Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
File:                     SboHm38CFqb2ZzyXHCr63VrpQuo.mft (raw, json)
Hash identifier:          DTUMKz0poSYa1g9Dsz85WTTQJkbpDtTOsgNQw2AAHfk=
Subject key identifier:   A2:6D:AD:EA:26:94:90:C6:0F:89:39:1E:66:23:89:2A:F4:D0:DD:DC
Authority key identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA
Certificate issuer:       /CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
Certificate serial:       0194BB97220E996F376D29AA7053448BB804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
Manifest number:          0600
Signing time:             Fri 31 Jan 2025 09:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:31 +0000
Files and hashes:         1: 1LC0dyD00kv8E_n1OjhAkJTE9Mg.roa (hash: 3MFjBxWOk0fq4hLcLajIgBilcjWSlDvQAatSzU2ufc0=)
                          2: SboHm38CFqb2ZzyXHCr63VrpQuo.crl (hash: /8fcxlrntRP3D8tcmY51adGNuQsxZTBxYYrQOb2ANAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:22:0e:99:6f:37:6d:29:aa:70:53:44:8b:b8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
        Validity
            Not Before: Jan 31 09:00:31 2025 GMT
            Not After : Feb  1 09:00:31 2025 GMT
        Subject: CN=a26dadea269490c60f89391e6623892af4d0dddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:69:26:a2:e6:01:36:8e:48:12:67:b9:62:
                    9f:d2:18:b5:b2:4d:33:23:46:3f:0c:ef:ab:fa:40:
                    73:50:11:b7:01:55:d7:e5:e4:e3:ad:7d:56:64:bc:
                    3f:1a:1f:28:a6:91:9c:d4:e0:0e:21:82:fe:84:3a:
                    a9:ae:00:d8:1e:8e:5e:59:9b:a9:28:17:38:21:30:
                    0a:b1:a3:ec:67:f3:e9:9c:c8:c8:0c:e3:a0:ff:f1:
                    3d:60:3f:ee:64:2a:2b:9e:bc:55:5d:26:36:02:c9:
                    a0:3f:6b:5a:15:47:99:df:a7:a1:ab:a0:2b:aa:f0:
                    8f:24:9b:90:f8:1e:78:ff:10:55:45:44:bc:5f:e1:
                    51:b5:48:00:93:69:a8:b5:7c:84:29:f5:71:c8:c4:
                    ba:9f:ad:00:50:3b:db:ad:c9:da:91:d6:47:38:d4:
                    5a:b0:06:e0:37:2f:e0:13:43:87:7a:01:c8:9d:79:
                    bc:34:e3:00:24:19:44:a5:ac:24:0e:fe:9b:03:41:
                    62:1b:df:d4:c0:0f:57:d1:3e:77:ae:5e:19:43:96:
                    84:ff:c8:ca:01:cc:a3:62:38:6a:14:02:14:25:40:
                    21:41:8f:3d:2b:83:df:69:0d:68:59:70:62:a4:8c:
                    8e:ee:56:ef:4c:66:d3:89:00:da:2a:be:b3:e2:61:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6D:AD:EA:26:94:90:C6:0F:89:39:1E:66:23:89:2A:F4:D0:DD:DC
            X509v3 Authority Key Identifier:
                keyid:49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:41:71:cf:c1:a0:bf:9c:4c:85:8a:31:ac:d0:38:a0:e0:c8:
         d2:c4:00:cf:f4:4a:92:9a:53:4c:ba:81:f0:c1:eb:83:31:d5:
         52:1a:5e:d7:13:b2:3f:8a:17:1d:0f:41:1b:1e:36:77:ce:5b:
         54:ea:2b:38:13:3e:56:0c:62:20:2f:84:d3:af:43:06:9a:ab:
         97:8b:a7:6b:d3:7c:92:48:82:f3:64:c7:99:3b:30:a3:f8:10:
         20:c0:34:e5:ed:44:a6:81:2f:04:7d:8a:1a:33:b3:78:e9:42:
         97:ea:76:5e:38:e8:79:3e:fb:b6:99:00:67:da:6d:f8:e0:c5:
         5f:f6:35:7e:a8:b7:ba:7f:a4:09:54:01:23:39:cf:12:6f:a4:
         c5:d4:d0:18:40:1b:dc:cb:47:d7:78:42:ad:8a:b4:2a:d6:56:
         ce:7d:82:01:68:3d:38:10:07:b7:54:d7:12:82:86:fa:61:8a:
         59:f9:8b:f3:e8:90:02:5c:f0:3e:23:ec:12:22:52:d7:3a:b4:
         17:71:49:94:28:b2:72:81:cd:ac:ca:fb:54:82:f6:79:eb:c9:
         70:67:2a:26:ab:b9:cc:77:ee:f4:98:2c:91:b4:f2:e2:2c:31:
         5d:79:50:ca:7c:82:69:2f:03:1f:87:a9:aa:c2:3a:46:21:8a:
         cb:8f:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:14 2025 by rpki-client on console-fra.rpki-client.org