
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          oP3LSWaQTq31uRaugs/saYvOd8wZMjpN+NVZ0SIdKfs=
Subject key identifier:   96:F1:BA:C8:14:BC:F8:DA:CE:CE:75:D8:53:42:05:1D:5D:03:B7:7B
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       0194BB298E20C3E94E8D46AA979784302A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 07:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:50 +0000
Files and hashes:         1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: hl87COccJv9LaOqqTVVRu2OhOYQfxL+wl1ioa+Blfhg=)
                          2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:8e:20:c3:e9:4e:8d:46:aa:97:97:84:30:2a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Jan 31 07:00:50 2025 GMT
            Not After : Feb  1 07:00:50 2025 GMT
        Subject: CN=96f1bac814bcf8dacece75d85342051d5d03b77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:34:54:19:17:7e:d1:f0:61:c2:5b:df:a6:
                    03:5f:5d:92:d8:e0:e0:f2:be:07:c9:67:4d:c4:52:
                    e5:f4:22:74:c3:1f:af:d0:96:7d:b6:1d:22:64:96:
                    6a:ee:35:93:3f:1c:dd:42:cb:c5:f1:f4:7f:90:29:
                    c8:f1:fb:d5:34:9e:bd:32:60:58:81:f3:a0:be:01:
                    9c:f6:65:82:ba:70:92:01:6a:0d:0c:ec:dd:87:00:
                    c9:01:fc:16:9c:12:db:db:b5:61:6c:f9:ae:2b:06:
                    ce:0b:2a:e5:43:3c:e8:ef:62:e0:91:3b:b8:2d:fd:
                    44:0b:6a:bf:66:8e:7c:ba:15:63:be:72:06:c4:ef:
                    29:df:f9:c0:cd:7b:c9:f6:99:e6:1d:78:e5:da:31:
                    24:5f:ef:df:92:11:f2:a9:cd:d3:ef:39:b7:5e:79:
                    46:50:bf:e5:55:cf:15:87:c3:a1:fb:f1:cb:1c:f4:
                    aa:ef:38:7a:f3:2c:e1:d5:51:6d:44:58:d0:e3:88:
                    73:a3:cd:a0:8f:45:60:ca:a4:ab:04:20:12:c2:e3:
                    23:83:7a:d2:d5:a3:ef:de:6c:0b:1f:ac:ed:1c:41:
                    1d:15:61:8a:a3:8e:29:57:be:4b:d7:a4:e3:bf:de:
                    16:fe:8d:2f:5e:eb:87:0f:57:44:7c:1c:1d:b5:1d:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F1:BA:C8:14:BC:F8:DA:CE:CE:75:D8:53:42:05:1D:5D:03:B7:7B
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         ab:45:fd:03:0c:76:74:76:8e:17:7d:8b:19:9f:06:29:ed:3b:
         65:62:88:66:65:ba:ab:8d:80:66:0a:f4:57:91:b2:2c:aa:46:
         66:44:50:ee:cb:6b:23:31:80:21:32:09:9a:47:25:19:f5:7b:
         b8:51:f4:63:ca:08:ae:e8:f8:e7:1c:c2:e6:7e:15:ec:15:23:
         9f:8d:52:12:13:3c:b0:68:7c:c5:26:76:60:68:ab:33:1e:c2:
         89:97:7e:f0:0f:33:2a:39:c9:5b:b5:61:a5:9a:8e:0f:3c:16:
         7f:0b:ba:13:93:87:e3:29:b9:c2:49:af:4b:4f:e5:f3:1e:dc:
         38:1d:4b:15:6e:3a:dd:b9:56:ba:5b:a8:fc:fd:10:b2:7b:67:
         20:cc:27:c6:a6:ad:25:e0:b4:9f:20:3c:40:18:6c:1b:bd:d7:
         c7:9f:df:fb:f5:54:80:03:af:5e:74:a7:ce:b5:5c:b7:b6:b1:
         2a:d0:26:bb:61:16:79:d7:94:e7:ec:b3:31:5e:68:ad:b5:f6:
         a2:c5:ae:a9:66:fd:3e:22:2f:32:df:3a:42:86:3c:29:1a:48:
         42:03:42:3a:c2:c4:1f:79:2e:54:1b:59:7a:ce:20:61:90:dc:
         83:8a:f3:98:ed:e7:90:42:bc:23:b1:de:3a:d8:35:75:e3:26:
         b7:af:4f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KY4gw+lOjUaql5eEMCo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZjYyYTg0N2E0ZWRmZjk5NTcxYTMyZTk0ZWRmZjA1MjVi
MDNiNjYwHhcNMjUwMTMxMDcwMDUwWhcNMjUwMjAxMDcwMDUwWjAzMTEwLwYDVQQD
Eyg5NmYxYmFjODE0YmNmOGRhY2VjZTc1ZDg1MzQyMDUxZDVkMDNiNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVs0VBkXftHwYcJb36YDX12S2ODg
8r4HyWdNxFLl9CJ0wx+v0JZ9th0iZJZq7jWTPxzdQsvF8fR/kCnI8fvVNJ69MmBY
gfOgvgGc9mWCunCSAWoNDOzdhwDJAfwWnBLb27VhbPmuKwbOCyrlQzzo72LgkTu4
Lf1EC2q/Zo58uhVjvnIGxO8p3/nAzXvJ9pnmHXjl2jEkX+/fkhHyqc3T7zm3XnlG
UL/lVc8Vh8Oh+/HLHPSq7zh68yzh1VFtRFjQ44hzo82gj0VgyqSrBCASwuMjg3rS
1aPv3mwLH6ztHEEdFWGKo44pV75L16Tjv94W/o0vXuuHD1dEfBwdtR03uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbxusgUvPjazs512FNCBR1dA7d7MB8GA1UdIwQY
MBaAFGL2KoR6Tt/5lXGjLpTt/wUlsDtmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84ZjQ3ODAtZWZhZi00ZTA2LWExZmEt
MjU1MGU0YjBmYmIyLzEvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84ZjQ3ODAtZWZhZi00ZTA2LWExZmEtMjU1MGU0YjBmYmIy
LzEvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0X9Awx2
dHaOF32LGZ8GKe07ZWKIZmW6q42AZgr0V5GyLKpGZkRQ7strIzGAITIJmkclGfV7
uFH0Y8oIruj45xzC5n4V7BUjn41SEhM8sGh8xSZ2YGirMx7CiZd+8A8zKjnJW7Vh
pZqODzwWfwu6E5OH4ym5wkmvS0/l8x7cOB1LFW463blWuluo/P0QsntnIMwnxqat
JeC0nyA8QBhsG73Xx5/f+/VUgAOvXnSnzrVct7axKtAmu2EWedeU5+yzMV5orbX2
osWuqWb9PiIvMt86QoY8KRpIQgNCOsLEH3kuVBtZes4gYZDcg4rzmO3nkEK8I7He
Otg1deMmt69P9A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:47 2025 by rpki-client on console-fra.rpki-client.org