Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File:                     iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier:          g5SNpyuBStlIsl8otwJm86YB4St4rJiIW3sSjEcJ08k=
Subject key identifier:   E5:CB:47:46:D0:A2:F7:40:C1:2E:8B:4C:FF:08:D7:84:47:C3:A6:08
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer:       /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial:       0194BABB7D68F7D97C0549710924C00A2429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number:          0C9C
Signing time:             Fri 31 Jan 2025 05:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:36 +0000
Files and hashes:         1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
                          2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: bcRSvC6UPa0N1bSdMBMiasS9sqv6Dhz+/KfJMlIdBC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:7d:68:f7:d9:7c:05:49:71:09:24:c0:0a:24:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
        Validity
            Not Before: Jan 31 05:00:36 2025 GMT
            Not After : Feb  1 05:00:36 2025 GMT
        Subject: CN=e5cb4746d0a2f740c12e8b4cff08d78447c3a608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:5f:16:ee:ee:70:dd:2d:63:1e:d2:16:bc:
                    b7:99:68:fa:df:c3:e6:12:c6:b7:99:8f:c2:02:5b:
                    a3:2b:53:77:f2:00:d6:34:34:10:fc:82:fa:8e:65:
                    8f:89:6c:0e:d4:1a:2a:9f:26:6e:b0:6d:56:1e:00:
                    ab:38:bb:4f:6c:91:41:74:9e:85:08:5b:12:01:e9:
                    0b:0a:52:e0:01:d5:02:b0:35:09:37:6b:da:7d:f8:
                    34:4d:7f:ee:b4:63:68:90:7e:28:06:f8:0a:07:b6:
                    6c:a5:29:ac:c7:d5:b8:db:e1:5d:64:28:63:93:e7:
                    3e:fb:79:c4:f2:61:ae:4e:4d:b9:ba:5f:b7:f2:f3:
                    db:5a:e6:78:2c:f6:b6:a5:c5:5f:3b:7e:18:74:92:
                    62:a5:67:0a:30:5c:6c:c6:5c:4d:3e:fc:84:fe:78:
                    2c:b6:6b:44:18:89:61:33:08:7f:df:88:be:07:77:
                    37:db:19:f6:0c:55:c8:17:42:26:67:bf:b1:0f:c1:
                    e9:40:6e:02:46:1f:70:5e:f5:98:23:e4:ba:ea:5f:
                    02:7a:3e:9d:09:12:1b:bd:68:62:84:bc:26:25:52:
                    d3:66:0f:b2:02:e1:de:02:70:3d:bf:7b:f4:6c:da:
                    ff:8d:f0:02:bc:30:a4:77:e6:5e:00:f6:71:11:4a:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CB:47:46:D0:A2:F7:40:C1:2E:8B:4C:FF:08:D7:84:47:C3:A6:08
            X509v3 Authority Key Identifier:
                keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:8b:8c:4d:63:67:82:45:b7:fe:c3:fc:72:7c:14:cb:e7:
         17:27:b1:7c:57:51:59:06:68:ad:6c:4c:09:92:7e:ba:ac:cf:
         7f:ea:e1:9f:87:47:3a:1b:5b:ef:d9:bc:b1:59:cc:c1:3b:3e:
         11:2d:21:d9:f5:91:7d:26:d2:0b:0d:28:c6:f3:86:8e:50:12:
         dc:26:27:e2:ca:75:4e:f2:42:0c:f0:42:18:de:a2:6c:8d:20:
         6b:2d:6e:3d:f4:16:66:85:90:92:67:55:a3:17:22:00:cb:3a:
         0b:09:41:ef:98:b4:52:50:70:b2:2a:1b:86:74:af:06:01:c5:
         85:df:47:cb:79:9a:7e:f0:5e:7d:f7:0e:cc:84:fa:54:d2:88:
         41:88:a3:87:ab:8d:c2:7e:74:2e:05:b6:b3:bb:29:a9:c2:ef:
         b6:ff:a9:f2:e5:b4:be:7f:bf:35:96:3f:f3:49:c4:99:1c:07:
         5f:af:df:c5:0b:89:ae:59:0a:b5:36:05:bb:e8:fc:76:24:29:
         1c:52:96:6a:c4:75:32:e6:13:f2:61:f0:52:2b:e8:70:b3:c7:
         55:97:02:93:9f:8c:7b:9a:57:c8:7e:ac:6e:c8:63:c8:f3:d7:
         03:5a:9b:70:44:3a:58:af:9b:fa:22:b0:7c:07:6e:e9:3c:af:
         85:03:75:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u31o99l8BUlxCSTACiQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTBmYzMxOThhMGFiOTk2NDc4NzdkYmU1NzI1ZTA1Y2Vl
MDEzZjAwHhcNMjUwMTMxMDUwMDM2WhcNMjUwMjAxMDUwMDM2WjAzMTEwLwYDVQQD
EyhlNWNiNDc0NmQwYTJmNzQwYzEyZThiNGNmZjA4ZDc4NDQ3YzNhNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+9fFu7ucN0tYx7SFry3mWj638Pm
Esa3mY/CAlujK1N38gDWNDQQ/IL6jmWPiWwO1BoqnyZusG1WHgCrOLtPbJFBdJ6F
CFsSAekLClLgAdUCsDUJN2vaffg0TX/utGNokH4oBvgKB7ZspSmsx9W42+FdZChj
k+c++3nE8mGuTk25ul+38vPbWuZ4LPa2pcVfO34YdJJipWcKMFxsxlxNPvyE/ngs
tmtEGIlhMwh/34i+B3c32xn2DFXIF0ImZ7+xD8HpQG4CRh9wXvWYI+S66l8Cej6d
CRIbvWhihLwmJVLTZg+yAuHeAnA9v3v0bNr/jfACvDCkd+ZeAPZxEUr6xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXLR0bQovdAwS6LTP8I14RHw6YIMB8GA1UdIwQY
MBaAFIgQ/DGYoKuZZHh32+VyXgXO4BPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTkt
NGEwOGQ1YTFjNzFmLzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTktNGEwOGQ1YTFjNzFm
LzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSiLjE1j
Z4JFt/7D/HJ8FMvnFyexfFdRWQZorWxMCZJ+uqzPf+rhn4dHOhtb79m8sVnMwTs+
ES0h2fWRfSbSCw0oxvOGjlAS3CYn4sp1TvJCDPBCGN6ibI0gay1uPfQWZoWQkmdV
oxciAMs6CwlB75i0UlBwsiobhnSvBgHFhd9Hy3mafvBeffcOzIT6VNKIQYijh6uN
wn50LgW2s7spqcLvtv+p8uW0vn+/NZY/80nEmRwHX6/fxQuJrlkKtTYFu+j8diQp
HFKWasR1MuYT8mHwUivocLPHVZcCk5+Me5pXyH6sbshjyPPXA1qbcEQ6WK+b+iKw
fAdu6TyvhQN1YQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:59 2025 by rpki-client on console-fra.rpki-client.org