Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File:                     Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier:          ZJZJPY5Xd9FuLqW6PUn7HZ8kkumlEDQYtlb7dVD2Wj4=
Subject key identifier:   10:A9:7E:14:33:F7:78:81:C9:13:BD:B6:46:B4:70:AD:DF:80:42:27
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer:       /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial:       019677C39ED74C23508234339BFD0B881B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number:          0181
Signing time:             Sun 27 Apr 2025 15:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:30 +0000
Files and hashes:         1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
                          2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: uu+mYYJTdODm9slStO9upEkgqtG0FGM/Qa16dmKs6Ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:9e:d7:4c:23:50:82:34:33:9b:fd:0b:88:1b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
        Validity
            Not Before: Apr 27 15:00:30 2025 GMT
            Not After : Apr 28 15:00:30 2025 GMT
        Subject: CN=10a97e1433f77881c913bdb646b470addf804227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:97:85:c4:e9:fc:ef:9b:39:dd:9e:1d:0d:
                    ed:8a:28:5e:5d:d7:26:26:d2:71:02:b1:ef:62:81:
                    58:a2:ee:e2:67:ed:ba:2a:ce:53:bf:30:ca:45:5d:
                    92:83:2f:cb:af:53:83:e9:57:89:ff:0f:36:a7:b3:
                    e0:24:a8:66:44:e4:99:e7:7e:1c:d5:87:ed:06:fe:
                    18:29:b4:f6:13:2f:4b:a5:23:14:3d:53:3f:18:de:
                    46:fe:36:18:1b:7a:19:7f:a3:ba:c8:65:2d:f0:61:
                    fe:16:da:17:97:60:3a:da:f8:9a:a1:73:97:d4:a6:
                    9a:ad:df:2a:72:30:f0:f3:9f:fe:d9:d4:82:55:f1:
                    ec:ef:7b:3e:53:a2:2b:bc:3b:90:3f:67:5e:04:74:
                    34:44:98:98:d8:de:1c:e9:20:fd:8a:38:58:98:b9:
                    6b:80:f5:84:43:8e:c0:d7:9e:4f:9c:8b:6d:6b:ba:
                    a6:38:92:b3:8b:5f:a2:53:12:03:5f:f9:b4:e9:2c:
                    54:3c:8a:30:8b:74:f9:69:64:f7:57:29:8e:8e:61:
                    81:16:d5:bd:b9:0a:96:d5:26:1f:42:21:20:13:3c:
                    3e:72:c0:2f:57:64:6c:4e:14:ea:75:a7:2a:17:37:
                    81:f5:b4:f4:94:61:2c:f0:e8:9b:8b:11:2d:35:01:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A9:7E:14:33:F7:78:81:C9:13:BD:B6:46:B4:70:AD:DF:80:42:27
            X509v3 Authority Key Identifier:
                keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:c1:4e:a9:f0:30:a9:20:54:b7:e8:66:bb:22:9d:eb:54:
         f7:ac:3f:7c:78:47:c9:15:66:a7:a5:5b:e3:1b:08:d8:0a:cd:
         29:98:13:ad:5b:7e:fc:ec:e2:88:0f:3d:48:5e:fd:30:3d:b2:
         e1:ab:5c:de:55:5c:f7:e1:7e:c5:32:b8:91:76:31:cd:58:96:
         11:d4:0d:b8:0f:8c:eb:b9:08:b9:12:44:6e:b3:dd:bd:b4:f8:
         e5:6b:04:50:78:f4:b7:af:cf:e7:8c:44:27:32:52:cf:6b:24:
         75:a0:89:56:63:5d:a4:d6:2d:da:51:6a:6d:72:9b:3b:6a:0b:
         ea:d4:29:a7:ae:b7:0b:ed:b9:ae:89:0c:ac:32:3f:a1:34:ce:
         e4:d6:ef:c4:4b:6c:96:6c:0d:e9:4e:47:bf:e3:64:ac:60:11:
         d9:c8:ef:20:8a:d3:c3:27:20:de:35:ab:61:84:af:92:04:60:
         c2:ff:10:a1:7e:27:cd:c4:20:fe:1e:98:22:7d:b3:09:4e:76:
         46:aa:b0:84:8b:25:a0:57:b2:92:dc:91:d6:72:de:17:37:1d:
         7e:4b:ee:d9:16:3b:14:29:09:29:4a:ba:77:ba:58:4c:69:3b:
         b4:38:ca:f9:a9:49:c5:70:d3:43:d6:13:e8:ac:fb:bc:26:4f:
         3b:ac:23:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w57XTCNQgjQzm/0LiBtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2NiNWM2YTA1Y2RkNDgxZjMwNGMwY2Q5NWU4NmQ3MjJk
OTZkM2MwHhcNMjUwNDI3MTUwMDMwWhcNMjUwNDI4MTUwMDMwWjAzMTEwLwYDVQQD
EygxMGE5N2UxNDMzZjc3ODgxYzkxM2JkYjY0NmI0NzBhZGRmODA0MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSOXhcTp/O+bOd2eHQ3tiiheXdcm
JtJxArHvYoFYou7iZ+26Ks5TvzDKRV2Sgy/Lr1OD6VeJ/w82p7PgJKhmROSZ534c
1YftBv4YKbT2Ey9LpSMUPVM/GN5G/jYYG3oZf6O6yGUt8GH+FtoXl2A62viaoXOX
1Kaard8qcjDw85/+2dSCVfHs73s+U6IrvDuQP2deBHQ0RJiY2N4c6SD9ijhYmLlr
gPWEQ47A155PnItta7qmOJKzi1+iUxIDX/m06SxUPIowi3T5aWT3VymOjmGBFtW9
uQqW1SYfQiEgEzw+csAvV2RsThTqdacqFzeB9bT0lGEs8OibixEtNQGt0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCpfhQz93iByRO9tka0cK3fgEInMB8GA1UdIwQY
MBaAFDY8tcagXN1IHzBMDNlehtci2W08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYt
YmEzYzY0ZTE0YTFkLzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYtYmEzYzY0ZTE0YTFk
LzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRXBTqnw
MKkgVLfoZrsinetU96w/fHhHyRVmp6Vb4xsI2ArNKZgTrVt+/OziiA89SF79MD2y
4atc3lVc9+F+xTK4kXYxzViWEdQNuA+M67kIuRJEbrPdvbT45WsEUHj0t6/P54xE
JzJSz2skdaCJVmNdpNYt2lFqbXKbO2oL6tQpp663C+25rokMrDI/oTTO5NbvxEts
lmwN6U5Hv+NkrGAR2cjvIIrTwycg3jWrYYSvkgRgwv8QoX4nzcQg/h6YIn2zCU52
RqqwhIsloFeyktyR1nLeFzcdfkvu2RY7FCkJKUq6d7pYTGk7tDjK+alJxXDTQ9YT
6Kz7vCZPO6wjfg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:08:28 2025 by rpki-client