Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File:                     ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier:          4/nxGKtXmZ9GKtegzytFTwrdYJNey05OOnSfazFENE4=
Subject key identifier:   E8:FE:7B:07:64:0E:97:FC:94:A2:21:EA:3D:20:BB:CE:34:54:E7:B3
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer:       /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial:       0194BB972DFDA1CD794BAF80EAD90EF249BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number:          10E4
Signing time:             Fri 31 Jan 2025 09:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:34 +0000
Files and hashes:         1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
                          2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: JEJC0wkePPWq0ryw2kJqLf6rnRDhYRgMKKnvESFnru0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:2d:fd:a1:cd:79:4b:af:80:ea:d9:0e:f2:49:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
        Validity
            Not Before: Jan 31 09:00:34 2025 GMT
            Not After : Feb  1 09:00:34 2025 GMT
        Subject: CN=e8fe7b07640e97fc94a221ea3d20bbce3454e7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:d4:8d:72:7e:fe:9f:92:7c:27:3b:6a:7e:
                    e8:fa:0f:bf:45:82:d0:7f:a8:a4:3d:f5:cf:2d:36:
                    b6:60:96:41:9c:a8:2d:86:cb:c5:c8:6b:0e:90:d4:
                    f3:47:85:88:b8:e3:69:ed:a6:2c:c0:e5:a8:93:a5:
                    1d:37:b9:77:17:30:4c:ce:84:85:b9:ec:75:1f:50:
                    ad:51:a3:97:af:6d:f9:7e:ae:bd:a2:3b:84:92:a8:
                    56:d4:5f:95:6b:07:94:e8:4a:11:50:c5:57:8e:fc:
                    8a:8e:5e:e6:fc:9c:c5:04:a1:26:85:eb:40:98:34:
                    a6:d7:dc:80:ba:f7:0d:f4:06:88:d6:9f:67:6b:8a:
                    ab:60:7f:cb:e3:21:ab:77:4c:3a:08:67:a4:b0:a1:
                    2c:9e:48:ae:fd:ea:65:92:4c:17:82:4d:92:d3:5c:
                    93:4c:2a:3c:f6:c5:59:97:8b:06:78:40:02:f8:e6:
                    9f:57:cd:8a:60:e9:14:8e:03:b3:f5:28:8e:1a:86:
                    37:46:f9:5c:cd:0c:64:22:99:fa:a4:c6:c8:86:5d:
                    0f:2c:98:17:fb:dd:92:c0:13:73:9f:f6:11:0b:f9:
                    3b:b8:7c:0a:6c:d4:0e:fc:d0:d3:b8:7c:c7:76:70:
                    6b:d0:85:db:50:16:5d:3e:67:cd:3c:53:67:0e:d9:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FE:7B:07:64:0E:97:FC:94:A2:21:EA:3D:20:BB:CE:34:54:E7:B3
            X509v3 Authority Key Identifier:
                keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:91:44:8f:b5:52:47:c1:64:88:e4:75:74:08:06:c8:2d:
         ae:d6:2b:88:e1:c1:25:32:af:3b:02:fb:e5:5e:cc:7b:7a:2d:
         b9:b4:f4:e0:09:97:59:03:93:b8:54:46:03:d8:ac:d0:ba:e3:
         4d:5a:9a:13:06:7f:bd:18:ab:91:fa:6a:ad:f0:26:46:76:07:
         b2:31:49:f7:9f:49:27:06:cf:23:af:b5:26:ba:42:d1:ab:5b:
         7c:9b:c8:28:b8:e8:75:b6:66:c6:f3:4c:fb:ab:e4:ce:8b:99:
         7f:ad:36:3d:be:8a:d3:db:1c:e4:ce:44:d4:42:76:b3:78:52:
         9b:4c:45:19:5b:02:51:ee:fe:6d:93:97:7b:5e:87:54:9f:11:
         06:0e:b2:3a:0c:60:fc:54:63:a2:5b:b3:45:5d:0f:14:a8:05:
         da:8f:0e:ed:71:88:f6:f3:a3:a7:78:ff:b8:9f:e3:31:a8:38:
         a2:f3:43:01:1a:0a:26:ba:d8:dd:96:4b:1a:c9:64:4b:e8:90:
         a7:b1:33:09:fb:2b:6a:da:6e:dd:29:cb:c3:6f:b4:39:af:31:
         b2:a3:62:85:57:a6:65:2b:98:ba:20:a0:8c:db:6c:0a:45:b5:
         16:b6:81:7a:6b:07:ef:f0:7d:f3:dd:61:e6:ad:81:70:0c:b4:
         2b:46:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:30 2025 by rpki-client on console-fra.rpki-client.org