Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File:                     Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier:          jhrujDeHu+6rE7gFWKDA/wXkqXwZvBVRsLf0nG1Pok4=
Subject key identifier:   87:7A:5E:23:E1:72:22:64:3C:04:10:B9:05:77:83:E4:CB:15:1A:3A
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       0194BA8432ED537C248F07543301341C3F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 04:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:13 +0000
Files and hashes:         1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
                          2: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
                          3: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
                          4: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: 9wECjN2z1c1pgxRdHeRTQQQnNmQTgvr1iqbT1BAF5WY=)
                          5: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
                          6: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (hash: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:32:ed:53:7c:24:8f:07:54:33:01:34:1c:3f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: Jan 31 04:00:13 2025 GMT
            Not After : Feb  1 04:00:13 2025 GMT
        Subject: CN=877a5e23e17222643c0410b9057783e4cb151a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:7d:ff:a0:85:f8:9c:12:90:c7:f3:ae:1c:
                    88:a8:7c:94:71:21:91:ac:32:76:a8:b6:89:6b:53:
                    79:81:ac:a1:39:7b:a6:fb:07:22:6f:26:33:68:a4:
                    a3:59:e2:11:97:f4:1d:d9:5b:54:7e:2d:26:1c:8b:
                    17:19:39:cb:60:21:81:c3:8b:83:a5:03:7c:89:6d:
                    44:2a:c0:ff:52:0f:1a:88:0c:9f:15:0b:ac:5a:24:
                    79:ce:3f:ee:e1:f6:11:d6:6e:2c:14:05:2a:a1:57:
                    94:3a:2a:2b:69:9d:5c:a8:0c:82:4f:26:a1:02:22:
                    5a:05:34:71:10:0a:dc:46:72:2b:96:6b:e7:cc:9a:
                    a9:82:4d:95:1f:ad:00:8a:41:cc:6d:86:09:8e:9a:
                    bb:4c:23:10:31:a6:5d:ba:fd:28:56:55:50:33:2a:
                    bd:fc:1d:3b:c2:6e:dc:c8:c4:1a:e3:9b:86:83:a2:
                    1b:a7:4f:6d:55:81:52:8a:2e:40:5a:6c:d8:91:57:
                    6d:0e:a3:ad:33:89:f3:30:5f:7a:78:da:89:67:5b:
                    31:37:54:86:ff:d5:0e:a8:75:45:c7:54:03:b4:3d:
                    78:94:93:f1:c0:a8:f3:44:d8:8e:9b:87:d1:f4:d0:
                    d3:28:e7:89:ee:a1:54:73:f9:ac:63:3b:87:c4:3b:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:5E:23:E1:72:22:64:3C:04:10:B9:05:77:83:E4:CB:15:1A:3A
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:af:c0:8a:84:5a:a1:d0:b4:0a:ae:16:27:2e:22:ad:63:
         72:fe:af:6a:92:cd:c3:a1:c7:c4:99:7d:e1:ae:34:75:6c:c6:
         6c:10:75:0e:fe:e6:04:31:2a:94:28:e2:a2:1c:cb:5f:78:a1:
         4e:52:96:47:0d:81:e4:55:a3:3b:66:bc:02:fc:cd:ae:dc:70:
         df:07:89:f1:fa:81:e6:e8:e3:7e:b1:8c:2c:06:dc:24:31:ea:
         ce:e8:61:7c:a2:fd:b7:1d:a3:a0:ef:5b:68:6b:59:17:98:60:
         80:3b:77:92:c9:2b:57:c4:c8:59:5b:34:cf:72:62:86:d1:75:
         cb:18:6e:ca:7a:e1:04:49:1a:1c:e0:6e:88:d7:db:0e:2c:38:
         b4:03:c8:26:7d:60:ef:aa:e1:32:7d:65:8b:d3:12:84:df:88:
         94:18:e4:11:2c:50:7a:35:f6:ea:d4:a9:34:e6:53:37:dd:ef:
         fc:45:40:a8:56:02:1b:c5:66:1b:57:b4:d5:98:c8:ba:77:e4:
         9a:b9:7e:e8:04:b0:c7:2e:06:df:77:a5:c7:fe:04:91:ca:a9:
         55:bb:7a:c4:53:1a:2c:8a:fe:20:60:5c:8c:bd:19:89:23:15:
         f3:94:de:75:ce:ec:bc:e7:ac:3d:75:95:b1:95:b9:50:27:80:
         47:e7:4c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hDLtU3wkjwdUMwE0HD90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2
ZmI1OTMwHhcNMjUwMTMxMDQwMDEzWhcNMjUwMjAxMDQwMDEzWjAzMTEwLwYDVQQD
Eyg4NzdhNWUyM2UxNzIyMjY0M2MwNDEwYjkwNTc3ODNlNGNiMTUxYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4R9/6CF+JwSkMfzrhyIqHyUcSGR
rDJ2qLaJa1N5gayhOXum+wcibyYzaKSjWeIRl/Qd2VtUfi0mHIsXGTnLYCGBw4uD
pQN8iW1EKsD/Ug8aiAyfFQusWiR5zj/u4fYR1m4sFAUqoVeUOioraZ1cqAyCTyah
AiJaBTRxEArcRnIrlmvnzJqpgk2VH60AikHMbYYJjpq7TCMQMaZduv0oVlVQMyq9
/B07wm7cyMQa45uGg6Ibp09tVYFSii5AWmzYkVdtDqOtM4nzMF96eNqJZ1sxN1SG
/9UOqHVFx1QDtD14lJPxwKjzRNiOm4fR9NDTKOeJ7qFUc/msYzuHxDu1wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId6XiPhciJkPAQQuQV3g+TLFRo6MB8GA1UdIwQY
MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt
MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk
LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjK6vwIqE
WqHQtAquFicuIq1jcv6vapLNw6HHxJl94a40dWzGbBB1Dv7mBDEqlCjiohzLX3ih
TlKWRw2B5FWjO2a8AvzNrtxw3weJ8fqB5ujjfrGMLAbcJDHqzuhhfKL9tx2joO9b
aGtZF5hggDt3kskrV8TIWVs0z3JihtF1yxhuynrhBEkaHOBuiNfbDiw4tAPIJn1g
76rhMn1li9MShN+IlBjkESxQejX26tSpNOZTN93v/EVAqFYCG8VmG1e01ZjIunfk
mrl+6ASwxy4G33elx/4EkcqpVbt6xFMaLIr+IGBcjL0ZiSMV85Tedc7svOesPXWV
sZW5UCeAR+dMbQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:03 2025 by rpki-client on console-fra.rpki-client.org