
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          MjlV3Q55RIoWxsX+N5Q4Ygc+8yI15cc1KKLunUyv4cE=
Subject key identifier:   B1:68:7C:75:9E:60:7D:96:28:8B:38:59:84:A8:F3:E2:36:79:B0:2B
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       0194BA84C20293675589E42A83F9887F7644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          12F8
Signing time:             Fri 31 Jan 2025 04:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:50 +0000
Files and hashes:         1: 22dU6SeEOk5lA-ybXbkk_F-RHPI.roa (hash: opc+OMEhIAAy9MN7L41tT+6qaGIbCCKGC8RYJFu35pA=)
                          2: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: Jg85yG+aMJLUUqdTNi6EvuJY+oO1v1LAT9KPf196COA=)
                          3: 4qLU7z4WKhDamvGgGu3FYecZcUk.roa (hash: 9qwkIu/qIJXyrkkz5BO3j8+teV1VtOtIs2m6qOT2uI4=)
                          4: 7RaGRpteAPU-JEOa6gyOeUUaz1M.roa (hash: OqBBLrE7nX8ZR8+lsbAyGBi0x2gZcydxjiv43PsnDSA=)
                          5: KGq1jeU_iNN_A4rYU-FZmNDv154.roa (hash: e4Et49fOooQKeBuTAdfcYvIUgorxLRVr/TEbEeQ43WE=)
                          6: cqXVLr61qc30g_xpT1KtGW2mTVY.roa (hash: 9izHI/DLvzltS88JR0Knd6Woc3DqCZ/q0/0DeJFW8t0=)
                          7: sH7ECpW3UYDGAiYpkUWXOz7HCRI.roa (hash: YckHmfd2bRiOYkUUPO56qiqrIu2EWK3I8MNbpKxlcvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:c2:02:93:67:55:89:e4:2a:83:f9:88:7f:76:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Jan 31 04:00:50 2025 GMT
            Not After : Feb  1 04:00:50 2025 GMT
        Subject: CN=b1687c759e607d96288b385984a8f3e23679b02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:ba:24:c7:13:d0:10:5e:3b:cd:5b:b9:e6:
                    a7:29:da:24:49:69:fd:51:9d:52:aa:3a:9c:30:46:
                    45:99:13:61:e0:a9:95:86:43:6e:b2:80:ec:a3:e5:
                    c6:59:57:79:66:d7:98:5e:a7:43:9e:d0:18:28:52:
                    80:90:de:b6:28:22:ac:98:13:45:70:5c:25:e7:db:
                    cf:ca:28:5f:94:09:17:ff:9d:41:33:90:0a:4d:26:
                    6f:cd:2e:b4:da:0f:63:56:39:29:9e:92:a5:0b:0e:
                    2c:4d:65:b9:fe:d9:6b:7e:66:0b:6b:78:0a:9c:ec:
                    ce:2c:f0:63:67:9a:44:9f:f2:32:a7:63:b2:27:43:
                    1e:6a:f0:7c:3b:b0:29:19:3e:3d:6b:1b:e9:f9:66:
                    16:0c:60:c5:9b:9f:7d:df:c6:1c:18:db:75:81:87:
                    ad:7b:09:b3:d2:83:1c:55:a6:b7:eb:0c:9f:24:f7:
                    fc:cb:b6:49:1a:58:05:a8:38:4b:ad:49:95:87:6f:
                    e5:4d:a7:a7:79:9f:62:bb:66:a7:94:20:22:5a:57:
                    6c:5d:c3:68:01:13:73:0c:e0:f0:a3:74:21:d4:78:
                    61:81:b0:c3:fe:ca:3c:95:b3:4e:6a:99:3d:1a:bb:
                    25:de:38:7e:20:cb:e2:d0:23:70:98:73:37:d2:63:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:68:7C:75:9E:60:7D:96:28:8B:38:59:84:A8:F3:E2:36:79:B0:2B
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         b3:46:3f:9c:98:cc:91:f2:2f:8a:d0:3d:20:c9:85:e4:48:4b:
         d7:c0:cf:10:04:56:58:8e:46:24:2d:4d:e8:2e:65:fc:36:e5:
         8b:d0:66:18:38:a8:f2:a9:57:64:20:5d:16:97:d5:27:ec:2d:
         71:83:62:ef:c8:e6:b1:58:61:33:f7:c1:1a:8c:c8:82:48:d5:
         39:df:a2:00:b9:80:e3:32:1b:47:c7:83:3e:6b:02:f0:1e:e9:
         3e:af:84:dc:dd:b8:37:51:9d:5c:17:89:4b:44:61:0c:1c:a1:
         2f:0b:e2:aa:83:45:70:0f:3e:f4:53:aa:2b:fe:47:78:b6:6e:
         d3:9e:fb:61:93:ae:1e:87:01:4e:60:4e:b2:46:7d:86:34:1e:
         d8:b9:c0:b1:ac:f9:6d:36:39:f6:df:b0:32:27:25:90:eb:24:
         5f:9f:b5:7a:24:65:14:e8:3d:4f:de:7d:f0:7a:49:eb:b0:66:
         ec:f0:08:1e:2f:2d:f6:77:33:9b:5e:5e:2e:1d:60:7f:21:0d:
         07:5a:8e:96:c3:9c:c9:c9:c7:33:06:3c:fa:31:3c:a5:4f:99:
         e3:dd:da:41:1c:67:ba:d8:0e:86:4a:84:4d:fe:f6:dd:a6:83:
         e6:23:f1:59:86:37:36:19:14:56:2f:df:8d:4c:bb:1f:ac:4f:
         19:79:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:05 2025 by rpki-client on console-fra.rpki-client.org