Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
File:                     NWlXUM1GUx3eil-yZyzcgw09DG4.mft (raw, json)
Hash identifier:          BRXy39+dawN4JfoY/YTnI9+S6hv/ftDfdZd1LsEU74U=
Subject key identifier:   21:71:EB:A0:4F:0D:8A:0C:41:FC:0A:B2:6E:CB:4D:6F:F6:F8:72:87
Authority key identifier: 35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
Certificate issuer:       /CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Certificate serial:       0196BCA5047420C428C70D035B4592444525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
Manifest number:          0350
Signing time:             Sun 11 May 2025 00:00:53 +0000
Manifest this update:     Sun 11 May 2025 00:00:53 +0000
Manifest next update:     Mon 12 May 2025 00:00:53 +0000
Files and hashes:         1: NWlXUM1GUx3eil-yZyzcgw09DG4.crl (hash: VYT1InkBh3a/xTVE+BKi4cIvwkGlaNCAGwkQ53wp0mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:a5:04:74:20:c4:28:c7:0d:03:5b:45:92:44:45:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
        Validity
            Not Before: May 11 00:00:53 2025 GMT
            Not After : May 12 00:00:53 2025 GMT
        Subject: CN=2171eba04f0d8a0c41fc0ab26ecb4d6ff6f87287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:02:35:12:25:ee:a0:6f:25:c4:43:eb:12:
                    a7:40:0b:d8:c1:d3:1b:33:2a:cc:e7:e6:ee:7f:22:
                    f3:1b:b0:24:ce:94:8e:99:e2:5c:dc:91:87:b9:64:
                    66:dc:16:6d:0e:de:8b:a4:56:72:52:c5:07:67:0e:
                    06:58:3f:8c:6c:46:62:3a:5a:2f:fd:32:d8:bc:fa:
                    ce:0b:b6:d2:1d:a5:a7:e4:f2:10:41:f7:d2:58:d8:
                    d1:a3:65:79:04:bc:d4:c9:64:f4:5d:ed:ee:41:59:
                    6a:0f:15:b7:d1:71:95:1b:80:f5:a7:8e:86:52:44:
                    fb:e1:78:4d:8c:ac:bd:b5:26:f6:16:d6:11:29:e7:
                    71:6b:e2:44:dd:17:8f:6e:a9:61:4a:91:80:e9:4a:
                    e4:12:fc:a9:04:05:2e:36:d0:36:cf:c6:98:29:f6:
                    cb:2c:54:e5:09:9e:65:2d:2a:0a:f1:4e:2f:ae:a0:
                    1a:8a:f7:98:cf:bf:5c:9e:74:39:fb:da:51:88:6b:
                    89:61:bf:0d:77:d8:86:4c:1a:88:d0:df:b6:04:b3:
                    7a:2b:83:a3:8e:cb:b7:f0:da:82:77:b5:09:ed:c7:
                    9c:09:8b:ee:e5:b7:10:52:53:8e:29:b1:0c:3c:8c:
                    4e:06:75:9c:e0:2d:38:98:c2:81:79:e6:03:b2:21:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:71:EB:A0:4F:0D:8A:0C:41:FC:0A:B2:6E:CB:4D:6F:F6:F8:72:87
            X509v3 Authority Key Identifier:
                keyid:35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:25:63:69:d3:7b:e7:f2:72:54:ce:dc:e9:4b:a4:8f:0b:10:
         38:17:1c:24:6f:e9:55:f7:f4:57:4b:bc:fb:35:e5:85:77:2b:
         e8:af:64:5b:bd:fe:1e:7e:bb:d8:2d:2d:75:d6:48:08:02:54:
         8a:d2:8e:af:7f:7a:83:63:c1:67:a9:93:f5:03:20:7b:cf:b3:
         83:3e:c8:3b:21:b0:a8:c1:70:58:fb:82:1d:70:46:fc:66:00:
         d2:fb:d3:bb:46:c6:16:6e:1c:05:04:d8:3a:f7:c6:e2:37:1b:
         30:c3:f2:f1:70:87:f9:b2:04:f5:7e:2c:0d:24:39:cb:87:62:
         fc:37:28:82:23:08:5d:e5:e0:df:15:d2:70:b9:e2:f5:2d:c6:
         54:02:29:05:c7:f9:01:0f:c9:a3:eb:18:e3:00:e4:b7:34:a1:
         8c:61:e2:34:80:fb:b7:a2:4b:48:36:60:ff:5e:c9:a7:14:63:
         a2:84:4d:34:de:e3:a8:91:99:e1:82:95:da:e2:9f:27:6c:94:
         34:0b:4f:e1:0e:a0:19:34:ce:7e:89:3b:c8:7b:d4:6d:ec:f7:
         dc:0f:1c:05:6c:2c:51:d3:14:c8:b1:a0:75:fd:92:7b:14:3e:
         e1:cd:dd:62:db:a5:f5:c5:3f:55:8d:c8:ae:dd:de:cc:0e:7a:
         eb:c7:e5:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pQR0IMQoxw0DW0WSREUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Njk1NzUwY2Q0NjUzMWRkZThhNWZiMjY3MmNkYzgzMGQz
ZDBjNmUwHhcNMjUwNTExMDAwMDUzWhcNMjUwNTEyMDAwMDUzWjAzMTEwLwYDVQQD
EygyMTcxZWJhMDRmMGQ4YTBjNDFmYzBhYjI2ZWNiNGQ2ZmY2Zjg3Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FYCNRIl7qBvJcRD6xKnQAvYwdMb
MyrM5+bufyLzG7AkzpSOmeJc3JGHuWRm3BZtDt6LpFZyUsUHZw4GWD+MbEZiOlov
/TLYvPrOC7bSHaWn5PIQQffSWNjRo2V5BLzUyWT0Xe3uQVlqDxW30XGVG4D1p46G
UkT74XhNjKy9tSb2FtYRKedxa+JE3RePbqlhSpGA6UrkEvypBAUuNtA2z8aYKfbL
LFTlCZ5lLSoK8U4vrqAaiveYz79cnnQ5+9pRiGuJYb8Nd9iGTBqI0N+2BLN6K4Oj
jsu38NqCd7UJ7cecCYvu5bcQUlOOKbEMPIxOBnWc4C04mMKBeeYDsiHKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFx66BPDYoMQfwKsm7LTW/2+HKHMB8GA1UdIwQY
MBaAFDVpV1DNRlMd3opfsmcs3IMNPQxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDct
NzdiZmEzN2ZhMDcxLzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDctNzdiZmEzN2ZhMDcx
LzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiVjadN7
5/JyVM7c6UukjwsQOBccJG/pVff0V0u8+zXlhXcr6K9kW73+Hn672C0tddZICAJU
itKOr396g2PBZ6mT9QMge8+zgz7IOyGwqMFwWPuCHXBG/GYA0vvTu0bGFm4cBQTY
OvfG4jcbMMPy8XCH+bIE9X4sDSQ5y4di/DcogiMIXeXg3xXScLni9S3GVAIpBcf5
AQ/Jo+sY4wDktzShjGHiNID7t6JLSDZg/17JpxRjooRNNN7jqJGZ4YKV2uKfJ2yU
NAtP4Q6gGTTOfok7yHvUbez33A8cBWwsUdMUyLGgdf2SexQ+4c3dYtul9cU/VY3I
rt3ezA5668flYA==
-----END CERTIFICATE-----
Generated at Sun May 11 04:24:29 2025 by rpki-client