
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File:                     oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier:          i7KcXdNXB1rspdH53YHWotUR1orpaao0W7W00dvvpQk=
Subject key identifier:   97:8B:39:C1:B8:68:13:24:8E:E5:2C:4F:5E:AE:C1:CC:8B:3D:43:71
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer:       /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial:       0194BABB3E5AB5B18842DB8F72AA1F74B055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number:          026E
Signing time:             Fri 31 Jan 2025 05:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:20 +0000
Files and hashes:         1: WacUruZTE83WEEePnyB3KKF0YFU.roa (hash: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=)
                          2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: 52+jYm2KVEwC7xY6qTruOqun80S+nz9g+XzYbMdLiag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:20 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:3e:5a:b5:b1:88:42:db:8f:72:aa:1f:74:b0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
        Validity
            Not Before: Jan 31 05:00:20 2025 GMT
            Not After : Feb  1 05:00:20 2025 GMT
        Subject: CN=978b39c1b86813248ee52c4f5eaec1cc8b3d4371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9a:97:80:47:38:a2:92:50:af:9e:dd:0c:ca:
                    11:49:c4:ce:a6:84:c3:16:ad:15:1e:89:a9:00:8e:
                    e3:71:e4:2b:f1:7e:c4:50:3c:b4:6f:4d:13:8d:cb:
                    58:71:5d:c2:da:a9:6c:54:59:65:17:96:de:9d:62:
                    19:56:cf:58:b5:d3:70:12:3c:0d:34:01:b4:c6:43:
                    fd:31:6b:f3:1b:42:74:fe:fe:23:be:3e:cf:74:a6:
                    88:64:d9:79:b5:96:c0:f7:2e:e5:10:3f:37:ab:c5:
                    5a:b8:3e:63:b1:72:ca:c6:3b:bf:5b:87:0a:69:22:
                    1d:56:4a:4f:99:0e:a2:f6:48:a0:c8:5c:60:2c:9e:
                    f3:38:6f:50:dc:56:fb:1f:68:a2:eb:37:e9:47:a1:
                    ab:f3:10:0a:9e:9d:bb:10:d9:73:c0:e2:26:22:0f:
                    7d:60:c0:95:5a:ed:68:c5:d1:a6:89:73:98:e3:77:
                    e7:3e:47:dd:97:80:60:6c:de:ab:d9:b9:18:fd:67:
                    c1:7f:d7:77:d0:7f:45:a9:77:7e:d5:00:47:b6:05:
                    a2:a0:f0:9b:08:d9:d5:52:9c:72:aa:c1:e8:df:c4:
                    57:4b:cf:b9:48:2d:24:36:7d:3e:ac:d0:c2:e0:f7:
                    5b:8d:c9:95:50:1f:c4:8e:fd:64:bc:00:35:1f:8a:
                    82:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:39:C1:B8:68:13:24:8E:E5:2C:4F:5E:AE:C1:CC:8B:3D:43:71
            X509v3 Authority Key Identifier:
                keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         42:14:5a:77:a8:ab:ba:76:15:26:28:29:c4:fb:a0:f1:22:fe:
         90:71:a5:fa:19:80:0f:19:1e:c4:b7:c2:b6:00:04:80:58:8c:
         4b:02:4b:32:0d:91:1c:62:b8:a6:49:84:a9:d0:a1:52:eb:f1:
         48:9d:85:b7:ff:2a:bc:20:45:8f:7a:2f:cf:eb:e4:41:43:05:
         d2:90:2d:0f:9f:8d:43:15:42:e2:30:62:05:23:9f:62:b8:fa:
         e2:13:9f:e9:d7:18:d5:6c:d2:8b:5b:42:c8:2a:a4:2d:b4:2d:
         d5:73:a5:2c:4f:b1:b7:a2:83:65:6d:7c:0e:1c:a0:d9:e5:6e:
         e8:e4:02:25:5b:43:43:d9:50:6a:a3:d3:72:2e:8d:f7:0b:85:
         fd:25:68:f0:62:58:92:ef:5c:80:58:f7:0b:3d:93:86:ed:69:
         99:04:d2:72:47:21:88:de:71:df:71:96:7f:8e:61:2d:19:d9:
         31:b0:3c:d5:c5:7f:6f:ce:13:db:30:87:41:52:d8:f1:e9:0d:
         a5:8b:28:88:20:08:c0:e5:eb:a4:68:a0:38:b5:50:f9:5d:71:
         e9:2c:48:0b:f2:02:94:b5:29:bd:1d:95:be:d7:7e:9c:2e:d1:
         fc:a1:f5:f8:c5:09:fb:ec:1a:32:99:7e:98:bc:33:0f:bf:de:
         bc:32:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:23 2025 by rpki-client on console-fra.rpki-client.org