Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File:                     NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier:          dADEOja5GnCfq9crroUChIDPwBXf2BWZ4P9r3FtR9ms=
Subject key identifier:   AD:70:DC:E6:06:D5:DD:AA:DF:51:22:70:9F:95:73:3A:F2:48:AA:E1
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer:       /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial:       0198DA3DFC163743BD14AC0B03D4B55BD533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number:          1647
Signing time:             Sun 24 Aug 2025 04:02:31 +0000
Manifest this update:     Sun 24 Aug 2025 04:02:31 +0000
Manifest next update:     Mon 25 Aug 2025 04:02:31 +0000
Files and hashes:         1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: cietoY7Jwuu53dXKDurjo2LymN9kyqSzFpuditd9nJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:da:3d:fc:16:37:43:bd:14:ac:0b:03:d4:b5:5b:d5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
        Validity
            Not Before: Aug 24 04:02:31 2025 GMT
            Not After : Aug 25 04:02:31 2025 GMT
        Subject: CN=ad70dce606d5ddaadf5122709f95733af248aae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:2f:09:bf:c1:14:56:55:52:f9:17:59:e5:
                    ec:5f:b0:53:2c:58:e4:e5:94:f4:15:31:f9:00:c8:
                    a9:4f:46:8e:30:c3:09:eb:a0:c4:7e:6f:2a:2b:22:
                    3e:cd:c7:e5:cc:c9:b6:60:bf:38:64:0d:6d:58:6d:
                    4c:ac:84:b0:c1:60:57:ff:31:48:10:1c:fe:d2:f9:
                    9e:6d:6c:4c:d3:c4:33:13:7a:0f:e7:7d:81:14:43:
                    c2:b8:e6:71:ac:78:2f:5b:fe:29:f6:ef:e6:37:bb:
                    f2:44:f0:1f:ad:1f:18:58:94:89:a7:a0:a6:96:1b:
                    19:25:1e:fa:99:0a:74:fc:a9:40:fc:a4:38:f6:ed:
                    e2:f1:28:5b:e5:71:7c:cc:75:23:6d:f9:37:33:01:
                    84:d0:d9:38:f5:c2:b3:62:6c:3c:c3:fb:e7:6e:de:
                    1e:ea:dd:0f:28:68:60:64:bc:3d:e9:e2:e3:77:3b:
                    0d:ea:a0:c9:e8:58:d1:02:1e:0f:4f:a2:84:3f:a4:
                    ef:5a:e6:c7:6f:cb:8c:da:14:82:d7:68:8e:2b:f4:
                    16:5b:a9:a8:9e:96:9e:6f:83:d5:ed:89:f5:38:a3:
                    94:b0:c6:d0:54:e9:8b:21:c5:7d:45:e1:4b:26:38:
                    7f:89:e0:8e:32:f3:75:41:cb:0d:a1:56:77:59:9b:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:DC:E6:06:D5:DD:AA:DF:51:22:70:9F:95:73:3A:F2:48:AA:E1
            X509v3 Authority Key Identifier:
                keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:04:51:98:0a:1d:4c:2c:d3:1b:83:9e:c0:87:d3:c2:87:5a:
         3f:4e:31:e4:f2:2f:89:96:96:a6:b6:6a:31:9b:a0:22:cb:5c:
         e8:28:bc:35:c0:32:74:2e:7c:d0:1c:12:74:6c:b8:71:4b:e2:
         d5:d6:b5:e8:45:96:da:bc:50:fa:d3:0c:df:59:e6:b8:3b:35:
         e8:b9:39:e2:87:03:ad:26:ac:d7:43:a4:60:91:94:88:1f:e5:
         c4:65:2d:df:c5:be:86:c4:8a:72:22:5c:8b:70:c4:e9:e4:3c:
         c9:3d:7a:0a:83:2e:64:5d:81:62:76:37:9c:07:70:1b:dc:8a:
         12:bd:13:26:50:ef:f2:52:52:f9:10:f4:a6:23:5f:e5:b7:ae:
         14:0d:33:53:90:30:f9:f2:e2:aa:1f:4b:c2:85:49:fb:87:a2:
         7f:10:51:7e:ff:76:d0:94:26:1a:1b:27:97:c1:7f:4c:9a:7d:
         7f:06:05:60:ad:3c:83:77:ea:77:50:14:94:06:f9:0e:4b:e8:
         ec:a3:81:fc:57:14:68:38:78:6b:dd:2c:0b:4c:6b:65:7e:16:
         1d:c6:15:4e:b7:5f:84:7c:4c:96:c2:94:c4:06:b4:48:30:69:
         a5:b2:2a:71:28:ee:dd:54:06:16:45:db:c8:7b:76:1a:02:97:
         8b:00:92:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjaPfwWN0O9FKwLA9S1W9UzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzY4YWFjMGY0YTI4YzhhMzE3NjBmMDZiNTc4ZGFlNDUz
MTQ2ZjAwHhcNMjUwODI0MDQwMjMxWhcNMjUwODI1MDQwMjMxWjAzMTEwLwYDVQQD
EyhhZDcwZGNlNjA2ZDVkZGFhZGY1MTIyNzA5Zjk1NzMzYWYyNDhhYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuggvCb/BFFZVUvkXWeXsX7BTLFjk
5ZT0FTH5AMipT0aOMMMJ66DEfm8qKyI+zcflzMm2YL84ZA1tWG1MrISwwWBX/zFI
EBz+0vmebWxM08QzE3oP532BFEPCuOZxrHgvW/4p9u/mN7vyRPAfrR8YWJSJp6Cm
lhsZJR76mQp0/KlA/KQ49u3i8Shb5XF8zHUjbfk3MwGE0Nk49cKzYmw8w/vnbt4e
6t0PKGhgZLw96eLjdzsN6qDJ6FjRAh4PT6KEP6TvWubHb8uM2hSC12iOK/QWW6mo
npaeb4PV7Yn1OKOUsMbQVOmLIcV9ReFLJjh/ieCOMvN1QcsNoVZ3WZuPAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1w3OYG1d2q31EicJ+VczrySKrhMB8GA1UdIwQY
MBaAFDY2iqwPSijIoxdg8GtXja5FMUbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQt
NTAyNDdmMTJjZTc0LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQtNTAyNDdmMTJjZTc0
LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQRRmAod
TCzTG4OewIfTwodaP04x5PIviZaWprZqMZugIstc6Ci8NcAydC580BwSdGy4cUvi
1da16EWW2rxQ+tMM31nmuDs16Lk54ocDrSas10OkYJGUiB/lxGUt38W+hsSKciJc
i3DE6eQ8yT16CoMuZF2BYnY3nAdwG9yKEr0TJlDv8lJS+RD0piNf5beuFA0zU5Aw
+fLiqh9LwoVJ+4eifxBRfv920JQmGhsnl8F/TJp9fwYFYK08g3fqd1AUlAb5Dkvo
7KOB/FcUaDh4a90sC0xrZX4WHcYVTrdfhHxMlsKUxAa0SDBppbIqcSju3VQGFkXb
yHt2GgKXiwCSLw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:02:54 2025 by rpki-client