Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
File:                     eY97H9gCs9xqvXpc2nhqYxHh1j0.mft (raw, json)
Hash identifier:          bzc6qSoWoKqxAZ9KzENKV3l2Hm3kTceZskIxCYa52yk=
Subject key identifier:   6A:85:F5:48:C5:59:55:9D:F9:F3:C1:F1:CE:6E:F3:A2:2D:AC:95:AE
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Certificate issuer:       /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial:       0194BABB3CC8B501C2593AE555DDA59B826E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
Manifest number:          0C6E
Signing time:             Fri 31 Jan 2025 05:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:20 +0000
Files and hashes:         1: 0Z_U0-6JncSUG3pU-jXx8T1PRGg.roa (hash: Mir3lp3otknAoeWYFz8cexyNQZSn8G+v0iDnhQttdHU=)
                          2: 1-clxQ5FRBuXfTCI96k7NQmsvqPI.roa (hash: +4Z7J09L3SGSp1PJJm4ThLup+qse+s3TOx8+jnMpWBY=)
                          3: 2Hraw_035LFjMHYSLsx9heu2d1s.roa (hash: 1Arlde/+dOG+KuNRrtiQ+Jug7zuSw6YkJDNU3YfLjyI=)
                          4: 53Db6I9JbUfv2OZ17vlHehqFOrQ.roa (hash: RPASF/gxsr2rfpyKqhglyjwmpPexvcyQFf2T7Mf463c=)
                          5: 5PdB18jPQRLZ-GAxagC-kEAe468.roa (hash: uRNUNgX+uJB6vtFpRpJJGaEr2hDT9NTCsF5MgkWqj1U=)
                          6: 9ZhXjBYatlC4ylL6XZYCw9k6oSw.roa (hash: YIKG17nL0BcWV5jXfLK5PwCpq9sC5AOvFuxLfmmMZiE=)
                          7: BFqb7npLGHOlCDDgeo_Q540Rf4g.roa (hash: cVR3qt5QMQmnrbnC75Da/akiwN1ijsHi2wNlUZoa+Is=)
                          8: D3prKnhrJUs7lzKgFmC--FYzhJg.roa (hash: jpEGn/gnoLqqzUknjMEsPeLMCEjIvZmc7yXSColOwx0=)
                          9: FlXu-17Wm4L0HR0umNSo84wJlWk.roa (hash: 2TLDsftG/hxUTl33W9yrK34XvCQ5ujsflBhFw0CvbHE=)
                          10: GGFiclsiEmsgZbqwTL7fq_cX4XA.roa (hash: dCBk3pAnBCWra5GtjlVIIO0Zk0nAnkQDi11gRaoDJeU=)
                          11: Gz-b9zFQbqkSWPjZ-YafZm1Qi6I.roa (hash: 1AqmaN/OkXMA+XGP/65KmaZuN8ri7HHwysBRvbPS3vE=)
                          12: IyxtzukAghZCOIQ_NqemGwdUeY8.roa (hash: NK+XAqQeutLAJ+GVEjZNvmCoo4uWhRCj0NiFKEAev6s=)
                          13: JdTk1TnQH71jFYvInfPwfk-yQB4.roa (hash: Z+f1zIBP++DbhLn+lofL7wyyJjh5HHatBE1GvF58QhA=)
                          14: OtVBlFkEFwd_I9ffGBy2_aEapJs.roa (hash: Wrm9qjbCM1Ngl1aL2OZUMI0H6OBkDKSqRNqaW0hV4v8=)
                          15: PvhCIB6_B6sFA9UDP0ZOEzKeJJ0.roa (hash: +gXjWYEJRXK6R9zriSEbiY3+RusKitzTP8getR6ypwk=)
                          16: Q--DTNqLVHNOeaPyHtBXqGcbW1E.roa (hash: SDBJCpcb05bD25AZuEkv4WEh9Sz4g8KvABAB/w4rEKY=)
