
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File:                     XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier:          X9Uh/2L86uM8e/THoxXYWm128+lKZa1jN/IyZUAiXaA=
Subject key identifier:   37:38:F5:C8:62:42:BF:81:53:20:2F:B0:F0:D0:DD:4F:9D:ED:81:5C
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer:       /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial:       0194BB2907BF0F033CDD7E605508F123FE47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number:          0DA1
Signing time:             Fri 31 Jan 2025 07:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:15 +0000
Files and hashes:         1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
                          2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
                          3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
                          4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: SSwmsmeP3NNYyJ7vUQZ7LJtHWiQCV3qJueKCyJiayfk=)
                          5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:15 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:07:bf:0f:03:3c:dd:7e:60:55:08:f1:23:fe:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
        Validity
            Not Before: Jan 31 07:00:15 2025 GMT
            Not After : Feb  1 07:00:15 2025 GMT
        Subject: CN=3738f5c86242bf8153202fb0f0d0dd4f9ded815c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:df:5f:f7:44:d8:90:1f:f0:4c:e1:e4:b1:
                    15:0e:c0:bc:3e:c6:7b:65:c6:bb:93:bb:24:f6:d6:
                    21:86:01:92:10:c5:cc:dd:c3:c2:82:7b:ae:0a:1e:
                    ec:a6:f5:32:c3:51:43:88:85:3b:51:25:4d:0a:75:
                    3a:81:41:b0:9c:a7:33:c7:d6:6d:48:e7:a3:35:b5:
                    02:c7:83:b6:15:1a:ab:08:dc:96:74:c2:a8:6f:ea:
                    a2:e5:52:af:a7:8d:94:01:57:b5:3c:cd:b2:52:1e:
                    83:83:1b:f1:4d:00:38:67:96:4f:09:f0:ff:45:d7:
                    9c:1e:c2:ee:d9:80:36:72:94:ba:57:ce:19:88:f2:
                    05:46:69:9c:20:e8:ea:bf:7b:bb:0e:8a:e0:16:db:
                    a3:2b:f5:c8:8c:07:70:26:eb:d7:e2:f7:b2:83:d0:
                    d2:4d:d8:29:78:f9:5c:eb:94:b5:22:08:84:23:d7:
                    94:29:dc:f8:5c:55:d9:b8:43:7a:98:68:d9:ca:c0:
                    cc:95:a9:25:08:48:3d:ab:34:76:f1:f3:55:6a:8e:
                    ed:ef:c2:85:be:7b:ad:b9:52:68:4e:c8:bc:e1:37:
                    80:67:ee:50:2f:e7:66:a6:57:77:2a:7f:4e:8c:f9:
                    72:44:8e:77:7f:a3:92:40:a8:20:4b:19:b7:7a:79:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:38:F5:C8:62:42:BF:81:53:20:2F:B0:F0:D0:DD:4F:9D:ED:81:5C
            X509v3 Authority Key Identifier:
                keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         a3:d9:35:f1:17:2d:3e:75:3d:cd:4d:86:cc:a5:fb:46:fb:60:
         38:64:59:24:80:d9:ab:72:eb:41:94:94:a9:2e:1a:e9:df:8b:
         18:53:05:8a:d6:0a:a4:77:fe:c3:f6:76:16:61:a0:94:a7:77:
         9c:a5:0d:bb:09:3b:fc:c9:eb:4d:97:11:73:07:fa:56:3e:2b:
         8e:66:48:fb:4a:a5:a6:c2:45:27:bb:94:2d:b7:81:30:4d:7a:
         c9:c2:f6:41:b3:46:d3:57:98:f4:2c:8a:68:82:78:00:f6:4a:
         7f:60:92:90:d1:8a:e1:b4:d2:ac:b1:b8:96:ce:4c:75:d5:87:
         d2:c2:cf:95:84:75:07:bb:eb:5e:e4:53:dd:0a:e9:4b:d8:9a:
         f7:32:06:47:8a:d5:30:ea:7f:4d:aa:c2:46:57:f5:fc:d4:b9:
         54:f7:a5:6e:67:bd:4b:cd:60:8b:28:ca:ec:61:30:fd:27:09:
         7f:c1:b5:c6:13:1c:ba:e0:98:f2:2c:8b:d0:06:32:6d:ef:11:
         cc:4c:5a:78:84:9f:d6:2a:52:24:a5:a8:66:7a:b9:7d:ce:22:
         04:5a:4f:b6:4c:f0:98:5e:4a:b7:60:31:c3:99:43:b9:68:30:
         8f:aa:4c:c2:aa:63:13:00:d9:d3:5f:30:9c:0b:e2:4b:3a:53:
         49:1f:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:54 2025 by rpki-client on console-fra.rpki-client.org