
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File:                     wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier:          PRs/t/inJhERTfn1S+7kbRqhzk4wj7R5n9yTDUj51tU=
Subject key identifier:   13:76:F1:2A:1A:C3:48:A0:81:7F:F3:FD:56:E2:D8:1D:23:8D:E1:AB
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer:       /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial:       0194BB2930E7154A4F942509ED516A74BB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number:          123D
Signing time:             Fri 31 Jan 2025 07:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:26 +0000
Files and hashes:         1: 20U7SL-48kkH7iK0DO4f8T7R21E.roa (hash: GmOKvt6kHI1bE0YH6oqXpTeejjgDh3Wthg7QwYWtufU=)
                          2: OzaQ_7kTZTHwoTTX2NN8mltJI-o.roa (hash: 6dDv5MDRbhiqHG8v8VT7PwYWFlQ7ZjLoFXsl3qy3Gc8=)
                          3: cIRs34GrM17DP76r2K4VKlnq1i8.roa (hash: gvtYS4ycN0WNeVX6nyckWypk1ijeZALWriynsiEgZyQ=)
                          4: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: 5aPutM/+p20Pd0WlgdYwkSnjZVllh9DLam3A52cAP+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:26 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:30:e7:15:4a:4f:94:25:09:ed:51:6a:74:bb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
        Validity
            Not Before: Jan 31 07:00:26 2025 GMT
            Not After : Feb  1 07:00:26 2025 GMT
        Subject: CN=1376f12a1ac348a0817ff3fd56e2d81d238de1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:ce:22:f4:f2:a2:16:c6:36:f0:e2:3e:d9:
                    18:d7:f8:16:13:b0:ca:29:58:5f:4b:87:92:d1:34:
                    68:ad:f5:60:74:cb:4f:30:0c:2d:bb:93:46:2b:99:
                    ab:0e:f5:19:97:6f:52:81:b0:f3:43:1c:c2:8a:66:
                    98:51:26:e9:8f:dc:14:9d:6a:ed:8d:ab:63:51:f8:
                    ed:d2:23:b2:bc:e0:0e:f1:73:ab:df:4f:6f:71:b0:
                    a9:be:ba:f2:b2:29:fc:7e:a4:ac:ec:ca:a1:46:ed:
                    35:77:80:e6:90:2d:f3:ee:8a:c4:18:33:76:9f:dc:
                    9d:44:28:0c:00:1f:72:e8:9e:a8:db:08:09:e8:54:
                    ab:2a:86:79:bd:2e:f0:c1:e1:8c:2e:96:24:f0:25:
                    f7:30:3e:3d:ad:d5:3d:1c:00:e4:ae:9c:f3:84:02:
                    b2:d6:bc:a7:e5:cc:39:9e:a6:6d:7b:93:76:55:0b:
                    40:3e:ff:fe:5a:b4:da:98:41:6d:a3:0a:69:b2:18:
                    e9:a3:48:01:0c:dd:9b:b8:98:4b:6f:a5:3d:fd:78:
                    e8:62:a9:a8:85:6f:be:e8:5e:d9:ad:4d:fe:4f:4a:
                    e6:dd:7c:47:1c:79:b7:7a:09:12:0f:ec:99:50:d6:
                    93:1a:02:28:e1:2d:88:af:23:ca:80:01:8e:e3:d5:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:F1:2A:1A:C3:48:A0:81:7F:F3:FD:56:E2:D8:1D:23:8D:E1:AB
            X509v3 Authority Key Identifier:
                keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         49:22:fc:d6:1a:71:61:a5:ca:26:8a:90:34:17:37:c5:7f:d4:
         ce:39:12:54:b1:0f:32:76:d1:ae:e4:9c:6a:ff:dc:15:fb:b9:
         4c:e3:cc:14:f2:bb:13:75:d8:3c:f7:7f:3d:f3:0e:2a:7d:a7:
         dc:0a:d4:ab:2c:a8:57:6b:22:04:af:2f:68:c3:c3:f8:8e:96:
         ff:a7:5a:40:69:e4:f6:ec:ba:8c:91:83:10:62:48:47:0e:36:
         c0:ff:7d:cc:8a:7e:17:e5:6b:ec:6a:e2:b2:35:77:74:7e:f2:
         9c:22:92:69:c0:51:2a:5a:03:5c:5c:06:ef:fd:7c:2b:3f:aa:
         53:20:c9:8e:c6:fa:76:90:74:21:f5:d1:b2:66:cc:bc:a3:72:
         b9:09:cc:98:80:12:28:0b:a4:3b:11:e6:e2:96:c6:d4:75:12:
         a8:40:fa:a3:e1:eb:f8:a5:36:a3:94:43:c7:0d:1c:45:2b:a5:
         00:e1:2a:ec:8d:6d:3f:6b:af:a1:d0:51:59:95:f0:2f:50:5b:
         f8:2b:bc:b1:96:35:42:03:82:64:e8:7f:de:90:83:c6:74:bf:
         1e:38:dd:41:28:8e:f5:f3:09:5f:7b:29:71:47:6b:ea:00:a5:
         07:02:be:ad:09:d5:bd:7c:59:9d:db:bf:ce:93:83:a3:16:9d:
         bf:a8:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:01 2025 by rpki-client on console-fra.rpki-client.org