Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          pk6gmlz+rrxMbcWd1f3dwFAqxEw3vpYp00e8ShvbuQw=
Subject key identifier:   8B:72:DB:D2:5D:95:6C:DB:7E:C9:8D:D6:4D:69:4C:AF:B6:45:69:77
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       0194BB6040B92AD7F6F158F110551CCAF6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          0F29
Signing time:             Fri 31 Jan 2025 08:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:34 +0000
Files and hashes:         1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
                          2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
                          3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
                          4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: EFVr6WBm7iSqbO2/4wvM/Aq6IsdLpvfumbkkoOJ56Qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:40:b9:2a:d7:f6:f1:58:f1:10:55:1c:ca:f6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: Jan 31 08:00:34 2025 GMT
            Not After : Feb  1 08:00:34 2025 GMT
        Subject: CN=8b72dbd25d956cdb7ec98dd64d694cafb6456977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:54:a9:bc:31:be:09:0a:7a:72:5b:58:ee:
                    37:6e:d7:3e:ad:ba:9d:d8:a7:82:f5:13:76:dd:1f:
                    a2:52:82:57:ce:95:36:71:a8:f4:7c:97:39:b7:a1:
                    46:94:e9:44:10:44:95:ac:1c:b4:a6:bd:01:a8:8e:
                    ef:03:63:bf:4b:c9:49:2e:6e:9c:ae:82:7f:48:08:
                    02:4d:99:9d:19:1b:a9:dd:02:8c:5e:79:79:a7:81:
                    ed:37:e5:5c:aa:85:07:43:a2:2d:95:aa:80:bf:c2:
                    3e:ca:c8:cf:3c:22:da:9a:11:36:fc:3e:9b:12:ea:
                    b4:bb:6c:7a:80:d7:ad:2b:fb:cb:b4:a7:c7:bd:13:
                    a4:9e:59:72:c5:7a:7a:43:5b:f2:50:54:9a:69:52:
                    c3:e9:9b:55:64:dd:6b:73:b2:65:89:30:4b:f4:80:
                    45:b1:03:c7:52:df:b2:15:75:1b:3c:08:7d:e8:99:
                    d4:e5:ba:9b:21:e1:2e:e3:6a:2c:63:33:a6:4a:3f:
                    1c:1e:da:17:a1:75:63:1a:a5:64:2e:ef:ae:94:c5:
                    0e:7c:f2:a7:4a:d8:d6:4b:ca:dc:3d:26:2c:a2:1a:
                    07:bf:8e:d6:1c:ea:9d:9c:ed:ef:98:77:98:3f:54:
                    e5:b3:d5:5b:b1:d9:ea:db:3f:d1:63:1b:4d:e0:6b:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:72:DB:D2:5D:95:6C:DB:7E:C9:8D:D6:4D:69:4C:AF:B6:45:69:77
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:86:78:fb:2f:1b:c4:8f:22:f3:da:4c:b7:88:e3:11:e0:73:
         94:d1:81:e2:ed:3e:a4:c1:0a:45:aa:cd:48:d4:64:cf:62:c6:
         7c:89:33:a5:f6:c9:64:6e:94:9d:7b:ea:9c:7e:bf:f1:5a:9c:
         09:94:a6:30:f4:9b:df:74:4b:99:f5:97:02:41:4a:e9:65:31:
         c6:fb:6a:6a:bc:0f:cf:ee:55:1a:21:c2:d7:41:8e:2d:cd:2e:
         58:8a:fc:5e:37:c5:b9:ad:60:7d:04:24:4e:b2:1b:44:8d:0b:
         90:f7:5b:02:d6:f3:a4:cb:0e:cb:10:55:57:97:43:08:47:ee:
         da:70:59:e2:75:1e:3e:ed:d5:99:04:fa:fa:86:c8:6c:5c:91:
         6b:23:5b:ce:3e:ba:42:fa:b2:68:d9:7f:ea:b8:74:f0:f3:e5:
         f6:76:b3:5d:b4:e4:a3:c3:dd:49:5d:75:9c:d2:1f:63:72:29:
         70:6b:15:9a:dd:72:23:da:c5:cf:a5:2d:30:99:e1:88:8a:37:
         b6:05:6e:50:eb:38:56:14:79:e3:2f:2a:ba:51:6e:87:ae:3d:
         66:4d:92:74:83:19:54:21:55:b9:7c:ba:41:a3:5b:7c:26:21:
         27:2d:1e:94:f4:81:39:e6:e4:71:b6:60:43:e9:a3:b9:eb:0a:
         06:ec:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:34 2025 by rpki-client on console-fra.rpki-client.org