
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          y8eLhR5w1O8fyJJw7wbE6azr6jGsWj0by1pP+mBCY5M=
Subject key identifier:   F9:AA:CD:51:B9:E6:AF:A1:E2:85:CC:4F:AF:21:72:2A:1F:B4:30:36
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       0194BAF2132F66C145385701CB3D52335C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 06:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:14 +0000
Files and hashes:         1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: t2TvpUE5dld88GnFsqdbe3J3+jRTsbK7jLkIIzGF2Cg=)
                          2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:14 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:13:2f:66:c1:45:38:57:01:cb:3d:52:33:5c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: Jan 31 06:00:14 2025 GMT
            Not After : Feb  1 06:00:14 2025 GMT
        Subject: CN=f9aacd51b9e6afa1e285cc4faf21722a1fb43036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:76:48:ff:2d:12:6e:6c:a0:42:5a:36:41:
                    84:80:be:4e:62:ee:88:c1:ab:a2:fd:aa:b2:c3:9c:
                    5a:36:ed:ae:3c:1c:0e:09:c9:9e:c7:cd:28:5d:af:
                    d6:5b:a2:1b:b8:9f:a2:8d:f1:af:b2:8a:0a:c3:d8:
                    a8:88:cb:fc:e9:83:49:c1:a0:66:de:cb:25:37:06:
                    82:6e:fd:97:67:37:a1:8a:3c:17:a9:ed:a3:cf:41:
                    fe:19:c4:09:91:f0:e8:cd:1e:55:7c:c8:19:81:8a:
                    2b:14:af:6f:3a:cf:6b:43:4a:2c:a7:b3:53:04:86:
                    c1:6c:05:64:73:3a:78:1a:01:cb:5b:46:cd:13:57:
                    ad:0d:03:54:70:2a:5e:28:fc:1e:e3:08:25:f2:f3:
                    f5:8f:3a:88:d4:8f:b8:c4:94:6c:c8:62:29:71:32:
                    0f:3a:79:14:2c:a1:78:ea:47:a7:69:6d:c7:dc:03:
                    ea:b7:a3:68:44:2a:90:e9:6c:2d:3c:34:20:33:d2:
                    a0:07:64:82:2b:4d:ef:a6:d0:eb:3f:6e:5d:20:a1:
                    de:81:82:a1:e4:4f:f5:2d:63:ac:50:86:7a:a1:47:
                    40:a6:6a:35:11:8f:6c:10:80:e3:2f:0c:a2:38:52:
                    10:fb:cc:a1:be:9b:98:98:28:1b:06:9a:8a:1b:15:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AA:CD:51:B9:E6:AF:A1:E2:85:CC:4F:AF:21:72:2A:1F:B4:30:36
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         19:b6:b2:d8:e2:12:38:e9:00:4f:a0:e0:7d:02:f9:3a:1c:bd:
         2c:9a:4b:1a:c6:a6:f2:1d:56:7b:0f:cb:c4:72:c7:61:b3:e6:
         c9:59:f7:b9:ee:d1:e9:52:9e:c5:59:1a:5e:fc:6b:35:fe:06:
         2d:fe:f8:8a:b9:29:f8:a4:ea:a6:43:bf:55:ec:7f:51:d8:4b:
         42:e7:57:11:68:02:82:4c:e1:a4:86:68:3c:45:d7:24:2f:d8:
         75:44:82:63:40:a6:99:94:ae:68:58:b0:b2:b8:24:30:b3:84:
         6c:d5:2d:88:0d:fa:52:55:76:60:b8:ad:b7:40:66:3b:a2:6c:
         9d:6f:c8:99:38:5b:ff:ed:97:19:df:f4:66:2d:8b:d6:c2:27:
         12:37:ff:a6:74:c5:07:bd:ce:60:76:a4:7b:7d:44:0e:26:4a:
         84:ba:2c:53:bc:f4:e7:0d:1d:da:e3:d7:6f:e5:89:e4:87:e6:
         e7:83:9f:6d:ad:a7:c5:93:ae:f4:6b:80:70:cc:99:90:25:e5:
         32:e8:95:75:a2:eb:9c:1a:70:b3:a9:ac:b4:9e:cd:8a:84:49:
         d1:39:04:07:e0:06:5f:b7:e6:6b:d5:73:a3:bf:02:a0:e2:b0:
         f7:9d:f8:11:c3:97:d1:5e:3d:82:6f:5a:b2:30:9d:f3:7f:35:
         5c:40:d5:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68hMvZsFFOFcByz1SM1x8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi
MTc2OGQwHhcNMjUwMTMxMDYwMDE0WhcNMjUwMjAxMDYwMDE0WjAzMTEwLwYDVQQD
EyhmOWFhY2Q1MWI5ZTZhZmExZTI4NWNjNGZhZjIxNzIyYTFmYjQzMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AB2SP8tEm5soEJaNkGEgL5OYu6I
waui/aqyw5xaNu2uPBwOCcmex80oXa/WW6IbuJ+ijfGvsooKw9ioiMv86YNJwaBm
3sslNwaCbv2XZzehijwXqe2jz0H+GcQJkfDozR5VfMgZgYorFK9vOs9rQ0osp7NT
BIbBbAVkczp4GgHLW0bNE1etDQNUcCpeKPwe4wgl8vP1jzqI1I+4xJRsyGIpcTIP
OnkULKF46kenaW3H3APqt6NoRCqQ6WwtPDQgM9KgB2SCK03vptDrP25dIKHegYKh
5E/1LWOsUIZ6oUdApmo1EY9sEIDjLwyiOFIQ+8yhvpuYmCgbBpqKGxXh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmqzVG55q+h4oXMT68hcioftDA2MB8GA1UdIwQY
MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbay2OIS
OOkAT6DgfQL5Ohy9LJpLGsam8h1Wew/LxHLHYbPmyVn3ue7R6VKexVkaXvxrNf4G
Lf74irkp+KTqpkO/Vex/UdhLQudXEWgCgkzhpIZoPEXXJC/YdUSCY0CmmZSuaFiw
srgkMLOEbNUtiA36UlV2YLitt0BmO6JsnW/ImThb/+2XGd/0Zi2L1sInEjf/pnTF
B73OYHake31EDiZKhLosU7z05w0d2uPXb+WJ5Ifm54Ofba2nxZOu9GuAcMyZkCXl
MuiVdaLrnBpws6mstJ7NioRJ0TkEB+AGX7fma9Vzo78CoOKw9534EcOX0V49gm9a
sjCd8381XEDVlg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:29 2025 by rpki-client on console-fra.rpki-client.org