Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File:                     Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier:          f23btcYs0v/uCrG+0CTyV7KDwC4fz+oGXqqQrD3oQ0Y=
Subject key identifier:   B6:7E:2A:59:2C:7C:3E:FC:34:2B:6C:6D:C0:07:54:36:D2:F6:A9:4A
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer:       /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial:       0194BA84589C7808659DB938AA90B6B7BB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 04:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:23 +0000
Files and hashes:         1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: KbRpMdSTtx95sH63WdNlz32vQYI+7AmEOaM6Jzkc0BI=)
                          2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=)
                          3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=)
                          4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=)
                          5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:58:9c:78:08:65:9d:b9:38:aa:90:b6:b7:bb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
        Validity
            Not Before: Jan 31 04:00:23 2025 GMT
            Not After : Feb  1 04:00:23 2025 GMT
        Subject: CN=b67e2a592c7c3efc342b6c6dc0075436d2f6a94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:37:5c:91:42:9c:86:73:44:15:fc:67:71:
                    c2:cc:37:68:04:55:4d:eb:91:e0:e1:e8:e1:04:6a:
                    bd:0c:14:00:01:bb:ad:4a:1b:37:ac:cd:c9:29:20:
                    aa:0f:f9:32:d4:30:15:d8:74:e1:07:92:d7:10:43:
                    36:31:4b:e1:16:44:ef:59:96:b6:c0:38:53:db:29:
                    06:52:10:e0:3b:5c:ae:ac:c3:8b:08:29:7e:6d:31:
                    84:80:db:61:73:d3:d4:e0:54:d2:44:73:2a:8e:44:
                    9d:f7:a7:80:32:ae:e6:8f:d2:00:5c:53:2c:3e:84:
                    11:40:2d:cb:a4:35:09:16:15:2c:29:fd:0e:44:15:
                    05:f7:c8:ba:0f:cf:28:7a:29:92:ac:28:ff:fa:28:
                    a9:2b:75:53:d8:7e:19:24:13:e9:c7:ce:2e:12:52:
                    a3:db:bc:3e:19:7a:39:2f:90:93:ed:f4:82:a5:70:
                    c0:57:a3:b3:52:98:d1:09:e5:54:7e:cc:50:8b:ad:
                    ea:44:f8:46:59:16:b8:1a:02:4f:a4:80:bc:33:84:
                    8e:20:69:55:e7:5d:64:26:40:e9:4a:c7:89:f3:f6:
                    ff:51:a0:67:e4:a8:0f:be:8b:02:3d:f8:73:ba:d2:
                    88:03:b9:4e:c9:6d:ca:3b:83:35:05:1c:f5:a8:2a:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7E:2A:59:2C:7C:3E:FC:34:2B:6C:6D:C0:07:54:36:D2:F6:A9:4A
            X509v3 Authority Key Identifier:
                keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8e:c5:c2:d6:db:59:a4:f9:80:cc:15:5c:24:93:14:af:75:
         fd:03:0b:3d:cc:45:c6:65:7b:82:0e:30:1b:51:d8:d3:58:ec:
         ae:3b:8e:ce:ea:e1:ce:e1:e0:1d:f2:21:7d:97:a2:22:e6:f3:
         54:b2:b7:65:16:90:9b:3a:87:8d:58:de:b8:5a:36:68:0e:f5:
         6b:e3:97:2e:af:c4:48:2d:c7:ed:e7:63:73:d6:fc:b9:ac:74:
         83:9c:eb:50:ed:98:1a:64:d5:7c:7a:d0:4c:26:27:c3:eb:23:
         2c:e0:ec:5d:10:5c:ca:ec:e2:82:21:13:3a:7c:23:44:2d:58:
         d5:37:22:d4:92:ed:22:9c:c3:ad:df:64:40:59:06:9c:33:94:
         8b:ac:07:e4:13:d2:45:e8:c5:96:95:a3:b6:69:c4:1d:02:6e:
         24:f3:b6:23:5f:68:3d:a7:07:76:70:94:be:3c:ac:f6:fc:5e:
         a0:7c:7f:4b:9d:93:27:c5:9e:ba:42:3b:9e:51:a4:75:2a:93:
         10:3b:e6:47:86:32:c6:34:df:64:17:78:d0:05:9e:e2:04:aa:
         54:cd:3a:0c:1f:9c:ab:c3:a4:53:90:12:ee:c4:62:a8:35:41:
         5c:d2:a2:36:92:73:72:31:44:22:65:b3:80:16:c4:a2:24:4b:
         0b:15:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:00 2025 by rpki-client on console-fra.rpki-client.org