                          17: SUsA2YF3jC4d9s6UP2RQzZxGoPI.roa (hash: 8q4GgVJJvG50GODDyPo70dKOxePM/uGcXeYJQ0QCxpc=)
                          18: aSHz5KSs7R-w32fVx4j9J5mA5h4.roa (hash: SSlyrW2eZr1a2vrZsfIZbMLKNB/wDEBsIRyMGBnWM+I=)
                          19: bdcxqv2fHVLYnp5Bka7GBXQLvOE.roa (hash: d61CPX3+EuUtfH8nKnbiiLLh7Qq9ZtJo9uLm+9OcME4=)
                          20: eY97H9gCs9xqvXpc2nhqYxHh1j0.crl (hash: hYLjRcLtKNnBiP3yYDiywjQlYPdfO87Hm9MT8pjmNBw=)
                          21: eoG03NQZ3HD7atZXfwPDMXhKfkQ.roa (hash: NdluRJEOO3hGrti07Sqk8qcJYDTogoZ8O87kXCq9efg=)
                          22: gnCeSZoIiLVaka81SLnakBuc_cI.roa (hash: cRfqYjnBj716zwu3c4XTiSIVlnYuu6u9rltjfvBho7I=)
                          23: k9MSXW-gwqxibYaGqvmEGMQ5eG4.roa (hash: ohh3OqwtBldI73NPw2zFaKtKZqi31QVEO+9nBhCt2YY=)
                          24: krhkLUIQBsN1Y_z2MNatuN7IicE.roa (hash: EeXfXB+LCRt55BDPuaJwFhTvlXUxMPxkOpiH9rPmQPk=)
                          25: kugx0pmGjZcPbrm442ZVv3mcERM.roa (hash: 8HVL/O8ljTv0w7h4Su+p/KKbgW0QL4ldGTWXFsYBJVE=)
                          26: l23XsO3XAUB9bsyWTvgT0ymXs-g.roa (hash: boRkDTTX0FkLl3pgNtWrbYRzVEhbf5W7Z0z+qJ9fMiI=)
                          27: ldAiBV7C6_VvVSuYap8O_1ve_1o.roa (hash: eoppIqRNCDfadfM06odugHFw9NSHySJWlWqS2z1wfKk=)
                          28: ln3wcdgx34du7j_Gqi3USjnPYlU.roa (hash: aq8ioS+0GiPbrJnTYAwWH/P1I48amSE6Rqbt6eC72Nc=)
                          29: oTHEkOoYYZacGn2FxOyScc8IU14.roa (hash: XNDSY1qbMI60p8s9RJaqLfw8DR3cJzPVc2iqo5pfca8=)
                          30: pct1Kjhv6eD6HNneRtjP0MoKUIE.roa (hash: h7kacdTC13t9I95vLv8XmnnTP6SvK0W/+jZeCXcQYhM=)
                          31: sKdU_8YfhNlqKa2ZBYBP1zdzsuw.roa (hash: bC58+ZZPGqTZTM0FH+ST4ssEYPBJPE60LKZnMP9FBQI=)
                          32: uaKWn-B_tKDfBy53xs-X6OMt7l4.roa (hash: UbSrRt+W8ih39ekwzt6e9vsWqJVFD6qG3/hlKmBbAME=)
                          33: vUKDpBge-I70kV-soynJG5IgEho.roa (hash: 3/tsvVKEz6fwFayN65Gf37xFXXn7SK/RsS9H1ptfBWw=)
                          34: w7zldP2dSTV7McCVwaUzSBO_Ab8.roa (hash: HPAlEO6C/avbwjTwHxsefaMqdqo+TQZfmtm0A3Xt3Ow=)
                          35: xeQ2GqJUUPfZWSLJOYpNfW6bQ4Y.roa (hash: g9BBM0ZlhU7G2VkEalTd49oMAANxLQ8Xfrbwnla0ZFI=)
                          36: xt63-bTnDGTwRBAIcih-bm3I-x4.roa (hash: ZNIM0IHiooV1GbKlHHIP2PVO2rpmWUsl6VIryJ/sL7M=)
                          37: zng4XuObR4v8Ju2sMJ-PIMeJzFE.roa (hash: iDTTlVa8fA4mbYnXY+4Bt2SLOp0lkbr6Zk/ONf4Tgl4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:3c:c8:b5:01:c2:59:3a:e5:55:dd:a5:9b:82:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Validity
