:07:A7:C0:E8:48:DF:07
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       019610FBA966D82299FE9934EBE883000114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0B7F
Signing time:             Mon 07 Apr 2025 16:00:50 +0000
Manifest this update:     Mon 07 Apr 2025 16:00:50 +0000
Manifest next update:     Tue 08 Apr 2025 16:00:50 +0000
Files and hashes:         1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: 3AeK/K3f1ev30avBlGg50C/PTJlMp9vR6uXOpXAGvtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:fb:a9:66:d8:22:99:fe:99:34:eb:e8:83:00:01:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Apr  7 16:00:50 2025 GMT
            Not After : Apr  8 16:00:50 2025 GMT
        Subject: CN=1863cc1b51ae430d768500455307a7c0e848df07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:e7:c2:f7:8d:7e:51:3b:ec:0a:b5:91:b3:
                    60:49:e8:6c:88:82:2d:4a:5d:a1:61:5e:25:f6:f3:
                    04:92:fe:c5:e0:74:6a:88:65:9a:9a:66:36:65:61:
                    6a:0c:f0:2d:34:51:56:ff:6b:ed:ee:83:24:1a:ca:
                    ab:e1:65:15:cc:52:db:74:c6:f5:a6:93:23:60:2d:
                    60:34:3e:ae:8f:c1:01:12:b1:ee:04:90:80:8f:f2:
                    59:f5:97:cc:7e:1f:a6:5f:e2:09:ab:fb:57:ba:e4:
                    31:bb:fa:86:04:66:ce:47:d4:1b:2d:23:03:02:ee:
                    60:03:c3:ac:c1:72:7e:50:19:5a:b4:7a:da:98:bc:
                    53:5a:eb:e0:52:bd:7d:9f:ca:36:ec:0b:38:2c:35:
                    da:f8:9d:53:67:99:84:55:f5:7f:52:f6:bd:f2:cf:
                    cd:01:a6:52:3f:21:ab:36:71:98:7d:2e:fe:db:a4:
                    ee:d2:8a:fe:cb:dc:c1:23:b1:d6:bd:81:c6:aa:01:
                    08:3e:c8:d6:99:8d:a0:63:b5:42:68:7f:a5:b9:83:
                    ff:07:bb:f4:fd:a4:4d:06:88:a1:78:6a:ad:37:c3:
                    0f:89:9a:70:fb:7b:51:51:a8:5a:1f:f6:24:33:34:
                    ad:f9:73:7e:0b:ab:2d:bd:3a:17:76:51:dd:af:28:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:CC:1B:51:AE:43:0D:76:85:00:45:53:07:A7:C0:E8:48:DF:07
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:dc:55:5c:0a:1a:82:cb:51:9d:ab:14:67:f3:52:5c:fd:
         ee:e1:49:fd:ed:de:a8:e1:00:f2:e7:20:ad:28:24:e5:ed:62:
         f6:5f:75:be:c1:3a:d3:5e:c2:69:c7:92:a1:e5:68:6e:e7:74:
         ce:8f:d8:b5:7f:35:8b:2b:1e:00:27:c2:3a:30:fd:66:2c:c0:
         03:ea:de:f7:40:3f:9d:01:8c:08:c4:19:81:e5:87:4a:be:6e:
         0b:96:71:3b:81:d7:a4:65:2f:2a:92:65:56:d3:ed:ff:aa:17:
         40:6d:28:7a:92:74:43:9b:75:bd:d5:d5:a2:a6:cc:25:68:5e:
         1a:d7:d4:3a:67:b2:be:a5:8b:cc:f5:4d:6a:9f:79:31:4d:bf:
         e5:ca:42:56:b5:f7:77:5b:ca:dd:78:6e:9d:e1:e5:fd:7e:30:
         50:dc:91:ba:4f:2b:1c:87:51:33:9b:7a:16:ad:11:c2:25:56:
         da:da:8c:70:fa:3e:cf:69:05:a1:6f:59:98:e1:ff:0d:e4:7c:
         b3:b0:3b:d8:4c:36:38:e4:0b:6e:ca:ea:70:7d:6f:3b:01:9e:
         1b:3b:ac:d5:30:9b:71:96:17:f4:47:1c:d7:97:07:59:f4:96:
         8f:69:e8:b7:a9:3b:eb:69:d5:da:0b:09:ea:ef:ec:74:0d:16:
         d7:6c:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:19 2025 by rpki-client