
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File:                     uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier:          xf15HLvSZZpc9xHgGrt++M5UazfqgpxnG7E1Y8JnuKE=
Subject key identifier:   24:0F:F8:EB:B1:43:E7:2F:08:1C:1E:3B:4F:0A:18:85:33:A0:58:D5
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer:       /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial:       0194BABB2E594284EABF2CDA96183B689846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number:          13BD
Signing time:             Fri 31 Jan 2025 05:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:16 +0000
Files and hashes:         1: oimw25gLGrg8VoA88DA5Qz6cbTs.roa (hash: pg4JhqGSyuBLyWQkEY6EPIiPycbtpRjAMWZIyZYwiWM=)
                          2: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: 10fid9NmXab2xGRbDF2+ht6YFcLk6okjA7SKLqNZ0Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:16 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:2e:59:42:84:ea:bf:2c:da:96:18:3b:68:98:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
        Validity
            Not Before: Jan 31 05:00:16 2025 GMT
            Not After : Feb  1 05:00:16 2025 GMT
        Subject: CN=240ff8ebb143e72f081c1e3b4f0a188533a058d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c1:7f:82:0b:31:f4:9b:02:60:0a:66:f6:86:
                    0e:50:0f:2a:cc:c0:1b:9c:12:8c:d4:7f:0a:44:f4:
                    7d:61:7a:95:12:46:ab:76:2f:88:49:3a:5f:bf:f1:
                    47:87:72:bb:da:2c:0a:d5:91:8e:b9:39:5f:47:27:
                    8e:ef:8e:b1:d2:6d:52:28:4e:c4:d6:a3:53:09:ef:
                    e9:22:91:83:c4:88:10:4c:52:56:ad:06:0a:cf:20:
                    06:2a:29:58:fd:45:fd:20:ad:cd:18:36:73:c4:5b:
                    d0:0a:fc:6f:25:79:ac:ab:70:5a:de:b5:10:4c:97:
                    64:d3:d7:d6:02:26:0b:b9:48:42:7d:c5:a0:1e:1c:
                    1c:32:f0:bc:7b:35:f6:7f:e8:40:3c:95:e4:07:49:
                    76:ae:93:2f:e0:83:05:0d:54:d8:ba:5e:80:91:41:
                    20:31:6f:72:7e:40:f1:77:0e:0d:c4:bd:31:7c:65:
                    d8:98:95:6a:f9:2f:6f:f3:d4:88:23:8c:82:eb:24:
                    2e:a6:a7:b6:52:3d:57:c3:e4:f7:3b:cf:e5:a4:17:
                    35:a1:53:49:52:6f:0e:5a:73:7a:bf:e3:68:2f:b4:
                    6a:6b:09:27:ae:b4:ce:f5:5b:73:cc:2a:d4:be:46:
                    a4:e5:d9:6e:25:bf:2d:73:4f:1d:51:6e:2b:2e:d9:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0F:F8:EB:B1:43:E7:2F:08:1C:1E:3B:4F:0A:18:85:33:A0:58:D5
            X509v3 Authority Key Identifier:
                keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         09:65:a5:5a:40:c2:b1:60:bf:d3:15:52:8d:67:4d:50:f9:fe:
         98:09:0b:ec:b5:fa:a2:2d:ac:fe:e1:a9:32:be:bc:91:50:c9:
         a5:cd:4b:54:70:b0:62:ac:df:85:da:cc:b8:27:30:06:04:63:
         3b:39:d3:ad:d7:f2:26:cb:34:dc:0d:40:8e:b5:1d:6d:33:19:
         fb:24:c3:64:78:12:f0:e1:68:ab:ea:d1:2b:c5:91:a8:6d:5f:
         41:e2:46:2b:fa:7c:f5:ee:d7:ec:56:44:80:31:7b:1e:33:c7:
         ba:5a:32:22:e5:20:84:1d:dd:6b:e3:5f:c2:78:99:6e:94:d3:
         f4:14:b4:ab:5f:42:d9:2d:77:61:a0:b0:c8:bb:29:a7:d9:d7:
         ba:8d:3e:d8:54:59:5a:21:e6:db:4c:c2:e0:6b:7a:5d:29:e9:
         d5:28:38:ee:e4:ad:d7:26:4d:2f:fa:bf:5f:9f:90:b3:32:e4:
         df:02:ee:ee:fc:98:05:a2:04:01:e8:70:81:4f:71:e6:7c:48:
         0c:32:ec:f6:97:fc:ac:3b:38:58:06:d0:63:b6:80:f4:a6:ec:
         3e:bf:69:21:32:dc:2a:71:35:ee:40:db:75:07:88:7e:1a:0c:
         f1:20:32:25:1a:b1:8d:6c:9a:fd:04:5f:67:14:d9:d5:93:ed:
         3b:de:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:15 2025 by rpki-client on console-fra.rpki-client.org