
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          PiSyBy/UdgmPImd6GHHP1nlZH886XE/iAzSM8odVXe8=
Subject key identifier:   21:0D:43:D2:B0:8E:E9:C2:60:34:54:8D:CA:A1:FE:29:45:50:47:E7
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       0194BAF2293B728D5A54113A196E457925FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          1153
Signing time:             Fri 31 Jan 2025 06:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:19 +0000
Files and hashes:         1: 0nsvioh61YbytSnl9cRfbyJDp0c.roa (hash: X+BXv/M5wDF8Xn3Xgva7hBqMYN1SYqooUH8v3XJmFZ4=)
                          2: 4HzcAwAp_NPUTKmqOpFk6fNukP8.roa (hash: MU7p381OLfrUgZeXEX4ypzzCidzVAcWbQDWLKu/+t9s=)
                          3: QJH1xkQhD8ZqrUTpIxRVC-9iWsg.roa (hash: k8wK85RayUQhoeFyh00R6U1ww1Aske+9ky6WjpJEXWs=)
                          4: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: xw2+Zo3Zmo4M516pbHi23jsjXjGDPNsTI72S6MlLaRA=)
                          5: yQOUiV_ouMfjFYLIfQKl87lFtw8.roa (hash: 7srmAwSkyCXgtko/kNwVJkZrJey5R4xX5MLBJsHDcMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:29:3b:72:8d:5a:54:11:3a:19:6e:45:79:25:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Jan 31 06:00:19 2025 GMT
            Not After : Feb  1 06:00:19 2025 GMT
        Subject: CN=210d43d2b08ee9c26034548dcaa1fe29455047e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:f0:0e:aa:6d:05:b2:5b:a6:cf:e3:bb:00:
                    66:27:6e:3c:3c:c5:ed:89:17:40:ad:75:25:d6:c8:
                    6e:03:6c:2c:73:d4:31:a0:2c:5f:2f:e5:d4:97:7f:
                    e3:c9:74:ff:3d:01:67:d7:1f:75:c1:57:0b:52:fc:
                    1d:4b:7b:2c:12:38:4b:af:9b:6f:6b:7c:09:40:e4:
                    c2:e7:b6:92:07:c4:8a:07:ee:19:aa:b1:7e:a7:60:
                    c6:70:12:ed:7c:dd:ef:15:01:5a:87:48:41:55:38:
                    f7:0a:1e:af:df:85:49:e2:3e:13:a7:56:2d:99:70:
                    31:ec:3c:84:2a:4a:f0:54:ef:98:36:2b:8a:0b:44:
                    70:15:40:c7:6a:66:3a:64:47:83:ba:b3:50:3d:27:
                    ad:55:e8:07:3f:09:ed:64:94:cb:fd:35:80:92:6d:
                    9d:13:52:be:76:9a:41:ee:06:f4:dd:0b:7f:d1:46:
                    9a:20:b6:33:e7:11:8b:bd:7c:6b:00:ee:52:7a:eb:
                    96:9c:d1:43:ba:5a:a4:a6:d4:20:00:86:10:ab:a6:
                    ce:d6:16:7a:25:de:43:29:84:91:1e:46:97:7f:28:
                    e7:09:63:31:18:31:5f:ae:3e:aa:07:d7:bd:55:47:
                    cc:88:36:2d:ad:ac:a0:68:69:1e:50:13:1b:c5:61:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:43:D2:B0:8E:E9:C2:60:34:54:8D:CA:A1:FE:29:45:50:47:E7
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         73:8a:15:cd:16:89:67:02:fb:56:f0:53:e9:75:9a:b8:c6:0c:
         db:50:39:33:90:5e:be:b2:8d:e3:41:80:b1:e2:b2:d8:39:50:
         74:69:25:39:da:18:a7:4f:a8:4a:83:75:39:33:46:4a:6f:53:
         04:99:27:8c:67:dd:00:1f:09:58:8d:e7:38:e0:a1:90:04:98:
         72:4f:cb:62:8c:a1:7e:f4:6d:1d:8b:8a:c9:80:e0:73:90:9b:
         db:43:d6:ec:8c:38:80:d7:02:25:3f:d1:96:1d:10:ce:8c:9e:
         85:33:83:81:fc:16:9c:b7:c9:98:88:36:b5:1f:ae:bc:31:93:
         6f:16:02:61:2d:f9:29:2d:41:c7:26:9a:3e:9c:0e:8d:90:ce:
         f8:75:5c:b7:87:94:35:0e:d9:e8:1f:84:61:85:65:05:b4:98:
         98:3f:44:09:bb:29:1d:46:5b:47:de:52:ae:79:9f:60:61:35:
         f2:30:cb:8d:69:2d:f7:4b:3b:11:35:e0:7a:0c:32:2f:b3:53:
         cf:c4:72:cc:84:b7:a7:2e:aa:ca:8c:c1:23:c9:31:cd:8d:05:
         8d:d3:ae:3b:6e:9f:40:e2:d7:e5:3d:0a:30:47:0b:d9:eb:f2:
         4b:05:18:e7:f5:4d:63:6a:56:ef:66:f1:c4:09:dc:c4:0a:95:
         9f:5c:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:00 2025 by rpki-client on console-fra.rpki-client.org