Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File:                     SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier:          O3v2+8ekTjEIxjaB37MCCPvEiGWZ4OBGCS5XfIMFYe8=
Subject key identifier:   99:C3:F8:CC:83:9B:26:A2:33:F5:8C:C5:F6:28:93:89:62:63:E4:7E
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer:       /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial:       0194BABBDD5A714C4F33573081471FB5553A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number:          0FA6
Signing time:             Fri 31 Jan 2025 05:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 05:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 05:01:01 +0000
Files and hashes:         1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: wJYbcEU0gEyKb+YrCiji8Ult6gBqv0YycKG7DZF59YA=)
                          2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:dd:5a:71:4c:4f:33:57:30:81:47:1f:b5:55:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
        Validity
            Not Before: Jan 31 05:01:01 2025 GMT
            Not After : Feb  1 05:01:01 2025 GMT
        Subject: CN=99c3f8cc839b26a233f58cc5f62893896263e47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ed:54:ae:2b:2c:ac:01:a1:fc:41:d4:44:17:
                    0e:f8:11:97:ab:02:c3:48:ed:dc:94:20:5b:e4:04:
                    06:5e:2a:21:ae:3a:21:26:37:73:d1:88:d8:cb:08:
                    fc:c6:5c:97:3c:4e:33:91:fa:5b:1b:6a:5b:e5:de:
                    3d:7f:f5:a9:ec:30:47:72:29:0d:77:5b:ab:dc:36:
                    5b:60:bc:98:a0:d1:4a:94:b4:e2:0c:a6:c5:2d:2d:
                    50:37:68:f0:ce:92:d0:b4:36:39:43:8d:a2:bf:25:
                    83:be:3b:b4:9e:f1:6b:9c:29:c9:f6:64:e5:de:f0:
                    5e:7f:a0:a6:a8:53:c5:53:a9:6b:62:34:24:5a:b3:
                    7a:ff:ec:e7:47:85:9c:e7:77:75:2c:5a:27:35:0d:
                    51:d9:ea:19:1d:42:6a:d4:27:4b:30:9c:2d:d1:1a:
                    b6:e2:1f:f6:b5:f6:dd:e2:dc:14:86:63:d1:ce:62:
                    7f:b9:05:ce:c7:53:73:fc:e9:68:a0:14:e9:51:c9:
                    27:43:44:77:c0:b2:00:b4:aa:e1:0d:35:fe:ee:36:
                    1a:e5:16:2e:66:36:b1:67:f7:a0:f6:c4:45:bb:37:
                    30:17:3d:70:51:e9:fb:46:db:6b:59:c8:f2:87:22:
                    35:f3:42:83:f1:ea:8c:db:a0:1d:89:b9:d2:2b:43:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C3:F8:CC:83:9B:26:A2:33:F5:8C:C5:F6:28:93:89:62:63:E4:7E
            X509v3 Authority Key Identifier:
                keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:c5:1b:be:6f:15:89:89:79:f9:4a:d3:ad:90:bf:cf:3a:
         ee:e2:c2:3a:e5:4f:35:dc:75:36:03:1f:d8:17:96:b5:d7:e1:
         e5:d4:46:07:b5:eb:22:e9:89:86:ae:db:b6:1a:0a:5c:1f:e6:
         56:3f:10:ed:c0:c6:64:f4:5c:39:d7:3a:5e:46:6b:01:94:9a:
         1c:08:b5:c5:b1:81:17:74:15:ca:43:0c:c8:f1:2e:5b:82:1a:
         0c:d8:ba:ee:ef:50:fc:bc:b5:0e:34:71:2b:f2:fe:fd:ff:49:
         91:1f:ad:88:55:f9:56:7b:e6:48:33:05:51:b2:a5:72:9f:b3:
         60:8a:61:4b:06:03:f0:f5:f5:29:a6:97:a6:8a:43:67:a8:14:
         20:26:0b:ab:bb:38:ad:b9:96:74:a6:3d:42:5a:39:0f:1d:eb:
         0f:69:05:42:d4:2a:d5:e7:ce:66:83:20:d9:ee:2c:df:3c:0e:
         9a:76:e3:dc:e1:67:94:ee:61:d4:5b:69:6b:9f:6e:0f:b5:5b:
         b2:0f:c0:e4:76:32:ce:07:86:cf:8a:5c:54:74:3a:7a:2e:85:
         6a:6a:0e:7d:17:6b:8d:80:3a:92:fc:78:ab:29:68:c0:d0:5d:
         23:07:6b:6b:46:e2:5f:18:29:92:29:78:7a:9d:01:86:da:6f:
         ec:20:e2:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u91acUxPM1cwgUcftVU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGE4NTY1Mjc2YjRhMjUxYmE1NzNkZDZkNWY1Zjg3ODIz
OGViZDIwHhcNMjUwMTMxMDUwMTAxWhcNMjUwMjAxMDUwMTAxWjAzMTEwLwYDVQQD
Eyg5OWMzZjhjYzgzOWIyNmEyMzNmNThjYzVmNjI4OTM4OTYyNjNlNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+1UrissrAGh/EHURBcO+BGXqwLD
SO3clCBb5AQGXiohrjohJjdz0YjYywj8xlyXPE4zkfpbG2pb5d49f/Wp7DBHcikN
d1ur3DZbYLyYoNFKlLTiDKbFLS1QN2jwzpLQtDY5Q42ivyWDvju0nvFrnCnJ9mTl
3vBef6CmqFPFU6lrYjQkWrN6/+znR4Wc53d1LFonNQ1R2eoZHUJq1CdLMJwt0Rq2
4h/2tfbd4twUhmPRzmJ/uQXOx1Nz/OlooBTpUcknQ0R3wLIAtKrhDTX+7jYa5RYu
ZjaxZ/eg9sRFuzcwFz1wUen7RttrWcjyhyI180KD8eqM26AdibnSK0PyEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnD+MyDmyaiM/WMxfYok4liY+R+MB8GA1UdIwQY
MBaAFElKhWUna0olG6Vz3W1fX4eCOOvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYt
YzZkOWY5MTViZDhiLzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYtYzZkOWY5MTViZDhi
LzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHvFG75v
FYmJeflK062Qv8867uLCOuVPNdx1NgMf2BeWtdfh5dRGB7XrIumJhq7bthoKXB/m
Vj8Q7cDGZPRcOdc6XkZrAZSaHAi1xbGBF3QVykMMyPEuW4IaDNi67u9Q/Ly1DjRx
K/L+/f9JkR+tiFX5VnvmSDMFUbKlcp+zYIphSwYD8PX1KaaXpopDZ6gUICYLq7s4
rbmWdKY9Qlo5Dx3rD2kFQtQq1efOZoMg2e4s3zwOmnbj3OFnlO5h1Ftpa59uD7Vb
sg/A5HYyzgeGz4pcVHQ6ei6FamoOfRdrjYA6kvx4qylowNBdIwdra0biXxgpkil4
ep0Bhtpv7CDiig==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:32 2025 by rpki-client on console-fra.rpki-client.org