Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
File:                     nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft (raw, json)
Hash identifier:          GQf1zmZ+CblTKBFDliHf1G3yQgUrTlvzptq3Qce1T9w=
Subject key identifier:   34:99:8F:C1:9F:4F:0B:1A:C5:2F:13:0F:78:18:BE:C1:BE:59:54:3C
Authority key identifier: 9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
Certificate issuer:       /CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
Certificate serial:       019693A8F3E4AD80091AD5EFB91478C861D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
Manifest number:          0603
Signing time:             Sat 03 May 2025 01:00:45 +0000
Manifest this update:     Sat 03 May 2025 01:00:45 +0000
Manifest next update:     Sun 04 May 2025 01:00:45 +0000
Files and hashes:         1: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl (hash: vP0EDMp1GukZYoEYATXVIz+bM+kr8cXmGjyxEWL5AdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:a8:f3:e4:ad:80:09:1a:d5:ef:b9:14:78:c8:61:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
        Validity
            Not Before: May  3 01:00:45 2025 GMT
            Not After : May  4 01:00:45 2025 GMT
        Subject: CN=34998fc19f4f0b1ac52f130f7818bec1be59543c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:d7:40:0d:58:02:fd:b6:4c:d7:0d:f1:3e:
                    bf:56:66:09:af:a7:d7:ed:53:a4:85:bc:fa:6b:e0:
                    da:83:25:47:ad:c4:35:cf:f5:0a:a3:64:65:a5:b8:
                    71:92:60:05:19:34:77:f8:b7:64:d3:f7:00:6a:17:
                    7b:0b:e8:e0:dc:01:e4:e7:31:6b:1e:9e:cf:0c:89:
                    11:9e:6f:22:16:67:e1:89:31:c3:e9:13:ef:f8:03:
                    b6:ec:35:45:08:3e:1c:b2:cf:35:a0:7e:db:7e:d3:
                    d4:56:be:dd:c6:4d:a0:24:66:81:b2:1a:38:1b:96:
                    c9:00:6a:e6:64:01:85:36:94:c8:72:d8:37:6b:12:
                    6e:3f:72:1e:b3:1b:6c:b4:6b:df:46:a9:b8:1e:b8:
                    e8:a5:f3:af:1c:71:73:28:2b:c1:ed:5e:51:99:c1:
                    43:42:e0:10:16:d3:9c:0d:ec:c6:17:db:d0:8d:3d:
                    eb:11:1b:0f:c6:70:7a:49:f2:8b:30:45:a3:35:f8:
                    bf:7d:12:05:69:13:15:60:52:0f:9e:fd:ab:d9:ab:
                    1a:2e:86:b8:fc:b1:65:49:84:a4:0a:ec:76:49:48:
                    92:f4:06:59:fc:2c:a5:45:fd:dc:5c:76:ee:71:80:
                    21:90:07:4e:11:0c:7a:57:58:6e:d7:e3:27:31:cd:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:99:8F:C1:9F:4F:0B:1A:C5:2F:13:0F:78:18:BE:C1:BE:59:54:3C
            X509v3 Authority Key Identifier:
