
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
File:                     Tni20AYU9VZdnYr4JHzHLqm4gz0.mft (raw, json)
Hash identifier:          rI09M1uHQaYbVyk3M0sTIeP8S4fSsguBh2SKF8u5C/Q=
Subject key identifier:   55:04:25:75:86:4B:B8:2E:37:FB:05:5D:CE:07:C7:7C:54:62:C5:56
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Certificate issuer:       /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial:       0194BB5FEFD94E296BA5755C31A472437CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
Manifest number:          1196
Signing time:             Fri 31 Jan 2025 08:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:14 +0000
Files and hashes:         1: 7IRfmWARQa1gscBNY6wwrdQkZww.roa (hash: CmqSWp3rlUbIbUgWN9uSD/eKPbnLnNyBdNG11QBDz1o=)
                          2: GZmRGff5SY6f2maFjy40WztZsVQ.roa (hash: 0CrTdIjKS9GI6i9LLy/Cey6tOh/vSgO5QV5+zMEjuho=)
                          3: Tni20AYU9VZdnYr4JHzHLqm4gz0.crl (hash: XkKaVcxFD/jfyTPXKX48MXex+HpQ/RX92UTI5h3jPwc=)
                          4: ZKVdzQrCXu5mzOlv7FGCL2aQx9o.roa (hash: YxpuZj2Kv5nLT3u4CJE0gbWGMjfbkqvjdVZv+AJXYYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:14 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:ef:d9:4e:29:6b:a5:75:5c:31:a4:72:43:7c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
        Validity
            Not Before: Jan 31 08:00:14 2025 GMT
            Not After : Feb  1 08:00:14 2025 GMT
        Subject: CN=55042575864bb82e37fb055dce07c77c5462c556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:b2:a5:5a:c5:a2:d3:e5:90:c1:d8:47:9f:
                    dd:2b:c2:92:0e:01:6b:9b:98:1b:79:41:0a:b7:71:
                    fb:a1:ca:8d:37:d2:34:76:cb:b9:f4:92:ad:91:05:
                    81:48:ec:ac:f5:7c:11:56:e7:51:92:5f:5e:78:d7:
                    e6:8b:73:41:95:42:14:3c:ce:2e:7a:f2:93:77:b2:
                    92:d3:e5:49:be:fb:60:26:76:4a:b1:7e:8a:31:fe:
                    8e:9e:87:30:99:b5:4b:34:34:39:36:66:4f:8f:40:
                    61:a4:22:49:f3:83:b9:8e:e4:92:bd:50:a8:b9:a1:
                    83:82:48:16:e6:cb:ca:d4:32:99:67:de:1e:f0:35:
                    eb:88:dc:52:5e:8c:87:f1:b8:c2:71:11:af:58:90:
                    2e:c8:f1:27:0a:4a:fb:a2:50:95:7d:10:9d:af:26:
                    7e:34:55:a7:e5:bf:cb:80:8a:1a:86:e0:5b:8e:09:
                    1f:bb:73:65:1e:f3:6e:9d:01:9b:a1:76:bb:88:21:
                    7c:f4:86:d8:c5:de:0e:c9:ff:d2:65:49:6c:33:05:
                    df:e3:53:ce:16:4c:39:e9:33:7f:bd:0a:bd:50:48:
                    a9:42:05:d4:40:a6:f3:b9:a1:b8:fe:e7:2b:ea:4f:
