
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File:                     yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier:          110xCc0PHjDtz6AWUmltno/ABshKXvm6BYhmilLP7q4=
Subject key identifier:   CF:E1:42:A3:93:BE:A7:F9:D9:4B:D8:3E:5B:2F:0A:B6:01:AA:DA:F0
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer:       /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial:       0194BB6005B62BE4622AC1C80D1345416F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 08:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:19 +0000
Files and hashes:         1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
                          2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: GOCdetx8yKi8Cbb07/N+bsuaKbxjYhw4HHrsDh+3aIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:05:b6:2b:e4:62:2a:c1:c8:0d:13:45:41:6f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
        Validity
            Not Before: Jan 31 08:00:19 2025 GMT
            Not After : Feb  1 08:00:19 2025 GMT
        Subject: CN=cfe142a393bea7f9d94bd83e5b2f0ab601aadaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:a6:aa:b9:5d:c7:3c:fa:95:75:d7:a4:38:
                    e4:0a:66:46:f2:0c:fb:5a:0f:bb:42:d4:3c:46:aa:
                    33:f7:7e:b1:f5:e5:8d:61:72:d3:bd:8e:de:be:bd:
                    81:1e:bf:68:d9:ef:1e:d5:c9:5c:f5:d9:4b:3e:90:
                    b5:3c:1d:78:5b:7a:2d:39:a2:48:54:e2:11:6d:ac:
                    ec:67:8a:5b:5c:43:23:4a:7a:f7:66:1d:9c:0c:19:
                    25:e2:ef:bd:43:a8:67:2e:fd:82:80:4f:1c:f9:90:
                    1a:55:f0:db:2c:28:68:45:cb:c0:c0:3b:49:7c:9f:
                    51:12:f6:a4:e3:b0:1a:c1:92:94:8f:fd:31:5c:b1:
                    71:28:22:6b:36:3d:1d:00:1c:cd:01:53:7c:86:d4:
                    88:9f:bc:09:9d:62:7d:12:d0:09:5b:8e:e5:23:c7:
                    15:79:bb:13:77:25:ec:a9:ee:f8:d8:e0:bf:b0:e1:
                    87:27:26:73:51:24:2c:c9:a1:46:0a:1a:1d:a4:3d:
                    0b:0b:39:93:81:ca:2f:2e:af:d1:c0:ca:34:a8:26:
                    e0:1d:ff:ad:43:b4:8b:28:78:5f:80:e4:20:d5:16:
                    87:18:1e:47:fb:6b:0e:df:ba:86:04:64:3b:32:6c:
                    62:17:4f:0b:74:0a:f0:2b:98:86:32:da:05:09:39:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E1:42:A3:93:BE:A7:F9:D9:4B:D8:3E:5B:2F:0A:B6:01:AA:DA:F0
            X509v3 Authority Key Identifier:
                keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:4f:b8:f3:98:5f:65:f6:59:6f:1f:54:31:02:b6:9f:2b:
         06:08:04:9a:8f:1d:78:6e:25:82:71:2c:c9:25:eb:d3:64:cb:
         84:3f:4d:66:da:44:c3:50:03:1f:3a:d0:c4:43:a1:0f:ca:85:
         26:48:17:e6:98:fd:96:a7:d1:43:48:75:e9:65:14:28:8b:9f:
         00:49:8f:8a:4a:08:54:19:29:09:82:86:6e:35:b6:7b:57:d1:
         70:44:87:27:09:87:8f:93:71:21:56:0a:c5:db:7d:2d:84:0e:
         cf:42:e9:96:69:70:d2:41:9c:24:d4:54:ad:c0:c2:52:56:61:
         14:b9:88:dc:28:f4:4a:1b:f7:80:b1:e9:9c:a1:2a:0f:df:f1:
         9f:66:77:ad:cf:d0:74:10:61:a2:1a:72:53:dc:ee:cd:2d:39:
         df:82:0b:a9:a3:fe:c3:09:5e:10:87:a5:98:7c:34:39:50:cc:
         a7:47:ea:e7:1d:05:a6:c3:07:98:c7:9d:d0:17:dd:7b:45:00:
         dc:c5:c0:9b:d1:bc:fb:e9:0f:87:28:68:4f:6a:de:ae:7f:5e:
         ea:97:19:19:d1:26:b9:b6:17:1d:a5:cf:4d:5f:b9:4c:12:31:
         40:d9:5e:3d:5c:80:23:15:3f:b8:6a:b9:82:f4:2d:0d:62:4b:
         a4:33:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:04 2025 by rpki-client on console-fra.rpki-client.org