Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File:                     Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier:          yNEtmOmJbWOzCmWU36yRNmGDp8dy8DVFFcBpf8J8fFA=
Subject key identifier:   AD:94:C0:1A:80:FD:63:E4:0E:6D:A7:16:3B:DD:95:3D:2E:20:12:C6
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer:       /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial:       0194BABB80C2C6E5C938B387CC527455EC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number:          0B68
Signing time:             Fri 31 Jan 2025 05:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:37 +0000
Files and hashes:         1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
                          2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: Jr4NNGLy6lOekute9h/ugbiJnp5ly71mTRDVP7LN5Dc=)
                          3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
                          4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:80:c2:c6:e5:c9:38:b3:87:cc:52:74:55:ec:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
        Validity
            Not Before: Jan 31 05:00:37 2025 GMT
            Not After : Feb  1 05:00:37 2025 GMT
        Subject: CN=ad94c01a80fd63e40e6da7163bdd953d2e2012c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:26:1a:5a:b8:f9:99:bc:6d:5e:43:96:73:
                    f4:49:aa:4f:06:fa:5f:96:a6:94:d9:37:e9:ea:16:
                    b9:d1:7a:18:af:c9:70:f1:1a:cb:d2:8d:09:63:a1:
                    ce:2a:a3:8f:fe:d4:7a:f2:ec:0b:19:db:4b:96:6e:
                    cd:e8:e2:3b:fc:00:93:8c:f3:d6:e7:b3:a1:50:00:
                    2b:7b:56:f7:45:2e:31:c5:19:d8:9b:39:fa:20:08:
                    68:c2:cb:64:23:2d:7c:18:e8:03:ac:ec:70:61:2f:
                    c1:39:aa:c6:51:07:e6:95:af:5a:ae:fd:20:c9:30:
                    a4:03:c0:b0:af:68:0d:cf:c0:ba:81:67:04:c2:07:
                    d7:a8:ad:5b:ff:5e:b6:99:29:4e:3e:09:fc:dd:fc:
                    98:16:8f:ff:4c:62:9b:51:37:16:7f:40:63:1b:6f:
                    2a:48:c8:43:0c:92:9c:d8:ad:65:af:75:ec:68:9d:
                    27:ba:9d:5a:a0:49:12:7e:6a:e2:21:25:58:ec:50:
                    2a:e0:d7:9b:df:df:af:26:14:cd:d7:5b:7c:49:11:
                    54:a2:bc:14:f7:a1:b6:f1:c4:96:7c:8e:87:dd:fc:
                    86:3c:00:64:e2:e1:b3:5f:3a:f1:3f:54:35:bc:23:
                    d1:be:96:3c:db:38:60:24:71:e6:32:86:d3:5c:2c:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:94:C0:1A:80:FD:63:E4:0E:6D:A7:16:3B:DD:95:3D:2E:20:12:C6
            X509v3 Authority Key Identifier:
                keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:ed:3e:82:72:67:4e:12:9b:d1:6a:0a:8a:8a:9b:1f:66:
         8e:d4:91:7b:b0:90:62:08:5d:aa:05:eb:9b:c6:45:0b:f6:6c:
         ff:8e:b8:6a:c0:d7:fc:90:c7:bb:9f:20:bf:78:c7:29:ef:af:
         00:e9:76:44:4c:65:80:94:fd:3f:e5:ee:40:ab:9c:f5:88:cd:
         6a:d0:1d:4a:8d:ed:a3:a9:e3:27:ea:1d:12:1d:2f:a6:e5:fc:
         46:9a:7c:0f:1f:83:be:27:85:f8:ff:71:04:86:64:a5:f0:44:
         eb:f1:49:68:30:67:18:a8:50:ef:5a:b8:3c:6b:50:83:dd:17:
         a7:8b:1f:6c:46:4e:a8:80:c2:0d:c2:70:81:ba:ed:99:73:43:
         06:82:24:bb:97:d1:0e:43:ed:45:22:8b:66:91:b2:ee:71:e6:
         93:67:2b:ec:3d:da:05:7f:a0:68:65:9c:00:84:21:09:ee:fb:
         a9:b6:81:b2:51:f6:b9:27:57:a2:86:fd:81:5e:17:8e:a1:40:
         77:b8:66:7b:4f:90:f1:d5:5a:60:de:21:c5:e7:60:f8:b2:e5:
         8b:21:ca:ba:c4:cf:6e:88:b4:6b:6c:17:7e:df:21:ac:e6:b4:
         3b:ee:a9:16:b7:ce:be:b6:99:9d:92:97:05:38:aa:78:c9:3d:
         41:ff:c0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4DCxuXJOLOHzFJ0VexkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4
NWQwMGQwHhcNMjUwMTMxMDUwMDM3WhcNMjUwMjAxMDUwMDM3WjAzMTEwLwYDVQQD
EyhhZDk0YzAxYTgwZmQ2M2U0MGU2ZGE3MTYzYmRkOTUzZDJlMjAxMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtMmGlq4+Zm8bV5DlnP0SapPBvpf
lqaU2Tfp6ha50XoYr8lw8RrL0o0JY6HOKqOP/tR68uwLGdtLlm7N6OI7/ACTjPPW
57OhUAAre1b3RS4xxRnYmzn6IAhowstkIy18GOgDrOxwYS/BOarGUQfmla9arv0g
yTCkA8Cwr2gNz8C6gWcEwgfXqK1b/162mSlOPgn83fyYFo//TGKbUTcWf0BjG28q
SMhDDJKc2K1lr3XsaJ0nup1aoEkSfmriISVY7FAq4Neb39+vJhTN11t8SRFUorwU
96G28cSWfI6H3fyGPABk4uGzXzrxP1Q1vCPRvpY82zhgJHHmMobTXCwpVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2UwBqA/WPkDm2nFjvdlT0uIBLGMB8GA1UdIwQY
MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt
MTA3NzdmOWUzNjg1LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1
LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbntPoJy
Z04Sm9FqCoqKmx9mjtSRe7CQYghdqgXrm8ZFC/Zs/464asDX/JDHu58gv3jHKe+v
AOl2RExlgJT9P+XuQKuc9YjNatAdSo3to6njJ+odEh0vpuX8Rpp8Dx+DvieF+P9x
BIZkpfBE6/FJaDBnGKhQ71q4PGtQg90Xp4sfbEZOqIDCDcJwgbrtmXNDBoIku5fR
DkPtRSKLZpGy7nHmk2cr7D3aBX+gaGWcAIQhCe77qbaBslH2uSdXoob9gV4XjqFA
d7hme0+Q8dVaYN4hxedg+LLliyHKusTPboi0a2wXft8hrOa0O+6pFrfOvraZnZKX
BTiqeMk9Qf/AEw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:28 2025 by rpki-client on console-fra.rpki-client.org