Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
File:                     MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft (raw, json)
Hash identifier:          4f4k7l2I6LmTvv/KaLmsyKGE8q6VmdU+d6c3Uztitb4=
Subject key identifier:   86:C6:3C:85:59:EB:04:51:B6:92:89:BC:01:1E:C5:4B:F3:B3:CF:B1
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Certificate issuer:       /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial:       0194BAF26BD83D2E216692781E3D50B8D153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
Manifest number:          0858
Signing time:             Fri 31 Jan 2025 06:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:36 +0000
Files and hashes:         1: MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl (hash: a//JSp/swuEoCkjPVZqmDIWV8LdVbGdT6ak0bz7R/iw=)
                          2: hWRauvdDJQt-oDXnvWA4MwMmCao.roa (hash: XqDB4iBF4pQimyQpMd5E4c4AjMzIAL2t4iD/Z/oy7sk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:6b:d8:3d:2e:21:66:92:78:1e:3d:50:b8:d1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
        Validity
            Not Before: Jan 31 06:00:36 2025 GMT
            Not After : Feb  1 06:00:36 2025 GMT
        Subject: CN=86c63c8559eb0451b69289bc011ec54bf3b3cfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:0a:15:07:e8:cb:5f:39:9b:96:ce:29:c3:
                    0d:20:30:70:58:52:5e:c5:d8:ac:89:4f:af:de:1b:
                    dd:00:3c:c2:4c:03:c0:e0:ea:9d:86:3d:79:72:d2:
                    bd:97:9d:93:3f:75:df:8a:42:0b:af:8d:56:65:9e:
                    a1:d3:56:a7:95:af:2f:81:49:81:f2:49:df:d0:3c:
                    97:c5:05:6f:56:cd:54:0e:0a:e6:39:61:30:3e:79:
                    eb:87:3a:d2:5a:78:fc:0f:42:62:3b:27:a1:5c:c9:
                    5a:75:0b:8c:e0:07:bf:62:ac:e8:40:91:f1:32:48:
                    7a:10:fc:0e:d1:93:1c:d4:91:3c:57:29:61:77:23:
                    ad:29:36:9d:b4:87:2a:d3:c0:3c:6a:8a:65:1c:42:
                    63:09:29:31:f0:61:e8:0e:02:7a:c8:c3:02:30:68:
                    fd:15:67:98:f9:a7:e7:db:4b:7b:03:66:66:47:fa:
                    b2:cc:63:ba:b6:83:27:87:cc:51:72:9a:09:2d:b6:
                    66:58:54:60:21:61:e4:f2:26:59:2c:1c:b9:c7:94:
                    ce:7d:4c:39:d5:cd:52:28:2b:9c:64:59:dc:49:54:
                    35:91:80:74:12:48:05:46:9a:82:69:ff:45:72:5b:
                    82:cd:eb:51:59:c2:ce:29:a5:8a:70:29:ae:be:69:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:3C:85:59:EB:04:51:B6:92:89:BC:01:1E:C5:4B:F3:B3:CF:B1
            X509v3 Authority Key Identifier:
                keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:76:f0:19:51:44:ae:85:bf:fe:1f:2b:2c:7a:ed:32:02:69:
         cb:ab:ad:ac:9f:21:ff:9b:7f:4c:b6:23:98:5b:42:8b:8e:fc:
         bf:1a:f3:35:a8:13:4e:d7:73:ba:47:d3:2d:de:ad:ab:61:80:
         2d:49:a1:77:f2:a1:02:c5:d9:85:71:f9:01:85:05:6e:82:69:
         2d:7a:f1:d9:a8:7f:ea:7c:15:23:4e:8a:70:55:be:dd:c4:dd:
         bb:59:9f:86:40:e9:1c:f0:c3:65:80:1c:2c:0b:51:b7:f1:0c:
         f6:66:13:2f:2e:7c:9e:d3:50:2d:01:fa:77:1b:fc:62:b8:c7:
         fa:62:f0:22:04:78:1d:a6:a2:0c:58:09:3c:8f:b3:55:c8:31:
         43:51:89:7f:26:68:11:20:c8:87:aa:84:1e:32:b4:59:98:53:
         13:eb:af:79:4e:fa:2b:c2:4c:1b:af:dc:f8:5d:e9:f1:16:40:
         50:5a:9f:00:f2:a2:32:91:f5:ba:cb:8a:67:10:2c:af:4c:88:
         d8:e7:9f:1a:8e:2c:83:9e:c2:e6:56:cb:a1:4b:d5:4f:3e:71:
         3f:d0:30:6f:13:c1:a7:fb:cd:27:88:4a:4f:ed:0e:e2:db:01:
         26:a3:33:6e:f1:25:e4:4b:25:43:92:2b:04:de:43:1d:80:d3:
         44:bc:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:30 2025 by rpki-client on console-fra.rpki-client.org