
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
File:                     8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json)
Hash identifier:          obMNzO5/u96nIBclP/vFTocsG5mNIGNe/WSEDP/8E8c=
Subject key identifier:   7F:ED:EF:C4:3E:50:A5:27:83:F3:4B:68:B6:28:EE:96:0E:6F:66:98
Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Certificate issuer:       /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Certificate serial:       0194BABB29B45F30AF31A96EE857A98F38CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
Manifest number:          0F
Signing time:             Fri 31 Jan 2025 05:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:15 +0000
Files and hashes:         1: 0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa (hash: wCgtD5GTaTUHzlGOdOblih6qPlBPABAlJQ113X+Jw+c=)
                          2: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: adFvm84sqrH+kmOx7S2b/cgj3Jo6FeTUVZZo0nOrWE8=)
                          3: 97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa (hash: oUOsuSRnUrU8knVeKfFc9QKPrgL79MjXgwUrkum1/pg=)
                          4: L4cYTmcMFfvtup8EOVfWGJu2vX8.roa (hash: erMMZD+S+Fs2aYT1Dy3VVlR447qTafNqOv1NGE4DFgI=)
                          5: Z29YwFdCw8mb-MR3SYDyBs3lmMg.roa (hash: J+lE3dbsGRla43+sCei9+kYRVYFXdgjow6d3cOzy75c=)
                          6: bFysswJxqvMNZTsaf64flp1ZIQc.roa (hash: uwCDzi7rd+IXP1Mw2HNimdPO1YXu5Quq3N1iTcDCSa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:15 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:29:b4:5f:30:af:31:a9:6e:e8:57:a9:8f:38:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
        Validity
            Not Before: Jan 31 05:00:15 2025 GMT
            Not After : Feb  1 05:00:15 2025 GMT
        Subject: CN=7fedefc43e50a52783f34b68b628ee960e6f6698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:87:d1:c0:da:df:51:14:df:38:30:69:68:
                    82:1f:41:fc:8b:8f:65:f4:52:ff:b1:d4:c8:4a:ff:
                    9b:95:43:a7:1c:0d:0d:7d:78:4a:96:91:35:15:2b:
                    ae:f2:ae:77:4f:e9:80:3e:cc:8e:95:d7:06:76:64:
                    c8:50:73:e9:a3:b8:65:ee:ef:fa:5e:41:7d:03:de:
                    b9:20:4b:09:c2:36:cd:9d:93:1c:0f:ca:8e:0c:f3:
                    a1:92:95:19:1d:2c:a0:c8:63:07:8c:96:3b:14:fc:
                    85:7b:43:30:98:a0:f3:04:ef:93:84:42:bb:7c:2a:
                    b3:a8:28:f6:29:3a:94:72:e3:90:b1:a6:6d:b6:69:
                    d2:cd:2f:7d:69:63:5b:d1:2b:66:1e:f0:fb:ab:5f:
                    46:43:3f:b7:47:b7:bd:ae:2d:51:55:e1:01:86:de:
                    aa:6a:b7:20:30:55:fb:ef:b0:a8:11:42:b4:3f:c7:
                    b2:47:50:5c:ea:fc:5a:b1:f9:74:d7:1b:e7:ef:44:
                    de:99:9a:bd:7e:e6:ab:27:0e:47:8d:b1:a2:b3:24:
                    b8:a5:dd:1a:a9:22:09:34:11:63:4a:f3:da:62:18:
                    49:56:7f:bb:a2:09:04:20:95:f9:66:6d:f9:79:1d:
                    aa:5a:d6:32:c3:f5:95:39:b9:8b:d3:5d:42:6c:5d:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:ED:EF:C4:3E:50:A5:27:83:F3:4B:68:B6:28:EE:96:0E:6F:66:98
            X509v3 Authority Key Identifier:
                keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8b:39:69:a9:aa:90:c6:46:a3:92:c5:0d:5c:30:0c:93:67:3f:
         bd:3a:ef:45:ce:79:84:28:17:a1:61:e7:9b:4e:14:db:6f:91:
         ef:f8:a5:e7:2b:98:36:2c:12:44:d2:ee:c5:12:e1:9a:84:cd:
         7e:5f:5b:62:b5:8a:01:2f:0a:d9:dc:b2:0a:0b:a5:05:d1:e7:
         74:4a:66:00:cb:d6:1d:0b:3a:22:41:82:38:42:f0:8f:47:33:
         eb:a5:a8:ab:db:c2:54:09:ca:7a:bf:5f:10:07:2f:99:ad:cb:
         cc:de:01:3a:6d:c7:0a:02:74:f6:e2:e9:3a:7a:a0:f4:e4:9e:
         1f:4e:84:22:e6:fa:fb:2d:4b:c7:40:b4:40:13:0c:ec:e5:56:
         64:3b:8e:3c:93:ec:f1:a9:28:6d:25:12:5c:ba:f8:91:e2:39:
         4a:33:9b:db:43:51:e1:57:25:f6:25:af:45:ac:07:34:60:a8:
         0f:96:99:9e:5c:3d:9c:fa:39:f1:1d:ac:77:c6:d2:59:30:99:
         63:77:d3:6d:a1:48:72:78:c9:f7:40:30:f4:ff:1b:62:11:fb:
         fe:71:07:bd:10:7c:8d:10:b6:e8:da:a4:19:13:1b:26:1a:a4:
         c2:56:10:41:1d:7a:13:e0:c1:d2:62:dd:94:60:f8:60:61:b0:
         a2:ca:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:22 2025 by rpki-client on console-fra.rpki-client.org