Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          9C6Rid3Av8iBD2aJCA0hWGgnwYE8z6YcD9C7bQ9FQ8k=
Subject key identifier:   2D:C6:A2:F9:4B:C6:1D:1A:A6:63:AD:0A:98:91:8C:3A:B3:2A:C2:AB
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       0194BAF23F91667756EA4072CC693FBFC2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          13A4
Signing time:             Fri 31 Jan 2025 06:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:25 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: 9Kbc+DEcY0aqxgh05XVBf/f7hlSGw3hP+KZvrDZzlak=)
                          2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:3f:91:66:77:56:ea:40:72:cc:69:3f:bf:c2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Jan 31 06:00:25 2025 GMT
            Not After : Feb  1 06:00:25 2025 GMT
        Subject: CN=2dc6a2f94bc61d1aa663ad0a98918c3ab32ac2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:54:cf:7e:3f:e0:c3:7f:0d:ec:d2:8c:e4:
                    ec:a9:cd:d9:16:e9:bc:9e:a0:11:90:54:1f:b2:cb:
                    e1:d5:9a:b7:bc:72:9a:4f:07:3c:99:1e:5d:24:b4:
                    e6:1a:d9:42:30:c9:3f:93:19:ef:e5:ba:e6:0a:bb:
                    28:f1:b9:03:34:78:83:ef:f1:1b:1a:c1:25:71:de:
                    92:73:4c:43:eb:a3:63:9d:2c:95:26:c2:b6:81:ab:
                    fd:8b:dc:eb:71:b3:48:35:ea:3e:4f:0c:d3:f7:2f:
                    11:cc:5b:21:24:df:d1:d5:77:70:f7:02:bc:b0:82:
                    2e:bb:a9:6a:6e:28:50:35:e7:74:30:c0:c0:1e:13:
                    e4:58:9b:1f:8f:7b:8a:cd:52:d0:58:cf:47:97:85:
                    4c:25:09:a7:7d:27:a1:5f:51:ef:0f:df:12:89:f2:
                    7e:90:91:05:5e:d6:a1:b8:6b:a9:cf:f6:60:7e:fb:
                    b0:21:ea:52:1c:e8:50:fe:e5:81:45:9c:a2:ac:a0:
                    b3:20:f2:06:f4:77:0a:92:42:e9:46:7c:db:52:e0:
                    7b:75:7e:53:b7:61:cc:13:ba:9d:55:1a:66:1f:b6:
                    81:78:8f:d7:f2:cd:46:2c:e4:75:98:82:69:64:f4:
                    58:e7:cd:0b:82:48:86:ac:5a:a2:a3:bc:49:cc:7d:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C6:A2:F9:4B:C6:1D:1A:A6:63:AD:0A:98:91:8C:3A:B3:2A:C2:AB
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:00:67:69:68:35:bd:02:f9:22:ee:be:34:62:24:d1:7c:1f:
         96:94:e7:f8:61:93:7c:41:a1:11:f5:5d:90:62:fb:6f:50:cd:
         8b:05:b6:3a:60:69:09:ee:e7:9f:26:df:f5:1b:f3:0a:7d:21:
         f6:53:c2:e0:dd:a4:e5:da:fd:21:1e:40:b1:ce:5b:e9:58:28:
         18:d6:14:31:7b:07:81:79:cf:96:dd:5f:c1:ce:9b:d6:1c:ba:
         8e:83:4c:e3:86:af:5b:09:9e:e2:60:60:17:97:16:d1:2e:4c:
         0d:3f:5d:32:60:df:28:4f:77:be:ad:b2:99:29:87:b4:b9:38:
         bd:b2:dc:e9:16:ad:a5:70:92:93:b8:73:ed:bf:0d:7d:cb:22:
         8a:0e:f7:c4:a4:d2:76:9e:78:03:9f:54:a8:53:78:e5:c0:6b:
         2c:58:23:03:67:0c:7e:e9:3f:0d:28:21:3d:73:4a:00:a2:d4:
         f7:fd:34:de:4a:a5:c0:c7:e7:d4:4c:09:8c:93:35:62:d3:16:
         96:97:8b:17:0c:93:86:21:c3:00:7b:8b:20:7c:f0:be:5a:2f:
         4b:94:48:df:d3:4d:88:1b:1f:e9:7d:69:31:30:46:b5:37:4a:
         b7:95:d1:07:00:29:b7:84:77:4e:15:b3:d8:93:c8:a1:95:f1:
         b0:fb:ce:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68j+RZndW6kByzGk/v8LlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTE3YzBhZmRhNDQ5ZWNjMDQyOWMwNDZkZjUwZmJjOTU5
YjRlZWEwHhcNMjUwMTMxMDYwMDI1WhcNMjUwMjAxMDYwMDI1WjAzMTEwLwYDVQQD
EygyZGM2YTJmOTRiYzYxZDFhYTY2M2FkMGE5ODkxOGMzYWIzMmFjMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ZUz34/4MN/DezSjOTsqc3ZFum8
nqARkFQfssvh1Zq3vHKaTwc8mR5dJLTmGtlCMMk/kxnv5brmCrso8bkDNHiD7/Eb
GsElcd6Sc0xD66NjnSyVJsK2gav9i9zrcbNINeo+TwzT9y8RzFshJN/R1Xdw9wK8
sIIuu6lqbihQNed0MMDAHhPkWJsfj3uKzVLQWM9Hl4VMJQmnfSehX1HvD98SifJ+
kJEFXtahuGupz/ZgfvuwIepSHOhQ/uWBRZyirKCzIPIG9HcKkkLpRnzbUuB7dX5T
t2HME7qdVRpmH7aBeI/X8s1GLOR1mIJpZPRY580LgkiGrFqio7xJzH3DuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3GovlLxh0apmOtCpiRjDqzKsKrMB8GA1UdIwQY
MBaAFOyRfAr9pEnswEKcBG31D7yVm07qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYt
ZDI1MmE1NzRhZThkLzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYtZDI1MmE1NzRhZThk
LzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgBnaWg1
vQL5Iu6+NGIk0XwflpTn+GGTfEGhEfVdkGL7b1DNiwW2OmBpCe7nnybf9RvzCn0h
9lPC4N2k5dr9IR5Asc5b6VgoGNYUMXsHgXnPlt1fwc6b1hy6joNM44avWwme4mBg
F5cW0S5MDT9dMmDfKE93vq2ymSmHtLk4vbLc6RatpXCSk7hz7b8Nfcsiig73xKTS
dp54A59UqFN45cBrLFgjA2cMfuk/DSghPXNKAKLU9/003kqlwMfn1EwJjJM1YtMW
lpeLFwyThiHDAHuLIHzwvlovS5RI39NNiBsf6X1pMTBGtTdKt5XRBwApt4R3ThWz
2JPIoZXxsPvOmg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:36 2025 by rpki-client on console-fra.rpki-client.org