
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          hvGLRdiaskTIalR/Y9/MivloZPobiKr8mVNqN1t3GHU=
Subject key identifier:   A0:23:F2:1E:3F:70:30:A7:79:B8:DC:04:B3:91:AC:98:8F:9B:67:F6
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       0194BB298DB2D3CA438E75A46E07853BCAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0A94
Signing time:             Fri 31 Jan 2025 07:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:50 +0000
Files and hashes:         1: 1-8pzP6m6CKFzZf4GA5KdxBZxBOM.roa (hash: adVOYlfYsXdRx7DAlb5hzy1+C1bfr0m/Pz+2N3L0Vs4=)
                          2: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          3: 3Uw-7z2kMz7P2hTiFYuyjNoIC7M.roa (hash: afekNJynpaO8TfvKa3AT97hHgiLCtRzfnqO9reTavxw=)
                          4: 3x891OocAe1-2pyBdPbHM1DAmEk.roa (hash: zw7QZQl/MgxOAZsHZ8/HaVw8iC+OtoxDr3XKA4iQCDQ=)
                          5: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          6: 6JXerbrsuLioFMLBaMW6HIp8-c8.roa (hash: zH71WBDxUqan8pwlYgSOa/jpEFPJ/A9dYkcx/TKDltQ=)
                          7: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          8: CQX8S2meSU1BmR-DPi1s6EiqlhM.roa (hash: ddtwBgCOPpM968GD4P4QsewU5N5ym/CRJL2YFxpjaRA=)
                          9: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          10: DwYRxgYeXApocC24tYlVvUen_78.roa (hash: iHpSxAM52sPB00v62NkUUPRqOKe3WSIQZRaMIsejpUg=)
                          11: E0BTLtOGRCgE7shsJ9zHdTovgwI.roa (hash: M+X7/sSR8qzYuzwNgQxNvGCDZocwzQo8c87DGDgS4LE=)
                          12: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=)
                          13: GLw6hjFuKPLEwb-cYw0ywtQhxFc.roa (hash: 4ZZZAQTA0qpaurDvjCK7XDdFgkMkY2Q+q/YSrPX61hc=)
                          14: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          15: KfOnbA-lMSA7WMZ4PX91iW3QKNs.roa (hash: lEyTZhmixSANZjAmZ7tgduu3oBYnI+CfEDyYUvTvW30=)
                          16: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          17: X2OweEqudUPJgcKmNL8qX1O90qU.roa (hash: PWWj0vuGuMCN25sTV+g1O3DJsHHFEzOF7bOJ0zMgIUY=)
                          18: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          19: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          20: YuzK84yE-VeaDfqQ6O3J9o15Kv0.roa (hash: EVKp3DpwGwk3zHFDB6I7C6vUQecOQerB/cDYFjxLfg8=)
                          21: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          22: alg23em52u81qKf3TWMm9rQtp00.crl (hash: /O463jdhlJ5RChn8w4Smd2bn0wFsz+9Gi0uIDUWnRNo=)
                          23: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          24: gICPhcTsoI0YK3iOPq-o_7f9fls.roa (hash: K7UF3wrsSvyCn4ea12qY9ZcQL+bzMHsZZGLPE3oFOeQ=)
                          25: ilDsB1oCh4sjhvENVw42i5WUlqk.roa (hash: vSxvsrihNX9SUSeA3egKFeCzHd0zX/pJIX5pzpkntKQ=)
                          26: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          27: pWyS-1rGhe2Aw9f1rNU9tefSOlA.roa (hash: XwvZFy1dcfS2BAsvDZswVk/7bvjG7bXbvgu2fwgL2Vc=)
