
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File:                     1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier:          LvLs4NwvF/rxOszSwLLNMAd+zoheohxmybXV1bDwKNQ=
Subject key identifier:   03:32:94:74:46:DE:29:E2:29:5D:3C:68:EE:22:E6:4A:C1:60:6C:A0
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer:       /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial:       0194BA8443B3659630280A17C7F3C3721E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number:          0733
Signing time:             Fri 31 Jan 2025 04:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:17 +0000
Files and hashes:         1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: CcUUVi0+IWwXDWPVNtCynEb/S1wcK5LG5g/IW8J/D6U=)
                          2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:17 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:43:b3:65:96:30:28:0a:17:c7:f3:c3:72:1e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
        Validity
            Not Before: Jan 31 04:00:17 2025 GMT
            Not After : Feb  1 04:00:17 2025 GMT
        Subject: CN=0332947446de29e2295d3c68ee22e64ac1606ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:f1:be:7a:e9:ec:b9:00:1c:ae:b2:8c:31:
                    b0:50:98:df:ba:e0:49:ae:62:b3:a4:a9:f0:43:70:
                    e6:8d:fb:8a:59:0f:b5:ea:70:22:82:64:0b:5f:de:
                    c6:52:70:56:f7:7e:65:81:90:42:62:7d:37:7c:a3:
                    89:df:7a:50:97:1c:ea:21:31:00:95:2c:21:e6:8d:
                    2e:50:fa:36:de:3f:ea:0b:95:84:81:28:4d:44:db:
                    32:09:b0:d5:4a:a9:98:ae:e6:18:a3:5f:e7:60:ca:
                    8b:55:74:b9:7b:43:0f:14:bd:11:6b:a8:b4:47:6d:
                    f8:13:72:fc:92:ca:27:db:31:85:c4:45:e8:90:be:
                    2b:42:51:e3:41:3d:4b:ff:0e:a0:b4:80:fc:16:a1:
                    42:b4:1e:49:7a:00:7a:2a:7c:cb:69:f9:54:8c:5f:
                    ea:25:39:5c:56:4e:6b:af:94:e0:e5:5e:c9:da:3f:
                    b0:36:e4:c4:48:da:21:d2:8f:f5:1e:89:6f:1b:e8:
                    4d:31:41:87:3a:8d:41:a8:47:67:4a:5d:1d:cd:13:
                    4a:e2:30:97:1a:f8:82:9b:92:11:d5:a1:cc:99:02:
                    9d:e0:d2:28:a9:bf:c9:0e:98:5c:a8:0d:9d:68:8d:
                    30:7e:dc:17:98:0b:5f:06:40:f6:d1:e6:d6:25:bc:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:32:94:74:46:DE:29:E2:29:5D:3C:68:EE:22:E6:4A:C1:60:6C:A0
            X509v3 Authority Key Identifier:
                keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         ba:b4:62:4a:c2:6e:43:0c:f2:bf:34:97:00:cb:53:aa:4b:fb:
         7d:ed:11:55:9b:05:6a:29:96:3e:a9:32:25:77:56:5a:a7:90:
         59:4f:3b:25:0c:09:95:84:5e:d0:38:e0:a2:5a:e6:5f:f9:53:
         a0:87:b7:da:fa:5d:db:bf:c3:8d:57:a9:a1:cc:fc:43:20:4c:
         f9:0a:4c:3e:e2:ff:08:80:aa:cf:78:06:44:16:d0:95:0b:e9:
         c9:74:74:98:8d:53:2a:33:f5:ca:72:a1:22:4e:73:27:9c:79:
         49:ac:2b:55:f2:53:7f:8a:a4:bd:f0:79:86:ca:2b:d2:0a:54:
         82:7a:e5:74:ba:57:23:31:d3:8d:a1:99:ad:2c:e7:54:1f:b2:
         f6:c0:44:d6:4b:de:91:40:22:8b:d6:b5:97:26:46:4d:d7:37:
         d4:30:45:74:61:a3:a7:1b:67:9c:e3:df:8d:b3:2f:5d:b0:9b:
         eb:b6:6f:62:ae:d4:58:33:a3:6c:04:c1:57:c1:c2:80:d2:ff:
         c9:b0:f7:ed:f3:90:fa:15:30:a3:07:36:63:b3:1c:4e:09:69:
         06:46:66:97:fa:71:28:de:31:76:d7:83:74:b1:e0:3b:c4:68:
         bc:50:31:a1:78:19:af:17:29:0d:44:30:90:18:7e:e1:ea:5a:
         15:6f:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:38 2025 by rpki-client on console-fra.rpki-client.org