Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File:                     eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier:          D7h4SXwtQ2Yo9QIC6yEfkSJBeaa0tTAUBp2jscyhorw=
Subject key identifier:   C9:57:42:7D:31:3E:F3:96:38:97:A4:93:10:36:F5:8E:E3:8C:96:7A
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer:       /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial:       0194BB971B9B6314A53CC533197F63C22884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number:          13BB
Signing time:             Fri 31 Jan 2025 09:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:29 +0000
Files and hashes:         1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
                          2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: VXDz4Be3kygHNAGME9IJsOh/XcCimEegt7sMR7eNoBU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:1b:9b:63:14:a5:3c:c5:33:19:7f:63:c2:28:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
        Validity
            Not Before: Jan 31 09:00:29 2025 GMT
            Not After : Feb  1 09:00:29 2025 GMT
        Subject: CN=c957427d313ef3963897a4931036f58ee38c967a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:5e:82:b9:a9:b3:53:9d:01:03:ea:7e:33:
                    7d:2d:31:e0:31:5d:9f:1e:70:af:1d:d6:85:8b:37:
                    08:a7:dd:5c:12:a7:86:26:2e:20:c4:53:3d:99:a9:
                    e9:da:cb:76:97:53:46:ca:8e:57:7f:b0:18:34:ae:
                    88:95:6e:ef:15:0b:db:3f:9e:91:a0:c6:5a:89:db:
                    18:cc:92:6a:2d:1e:4b:77:ff:67:85:3d:0d:41:6a:
                    2b:3e:64:5d:06:ea:2f:3d:68:8a:f8:8c:d9:21:8a:
                    9b:db:72:26:a2:16:2a:36:5f:8a:15:ed:1e:eb:ce:
                    aa:23:8a:87:eb:3d:6d:ee:13:16:4b:70:b8:52:04:
                    00:af:bc:58:30:80:43:59:cc:42:00:bf:9c:cd:69:
                    e2:41:99:be:3a:0f:0e:53:18:cc:fd:c7:74:d4:8f:
                    ee:7d:ed:c2:13:6f:8f:23:66:c6:30:a9:ec:61:60:
                    a6:b9:b4:e6:2c:88:5d:12:3a:ee:a5:6c:5b:d9:5f:
                    9c:87:ab:6c:0c:6f:60:ba:cf:14:bc:61:99:ae:38:
                    00:b3:06:39:d9:45:96:85:7a:5f:62:de:4e:7b:b9:
                    48:7f:06:3f:f2:84:38:46:bb:79:13:a9:b6:2a:c5:
                    b0:b7:19:e3:2b:3e:30:aa:10:7a:d1:a2:e5:43:78:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:57:42:7D:31:3E:F3:96:38:97:A4:93:10:36:F5:8E:E3:8C:96:7A
            X509v3 Authority Key Identifier:
                keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:0c:f4:5a:91:1d:0c:89:f0:cf:b1:58:85:47:2d:2e:72:
         a4:b4:a6:9b:69:98:41:b5:c0:cd:ac:f5:ea:59:da:a9:da:1c:
         98:46:57:e9:d0:50:84:96:65:3a:fc:c0:11:38:ef:e8:54:e1:
         75:b6:53:57:60:25:70:9f:ee:a7:ab:9c:95:fc:05:f3:25:7f:
         3e:6f:b3:92:5c:51:92:5a:53:6a:7e:d2:81:28:60:0c:a3:13:
         ad:ba:45:24:28:44:ea:3a:0c:b0:93:dd:1e:6b:ff:d7:28:69:
         ee:70:3f:c4:1e:e6:23:c2:2f:7d:3a:87:c6:04:30:2d:a7:83:
         df:59:31:7c:90:9d:a2:75:44:b8:0d:d9:43:a8:23:54:1c:72:
         33:09:39:08:66:15:18:6b:e6:e2:57:fd:19:67:a1:45:10:d7:
         bb:87:a7:e1:fb:c5:e8:29:73:ee:17:7f:5d:d1:12:3b:e0:2d:
         0e:6a:9d:4e:37:94:ee:e9:3f:32:b5:00:bb:ad:a3:28:90:95:
         06:bd:c0:be:a2:07:ee:16:96:81:c4:89:b5:3f:66:d8:f1:b5:
         36:35:25:19:8d:34:f1:50:fe:30:98:db:6b:7e:cd:1c:fd:f4:
         44:3b:80:5d:4f:89:71:e3:a0:d9:ed:c4:9d:58:19:af:cf:54:
         5e:93:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:33 2025 by rpki-client on console-fra.rpki-client.org