                    4a:f2:46:65:53:44:ab:40:da:6d:6a:19:f0:41:12:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:25:75:86:4B:B8:2E:37:FB:05:5D:CE:07:C7:7C:54:62:C5:56
            X509v3 Authority Key Identifier:
                keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         b3:33:ff:60:46:b2:28:c6:f2:fa:29:62:55:51:9d:0b:2d:13:
         ee:38:07:1d:3c:96:c1:6d:5d:ef:d2:89:08:eb:2d:37:08:b8:
         42:78:db:55:a2:96:54:11:4c:74:b1:50:2a:6b:45:68:b8:c6:
         91:23:09:2f:7f:55:9c:08:7e:84:6f:ad:44:8a:4e:ca:da:66:
         fb:7d:58:7d:45:77:2b:8f:41:ef:64:22:8a:eb:ff:b8:59:dc:
         0e:07:dd:ff:51:78:7e:fc:3e:3e:4b:f5:63:db:c8:1c:76:d6:
         3b:5a:1d:7e:8f:9b:32:b4:28:ce:5a:ae:a8:da:43:c6:f1:af:
         86:6d:ca:92:52:e7:b2:54:30:b1:bd:06:5d:3d:3e:7c:aa:28:
         e6:a9:a2:a4:68:49:88:d7:aa:e7:d9:ef:25:7d:0e:6c:90:b6:
         15:c3:9f:80:c7:d1:44:11:1f:4d:8a:1e:eb:13:03:8d:e5:d0:
         dc:1e:51:a4:83:47:a1:1e:61:34:fa:86:2c:74:8c:19:7a:61:
         9b:e4:a5:a3:aa:99:8c:1a:9c:6f:3d:fd:e3:43:60:a9:6d:22:
         6d:1b:f9:fd:d7:bb:4f:d2:70:8f:84:e3:56:50:de:81:4e:ee:
         cb:b5:a7:c3:b2:27:27:35:7f:92:19:3d:35:10:46:b2:2f:8e:
         03:ba:aa:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X+/ZTilrpXVcMaRyQ3yiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzhiNmQwMDYxNGY1NTY1ZDlkOGFmODI0N2NjNzJlYTli
ODgzM2QwHhcNMjUwMTMxMDgwMDE0WhcNMjUwMjAxMDgwMDE0WjAzMTEwLwYDVQQD
Eyg1NTA0MjU3NTg2NGJiODJlMzdmYjA1NWRjZTA3Yzc3YzU0NjJjNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q+ypVrFotPlkMHYR5/dK8KSDgFr
m5gbeUEKt3H7ocqNN9I0dsu59JKtkQWBSOys9XwRVudRkl9eeNfmi3NBlUIUPM4u
evKTd7KS0+VJvvtgJnZKsX6KMf6OnocwmbVLNDQ5NmZPj0BhpCJJ84O5juSSvVCo
uaGDgkgW5svK1DKZZ94e8DXriNxSXoyH8bjCcRGvWJAuyPEnCkr7olCVfRCdryZ+
NFWn5b/LgIoahuBbjgkfu3NlHvNunQGboXa7iCF89IbYxd4Oyf/SZUlsMwXf41PO
Fkw56TN/vQq9UEipQgXUQKbzuaG4/ucr6k9K8kZlU0SrQNptahnwQRLAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUEJXWGS7guN/sFXc4Hx3xUYsVWMB8GA1UdIwQY
MBaAFE54ttAGFPVWXZ2K+CR8xy6puIM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgt
ZGVmMzg2NzQzZjMyLzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgtZGVmMzg2NzQzZjMy
LzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszP/YEay
KMby+iliVVGdCy0T7jgHHTyWwW1d79KJCOstNwi4QnjbVaKWVBFMdLFQKmtFaLjG
kSMJL39VnAh+hG+tRIpOytpm+31YfUV3K49B72Qiiuv/uFncDgfd/1F4fvw+Pkv1
Y9vIHHbWO1odfo+bMrQozlquqNpDxvGvhm3KklLnslQwsb0GXT0+fKoo5qmipGhJ
iNeq59nvJX0ObJC2FcOfgMfRRBEfTYoe6xMDjeXQ3B5RpINHoR5hNPqGLHSMGXph
m+Slo6qZjBqcbz3940NgqW0ibRv5/de7T9Jwj4TjVlDegU7uy7Wnw7InJzV/khk9
NRBGsi+OA7qq1A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:42 2025 by rpki-client on console-fra.rpki-client.org