Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File:                     Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier:          mIHj1OGTznJS8C8tZc/D2HtmXpTjBAE0g9nsafI8eS8=
Subject key identifier:   59:4B:63:AF:44:91:82:A0:23:4E:28:70:05:7C:37:20:F2:0E:53:58
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer:       /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial:       0196741E3F727617DC67EA36C2742ADA6C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number:          0411
Signing time:             Sat 26 Apr 2025 22:01:01 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:01 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:01 +0000
Files and hashes:         1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: h+Y99JXuS0hzJOLomFfax2f7WWQnaDYvppOoxzEId8s=)
                          2: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:3f:72:76:17:dc:67:ea:36:c2:74:2a:da:6c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
        Validity
            Not Before: Apr 26 22:01:01 2025 GMT
            Not After : Apr 27 22:01:01 2025 GMT
        Subject: CN=594b63af449182a0234e2870057c3720f20e5358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:ce:0d:4e:5b:74:a1:bd:b1:29:ab:52:56:
                    d8:cc:c8:dd:0b:20:bd:8a:27:31:38:bf:1d:8d:3c:
                    4b:dd:f3:f5:c2:e9:65:5e:15:2f:5f:d7:71:a6:60:
                    89:f8:7c:34:48:2c:d8:1e:d3:ff:16:69:78:1e:86:
                    51:43:5f:2f:6a:68:4f:56:0c:d6:f9:07:c3:4d:e1:
                    5d:b1:ec:24:71:91:fe:c0:28:53:08:3c:ca:a5:b0:
                    9d:ab:a4:f8:08:37:92:35:e9:a0:ff:c5:cc:80:ae:
                    6a:2a:6c:e4:60:c8:e2:6e:0f:62:85:5c:0d:bc:bf:
                    ab:b9:04:74:06:b3:73:71:54:74:4c:53:d4:ce:27:
                    c2:e0:df:f8:eb:4b:b0:43:ad:95:6c:69:6e:f9:bb:
                    2b:e9:32:29:fa:83:97:7a:bc:45:ee:29:4d:ef:77:
                    25:ca:db:8e:5c:ac:95:9a:94:ca:56:b4:df:0b:7f:
                    b8:41:2b:44:59:1e:a4:d4:51:f8:24:54:5b:39:af:
                    d7:28:c7:ff:9d:32:8f:e2:dd:4b:81:0e:98:98:25:
                    9f:9f:d8:34:37:e1:11:8d:a7:c6:9f:af:38:d5:fd:
                    bf:69:8d:35:db:c3:a1:2b:b3:bc:77:f0:84:36:7f:
                    1d:f1:93:08:2b:ff:ea:5e:cb:8d:ee:d1:72:71:42:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4B:63:AF:44:91:82:A0:23:4E:28:70:05:7C:37:20:F2:0E:53:58
            X509v3 Authority Key Identifier:
                keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:f5:63:46:b8:38:e8:86:f3:cb:6d:33:26:74:db:a5:73:
         d8:ae:00:3c:4c:8b:56:52:b6:6b:86:a6:a5:c8:3b:8a:de:5a:
         11:6b:33:a8:e7:ac:6e:64:4b:0e:af:ce:bb:dc:ed:a1:52:6a:
         1e:d2:a4:e2:a6:6e:bf:77:4c:0b:84:c3:f6:28:0a:f4:a1:84:
         8b:21:8a:46:d9:57:18:79:a9:f4:95:cc:09:43:93:ba:70:da:
         3d:e7:d1:a9:0e:07:79:9c:be:8b:65:5d:60:81:bc:0a:8a:fe:
         aa:1d:08:8a:43:2e:ed:83:2a:6c:ca:a1:a9:6c:0a:80:20:a3:
         d0:c2:f6:78:2c:d2:21:8f:49:5f:ec:a8:b6:3c:03:e6:e6:ce:
         bb:dc:1f:34:a0:52:34:da:12:b7:3c:00:28:44:96:74:47:2b:
         fe:28:d7:cd:ce:4d:33:42:f0:98:eb:40:36:62:d6:49:19:f5:
         0e:a6:be:6b:c4:74:5e:91:ba:09:45:6c:99:92:52:6a:ba:08:
         7d:3e:c5:4a:a4:83:d3:97:ee:7c:12:32:db:a8:e4:fe:69:fd:
         b3:c4:44:67:b5:eb:20:a7:1c:68:b4:83:f4:c7:bb:d4:54:ee:
         a0:04:d5:ef:69:cb:d1:3e:cc:93:04:76:d6:68:81:e3:22:aa:
         d1:d5:4c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0Hj9ydhfcZ+o2wnQq2mxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0
MWMxMmIwHhcNMjUwNDI2MjIwMTAxWhcNMjUwNDI3MjIwMTAxWjAzMTEwLwYDVQQD
Eyg1OTRiNjNhZjQ0OTE4MmEwMjM0ZTI4NzAwNTdjMzcyMGYyMGU1MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtArODU5bdKG9sSmrUlbYzMjdCyC9
iicxOL8djTxL3fP1wullXhUvX9dxpmCJ+Hw0SCzYHtP/Fml4HoZRQ18vamhPVgzW
+QfDTeFdsewkcZH+wChTCDzKpbCdq6T4CDeSNemg/8XMgK5qKmzkYMjibg9ihVwN
vL+ruQR0BrNzcVR0TFPUzifC4N/460uwQ62VbGlu+bsr6TIp+oOXerxF7ilN73cl
ytuOXKyVmpTKVrTfC3+4QStEWR6k1FH4JFRbOa/XKMf/nTKP4t1LgQ6YmCWfn9g0
N+ERjafGn6841f2/aY0128OhK7O8d/CENn8d8ZMIK//qXsuN7tFycUI/0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlLY69EkYKgI04ocAV8NyDyDlNYMB8GA1UdIwQY
MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt
ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi
LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg131Y0a4
OOiG88ttMyZ026Vz2K4APEyLVlK2a4ampcg7it5aEWszqOesbmRLDq/Ou9ztoVJq
HtKk4qZuv3dMC4TD9igK9KGEiyGKRtlXGHmp9JXMCUOTunDaPefRqQ4HeZy+i2Vd
YIG8Cor+qh0IikMu7YMqbMqhqWwKgCCj0ML2eCzSIY9JX+yotjwD5ubOu9wfNKBS
NNoStzwAKESWdEcr/ijXzc5NM0LwmOtANmLWSRn1Dqa+a8R0XpG6CUVsmZJSaroI
fT7FSqSD05fufBIy26jk/mn9s8REZ7XrIKccaLSD9Me71FTuoATV72nL0T7MkwR2
1miB4yKq0dVMUw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:12:31 2025 by rpki-client