
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
File:                     fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json)
Hash identifier:          YeFLRSLdiXw9Lvpq5BleGoF+IX039ehsjKp7LmE8Dt4=
Subject key identifier:   35:58:AA:91:A1:17:13:2F:95:5B:A1:D1:C0:E5:28:B0:30:98:43:F9
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Certificate issuer:       /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial:       0194BB290232B408AA9E9B874B2B725A6AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 07:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:14 +0000
Files and hashes:         1: 9f63Sb9a540JPUwazld4MMVS_iE.roa (hash: DIORsJwOy+2Zy+DITLzusBKnfVOGOXxgm47fM/VbAWQ=)
                          2: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: /JRv7+Op6wpVC8FZhc4h9XVr8bkmsZ51XK3yus1KACc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:14 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:02:32:b4:08:aa:9e:9b:87:4b:2b:72:5a:6a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
        Validity
            Not Before: Jan 31 07:00:14 2025 GMT
            Not After : Feb  1 07:00:14 2025 GMT
        Subject: CN=3558aa91a117132f955ba1d1c0e528b0309843f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:aa:bf:da:37:ce:35:fe:20:cd:63:79:51:
                    f4:a0:7d:c6:7e:62:36:e9:fa:5f:08:e6:fe:0b:88:
                    2e:3c:16:7b:a3:0d:bf:68:5a:61:08:7a:fa:dd:dc:
                    91:41:cc:03:2f:7f:43:83:d8:a2:29:9b:1a:c4:1b:
                    d9:73:11:b3:b7:b7:e3:86:c5:39:b5:45:10:6e:57:
                    22:56:69:c5:2f:cd:28:79:f6:d7:26:e3:12:5f:4d:
                    94:7f:da:46:bb:6b:73:8e:bc:0c:82:f3:a6:56:e7:
                    97:9c:10:1e:77:33:c9:04:69:3e:a8:f1:a0:94:bb:
                    46:b6:18:bf:12:11:61:eb:d3:cb:18:10:d0:27:b9:
                    4f:6b:37:9a:a1:cb:96:b5:8f:c8:ab:84:08:78:0b:
                    9f:ac:13:fb:45:4d:24:f0:34:35:2c:a6:fd:e3:f7:
                    37:d8:57:e1:7f:fb:cf:82:dc:8c:e9:81:a0:7b:3e:
                    b3:2a:8a:14:a3:03:98:51:8a:88:48:b6:6b:08:dd:
                    16:9f:68:bb:0b:48:54:cd:c3:28:fd:de:c4:7a:b6:
                    6e:df:9e:94:ea:bf:ce:7d:fa:19:53:fa:aa:96:f2:
                    78:07:eb:54:7d:6f:4e:fa:cf:3b:48:9e:a6:55:66:
                    b8:8c:a8:40:77:8c:fa:9d:78:dc:9a:2e:8b:96:c1:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:58:AA:91:A1:17:13:2F:95:5B:A1:D1:C0:E5:28:B0:30:98:43:F9
            X509v3 Authority Key Identifier:
                keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         42:6f:ac:ff:f6:6d:1d:48:4b:80:cf:1f:47:4f:f2:e1:8b:ab:
         ef:16:89:fc:9f:30:ae:93:c1:35:f3:88:91:95:6d:81:b7:dd:
         b9:de:b4:3b:e9:f6:4a:6a:8b:2f:3d:49:07:81:14:ab:8a:ff:
         23:34:09:ee:46:d5:56:32:99:29:e0:aa:f0:73:35:ea:ae:49:
         b9:3c:be:e0:b1:db:96:69:75:f5:8e:e2:b8:d5:ef:23:96:5d:
         32:62:8a:bb:1e:a8:c2:59:23:02:01:c4:0f:a2:91:e6:e3:f5:
         14:85:3e:ac:a5:d8:d5:6b:23:c6:f6:ad:e1:ca:71:07:71:d9:
         d9:49:d7:08:f6:9e:7f:cd:79:b3:fb:fb:13:76:d6:20:29:94:
         05:26:4f:20:12:5a:5c:dc:27:0d:e5:17:4b:b2:27:2d:d7:b5:
         5d:fb:fb:2c:0d:7c:97:ca:54:26:e1:14:1c:c1:fd:d1:2c:ac:
         85:42:32:36:6c:71:e8:8f:6d:a3:08:39:a6:c2:33:4a:57:97:
         82:1b:2f:e8:5a:bc:8b:58:a8:6d:67:de:2e:4b:81:74:ef:e6:
         14:b7:21:6b:30:2d:a2:93:92:be:0e:c4:a2:ce:d7:8e:a3:ff:
         08:e7:13:a0:16:df:c0:3a:e0:a6:5c:58:ad:7a:24:cc:4c:ac:
         6c:8e:98:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KQIytAiqnpuHSytyWmqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2QwY2FjZmFmYTJlMGQzMTQ5NWRkOTUwZjc2YWY1Zjk4
YmE1ZDcwHhcNMjUwMTMxMDcwMDE0WhcNMjUwMjAxMDcwMDE0WjAzMTEwLwYDVQQD
EygzNTU4YWE5MWExMTcxMzJmOTU1YmExZDFjMGU1MjhiMDMwOTg0M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYyqv9o3zjX+IM1jeVH0oH3GfmI2
6fpfCOb+C4guPBZ7ow2/aFphCHr63dyRQcwDL39Dg9iiKZsaxBvZcxGzt7fjhsU5
tUUQblciVmnFL80oefbXJuMSX02Uf9pGu2tzjrwMgvOmVueXnBAedzPJBGk+qPGg
lLtGthi/EhFh69PLGBDQJ7lPazeaocuWtY/Iq4QIeAufrBP7RU0k8DQ1LKb94/c3
2Ffhf/vPgtyM6YGgez6zKooUowOYUYqISLZrCN0Wn2i7C0hUzcMo/d7EerZu356U
6r/OffoZU/qqlvJ4B+tUfW9O+s87SJ6mVWa4jKhAd4z6nXjcmi6LlsEALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVYqpGhFxMvlVuh0cDlKLAwmEP5MB8GA1UdIwQY
MBaAFHzNDKz6+i4NMUld2VD3avX5i6XXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUt
NDM5ZmM4ZjliMzg2LzEvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUtNDM5ZmM4ZjliMzg2
LzEvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQm+s//Zt
HUhLgM8fR0/y4Yur7xaJ/J8wrpPBNfOIkZVtgbfdud60O+n2SmqLLz1JB4EUq4r/
IzQJ7kbVVjKZKeCq8HM16q5JuTy+4LHblml19Y7iuNXvI5ZdMmKKux6owlkjAgHE
D6KR5uP1FIU+rKXY1Wsjxvat4cpxB3HZ2UnXCPaef815s/v7E3bWICmUBSZPIBJa
XNwnDeUXS7InLde1Xfv7LA18l8pUJuEUHMH90SyshUIyNmxx6I9towg5psIzSleX
ghsv6Fq8i1iobWfeLkuBdO/mFLchazAtopOSvg7Eos7XjqP/COcToBbfwDrgplxY
rXokzEysbI6YvQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:50 2025 by rpki-client on console-fra.rpki-client.org