
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File:                     bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier:          ss5FTxkasTPjzES5SKtj3YwlVZe3GwV4JN4fAAy/ql4=
Subject key identifier:   70:34:05:96:06:18:CE:B3:C9:17:CE:3C:B2:F0:6D:A7:31:91:73:69
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer:       /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial:       0194BB96C9B20D2A97CD0F1013A2DD744D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number:          076E
Signing time:             Fri 31 Jan 2025 09:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:08 +0000
Files and hashes:         1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: j2QPkqg4EJJmolJ+0aFInHRFVPtv6hebSEczl8jMiyc=)
                          2: xfilALq9xVm7LJX_uaRRDqm1ZX0.roa (hash: o3xsXXS0G1bR6xk5CmXK470ksv+YeZHYJ06DDMgu6J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:08 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:c9:b2:0d:2a:97:cd:0f:10:13:a2:dd:74:4d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
        Validity
            Not Before: Jan 31 09:00:08 2025 GMT
            Not After : Feb  1 09:00:08 2025 GMT
        Subject: CN=703405960618ceb3c917ce3cb2f06da731917369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:77:31:b7:f4:58:2e:78:5a:92:65:05:e8:
                    44:e0:b2:53:53:b5:a8:45:a2:e1:60:de:1f:a6:17:
                    c6:6e:5b:81:44:b9:f8:f3:a0:18:df:d4:dd:5b:ba:
                    18:7f:1a:30:d5:2b:d2:04:6f:f2:c8:f1:45:40:fb:
                    ae:89:a5:4d:9f:6e:78:4b:72:70:93:4c:d3:aa:51:
                    ce:d1:c5:98:04:c2:76:40:fe:4c:5a:3e:2e:6a:55:
                    92:85:94:a8:bc:65:7b:35:e8:16:37:7d:9c:ba:fc:
                    5f:b4:d6:4e:77:fc:24:67:8f:b0:38:3e:c1:34:43:
                    70:47:a1:e5:ee:79:4f:cc:95:ca:d2:8a:34:d0:8c:
                    66:c0:08:04:19:82:3b:3e:c9:08:c2:b2:4a:9b:da:
                    c2:84:e0:5a:4b:c1:84:44:8f:58:1e:e7:03:d6:de:
                    30:82:65:0f:b8:d8:aa:1b:fd:30:d5:1a:9b:e5:21:
                    04:ca:cf:1c:5e:c0:bf:7f:20:93:e1:68:8d:62:e2:
                    21:ab:7c:51:97:f9:58:ac:2d:2b:97:83:e3:cf:c5:
                    93:91:70:af:05:11:37:0b:df:fa:3d:ea:5f:94:cf:
                    01:4e:80:f1:9c:cd:c0:20:ef:b4:4d:a6:16:c2:b4:
                    25:a2:74:44:70:b5:b2:9f:b0:5c:27:22:49:86:30:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:05:96:06:18:CE:B3:C9:17:CE:3C:B2:F0:6D:A7:31:91:73:69
            X509v3 Authority Key Identifier:
                keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         31:ea:55:a4:b7:b2:89:29:b8:49:03:a8:09:bf:37:bb:dd:1d:
         0f:78:9f:c0:01:13:8f:14:7f:fd:1e:0c:f3:89:c6:cb:ed:b3:
         1f:69:a4:92:b8:df:0f:4c:94:31:24:6d:0a:cf:a6:f2:cc:ec:
         86:7f:5c:7d:d3:79:26:af:bf:00:46:ba:ad:7c:84:0f:55:38:
         4e:e3:c7:3f:b9:64:dc:d7:6a:b8:30:b1:a7:ed:64:29:68:ce:
         a3:d2:6b:ff:6c:ab:36:2a:02:63:cc:82:31:d8:ed:df:8c:5e:
         74:e1:3a:22:32:3f:c6:a7:ce:9f:80:fc:d0:d1:e2:be:c2:12:
         aa:f8:db:8b:9e:63:34:ed:4c:6e:da:e7:31:e0:8a:b8:f5:c1:
         d0:66:0f:71:17:18:d5:72:24:47:01:ab:e7:01:ac:0f:11:43:
         61:fd:b0:c3:e3:9f:19:55:ed:e9:75:54:c3:a6:07:f6:10:33:
         e4:ab:b8:23:42:0b:64:c7:47:87:6a:94:91:3f:49:c0:ed:41:
         ba:c1:17:cc:4d:29:98:b7:ac:8c:3f:86:71:0c:75:b0:57:d8:
         ce:d6:9c:70:9b:c4:fe:d6:72:8b:40:dc:dc:fc:83:bc:03:01:
         ea:18:68:66:d8:8d:ff:f3:a4:c3:e2:d3:e7:02:bd:01:0d:1a:
         34:4a:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:18 2025 by rpki-client on console-fra.rpki-client.org