Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File:                     NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier:          406bjeAYXTNCeWb7H7IX761M7pVOutvshpfIjJKkgSc=
Subject key identifier:   81:0B:0E:DB:BD:9A:D4:F6:A6:17:73:4C:87:7C:6D:5F:C6:F1:85:C1
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer:       /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial:       0196C2DDDC226D87B2589CB384443FBE43DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number:          0A1B
Signing time:             Mon 12 May 2025 05:00:41 +0000
Manifest this update:     Mon 12 May 2025 05:00:41 +0000
Manifest next update:     Tue 13 May 2025 05:00:41 +0000
Files and hashes:         1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: 5/LOUU09qcSfK4RH7HSDfYZERo+INvbZh4uNetTPRQ4=)
                          2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:dd:dc:22:6d:87:b2:58:9c:b3:84:44:3f:be:43:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
        Validity
            Not Before: May 12 05:00:41 2025 GMT
            Not After : May 13 05:00:41 2025 GMT
        Subject: CN=810b0edbbd9ad4f6a617734c877c6d5fc6f185c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:59:ad:d2:e5:ed:82:f3:25:25:df:2f:5f:
                    09:1f:35:4e:c3:fc:81:3f:3e:94:24:fe:e6:60:05:
                    86:57:09:cb:8c:5e:36:e0:92:26:d4:80:ca:4e:98:
                    45:f6:34:2e:d0:22:fe:6f:58:f8:a5:e5:ef:38:fc:
                    c7:4f:22:fc:ac:df:17:8e:28:7d:9b:d0:c8:9b:a3:
                    44:81:1b:5c:c1:5d:f6:e0:ab:68:0a:8f:cc:cc:de:
                    da:ff:2b:5c:c1:a8:9f:d3:35:a7:96:83:47:f7:62:
                    0e:ee:c9:ab:f2:4b:db:3a:8f:9d:bc:3f:40:45:e2:
                    b9:ce:b7:d6:8f:a9:63:db:9b:a1:2e:60:f9:5b:26:
                    d9:42:84:4f:0d:b4:57:ad:f3:d3:6f:25:08:e1:51:
                    ba:72:67:36:a6:8c:eb:af:9c:64:cf:da:75:2c:4a:
                    de:fb:f9:b3:dc:75:33:79:3b:8a:5f:3d:0e:f3:19:
                    41:97:eb:4d:b8:20:b5:ab:3e:e1:7d:37:e8:3a:8b:
                    12:2c:0d:ef:fb:f4:c0:be:5b:dc:64:37:0a:53:a5:
                    cc:31:d0:a7:8c:72:41:d4:ba:d8:ae:92:98:5f:62:
                    7d:7a:d2:d4:42:b5:c7:d6:38:9d:83:ba:74:b0:eb:
                    43:7f:08:8a:07:44:d5:80:65:2b:61:ab:29:0b:aa:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:0E:DB:BD:9A:D4:F6:A6:17:73:4C:87:7C:6D:5F:C6:F1:85:C1
            X509v3 Authority Key Identifier:
                keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a3:21:df:ba:db:ba:96:47:85:00:78:4d:3d:a2:6e:38:eb:
         dd:02:88:12:d7:0f:bf:f9:1c:c1:82:98:1d:e6:59:01:41:ff:
         51:0f:db:1e:04:62:d5:48:4e:ea:f7:76:b4:3d:7e:a5:ec:77:
         79:1c:64:ae:81:3e:78:6f:f4:24:f9:a6:1e:d4:6f:55:60:f9:
         05:68:1e:64:e0:a4:ce:fd:33:21:fc:db:3c:6a:6d:ef:3c:6f:
         90:c3:4e:68:bc:ec:b0:db:bb:9e:82:59:eb:e5:08:89:7c:ba:
         31:86:84:3e:7f:38:80:0b:0b:03:5b:64:ea:58:8f:36:0a:f0:
         d4:fc:da:f3:9f:75:71:3a:49:8b:d1:2d:48:22:98:ce:d8:9b:
         fb:95:f1:5c:c1:ec:91:4e:2e:49:f8:89:6f:27:49:c9:6d:11:
         ce:17:95:8b:be:48:68:07:bc:74:bc:ee:72:75:c1:2e:e7:f4:
         6d:74:be:aa:a0:b6:c0:5d:1f:f1:84:3f:ef:35:06:8d:fa:07:
         fc:8e:97:93:4c:bf:0c:0f:f7:a2:70:5c:c5:4f:ff:94:47:09:
         12:dd:f2:01:b4:05:c3:d9:13:95:f6:26:fb:a0:b7:86:e8:25:
         9a:0a:8c:99:0c:a7:65:1b:e1:dd:fc:c0:95:e3:23:8d:b9:06:
         db:68:45:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3dwibYeyWJyzhEQ/vkPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0
NWQ2OTkwHhcNMjUwNTEyMDUwMDQxWhcNMjUwNTEzMDUwMDQxWjAzMTEwLwYDVQQD
Eyg4MTBiMGVkYmJkOWFkNGY2YTYxNzczNGM4NzdjNmQ1ZmM2ZjE4NWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9lZrdLl7YLzJSXfL18JHzVOw/yB
Pz6UJP7mYAWGVwnLjF424JIm1IDKTphF9jQu0CL+b1j4peXvOPzHTyL8rN8Xjih9
m9DIm6NEgRtcwV324KtoCo/MzN7a/ytcwaif0zWnloNH92IO7smr8kvbOo+dvD9A
ReK5zrfWj6lj25uhLmD5WybZQoRPDbRXrfPTbyUI4VG6cmc2pozrr5xkz9p1LEre
+/mz3HUzeTuKXz0O8xlBl+tNuCC1qz7hfTfoOosSLA3v+/TAvlvcZDcKU6XMMdCn
jHJB1LrYrpKYX2J9etLUQrXH1jidg7p0sOtDfwiKB0TVgGUrYaspC6rXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIELDtu9mtT2phdzTId8bV/G8YXBMB8GA1UdIwQY
MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt
MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1
LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqMh37rb
upZHhQB4TT2ibjjr3QKIEtcPv/kcwYKYHeZZAUH/UQ/bHgRi1UhO6vd2tD1+pex3
eRxkroE+eG/0JPmmHtRvVWD5BWgeZOCkzv0zIfzbPGpt7zxvkMNOaLzssNu7noJZ
6+UIiXy6MYaEPn84gAsLA1tk6liPNgrw1Pza8591cTpJi9EtSCKYztib+5XxXMHs
kU4uSfiJbydJyW0RzheVi75IaAe8dLzucnXBLuf0bXS+qqC2wF0f8YQ/7zUGjfoH
/I6Xk0y/DA/3onBcxU//lEcJEt3yAbQFw9kTlfYm+6C3huglmgqMmQynZRvh3fzA
leMjjbkG22hFFg==
-----END CERTIFICATE-----
Generated at Mon May 12 12:49:29 2025 by rpki-client