Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File:                     YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier:          FoJLoY4OFWcjQl4hBoiZZyaAXANDhubwmRHipjKXzlU=
Subject key identifier:   CE:D7:52:D5:FF:0D:E2:A9:AF:0B:1E:8A:BE:FE:CC:9D:9D:37:9E:4D
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer:       /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial:       0194BB5FE4B841AE6B0AF8156AD78BBA1F0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number:          028A
Signing time:             Fri 31 Jan 2025 08:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:11 +0000
Files and hashes:         1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
                          2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
                          3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
                          4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
                          5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: XyAu2+KW0he/iCH9Rzx7RY3dsQxvBDQEuC8Q2K/xa08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:e4:b8:41:ae:6b:0a:f8:15:6a:d7:8b:ba:1f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
        Validity
            Not Before: Jan 31 08:00:11 2025 GMT
            Not After : Feb  1 08:00:11 2025 GMT
        Subject: CN=ced752d5ff0de2a9af0b1e8abefecc9d9d379e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:6a:1e:1d:12:0f:2d:1a:39:ff:20:a9:cb:
                    92:34:cb:48:55:ec:92:02:6a:a8:79:26:0e:aa:01:
                    45:ad:84:30:a3:e9:c8:18:5e:7e:54:1a:ad:ba:88:
                    ed:b3:39:eb:94:32:44:94:c1:56:35:7a:02:4a:8c:
                    e6:c5:d2:25:b9:60:5e:7a:9c:58:c5:a7:eb:6c:6d:
                    93:67:e1:2a:d6:15:f7:51:e4:8e:79:74:23:c4:46:
                    7a:e4:ba:35:9f:a4:9c:1c:27:de:ac:1c:b1:bf:e9:
                    a0:5f:08:f8:88:fa:32:90:0e:69:2f:fc:c9:d5:c2:
                    1a:cc:6f:76:35:6b:db:a9:b9:5f:eb:d7:4c:78:33:
                    9a:4b:3b:d3:fb:84:ab:c9:82:ef:0a:f8:62:14:05:
                    8d:6c:92:9b:1d:88:3d:54:11:e9:b3:3d:51:0e:4f:
                    31:ba:ce:aa:e4:6b:35:6d:07:b1:b9:7d:f0:30:f5:
                    d8:70:c4:cc:51:69:fc:83:32:04:49:14:99:4d:a0:
                    0a:f5:60:fc:3d:4d:2c:c2:16:4d:a0:25:ec:91:2d:
                    f2:d5:b0:e1:ee:25:2d:41:b7:f0:44:72:64:d4:13:
                    1d:b9:67:5c:b3:c7:27:c8:dc:3b:e2:5d:f7:d4:b6:
                    06:c9:ba:78:82:76:81:84:56:56:db:0b:44:31:5a:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:52:D5:FF:0D:E2:A9:AF:0B:1E:8A:BE:FE:CC:9D:9D:37:9E:4D
            X509v3 Authority Key Identifier:
                keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:33:b3:9e:11:ee:89:3c:1d:53:e7:28:d2:fe:93:39:1d:90:
         55:14:d7:40:cb:8f:24:46:56:4a:20:c8:40:b8:7f:2d:9c:c2:
         04:59:fc:c9:23:99:e4:46:77:a9:e2:8a:3d:35:5a:f2:48:82:
         65:07:9c:98:df:d5:be:64:eb:21:be:c3:84:c2:d3:1b:5c:31:
         4f:30:d5:e7:fc:70:18:94:27:d7:ca:07:bc:ff:8e:96:b5:15:
         ba:52:7d:0a:3f:18:5f:3c:22:2e:45:ad:bb:6b:d0:d6:94:87:
         3e:5c:f8:d6:03:a6:96:34:08:35:bf:fb:0d:76:1f:4f:94:f5:
         96:bb:01:0b:65:5a:ea:b7:2a:60:a9:d2:57:ab:c8:4e:c5:f0:
         41:b7:80:16:68:2d:8e:f5:53:19:65:37:11:df:5d:5e:d0:b2:
         50:2b:df:58:04:db:33:2b:e5:3e:f2:5a:f9:3b:c7:15:f8:da:
         7c:11:23:f4:68:22:54:c9:34:81:f7:20:50:f1:08:45:fc:e1:
         e7:90:df:41:f8:2f:0f:cc:fc:09:ce:9f:22:c5:5a:39:8f:b5:
         c7:6a:bb:c5:8f:a5:5c:db:44:b5:ac:ec:03:c2:5c:fa:0f:e7:
         a6:f1:5b:89:5f:91:0e:1b:bc:01:9c:49:12:e0:77:7f:ee:67:
         f8:bb:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:20 2025 by rpki-client on console-fra.rpki-client.org