            Not Before: Jan 31 05:00:20 2025 GMT
            Not After : Feb  1 05:00:20 2025 GMT
        Subject: CN=6a85f548c559559df9f3c1f1ce6ef3a22dac95ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:c3:ab:cb:2d:90:c2:2c:97:5f:44:bd:37:
                    03:cf:73:04:fb:1c:42:ea:af:1d:10:3f:47:b2:12:
                    85:10:11:c2:dd:bc:cc:40:3b:11:6e:b2:04:29:8d:
                    d1:ef:eb:9a:e3:f6:de:10:a4:f9:2e:86:16:42:67:
                    9e:fe:62:61:9b:4d:1a:16:75:d9:35:5e:8c:a1:ec:
                    5b:c8:c9:d1:46:94:70:af:f4:5c:b4:37:9b:0d:25:
                    30:df:cf:c9:51:0c:52:96:7a:d9:bb:7e:a3:f0:60:
                    bf:db:92:7c:31:57:1c:9e:65:24:b8:85:7a:7a:9c:
                    8e:2c:64:dc:11:af:77:07:85:d7:ad:84:47:0f:80:
                    2e:15:75:50:0f:2b:0b:cb:65:ff:3b:e6:91:e1:64:
                    84:1f:05:e0:c1:65:05:15:fc:d9:46:a0:be:62:d8:
                    12:d1:c8:76:fd:4b:9a:1b:0a:9b:06:03:83:96:25:
                    31:09:ef:62:66:a6:f7:9a:b2:ef:b5:fe:e0:41:f6:
                    51:3f:66:1a:dc:f1:1f:5e:89:88:e2:06:14:69:f5:
                    f2:18:f8:c5:66:35:97:96:c5:d1:7a:02:d0:86:4a:
                    3d:5e:a8:24:fa:97:1c:c0:95:87:cf:37:e6:18:b0:
                    5c:fb:e8:60:81:3f:87:f1:4b:63:b3:75:66:18:98:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:F5:48:C5:59:55:9D:F9:F3:C1:F1:CE:6E:F3:A2:2D:AC:95:AE
            X509v3 Authority Key Identifier:
                keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:a7:1b:cd:9c:da:39:09:29:db:a4:27:3d:f3:a5:41:7c:
         c3:4a:16:59:54:3e:9b:b8:a5:0a:6e:6c:9d:0a:9f:bc:a6:5d:
         27:7a:ef:f3:3d:04:cc:1a:8b:21:3e:9a:de:04:a9:d6:1b:54:
         6f:4b:3b:7c:1b:61:91:1b:45:67:7e:00:6e:cd:e6:dd:a5:1c:
         02:5b:37:5d:23:07:9a:a0:30:d1:6d:2e:d6:d5:a3:2a:e3:b6:
         6d:f7:65:30:64:79:0a:4d:9b:6e:c2:a4:bb:58:52:93:15:7e:
         83:0d:6c:a7:47:eb:54:74:05:f9:1d:ef:65:a9:e3:53:04:56:
         2c:94:a5:f6:e6:40:2b:65:a0:88:9a:a1:ee:50:8f:2b:3a:1d:
         49:e8:5a:90:29:30:c7:39:09:0e:0e:d2:5f:2f:84:e6:12:e9:
         09:a0:6a:de:8d:ba:70:f7:1d:d0:ce:33:9f:95:00:68:88:a2:
         27:5f:dd:9d:8f:88:4a:84:93:94:3f:74:b1:b7:f1:07:a1:94:
         be:e5:a9:b0:36:dd:c5:98:65:08:d4:97:28:0d:e7:e4:93:03:
         95:48:35:bf:c6:9f:59:82:00:71:5c:c3:0c:f4:fb:89:ae:07:
         a7:d1:67:f4:74:cc:03:43:48:1f:df:f5:3f:46:5d:dc:02:36:
         7a:87:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:32 2025 by rpki-client on console-fra.rpki-client.org