                keyid:9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:11:e2:ce:a1:00:d2:5e:8f:c2:3a:78:9e:95:37:0f:bb:ec:
         3b:9c:f9:dc:5c:0a:e0:d5:45:1a:3f:26:45:30:75:eb:f0:78:
         35:e8:6d:51:7b:ad:36:2e:a2:06:24:e0:69:cb:62:39:4b:98:
         42:18:63:39:7e:3c:53:93:8f:ae:ba:5d:01:6a:93:50:48:3f:
         cb:b6:d7:c9:45:c6:0f:88:d5:0d:a6:f5:8b:24:d9:ce:c9:86:
         a5:14:f2:bb:e1:49:26:ff:75:78:7a:44:31:db:20:c7:ee:30:
         56:49:ee:69:52:4a:9a:59:89:a5:0f:70:a5:4f:66:00:84:f4:
         30:54:e3:c3:e2:42:4d:ae:ff:b4:ba:a6:57:40:36:c5:34:80:
         49:06:41:6b:aa:8c:1f:79:4e:6e:bc:75:bc:54:6a:9c:86:fe:
         30:9c:86:ad:24:83:cf:52:67:f0:05:2b:b0:40:e5:98:71:92:
         eb:5a:4d:7d:ce:2b:07:06:67:e5:7c:20:44:94:ef:d1:c8:a9:
         e0:44:94:e9:5f:3a:e8:b7:47:fe:93:3a:6a:e6:d4:c3:58:1a:
         46:28:eb:48:7a:d9:62:63:c3:54:af:56:c5:5a:da:0e:ac:58:
         3f:52:a8:7a:e4:82:c1:83:5d:3b:1e:7b:ab:e0:21:4b:28:2d:
         0e:53:f3:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTqPPkrYAJGtXvuRR4yGHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNmFiZTY3NzllNjkwNTUyOGM2OGUzYWFiMmNlMDdkNjIx
NjFmNjQwHhcNMjUwNTAzMDEwMDQ1WhcNMjUwNTA0MDEwMDQ1WjAzMTEwLwYDVQQD
EygzNDk5OGZjMTlmNGYwYjFhYzUyZjEzMGY3ODE4YmVjMWJlNTk1NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B/XQA1YAv22TNcN8T6/VmYJr6fX
7VOkhbz6a+DagyVHrcQ1z/UKo2RlpbhxkmAFGTR3+Ldk0/cAahd7C+jg3AHk5zFr
Hp7PDIkRnm8iFmfhiTHD6RPv+AO27DVFCD4css81oH7bftPUVr7dxk2gJGaBsho4
G5bJAGrmZAGFNpTIctg3axJuP3IesxtstGvfRqm4HrjopfOvHHFzKCvB7V5RmcFD
QuAQFtOcDezGF9vQjT3rERsPxnB6SfKLMEWjNfi/fRIFaRMVYFIPnv2r2asaLoa4
/LFlSYSkCux2SUiS9AZZ/CylRf3cXHbucYAhkAdOEQx6V1hu1+MnMc3qewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSZj8GfTwsaxS8TD3gYvsG+WVQ8MB8GA1UdIwQY
MBaAFJxqvmd55pBVKMaOOqss4H1iFh9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdxLVozbm1rRlVveG80NnF5emdmV0lXSDJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi81ODIyMzktZDVlYy00YjgzLTlhNTEt
ZDQyMjg0YTcwMmRlLzEvbkdxLVozbm1rRlVveG80NnF5emdmV0lXSDJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi81ODIyMzktZDVlYy00YjgzLTlhNTEtZDQyMjg0YTcwMmRl
LzEvbkdxLVozbm1rRlVveG80NnF5emdmV0lXSDJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRHizqEA
0l6Pwjp4npU3D7vsO5z53FwK4NVFGj8mRTB16/B4NehtUXutNi6iBiTgactiOUuY
QhhjOX48U5OPrrpdAWqTUEg/y7bXyUXGD4jVDab1iyTZzsmGpRTyu+FJJv91eHpE
Mdsgx+4wVknuaVJKmlmJpQ9wpU9mAIT0MFTjw+JCTa7/tLqmV0A2xTSASQZBa6qM
H3lObrx1vFRqnIb+MJyGrSSDz1Jn8AUrsEDlmHGS61pNfc4rBwZn5XwgRJTv0cip
4ESU6V866LdH/pM6aubUw1gaRijrSHrZYmPDVK9WxVraDqxYP1KoeuSCwYNdOx57
q+AhSygtDlPzrw==
-----END CERTIFICATE-----
Generated at Sat May 3 05:09:02 2025 by rpki-client