
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File:                     p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier:          J8Xr4Hk/uPH8CaR4dqviTGtJzF1EqKvqic50QhkQTJQ=
Subject key identifier:   41:A9:8C:16:AF:78:62:2F:D2:0E:CD:91:C9:EF:A8:A5:78:12:E8:93
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer:       /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial:       0194BAF22EC8D5642601F043E77E2D4E45E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 06:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:21 +0000
Files and hashes:         1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
                          2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: eWtOFbtLyN4z6TcT5+rIjFO7NSsLte6mDN7C2sGFYyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:21 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:2e:c8:d5:64:26:01:f0:43:e7:7e:2d:4e:45:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
        Validity
            Not Before: Jan 31 06:00:21 2025 GMT
            Not After : Feb  1 06:00:21 2025 GMT
        Subject: CN=41a98c16af78622fd20ecd91c9efa8a57812e893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:2e:e4:b4:f0:68:04:91:6a:67:84:95:07:
                    68:4a:c1:c9:01:16:d0:4d:15:45:22:be:cf:8a:83:
                    1b:d6:02:9d:b6:8f:6f:85:92:0b:89:f3:fd:c0:29:
                    6f:a2:38:ce:7e:bd:6f:58:0b:2e:23:e3:1e:8a:6f:
                    85:49:cd:ee:ab:8a:51:c3:28:9f:28:ed:9b:74:68:
                    ec:fb:1f:77:61:f2:6a:59:d7:f4:42:14:35:82:0d:
                    8a:6f:52:74:ff:15:0d:d3:18:05:59:a1:27:45:83:
                    69:c8:91:6c:89:ff:b8:38:9a:52:fa:5b:00:6f:6a:
                    4d:37:bf:50:33:fb:98:ba:a7:cf:9d:e9:2d:e8:49:
                    f2:b6:63:14:86:49:db:5f:a0:bf:95:d0:cb:f1:af:
                    18:97:09:2f:e1:ca:c7:be:9d:7c:2c:51:a1:8b:92:
                    84:e3:83:58:41:21:82:0f:2d:40:ce:ce:74:65:71:
                    f9:36:1f:de:2a:16:23:6e:be:02:35:49:2d:55:e4:
                    e6:34:84:a6:3f:cb:34:15:4a:4a:20:9b:9f:d6:89:
                    fd:63:9d:b8:d6:c3:70:de:de:b4:08:52:f4:e5:73:
                    bf:cf:76:57:11:a7:67:09:96:ec:57:22:03:bf:e5:
                    a1:8b:1c:0d:82:1e:32:e3:bb:df:88:64:80:af:10:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A9:8C:16:AF:78:62:2F:D2:0E:CD:91:C9:EF:A8:A5:78:12:E8:93
            X509v3 Authority Key Identifier:
                keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:f5:52:d3:0d:36:65:8a:43:c0:cf:36:6b:1b:23:cf:78:
         21:5f:61:b7:a5:f0:a8:95:28:52:ff:03:14:dc:65:83:61:24:
         86:52:47:88:64:43:99:dd:9a:02:b0:6d:fe:1e:86:e4:7a:59:
         61:1e:f2:cb:e2:37:1a:0b:e4:77:01:c7:43:66:75:c5:27:f6:
         42:bf:f6:25:6b:44:2c:f1:9b:6d:86:59:1c:9b:8f:e9:7f:ed:
         be:61:de:2c:05:cc:93:e8:22:1e:ca:6b:78:82:19:39:89:84:
         6f:c6:d6:93:a8:e8:8e:fd:56:53:9c:82:36:f5:7c:cf:4f:38:
         a4:35:9f:8a:fb:a2:02:7a:d4:36:f2:15:1c:c2:f2:3d:3a:28:
         ff:c7:c5:3c:18:64:c2:81:d9:d1:bb:8b:c7:60:06:16:da:b9:
         9f:2a:bf:ec:55:6a:8e:37:4c:f9:9d:f4:f4:53:42:72:5b:99:
         96:8c:e9:47:b7:97:45:ce:1a:4e:ae:15:6e:e9:51:65:06:3f:
         33:3e:49:b7:a6:2b:4c:8b:25:55:91:c5:56:a9:47:ac:8f:ae:
         1e:f7:75:80:89:9d:47:24:3a:44:a4:ec:d1:7e:5c:65:5a:c2:
         21:f7:f8:7d:b5:06:fa:ec:bc:20:7d:5e:f4:20:74:21:00:99:
         27:c2:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:51 2025 by rpki-client on console-fra.rpki-client.org