Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File:                     N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier:          LSXJ8ZOO2zx5Ndu2Z8hQ/lGKpULpuSEhUSXS/9abFV4=
Subject key identifier:   D4:32:B4:10:8B:CA:6E:E1:90:1E:45:12:07:B1:28:C3:73:AA:F6:7F
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       0196A79D3A0A24C45B4926D856C4198E796C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number:          0340
Signing time:             Tue 06 May 2025 22:00:21 +0000
Manifest this update:     Tue 06 May 2025 22:00:21 +0000
Manifest next update:     Wed 07 May 2025 22:00:21 +0000
Files and hashes:         1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: VDV4Xt95n/yvqYB0lkDVPe5KG8gNB6s75Of+HvyBcmE=)
                          2: Z9jKPG-aJrl0Zezz0qMB35u4yX4.roa (hash: 2A8HZxxRaB1bgoi8TMjFDPNN3FGgJuX9XCmcDH5eYKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:3a:0a:24:c4:5b:49:26:d8:56:c4:19:8e:79:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: May  6 22:00:21 2025 GMT
            Not After : May  7 22:00:21 2025 GMT
        Subject: CN=d432b4108bca6ee1901e451207b128c373aaf67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:76:e5:7c:ed:20:8f:c0:0c:59:c6:1b:01:
                    2c:e6:11:42:32:9e:d1:61:0d:ae:8c:97:f4:22:f7:
                    ec:d6:68:28:31:da:a1:ff:9c:46:51:ff:9e:f8:98:
                    58:0a:fe:56:99:01:93:be:3e:78:7c:db:30:e9:c5:
                    ed:ff:62:8e:0b:d4:15:5f:33:5a:d9:87:e0:64:ff:
                    05:c9:82:03:05:62:ee:db:1f:e7:c7:b3:78:b2:6d:
                    81:f5:7f:a9:75:ac:d1:ce:25:ac:2e:39:34:df:08:
                    ed:3b:04:ab:aa:f3:85:c9:75:08:b5:13:c1:f1:61:
                    81:a6:2f:17:4c:dc:c1:87:2d:d4:1a:17:c4:11:a5:
                    b7:73:32:aa:44:0c:8c:3b:f6:1a:df:49:db:f8:12:
                    ad:96:cb:37:8b:5b:c2:62:79:c6:d5:ca:95:3c:25:
                    c3:a4:af:5a:03:d4:28:f4:81:31:12:98:ca:86:01:
                    4e:59:53:e2:44:77:eb:c2:c9:94:d2:4e:b0:43:f8:
                    bd:70:49:1c:04:90:f9:aa:77:53:03:43:bc:df:3f:
                    e7:20:ab:05:f5:6e:29:7b:6d:51:fc:42:52:6d:5a:
                    35:c9:22:bd:75:1b:93:7e:65:88:57:b2:bc:21:af:
                    b8:79:49:aa:f6:7e:c9:3a:2e:0d:3f:7e:76:4c:f6:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:32:B4:10:8B:CA:6E:E1:90:1E:45:12:07:B1:28:C3:73:AA:F6:7F
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:d4:13:5c:ab:fe:5a:34:1d:b9:b5:4f:79:85:03:b0:63:
         28:06:16:d7:c2:0c:20:f8:ff:79:2d:fc:15:b9:44:a3:0f:b2:
         03:bd:63:5e:4d:93:af:83:c7:6e:56:40:2e:9d:16:89:c7:b2:
         55:d4:cb:37:36:63:af:ac:11:f8:a3:13:f9:0c:68:f2:c9:5e:
         f3:dc:17:5c:50:84:48:1f:6a:9b:ea:b5:60:8f:74:30:f6:00:
         80:97:e2:7c:32:00:59:a0:84:ee:05:4b:40:d8:bc:9a:e7:2a:
         70:f9:07:c5:33:ac:64:d4:d1:e0:fe:6e:74:1e:97:33:7e:39:
         6c:a0:83:5e:cf:5b:43:0e:6f:2d:30:9b:f9:c2:25:de:70:85:
         ff:c3:ff:5b:05:94:95:5e:a0:9b:61:80:d0:79:4d:01:a8:1c:
         9d:72:9b:92:25:8b:f3:e2:ea:87:fc:85:50:59:7f:de:5d:9a:
         16:2d:2b:d2:8f:52:5a:1b:3f:0d:ea:97:1e:17:cf:7d:a9:b6:
         db:64:f1:a1:a0:f2:9b:2e:5b:e8:b1:31:66:7f:82:a0:e4:a6:
         39:eb:b6:c7:df:c8:48:83:24:3a:5c:48:dc:a9:71:ca:0d:bd:
         37:20:94:bd:54:77:79:86:a7:a3:09:73:7f:4a:58:85:a8:ce:
         0f:a6:27:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZannToKJMRbSSbYVsQZjnlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTU0ZmIwN2JlYTNkZjU1NmUzNTkzNDU0ZDMyMGU0ZjAw
ZWVmMmMwHhcNMjUwNTA2MjIwMDIxWhcNMjUwNTA3MjIwMDIxWjAzMTEwLwYDVQQD
EyhkNDMyYjQxMDhiY2E2ZWUxOTAxZTQ1MTIwN2IxMjhjMzczYWFmNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoop25XztII/ADFnGGwEs5hFCMp7R
YQ2ujJf0Ivfs1mgoMdqh/5xGUf+e+JhYCv5WmQGTvj54fNsw6cXt/2KOC9QVXzNa
2YfgZP8FyYIDBWLu2x/nx7N4sm2B9X+pdazRziWsLjk03wjtOwSrqvOFyXUItRPB
8WGBpi8XTNzBhy3UGhfEEaW3czKqRAyMO/Ya30nb+BKtlss3i1vCYnnG1cqVPCXD
pK9aA9Qo9IExEpjKhgFOWVPiRHfrwsmU0k6wQ/i9cEkcBJD5qndTA0O83z/nIKsF
9W4pe21R/EJSbVo1ySK9dRuTfmWIV7K8Ia+4eUmq9n7JOi4NP352TPagIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQytBCLym7hkB5FEgexKMNzqvZ/MB8GA1UdIwQY
MBaAFDelT7B76j31VuNZNFTTIOTwDu8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZWUHNIdnFQZlZXNDFrMFZOTWc1UEFPN3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NWJhZjYtNzI0Zi00YzBiLWJlODkt
MmZkNjNhMTJkNjZjLzEvTjZWUHNIdnFQZlZXNDFrMFZOTWc1UEFPN3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83NWJhZjYtNzI0Zi00YzBiLWJlODktMmZkNjNhMTJkNjZj
LzEvTjZWUHNIdnFQZlZXNDFrMFZOTWc1UEFPN3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiovUE1yr
/lo0Hbm1T3mFA7BjKAYW18IMIPj/eS38FblEow+yA71jXk2Tr4PHblZALp0Wicey
VdTLNzZjr6wR+KMT+Qxo8sle89wXXFCESB9qm+q1YI90MPYAgJfifDIAWaCE7gVL
QNi8mucqcPkHxTOsZNTR4P5udB6XM345bKCDXs9bQw5vLTCb+cIl3nCF/8P/WwWU
lV6gm2GA0HlNAagcnXKbkiWL8+Lqh/yFUFl/3l2aFi0r0o9SWhs/DeqXHhfPfam2
22TxoaDymy5b6LExZn+CoOSmOeu2x9/ISIMkOlxI3Klxyg29NyCUvVR3eYanowlz
f0pYhajOD6Yn0w==
-----END CERTIFICATE-----
Generated at Wed May 7 02:13:59 2025 by rpki-client