
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File:                     Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier:          mfFIr91U67FH4u1wF0/43NRCs5NJu3lkfWePKY3Bj28=
Subject key identifier:   70:FF:F0:98:5C:15:63:6D:06:CA:29:4C:60:49:F1:F9:77:A9:92:33
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer:       /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial:       0194BAF277541056B2E3D839F44651E4A642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 06:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:39 +0000
Files and hashes:         1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: RY20bAmVFQlviumHznB4rBgYDnwoFjW3Cqr1UAY0RMo=)
                          2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:77:54:10:56:b2:e3:d8:39:f4:46:51:e4:a6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
        Validity
            Not Before: Jan 31 06:00:39 2025 GMT
            Not After : Feb  1 06:00:39 2025 GMT
        Subject: CN=70fff0985c15636d06ca294c6049f1f977a99233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:1f:9c:7b:f9:ac:b5:53:5b:78:eb:8d:9e:
                    92:c7:db:41:3c:e5:f7:8f:37:66:bb:d4:88:0f:56:
                    33:76:4b:83:1b:da:57:56:96:0f:75:82:df:0f:85:
                    9a:40:28:57:6b:38:fb:d5:a2:23:88:ee:a0:78:80:
                    1c:94:0d:92:3d:21:2e:e7:65:2a:07:74:eb:95:3c:
                    9e:d1:88:0d:9c:3b:7a:a5:02:5b:c5:ba:b3:40:ba:
                    43:84:72:25:29:d0:7e:bc:09:33:bb:75:c5:94:03:
                    f6:9e:1d:79:3b:09:8c:31:74:83:c6:ad:85:58:cc:
                    b3:07:e4:ae:3b:50:87:0c:e7:f7:5d:2a:02:8f:e6:
                    b4:90:6b:a7:72:b4:ac:e1:db:1d:ec:f8:e8:83:ec:
                    75:ed:ae:f2:05:94:f7:be:8a:ce:48:37:af:56:ee:
                    07:84:71:88:ed:ed:9a:01:01:89:3d:1e:5d:9c:d6:
                    27:f7:09:7b:98:4d:8c:4a:1e:d7:5f:25:a0:e9:4e:
                    20:36:9a:ce:58:c4:73:bd:c8:a5:a1:e8:6c:19:2a:
                    d8:55:29:3d:80:dd:5b:09:f8:00:ac:74:b5:74:28:
                    4c:9d:eb:67:54:01:22:47:44:0c:3e:01:64:6e:38:
                    a6:98:a5:d7:3d:b7:31:fe:75:e7:08:1a:ee:da:a1:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FF:F0:98:5C:15:63:6D:06:CA:29:4C:60:49:F1:F9:77:A9:92:33
            X509v3 Authority Key Identifier:
                keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         42:2d:8a:54:ee:a1:92:af:6b:8c:d4:8c:4e:42:12:31:40:93:
         cd:be:16:51:13:f3:5b:10:42:80:1c:df:c5:d3:52:bf:d1:7e:
         68:54:c5:9e:a4:43:bd:aa:1f:af:dc:13:f7:e6:74:88:f3:c7:
         e7:57:30:21:62:84:5c:82:8d:dd:06:d7:e3:68:b6:60:02:60:
         6c:08:63:96:50:a0:eb:71:b0:55:7f:02:5b:88:26:0d:39:e4:
         b9:12:30:e3:14:f7:3f:84:14:0a:11:39:3e:8d:f3:d2:ae:21:
         a5:ae:66:2a:2d:36:c2:91:24:b3:25:93:7a:26:13:83:44:64:
         1d:d6:1a:53:9d:d8:2b:13:21:10:5f:36:af:30:d0:8c:80:50:
         ae:7f:d9:aa:56:0c:96:8d:fc:4d:93:73:fe:39:fa:40:06:3f:
         96:41:1c:e8:64:2f:b4:21:d8:95:b7:e6:51:3a:3d:8d:68:2b:
         fe:53:79:8e:5c:be:9a:f0:ea:80:5e:4c:30:5b:67:8f:61:40:
         33:68:36:bf:15:54:fe:a7:ac:93:73:1b:74:6a:ea:ec:e8:d2:
         d7:a2:46:22:20:7c:ee:42:c6:79:4c:e4:77:6c:50:dc:38:08:
         62:1d:8c:69:69:e9:01:bb:42:46:e6:c3:da:9a:d0:be:40:3c:
         35:d4:49:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:35 2025 by rpki-client on console-fra.rpki-client.org