Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
File:                     6Hzn3yMUDAAFElphqtchUx5oHw4.mft (raw, json)
Hash identifier:          71LT9qQU0RnL4pBrnoCoBB/vyLNYSkrMZP78zPmvJ9g=
Subject key identifier:   2F:8B:0A:0E:10:C2:D4:06:6C:70:19:E7:32:12:96:6E:76:FB:73:48
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       0194BAF2156B23033034682DFE57A67D3A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
Manifest number:          11D9
Signing time:             Fri 31 Jan 2025 06:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:14 +0000
Files and hashes:         1: 6Hzn3yMUDAAFElphqtchUx5oHw4.crl (hash: bRuuH394tujie+Yf0HtUujbikgzbRkTt0d8vnNGkW4k=)
                          2: 93H-M2YyFdByF3_m4UTdVNG3rnA.roa (hash: NZdZDzcAYrRqjG7IML02jAFdaMVtT3noP2YHjNJwoR0=)
                          3: N9uVt8-2z0dXmjID6iR9e9MgbVk.roa (hash: n9sIL4/YW67/qBoixPSCi+GKHMtO0JV9xlXo1RPhaOU=)
                          4: _mlHYvNOqlWn3kV4X-JxKfP06uI.roa (hash: nSc6Enn4OnvgwO+jJT800LzQF9tqpEFUJwGLWJoDG80=)
                          5: haML-aesPdHDrfKfNJ4GEsc_gPQ.roa (hash: /PovY2vwBA2lMcdVZ631+GF0OPyYkLCFUcs9P6/i2kg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:15:6b:23:03:30:34:68:2d:fe:57:a6:7d:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Jan 31 06:00:14 2025 GMT
            Not After : Feb  1 06:00:14 2025 GMT
        Subject: CN=2f8b0a0e10c2d4066c7019e73212966e76fb7348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:0c:1d:df:f3:f9:8c:1c:b4:84:7f:d4:28:
                    c4:b8:08:7f:00:80:a6:0d:9c:a2:af:05:6d:18:d6:
                    09:f0:37:ca:c8:36:f7:4d:73:41:b7:88:b5:31:da:
                    f1:33:e2:08:22:4a:c6:5a:5c:9d:d1:90:fa:9f:e7:
                    48:1a:e4:ea:07:b5:62:11:ee:d6:ca:b3:e8:5c:c3:
                    c4:48:9c:11:19:1c:35:d7:ae:87:85:01:89:97:c0:
                    22:b0:77:90:a3:cb:24:a4:db:c3:54:14:57:ae:da:
                    9c:ef:d1:5b:cd:64:91:4f:4b:b8:c3:38:15:bf:aa:
                    a6:43:72:01:86:77:ba:42:3f:ce:95:51:4d:93:8c:
                    bc:a3:fc:3c:14:32:12:f8:ca:c3:75:99:44:16:d6:
                    a8:db:42:26:4a:f5:56:1f:87:07:c9:eb:0f:c2:57:
                    3f:66:9b:1f:a1:19:e5:d8:da:12:fb:ac:d3:2c:5b:
                    eb:85:20:03:57:51:8c:a2:59:c5:02:10:da:6a:e5:
                    9e:4e:f1:a9:e0:df:6e:01:fc:27:fb:83:94:98:90:
                    55:d3:cb:fb:cf:04:16:18:3b:c5:f9:cc:9d:91:6d:
                    7a:5b:35:33:c1:c4:86:65:9d:33:28:31:50:08:2e:
                    8c:c5:95:25:c2:83:87:df:d7:4a:ef:0b:1f:62:dc:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8B:0A:0E:10:C2:D4:06:6C:70:19:E7:32:12:96:6E:76:FB:73:48
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:a6:83:1b:63:a8:cb:b0:75:42:ff:3b:d1:f0:4d:4f:da:
         30:ee:16:d9:37:39:17:c6:05:23:7e:3b:6c:3a:01:4e:0a:9c:
         53:1a:3b:0f:1b:06:34:91:08:08:4a:e7:a9:03:68:56:e0:94:
         ca:e8:5d:20:94:13:02:09:82:49:a1:8c:54:e1:54:60:46:b2:
         04:31:89:32:87:8e:60:03:d3:8b:92:af:08:0a:af:10:4a:3e:
         87:f8:aa:3f:74:a2:83:cd:88:a7:db:99:b3:c8:76:b3:06:e2:
         11:25:74:be:65:21:a9:c7:c3:35:1d:7c:2c:ad:b0:43:a8:79:
         5f:40:b6:ff:c6:7c:23:f8:37:64:ba:4a:bb:c2:e2:70:76:a2:
         b5:10:d0:38:b3:d0:aa:17:98:80:8f:0e:ca:66:02:29:49:12:
         28:7e:00:11:cf:20:bf:c3:ab:f2:00:f9:f0:ab:7c:ac:f3:22:
         9f:0a:63:49:a2:ec:f1:aa:87:36:b2:4a:5d:b2:70:89:bc:e5:
         17:e7:fc:6a:95:32:12:e5:7e:ce:43:5e:02:ae:57:a9:7d:7a:
         ee:a0:ea:7a:91:bd:e2:02:13:bb:99:e0:1e:36:64:61:f0:94:
         31:91:51:8b:e9:06:3a:9d:61:4b:e5:9f:25:90:5e:47:41:1b:
         e7:4a:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:53 2025 by rpki-client on console-fra.rpki-client.org