Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File:                     1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier:          mNI8YG5RsmW0Eo4Ode7eKJ41APphjHO/VBbFPPEVWgk=
Subject key identifier:   1B:7C:B2:79:56:0C:7B:49:1E:EE:60:16:E4:33:09:4E:DA:5B:8B:C7
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer:       /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial:       0194BAF2465E739413A0632750BCDB311E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number:          29
Signing time:             Fri 31 Jan 2025 06:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:27 +0000
Files and hashes:         1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: GTFSbK6pLA3eZAFy9LZjxWzW+3Yq40gYOYPxnFoHPTk=)
                          2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:46:5e:73:94:13:a0:63:27:50:bc:db:31:1e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
        Validity
            Not Before: Jan 31 06:00:27 2025 GMT
            Not After : Feb  1 06:00:27 2025 GMT
        Subject: CN=1b7cb279560c7b491eee6016e433094eda5b8bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:9e:34:99:24:1f:79:e5:9b:31:94:18:cb:
                    76:28:e7:2d:c2:5a:04:4d:62:b7:5c:7b:c6:75:fe:
                    a4:35:45:40:e0:9b:16:16:08:1f:93:19:b6:f4:82:
                    66:27:3b:32:5b:31:d2:dd:f5:48:b3:7d:9b:b1:ea:
                    ea:91:10:75:cd:af:61:a5:7e:8c:34:5e:fe:34:8c:
                    78:c0:80:5c:e5:67:b8:b7:00:f7:c7:8a:52:a1:2b:
                    6d:3b:bf:24:b4:33:57:a2:4e:04:2f:78:01:a9:80:
                    51:bd:9f:d8:2d:b8:01:6d:16:15:76:a1:8a:35:27:
                    19:82:48:5d:f4:c3:b2:dc:f9:81:8a:0d:8a:60:14:
                    cb:d3:e6:77:0f:61:09:2e:34:e6:b1:91:da:97:45:
                    0c:f5:84:e9:ed:e2:7e:75:20:22:55:a4:cb:21:ba:
                    d5:e7:02:93:7c:b8:e8:e6:e6:24:ea:e9:b0:aa:8a:
                    01:b2:9f:f2:83:cd:b4:d0:3e:3b:45:bc:b2:86:d5:
                    36:d2:08:a1:64:ad:a4:ff:9b:9c:30:43:3e:78:51:
                    f7:70:78:e5:4d:48:97:c0:80:1c:e1:69:e3:21:a2:
                    32:d4:c3:d5:d9:53:17:eb:0f:b4:f2:4d:73:ed:2a:
                    9e:f0:77:99:5d:92:b9:3b:9d:dd:ea:86:09:4d:5d:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7C:B2:79:56:0C:7B:49:1E:EE:60:16:E4:33:09:4E:DA:5B:8B:C7
            X509v3 Authority Key Identifier:
                keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3e:5b:76:1b:09:cd:ef:1d:9a:83:e5:f7:e5:25:27:4b:cd:
         ef:80:3f:86:48:50:a4:46:db:b3:16:f6:bb:fd:37:0e:c5:39:
         5c:7c:3a:a9:67:0b:a4:d7:92:bb:70:87:3a:2a:6e:a0:c0:d2:
         15:3d:20:ba:35:d9:55:4b:35:63:45:66:2c:d0:0e:b7:ce:8e:
         bd:f5:e2:0b:77:4e:20:ac:21:ea:0c:81:db:cd:41:81:4f:41:
         15:bb:68:a4:c5:e0:23:17:07:82:be:40:60:c2:60:ad:3e:53:
         7a:1c:78:c0:1c:ce:3d:25:98:b0:d7:00:74:89:b7:aa:b4:fa:
         0f:da:ce:99:61:74:dc:63:7b:b8:6e:d6:aa:c0:13:aa:1b:1e:
         ba:e1:34:8e:68:7f:10:0a:45:e0:9a:af:6a:7f:a6:09:cb:bb:
         75:05:d3:c7:7e:cf:f3:58:68:c9:15:22:3c:78:12:e5:9f:64:
         b5:67:80:f0:90:e2:57:2c:53:b0:01:aa:ca:03:0b:d3:e7:4b:
         ac:24:76:a8:aa:d7:17:c3:4d:ec:63:ab:1a:9c:65:61:12:0c:
         4c:f7:eb:c3:5d:cd:fe:a1:4b:f8:e5:8e:93:a3:b5:29:db:35:
         73:47:e6:7f:dc:aa:9b:82:13:18:14:44:fd:08:16:88:e9:48:
         4a:91:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:50 2025 by rpki-client on console-fra.rpki-client.org