
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File:                     rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier:          AB0DQ1fYRTNE3dVe4gvjvOzvENqvxi+TCGOMRFTjH5E=
Subject key identifier:   02:60:CC:86:F5:27:03:5B:5F:1C:AE:A2:57:9E:D2:8C:11:30:ED:77
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer:       /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial:       0194BABBC7EEBDA6148C32825FBF20F8A56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number:          07C1
Signing time:             Fri 31 Jan 2025 05:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:56 +0000
Files and hashes:         1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: yl2sJq8eNRVMsqF1WB04r9JYNt0ivxhgkin+DruHA+Y=)
                          2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:56 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:c7:ee:bd:a6:14:8c:32:82:5f:bf:20:f8:a5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
        Validity
            Not Before: Jan 31 05:00:56 2025 GMT
            Not After : Feb  1 05:00:56 2025 GMT
        Subject: CN=0260cc86f527035b5f1caea2579ed28c1130ed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:d9:10:ca:70:77:49:e0:de:b6:63:3d:46:
                    e2:c3:31:7d:7d:7b:0b:75:90:8d:52:a8:1c:7f:e8:
                    32:30:61:ac:fc:df:96:4e:87:d1:8d:89:e9:d7:99:
                    27:ad:69:77:17:c7:27:70:2d:ce:32:51:76:38:7a:
                    dd:d3:14:07:11:df:7a:c0:c3:5c:56:b7:d7:41:79:
                    a8:28:93:42:da:f0:4e:d9:b1:17:75:63:69:3a:a9:
                    7f:36:c6:b6:71:44:27:52:2e:9c:61:69:8d:d5:df:
                    25:03:01:ef:a5:a4:f3:8c:9c:2d:bb:5c:69:ad:4d:
                    bd:e0:b5:86:f2:03:ca:91:62:49:f3:12:26:47:65:
                    c1:08:e5:bf:a3:ba:ed:4a:ee:29:79:39:fb:ef:58:
                    89:06:d2:25:d7:74:9f:5c:4c:f0:a2:10:25:17:e8:
                    31:06:be:8d:73:cb:98:4d:33:f8:85:2a:c8:cb:c7:
                    ff:24:26:5b:48:cf:60:7c:1c:b9:61:0e:e8:96:43:
                    17:fa:44:e3:91:d2:af:d4:6c:fe:fd:7c:b2:1b:34:
                    03:ee:90:92:40:de:b6:3c:41:9b:dd:6e:ce:fe:ba:
                    89:1a:c0:25:69:27:bc:a6:98:e6:53:01:02:83:4d:
                    77:84:86:e2:04:d7:c9:41:b7:0a:2d:9f:70:54:5e:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:CC:86:F5:27:03:5B:5F:1C:AE:A2:57:9E:D2:8C:11:30:ED:77
            X509v3 Authority Key Identifier:
                keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         4f:61:5d:f5:e1:24:38:b9:cd:f3:3a:6b:fe:9b:70:85:23:2d:
         09:88:27:b3:cc:24:8d:2a:6c:6b:99:2a:d0:5a:58:b2:d9:42:
         77:9b:61:bb:02:e2:c0:bb:16:ba:d2:4e:22:15:1a:49:62:fa:
         11:cd:7c:3c:e4:4b:79:2b:e5:8f:e2:5c:0a:5f:45:a0:5e:50:
         1d:63:f8:3c:ec:22:39:92:d1:d5:b2:ad:0b:ef:8a:37:05:6b:
         51:73:bd:5d:ea:ec:e4:01:41:d5:6b:22:12:17:4d:60:64:4b:
         7c:a7:09:6e:6d:91:c4:17:48:87:bf:b2:9a:ff:2a:85:23:d4:
         de:e5:87:41:f1:6f:b7:db:15:46:96:78:88:95:e0:e3:ff:bd:
         9c:14:fc:4e:cb:9b:ff:df:a1:48:42:18:b9:1f:e5:9f:da:b0:
         25:bc:8c:73:da:1d:35:a2:d2:74:44:5f:bf:a4:24:7d:c8:e5:
         c1:b8:66:c4:b0:30:d9:a6:f5:8d:2c:9c:4a:f0:66:7e:01:02:
         92:d6:d4:f8:de:26:6a:87:b1:d8:c7:95:5c:d2:1b:a3:22:ca:
         94:f6:bb:bc:6d:2c:fc:f2:81:c0:42:a1:b0:7d:8f:cf:76:0f:
         43:7b:cb:15:77:21:7e:a9:7a:8b:77:41:e4:59:10:d9:38:86:
         2a:3f:cf:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u8fuvaYUjDKCX78g+KVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FmOTRhZWRmZmVmYTQzNjZiY2EyYmViOTE5OTJjMWRi
MzRjY2MwHhcNMjUwMTMxMDUwMDU2WhcNMjUwMjAxMDUwMDU2WjAzMTEwLwYDVQQD
EygwMjYwY2M4NmY1MjcwMzViNWYxY2FlYTI1NzllZDI4YzExMzBlZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIHZEMpwd0ng3rZjPUbiwzF9fXsL
dZCNUqgcf+gyMGGs/N+WTofRjYnp15knrWl3F8cncC3OMlF2OHrd0xQHEd96wMNc
VrfXQXmoKJNC2vBO2bEXdWNpOql/Nsa2cUQnUi6cYWmN1d8lAwHvpaTzjJwtu1xp
rU294LWG8gPKkWJJ8xImR2XBCOW/o7rtSu4peTn771iJBtIl13SfXEzwohAlF+gx
Br6Nc8uYTTP4hSrIy8f/JCZbSM9gfBy5YQ7olkMX+kTjkdKv1Gz+/XyyGzQD7pCS
QN62PEGb3W7O/rqJGsAlaSe8ppjmUwECg013hIbiBNfJQbcKLZ9wVF7amQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJgzIb1JwNbXxyuolee0owRMO13MB8GA1UdIwQY
MBaAFK7K+Urt/++kNmvKK+uRmSwds0zMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEt
ZmMwM2VmNzk0NzE4LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEtZmMwM2VmNzk0NzE4
LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2Fd9eEk
OLnN8zpr/ptwhSMtCYgns8wkjSpsa5kq0FpYstlCd5thuwLiwLsWutJOIhUaSWL6
Ec18PORLeSvlj+JcCl9FoF5QHWP4POwiOZLR1bKtC++KNwVrUXO9Xers5AFB1Wsi
EhdNYGRLfKcJbm2RxBdIh7+ymv8qhSPU3uWHQfFvt9sVRpZ4iJXg4/+9nBT8Tsub
/9+hSEIYuR/ln9qwJbyMc9odNaLSdERfv6QkfcjlwbhmxLAw2ab1jSycSvBmfgEC
ktbU+N4maoex2MeVXNIboyLKlPa7vG0s/PKBwEKhsH2Pz3YPQ3vLFXchfql6i3dB
5FkQ2TiGKj/PWQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:30 2025 by rpki-client on console-fra.rpki-client.org