
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File:                     xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier:          EtHG1VtSBL/eJ20d6bZn+cSjznULMweQd9LrTIRgRfw=
Subject key identifier:   C9:9C:8B:C3:90:54:DB:57:7D:E7:DB:14:F7:D7:C9:E3:DB:B6:29:29
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer:       /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial:       0194BABBA44D9422945108A97D95E4F9F1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 05:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:46 +0000
Files and hashes:         1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
                          2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: +XNPMIwu6DEg9SJM9OJqeAIvz7n9G5VnNuSzx2W8kQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:46 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:a4:4d:94:22:94:51:08:a9:7d:95:e4:f9:f1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
        Validity
            Not Before: Jan 31 05:00:46 2025 GMT
            Not After : Feb  1 05:00:46 2025 GMT
        Subject: CN=c99c8bc39054db577de7db14f7d7c9e3dbb62929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:c4:a9:a0:f3:41:89:1e:72:c2:37:20:51:
                    7e:e3:a2:5f:3b:1f:0a:77:48:97:33:10:4b:2b:f1:
                    b7:0c:58:6c:26:15:c3:62:61:6c:2c:3f:06:19:68:
                    02:b2:85:4d:06:79:0b:46:8c:92:af:71:d7:aa:52:
                    aa:e8:93:f0:fe:60:a6:34:00:9c:08:05:64:cc:7d:
                    70:2a:f5:53:28:09:cd:f5:9d:d2:89:2f:84:d0:01:
                    b7:c0:64:49:94:9d:39:f5:f4:0b:3c:25:71:9a:48:
                    c9:21:5d:16:7d:b0:5d:97:e1:5e:ad:61:31:a7:7a:
                    12:f0:94:20:5e:aa:ee:74:24:fd:fa:cc:bb:7d:a5:
                    6d:ef:9f:4b:f2:9b:b6:2e:5d:96:3e:e4:5c:c1:06:
                    cc:a7:11:ff:b5:eb:79:2e:46:d3:75:2b:be:73:d1:
                    8e:29:52:48:dc:b1:b4:86:4d:89:04:cd:56:f8:a7:
                    5b:12:28:77:4c:31:ba:d8:09:bd:34:ed:d8:23:8b:
                    88:5b:2e:ef:7b:93:6e:76:06:a9:10:eb:3e:ae:cb:
                    98:0e:43:5a:8e:3a:56:67:e4:46:39:71:14:e5:8b:
                    94:e8:e9:7e:44:95:b3:e5:c9:01:cc:6a:39:86:c4:
                    67:5b:fe:5c:a1:68:8d:c3:6c:0a:02:8d:b2:52:6a:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:8B:C3:90:54:DB:57:7D:E7:DB:14:F7:D7:C9:E3:DB:B6:29:29
            X509v3 Authority Key Identifier:
                keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         55:89:c1:da:06:79:43:12:3c:4c:ca:d3:c5:3c:1f:98:3c:83:
         17:8b:82:51:10:2c:14:dd:ad:52:39:42:ec:3d:0f:c9:07:be:
         07:d9:2d:5f:aa:48:a1:03:d9:8e:a4:18:b8:9d:8b:04:3f:1a:
         b5:3e:6e:48:1c:10:b9:d7:14:dd:4f:5b:c0:fd:52:15:62:ae:
         4f:e6:ea:ed:02:07:03:1f:3c:65:e6:0c:0c:29:e5:cf:44:99:
         e3:17:50:34:c5:0e:0b:50:e6:37:97:5c:42:77:d0:5d:c9:fc:
         d1:a6:cf:1d:62:d4:ef:92:0e:cd:e8:49:54:ce:ac:08:52:58:
         fc:6b:12:6a:53:cb:f7:2e:2e:9b:11:e9:92:0c:d8:64:4b:89:
         f7:32:a2:dc:c8:90:b9:be:ac:ee:57:b0:06:45:51:9e:25:04:
         ec:4c:9b:76:95:7d:dc:e3:12:0f:89:31:0c:9c:a9:83:cc:e0:
         ab:4a:94:44:64:ab:f3:9b:3b:7a:3c:35:2c:51:26:ec:07:b2:
         b5:78:0c:7a:d7:94:cb:a0:b7:0a:13:ba:3a:ff:dd:b9:d0:ac:
         50:23:7d:d0:4d:87:cc:00:23:b8:c4:04:e5:90:a0:30:9e:a1:
         79:8d:c6:f5:ee:3b:18:1b:de:9b:57:d8:24:a5:64:4d:84:7f:
         df:1e:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:57 2025 by rpki-client on console-fra.rpki-client.org