Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
File:                     NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json)
Hash identifier:          MdjY4usofJscXadF+ZO/GmyZSmxA3B6L4uKLmdOV24c=
Subject key identifier:   A5:66:D0:AD:05:9D:81:70:7F:86:2D:2E:30:BF:55:4D:CB:2A:5E:94
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Certificate issuer:       /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial:       01968C949B1F0194F547429AE25584A16D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
Manifest number:          151C
Signing time:             Thu 01 May 2025 16:01:11 +0000
Manifest this update:     Thu 01 May 2025 16:01:11 +0000
Manifest next update:     Fri 02 May 2025 16:01:11 +0000
Files and hashes:         1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: F+FWLEwVebiK5LL/Vjbx/v2cx2ifjry8fCw1ud8hdFU=)
                          2: ugIdAnD72uDX1xk6AnCHQeEOh1Y.roa (hash: QffGW9BNMmaT3r0VD1GTXNsWErI53h66jEjYScdrUso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:94:9b:1f:01:94:f5:47:42:9a:e2:55:84:a1:6d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
        Validity
            Not Before: May  1 16:01:11 2025 GMT
            Not After : May  2 16:01:11 2025 GMT
        Subject: CN=a566d0ad059d81707f862d2e30bf554dcb2a5e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:f1:dc:85:fb:ca:d3:63:e7:ba:e8:ae:9b:
                    f0:16:e8:a7:2b:82:6e:fe:3e:5d:e0:ea:e0:8f:e0:
                    43:fe:45:c5:f6:22:80:93:57:98:71:64:df:22:e4:
                    ee:0f:b3:fc:46:bc:ea:2d:46:53:36:1c:1f:79:3c:
                    52:27:42:13:6d:b4:f7:9a:bb:7a:70:9a:c5:1e:ba:
                    49:df:fa:32:81:67:8c:21:c5:34:16:cd:d5:3a:1b:
                    17:ab:49:dc:20:02:56:12:05:d4:b2:e6:87:e3:0c:
                    71:65:10:48:45:92:89:38:76:6e:08:d3:bf:46:eb:
                    ce:95:1e:a5:55:0f:1f:4e:4c:dd:40:5a:b0:c3:cd:
                    40:23:b1:30:72:db:18:a1:a2:e4:e1:ea:c6:02:05:
                    f7:a0:40:d2:7c:cf:3c:aa:61:59:47:cf:c5:14:a5:
                    42:d4:32:f3:34:73:71:ee:a8:5f:52:f0:29:7d:cb:
                    d8:23:ee:6e:2f:25:a9:e2:49:f4:f5:c2:55:c2:dd:
                    ad:36:74:aa:b2:dc:51:15:48:4c:e8:3d:e7:57:4e:
                    98:7c:99:5b:91:64:65:b2:49:a4:bb:e5:3d:d6:00:
                    2d:dd:2b:6d:f5:c2:f0:5f:65:ad:b2:00:e0:ed:81:
                    6f:40:17:a6:49:3c:87:19:77:a2:ed:7c:22:1f:a9:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:66:D0:AD:05:9D:81:70:7F:86:2D:2E:30:BF:55:4D:CB:2A:5E:94
            X509v3 Authority Key Identifier:
                keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:5a:83:01:29:6f:54:80:4a:fd:57:25:61:4f:32:57:82:
         af:d8:4d:27:c4:fb:39:14:33:53:ae:00:d2:29:92:be:59:5b:
         07:d3:03:fa:5c:7c:74:38:cc:51:d3:bd:be:43:37:41:56:0c:
         b8:1e:cd:de:de:15:89:e1:f7:9b:e3:ac:b7:eb:60:5d:d4:aa:
         66:35:7c:20:98:fd:3c:d9:0b:88:b4:c3:86:30:a4:1f:a8:48:
         44:49:7f:fc:82:67:1c:d9:f6:85:13:07:4c:f6:18:79:51:59:
         2a:1d:2f:e5:21:15:92:e4:11:55:b7:e3:8a:5a:25:c6:fb:d0:
         d0:cc:02:eb:a8:41:e2:e8:6a:8a:d9:c9:66:d7:5a:60:58:40:
         1c:b3:51:7e:be:31:d2:61:17:21:4b:4b:26:06:ed:34:4c:83:
         0e:2e:14:d3:6b:ce:c0:fe:50:32:9b:a7:3b:e9:29:67:0d:48:
         47:30:26:27:14:f0:6a:a9:ab:b5:1d:4e:58:37:31:6d:10:d8:
         c9:24:e5:79:6c:41:ea:e8:14:f7:44:2b:69:e5:90:cf:62:b7:
         61:bf:6f:00:d3:f6:1d:c0:8b:cd:03:39:c3:cf:e4:a4:b3:78:
         60:79:23:2c:0f:c4:61:37:7c:38:32:e7:03:9a:d9:1f:1b:39:
         dc:53:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:40:14 2025 by rpki-client