Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          Svkx5H0vyR8JYVh7snBq1yQGBCQ5mQxoxGVx4rUr3uI=
Subject key identifier:   E2:A0:BA:81:59:D0:A1:49:54:E7:F3:9B:C6:37:3A:F9:66:E5:2E:D4
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       0194BAF20C153E2F73B471BB3D0F117FDA6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          127B
Signing time:             Fri 31 Jan 2025 06:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:12 +0000
Files and hashes:         1: GR60Ca6JzYbO9QyazVygj_5EvkA.roa (hash: 5Z/qznAffX6vBunD+YATGq6yv3qTNT1qM1UlHOsBVgo=)
                          2: SKBCllM8zLJEbYHJd_EV3itY7MY.roa (hash: Zfen1G7f+hqJM+l1P8PiztKtQe2yRYBq/nE3Qk55hCM=)
                          3: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: wgd4In/x9ZsU1mj2L8+12037LD5bagDjEyuuW9eZiXU=)
                          4: s8MofJ3kjxOEIcJCRG7XRBu9KS8.roa (hash: Pq2tE0OOs+hTFPNcOAxmOBUj8Uu1ECYXKDV5TZ3hyck=)
                          5: yPgzXDYW5eZyIEYe_uC8JweF4Is.roa (hash: KV9FpAFGVn3ZEU79wNJyjnFjAnc43p5Thb1yViB5RWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:0c:15:3e:2f:73:b4:71:bb:3d:0f:11:7f:da:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Jan 31 06:00:12 2025 GMT
            Not After : Feb  1 06:00:12 2025 GMT
        Subject: CN=e2a0ba8159d0a14954e7f39bc6373af966e52ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:e6:be:92:4b:0f:e4:6d:48:73:76:47:bb:
                    54:fb:33:6d:a9:9e:6c:3f:50:db:af:b5:f5:f9:cd:
                    72:57:ab:41:58:e1:8d:5d:b7:bc:d4:ca:f0:04:f4:
                    c9:c0:06:b9:1c:55:da:92:40:74:89:1d:eb:43:dc:
                    08:4d:7b:31:04:21:61:f0:ec:70:f9:a1:01:c6:76:
                    00:52:6e:a3:6a:ba:c2:84:dd:e6:79:71:99:10:57:
                    ae:d9:9a:e6:6c:bc:78:f7:32:f8:00:f0:da:a7:f0:
                    92:6b:9b:b0:18:04:85:84:36:26:5f:c0:cf:c8:a4:
                    a6:8c:de:97:e6:27:8d:70:0a:1a:65:dc:b0:e1:a5:
                    34:9b:12:df:be:a9:c4:61:d4:27:ae:d6:97:c9:44:
                    32:bc:1a:2f:d8:b4:d5:0e:d7:eb:3d:d1:5a:1f:54:
                    f9:48:91:7b:dc:c0:8b:11:ad:9d:8a:40:f5:15:12:
                    39:b7:63:4f:7b:7d:91:05:c1:0f:32:5c:fb:90:f2:
                    70:66:7d:1b:d3:15:44:c2:9e:fb:a9:2e:f6:2a:42:
                    65:45:23:7b:be:7c:18:fb:e1:77:b2:1b:54:10:94:
                    0b:6a:72:88:d8:ac:72:12:2d:72:fb:30:bc:7b:be:
                    a8:6e:01:71:93:c9:e6:ec:2f:3d:93:42:75:d5:8b:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A0:BA:81:59:D0:A1:49:54:E7:F3:9B:C6:37:3A:F9:66:E5:2E:D4
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:24:01:92:4f:64:d9:73:57:91:07:43:e8:0e:fe:ed:54:a6:
         5f:e7:42:f3:10:1b:9d:fa:d5:38:80:32:b6:90:9c:3d:69:9b:
         2d:1e:49:bb:98:ea:d2:2c:cf:fd:46:17:7c:18:b4:28:ba:66:
         bf:da:2c:c3:b4:13:e9:f6:85:29:e3:d0:fb:06:28:86:02:a7:
         00:9c:a3:8e:4d:ab:3b:32:55:72:54:7d:27:f3:ea:9a:08:94:
         44:f9:21:b2:56:f4:99:22:bb:f2:23:ba:1b:1e:bf:eb:68:7d:
         0f:27:4d:52:74:01:96:3d:c1:e8:57:63:8b:ae:dd:a5:4e:ad:
         1c:b1:2c:c3:82:41:0b:5e:22:14:18:9e:cf:50:9f:cb:81:6f:
         27:bc:1c:28:98:90:64:15:e6:28:78:ed:e4:21:71:08:f1:0f:
         fb:84:9e:0e:37:46:74:60:c8:ab:12:12:0e:5e:58:09:fb:d7:
         b4:74:27:51:48:17:16:dc:00:52:43:29:dc:57:aa:7d:99:78:
         c5:8f:94:28:e0:fe:ac:04:66:94:a8:61:4c:1c:e7:e8:e1:a4:
         25:d9:9b:af:92:1d:db:0f:c0:1a:e5:39:e5:7c:51:79:9c:30:
         42:cd:e2:a2:ec:fa:ef:c2:37:97:f0:db:de:f5:91:c4:dc:af:
         91:7c:5e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68gwVPi9ztHG7PQ8Rf9pvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2
ZTg5OTYwHhcNMjUwMTMxMDYwMDEyWhcNMjUwMjAxMDYwMDEyWjAzMTEwLwYDVQQD
EyhlMmEwYmE4MTU5ZDBhMTQ5NTRlN2YzOWJjNjM3M2FmOTY2ZTUyZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzafmvpJLD+RtSHN2R7tU+zNtqZ5s
P1Dbr7X1+c1yV6tBWOGNXbe81MrwBPTJwAa5HFXakkB0iR3rQ9wITXsxBCFh8Oxw
+aEBxnYAUm6jarrChN3meXGZEFeu2ZrmbLx49zL4APDap/CSa5uwGASFhDYmX8DP
yKSmjN6X5ieNcAoaZdyw4aU0mxLfvqnEYdQnrtaXyUQyvBov2LTVDtfrPdFaH1T5
SJF73MCLEa2dikD1FRI5t2NPe32RBcEPMlz7kPJwZn0b0xVEwp77qS72KkJlRSN7
vnwY++F3shtUEJQLanKI2KxyEi1y+zC8e76obgFxk8nm7C89k0J11YuukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKguoFZ0KFJVOfzm8Y3Ovlm5S7UMB8GA1UdIwQY
MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt
ZjY2MzE3OTc3OTY4LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4
LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSQBkk9k
2XNXkQdD6A7+7VSmX+dC8xAbnfrVOIAytpCcPWmbLR5Ju5jq0izP/UYXfBi0KLpm
v9osw7QT6faFKePQ+wYohgKnAJyjjk2rOzJVclR9J/PqmgiURPkhslb0mSK78iO6
Gx6/62h9DydNUnQBlj3B6Fdji67dpU6tHLEsw4JBC14iFBiez1Cfy4FvJ7wcKJiQ
ZBXmKHjt5CFxCPEP+4SeDjdGdGDIqxISDl5YCfvXtHQnUUgXFtwAUkMp3FeqfZl4
xY+UKOD+rARmlKhhTBzn6OGkJdmbr5Id2w/AGuU55XxReZwwQs3iouz678I3l/Db
3vWRxNyvkXxeYg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:20 2025 by rpki-client on console-fra.rpki-client.org