Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File:                     cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier:          yHjY2qwuMGTMhiuNSircjf8YPSq0k9ftL/tPVDWySIo=
Subject key identifier:   CF:A4:DD:5E:16:6F:85:C6:4C:08:18:95:3A:83:8E:D0:0A:DC:12:DC
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer:       /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial:       0194BB5FF4AF00280C46C19A3CF3677AA246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number:          0271
Signing time:             Fri 31 Jan 2025 08:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:15 +0000
Files and hashes:         1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
                          2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: 14xWov+0fg/9oLgrSHBuIMmVkrHjb1LKVDnhL3Gydoc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:f4:af:00:28:0c:46:c1:9a:3c:f3:67:7a:a2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
        Validity
            Not Before: Jan 31 08:00:15 2025 GMT
            Not After : Feb  1 08:00:15 2025 GMT
        Subject: CN=cfa4dd5e166f85c64c0818953a838ed00adc12dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:22:4e:d9:77:fb:43:70:50:37:9c:92:87:
                    19:e1:57:6b:86:34:6e:67:7a:ae:f0:c8:ec:97:58:
                    d2:51:57:03:e1:d8:b5:28:2b:60:cb:41:c4:6c:bf:
                    c9:77:12:a4:2d:a7:cc:b8:2f:dd:9d:a7:66:d5:a1:
                    e7:59:6d:11:d2:ee:7b:41:b8:a0:51:70:a6:04:65:
                    56:8e:1c:db:88:2c:35:76:35:b1:d6:26:a0:73:5f:
                    a4:f1:b1:0d:7c:dd:f3:0c:f7:5f:d8:fb:c6:e3:2e:
                    ef:3f:c6:7c:03:51:de:aa:c8:d4:56:2f:2a:cd:6a:
                    a6:6f:ea:0f:a7:42:c9:10:b4:e1:f8:d4:6e:3c:ef:
                    59:17:b0:c1:51:13:8c:eb:5a:9c:dc:ea:5b:b6:aa:
                    ed:77:35:15:e1:75:70:73:bb:e1:0d:f6:8d:0f:14:
                    3e:b6:09:bd:8a:79:ed:92:fc:4b:d8:61:d6:eb:7b:
                    e2:90:48:d2:cc:c0:71:9d:0a:86:22:09:3b:55:0a:
                    75:ab:2c:f3:12:80:c5:0a:5d:96:d8:c2:34:8e:b8:
                    71:b3:55:0b:c1:6f:43:f5:be:a4:4b:6a:3a:91:86:
                    5b:b9:2f:7d:61:2f:d1:49:a2:b9:80:0f:81:bf:fe:
                    e5:c2:87:7d:31:6e:1f:8d:3c:9a:60:90:7d:e9:23:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A4:DD:5E:16:6F:85:C6:4C:08:18:95:3A:83:8E:D0:0A:DC:12:DC
            X509v3 Authority Key Identifier:
                keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:13:6f:1a:da:07:d0:85:a6:67:ab:cc:5b:8a:1b:7e:f3:35:
         a3:e8:13:72:33:62:b9:6f:65:0d:cc:11:56:4c:3a:30:5d:c9:
         db:23:54:46:16:8d:73:15:ba:8f:04:28:13:aa:97:d7:d2:81:
         69:d8:37:1d:02:98:33:74:75:17:7d:f1:7e:c9:d5:1d:fc:82:
         a7:3d:8a:2d:9b:15:96:5d:74:64:e5:40:21:bc:c9:6a:e8:31:
         2d:77:b5:f2:d0:9d:e5:1d:ea:20:8d:8e:a8:bb:5f:b0:13:ec:
         19:1a:90:ed:35:c9:cb:50:21:fa:81:dc:1c:cf:b1:4d:b7:2f:
         4a:7a:c2:0e:ee:e7:3e:b2:a0:55:73:40:4b:22:5f:04:85:d3:
         a4:03:32:c6:07:50:74:02:30:10:fb:3d:23:d4:3f:bd:c9:95:
         81:5b:b3:88:59:37:3f:49:ec:ab:ad:18:28:67:30:db:89:71:
         5a:05:28:52:bf:41:f4:3d:92:a3:7b:05:35:45:30:de:37:e7:
         4a:64:7b:7a:64:72:4e:1e:b5:f1:74:2a:e3:55:38:2e:05:85:
         de:9c:00:87:17:63:18:ac:1c:cd:88:63:a8:39:4c:f1:a5:f3:
         4b:ac:5c:03:da:4e:50:7b:1e:06:43:1b:2c:3e:6f:21:9f:d1:
         ac:66:76:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/SvACgMRsGaPPNneqJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZjVlOWVhODgzMDVmN2QzMTZhMTJhMWQ0OWRiMGU5ZmI4
OTZjZTEwHhcNMjUwMTMxMDgwMDE1WhcNMjUwMjAxMDgwMDE1WjAzMTEwLwYDVQQD
EyhjZmE0ZGQ1ZTE2NmY4NWM2NGMwODE4OTUzYTgzOGVkMDBhZGMxMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC8iTtl3+0NwUDeckocZ4VdrhjRu
Z3qu8Mjsl1jSUVcD4di1KCtgy0HEbL/JdxKkLafMuC/dnadm1aHnWW0R0u57Qbig
UXCmBGVWjhzbiCw1djWx1iagc1+k8bENfN3zDPdf2PvG4y7vP8Z8A1HeqsjUVi8q
zWqmb+oPp0LJELTh+NRuPO9ZF7DBUROM61qc3OpbtqrtdzUV4XVwc7vhDfaNDxQ+
tgm9inntkvxL2GHW63vikEjSzMBxnQqGIgk7VQp1qyzzEoDFCl2W2MI0jrhxs1UL
wW9D9b6kS2o6kYZbuS99YS/RSaK5gA+Bv/7lwod9MW4fjTyaYJB96SPqtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+k3V4Wb4XGTAgYlTqDjtAK3BLcMB8GA1UdIwQY
MBaAFHH16eqIMF99MWoSodSdsOn7iWzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ZYcDZvZ3dYMzB4YWhLaDFKMnc2ZnVKYk9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83NDkzNDYtYjA4Zi00OTMxLThkNGEt
MDUzOGEzYTE0ZGZkLzEvY2ZYcDZvZ3dYMzB4YWhLaDFKMnc2ZnVKYk9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83NDkzNDYtYjA4Zi00OTMxLThkNGEtMDUzOGEzYTE0ZGZk
LzEvY2ZYcDZvZ3dYMzB4YWhLaDFKMnc2ZnVKYk9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxNvGtoH
0IWmZ6vMW4obfvM1o+gTcjNiuW9lDcwRVkw6MF3J2yNURhaNcxW6jwQoE6qX19KB
adg3HQKYM3R1F33xfsnVHfyCpz2KLZsVll10ZOVAIbzJaugxLXe18tCd5R3qII2O
qLtfsBPsGRqQ7TXJy1Ah+oHcHM+xTbcvSnrCDu7nPrKgVXNASyJfBIXTpAMyxgdQ
dAIwEPs9I9Q/vcmVgVuziFk3P0nsq60YKGcw24lxWgUoUr9B9D2So3sFNUUw3jfn
SmR7emRyTh618XQq41U4LgWF3pwAhxdjGKwczYhjqDlM8aXzS6xcA9pOUHseBkMb
LD5vIZ/RrGZ2QQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:03 2025 by rpki-client on console-fra.rpki-client.org