                          28: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          29: s_boRMsxilQWE8157RLOKzIWIJw.roa (hash: VFxN5+gRgYJCBlCCrJNx1xL78Rg8kJ1C8LU6TrYm+VI=)
                          30: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:8d:b2:d3:ca:43:8e:75:a4:6e:07:85:3b:ca:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jan 31 07:00:50 2025 GMT
            Not After : Feb  1 07:00:50 2025 GMT
        Subject: CN=a023f21e3f7030a779b8dc04b391ac988f9b67f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:ba:b2:5b:5e:69:ce:27:1e:2a:60:41:5b:
                    be:10:5a:a1:2a:9d:af:e0:19:fd:97:be:ad:28:6e:
                    73:9c:1e:48:f6:70:c7:c1:e0:a1:38:03:fe:f7:d3:
                    10:b4:26:fb:fe:25:4e:67:43:d5:8b:aa:42:49:66:
                    9f:9f:02:75:77:51:b0:6a:ea:94:7a:be:1a:7f:ee:
                    85:a4:38:3e:6b:c3:63:b9:0f:dc:d5:fe:97:6e:b7:
                    53:7e:bd:37:49:14:e4:1b:16:fc:5e:e5:22:7b:86:
                    02:e7:41:19:8f:0f:8d:7d:e1:91:9b:bd:7e:e6:45:
                    08:e5:97:e6:96:52:6f:28:06:7c:a1:38:aa:e3:71:
                    97:1b:55:2d:87:47:ac:1f:35:73:e9:ef:a0:aa:be:
                    7f:98:18:c7:3a:50:db:5c:64:c0:f1:1d:e3:ae:b3:
                    5c:7d:06:31:1f:c4:bf:2e:c4:40:63:38:b1:65:44:
                    ce:50:05:d3:32:74:79:8a:62:6e:06:64:54:6a:b9:
                    ba:ed:47:45:c8:be:22:54:63:0c:35:18:ab:4b:87:
                    a4:27:1a:cb:76:c1:26:46:5b:ff:81:8b:63:27:76:
                    fc:ec:a5:6a:ab:16:94:3f:f2:77:19:7f:96:fc:42:
                    c4:48:99:59:f8:68:88:8b:6a:b2:fc:1a:2d:db:fe:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:23:F2:1E:3F:70:30:A7:79:B8:DC:04:B3:91:AC:98:8F:9B:67:F6
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         00:3a:36:f7:b5:ce:06:e1:08:df:79:83:7d:98:99:7a:24:b2:
         09:f9:bd:04:0e:c6:b7:c0:f8:61:66:0d:d3:3b:05:c5:3c:ad:
         36:d6:9d:00:a2:a9:ef:4a:df:d0:ee:73:6a:d7:e8:47:d9:92:
         14:79:64:43:ef:c7:b3:6f:17:47:7e:8f:87:b3:77:7e:bc:3f:
         d7:80:53:76:31:d6:46:68:4a:6c:07:5f:df:5c:dd:00:aa:94:
         0e:8f:e9:cf:a3:09:05:2b:bb:4b:50:a9:45:6a:90:ef:56:ac:
         3b:ae:3a:57:ec:39:4c:dd:3e:00:f6:45:a1:00:8d:f6:30:25:
         1f:20:37:98:b5:f7:27:36:96:16:56:29:17:66:6f:7b:10:df:
         2b:17:c3:17:5a:e3:ca:69:8b:df:4a:bf:cd:00:e6:ba:13:e1:
         98:ee:eb:21:4a:33:ed:5c:0f:b3:6a:06:28:b8:eb:d8:a7:79:
         d6:19:dd:50:91:03:a2:32:a6:c7:29:72:71:e1:cd:51:cc:5f:
         16:6c:f3:55:21:61:f2:c1:5b:6c:7a:03:16:5e:88:9c:03:db:
         ba:77:96:62:47:e5:a6:8b:7e:f9:bb:5c:e4:07:29:a7:90:eb:
         a6:80:13:50:ff:fd:cf:f5:08:d4:74:ee:05:03:c8:d0:e1:26:
         9c:e0:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:28 2025 by rpki-client on console-fra.rpki-client.org