Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          kJdCv+IHuYMEhabSRdFggbjnYn47LWoVUXqN5Gm2R1c=
Subject key identifier:   32:3D:C9:44:5C:6F:D6:60:50:75:9B:A9:E3:9A:40:AA:EB:F7:89:C8
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       01964D7ED6BF34DF50E82BB18483809A7E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          0CC1
Signing time:             Sat 19 Apr 2025 10:01:20 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:20 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:20 +0000
Files and hashes:         1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: tWPrL6pZd7H2uuEGeurZvwZCLkAXEXVEiRB3rOITfQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:d6:bf:34:df:50:e8:2b:b1:84:83:80:9a:7e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: Apr 19 10:01:20 2025 GMT
            Not After : Apr 20 10:01:20 2025 GMT
        Subject: CN=323dc9445c6fd66050759ba9e39a40aaebf789c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:98:9d:2c:02:e7:94:b3:14:3e:a3:fd:b6:
                    94:f6:52:b5:e4:bd:88:90:9e:26:c5:c3:e8:ff:4e:
                    95:81:f4:bf:35:b5:f2:b7:54:5a:7e:39:17:0a:21:
                    a1:4d:f7:f8:f9:86:2b:f0:9a:74:0d:85:c3:3a:72:
                    07:46:95:35:3b:d4:f1:da:56:56:ec:16:64:44:81:
                    d5:5b:24:ff:3f:2f:50:97:90:3f:e6:b9:08:0c:89:
                    3f:21:12:74:30:1f:ae:97:3a:24:e1:08:d1:c2:89:
                    18:38:0e:6c:cd:ae:1f:57:08:fa:3c:7a:b9:82:9e:
                    0e:cb:11:28:aa:74:0b:4d:98:41:61:5b:b0:04:a3:
                    cf:ac:05:48:fa:6f:8d:53:22:82:95:f3:0a:95:41:
                    46:ff:7a:bd:64:3c:fc:09:cb:d6:84:df:14:b0:10:
                    13:7f:b6:aa:08:98:ac:92:8b:ed:00:e3:20:55:9f:
                    f2:63:92:31:f7:09:6c:de:79:15:48:9d:de:81:04:
                    fa:89:c4:24:e9:4d:46:4b:32:d6:a2:56:6d:98:20:
                    77:5b:64:36:a1:07:3d:db:5e:06:bb:e9:52:e2:5c:
                    35:85:0a:fc:f9:22:2b:49:62:22:0f:86:40:53:28:
                    fa:69:68:23:4a:dc:7c:f0:d3:ed:d2:8d:5d:8a:98:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3D:C9:44:5C:6F:D6:60:50:75:9B:A9:E3:9A:40:AA:EB:F7:89:C8
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:78:7e:94:0f:76:2a:2c:89:f3:60:38:3f:a7:3d:a2:e5:d8:
         3a:fc:7c:eb:df:2c:06:30:59:90:85:80:94:30:28:f5:34:86:
         11:43:a5:96:35:ff:45:ba:fd:16:f8:2c:d2:49:14:4b:9e:2d:
         62:5f:ed:98:fc:8c:a7:21:af:95:d2:18:61:d6:eb:78:40:96:
         c6:f0:e1:18:51:84:ef:a8:f5:76:cd:ba:99:4f:d1:fa:19:16:
         cd:76:d8:8c:5f:51:e1:6a:91:b6:dc:93:93:98:57:c1:66:df:
         a3:4e:c4:8c:c6:fe:8d:a6:4f:fe:d3:56:b9:39:5f:62:99:49:
         26:0b:c1:2c:94:cf:d1:da:fd:f9:ea:40:b1:fa:0b:e0:d3:52:
         cd:be:e0:54:d3:07:9f:68:96:aa:3a:7c:87:0b:bc:70:96:68:
         e2:8f:20:6f:c3:c1:db:37:b6:df:24:f0:95:eb:ea:13:2d:7e:
         4b:8a:f2:2d:43:e6:f7:c7:73:b7:15:d2:13:b1:2e:27:17:c6:
         1d:f8:e4:8e:5b:d9:86:9d:b5:9d:1f:d5:6c:eb:b4:ba:f1:82:
         a8:16:2d:3f:f1:cb:8f:23:07:0f:39:30:b4:4f:10:55:d6:18:
         d2:a1:ae:7b:aa:de:76:66:a1:83:7b:30:6c:cf:c1:de:eb:12:
         05:85:58:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfta/NN9Q6CuxhIOAmn6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw
YzMxODIwHhcNMjUwNDE5MTAwMTIwWhcNMjUwNDIwMTAwMTIwWjAzMTEwLwYDVQQD
EygzMjNkYzk0NDVjNmZkNjYwNTA3NTliYTllMzlhNDBhYWViZjc4OWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+mYnSwC55SzFD6j/baU9lK15L2I
kJ4mxcPo/06VgfS/NbXyt1RafjkXCiGhTff4+YYr8Jp0DYXDOnIHRpU1O9Tx2lZW
7BZkRIHVWyT/Py9Ql5A/5rkIDIk/IRJ0MB+ulzok4QjRwokYOA5sza4fVwj6PHq5
gp4OyxEoqnQLTZhBYVuwBKPPrAVI+m+NUyKClfMKlUFG/3q9ZDz8CcvWhN8UsBAT
f7aqCJiskovtAOMgVZ/yY5Ix9wls3nkVSJ3egQT6icQk6U1GSzLWolZtmCB3W2Q2
oQc9214Gu+lS4lw1hQr8+SIrSWIiD4ZAUyj6aWgjStx88NPt0o1diphmwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI9yURcb9ZgUHWbqeOaQKrr94nIMB8GA1UdIwQY
MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt
Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk
LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3h+lA92
KiyJ82A4P6c9ouXYOvx8698sBjBZkIWAlDAo9TSGEUOlljX/Rbr9Fvgs0kkUS54t
Yl/tmPyMpyGvldIYYdbreECWxvDhGFGE76j1ds26mU/R+hkWzXbYjF9R4WqRttyT
k5hXwWbfo07EjMb+jaZP/tNWuTlfYplJJgvBLJTP0dr9+epAsfoL4NNSzb7gVNMH
n2iWqjp8hwu8cJZo4o8gb8PB2ze23yTwlevqEy1+S4ryLUPm98dztxXSE7EuJxfG
HfjkjlvZhp21nR/VbOu0uvGCqBYtP/HLjyMHDzkwtE8QVdYY0qGue6redmahg3sw
bM/B3usSBYVY+w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:01:47 2025 by rpki-client