
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File:                     FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier:          9csSqXiDgtcK2vvneKNy20AjdWj7ACXHoDxnZ4Ty38U=
Subject key identifier:   84:DD:2E:2B:58:53:0B:07:B5:98:A2:D3:FD:C9:15:94:56:48:32:15
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       0194BB6027B697B06F4C1B716864B63963D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number:          0E9A
Signing time:             Fri 31 Jan 2025 08:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:28 +0000
Files and hashes:         1: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: 8DlLlWszah2qQ37fyn0Lgz6UYCJGyRNPwpggIT2EQw4=)
                          2: T7TBRzeJX6tbdWoccYUlzQavEvE.roa (hash: GbQhCrhDJnuTs6aD5dp/vwgXjm1RN1g0gqgdS90d0Rg=)
                          3: c053duW9yVX04hvH9uI3J-eIkE4.roa (hash: XRTPmRVBWHDOHpFSQkgtPCpg1cl8rrGstMwajzVZVD8=)
                          4: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (hash: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=)
                          5: rrklfK2SIXU63eNHbLfy96DEEE4.roa (hash: MG3f+4yFLcREUv4lMpAVJXVlUxg7hDY8kaD7dmGDqvA=)
                          6: wT_wbXD63kRspn66-sCHN9HX56k.roa (hash: giCV77XuxHEuebQnQQQbW4oA8w7bEamDw12AkczJQ2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:28 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:27:b6:97:b0:6f:4c:1b:71:68:64:b6:39:63:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Jan 31 08:00:28 2025 GMT
            Not After : Feb  1 08:00:28 2025 GMT
        Subject: CN=84dd2e2b58530b07b598a2d3fdc9159456483215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:cc:60:6a:19:cb:11:6a:bf:2a:be:b2:3e:
                    32:db:56:6e:45:ad:66:94:d5:de:d9:03:9e:96:4c:
                    15:a5:b6:38:cb:05:a7:44:df:7b:81:b6:a4:f8:f4:
                    6d:dd:a7:01:6f:14:37:4f:1b:41:dc:9e:1f:30:39:
                    51:2c:5a:8c:dc:92:65:07:b5:7c:e6:5a:05:d0:ad:
                    33:b7:85:4c:c8:a9:61:6a:7b:86:f2:f5:ca:6a:12:
                    3e:32:ba:58:02:59:78:83:13:cb:8c:1c:4c:7d:1d:
                    e5:d7:07:38:e0:6a:33:59:75:a5:18:de:f3:05:9e:
                    92:67:2a:09:21:c8:e3:29:dd:2b:78:03:96:ed:7d:
                    9b:7f:4d:40:b6:57:53:41:fa:92:e3:91:85:ac:1e:
                    b6:56:2a:89:a1:82:5b:05:eb:5a:34:87:1b:49:30:
                    d8:0e:00:8e:42:1a:39:f7:0d:e5:e0:eb:16:63:a4:
                    d9:07:f7:92:9c:23:83:94:57:91:24:5b:c5:85:20:
                    14:2d:04:d5:b8:98:4a:e6:69:87:1f:b9:16:75:2b:
                    2e:10:78:61:85:bd:e7:9e:f4:3a:6e:2b:96:f4:b1:
                    6d:69:d7:8d:fe:32:0c:13:97:51:c6:3d:df:74:88:
                    38:d6:60:47:84:8c:dc:48:3a:23:cd:96:00:75:1b:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DD:2E:2B:58:53:0B:07:B5:98:A2:D3:FD:C9:15:94:56:48:32:15
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0d:18:ee:88:04:11:52:6e:86:18:80:ff:a6:2a:27:0a:52:59:
         d5:f2:ec:07:88:dd:b1:21:b2:96:e7:8f:96:5a:7c:8a:5b:61:
         41:b3:ad:7b:42:04:93:99:36:6f:94:1b:76:e4:c5:b7:9e:b1:
         19:87:4f:51:49:af:2a:e9:70:10:f2:f2:f9:e0:21:2a:51:34:
         16:6c:77:6e:f2:54:6e:e5:b7:23:11:f5:5c:41:f1:71:ca:b2:
         a8:3f:17:e0:3e:0d:3f:e6:c9:a7:c5:ad:3d:bf:c8:40:5b:2d:
         53:71:2b:d5:13:e4:38:3d:7a:8c:b5:89:75:dd:c0:d4:c3:6d:
         bc:0d:d6:ee:63:d4:8e:7d:fe:5a:7d:0d:bc:66:aa:8a:b4:96:
         07:fc:f1:f4:65:73:1e:8f:e5:43:36:44:b9:9c:fa:86:7e:27:
         b8:ac:43:0c:e6:5f:3b:67:b0:30:7e:85:27:c8:fb:e4:55:32:
         61:0c:2f:9c:37:fd:fc:be:7d:9d:33:5a:4b:ce:98:30:e4:83:
         52:89:ef:35:19:81:29:53:09:1e:06:0a:76:08:31:2c:a2:4d:
         d9:ee:3a:a4:e8:b0:1d:50:33:00:e9:e9:40:d3:53:38:0e:66:
         60:93:b9:66:23:4d:91:8a:37:be:36:c1:98:0a:0f:3e:ac:5b:
         ba:3d:7a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YCe2l7BvTBtxaGS2OWPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5
Y2JlNzMwHhcNMjUwMTMxMDgwMDI4WhcNMjUwMjAxMDgwMDI4WjAzMTEwLwYDVQQD
Eyg4NGRkMmUyYjU4NTMwYjA3YjU5OGEyZDNmZGM5MTU5NDU2NDgzMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbnMYGoZyxFqvyq+sj4y21ZuRa1m
lNXe2QOelkwVpbY4ywWnRN97gbak+PRt3acBbxQ3TxtB3J4fMDlRLFqM3JJlB7V8
5loF0K0zt4VMyKlhanuG8vXKahI+MrpYAll4gxPLjBxMfR3l1wc44GozWXWlGN7z
BZ6SZyoJIcjjKd0reAOW7X2bf01AtldTQfqS45GFrB62ViqJoYJbBetaNIcbSTDY
DgCOQho59w3l4OsWY6TZB/eSnCODlFeRJFvFhSAULQTVuJhK5mmHH7kWdSsuEHhh
hb3nnvQ6biuW9LFtadeN/jIME5dRxj3fdIg41mBHhIzcSDojzZYAdRu7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITdLitYUwsHtZii0/3JFZRWSDIVMB8GA1UdIwQY
MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt
ZTYwNGI2MWJlMGVhLzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh
LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRjuiAQR
Um6GGID/pionClJZ1fLsB4jdsSGyluePllp8ilthQbOte0IEk5k2b5QbduTFt56x
GYdPUUmvKulwEPLy+eAhKlE0Fmx3bvJUbuW3IxH1XEHxccqyqD8X4D4NP+bJp8Wt
Pb/IQFstU3Er1RPkOD16jLWJdd3A1MNtvA3W7mPUjn3+Wn0NvGaqirSWB/zx9GVz
Ho/lQzZEuZz6hn4nuKxDDOZfO2ewMH6FJ8j75FUyYQwvnDf9/L59nTNaS86YMOSD
UonvNRmBKVMJHgYKdggxLKJN2e46pOiwHVAzAOnpQNNTOA5mYJO5ZiNNkYo3vjbB
mAoPPqxbuj164w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:49 2025 by rpki-client on console-fra.rpki-client.org