Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File:                     ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier:          k1jTOBZ6Py6K/x7gosCFYU86yAWQUZOL8d+cqLU4mxs=
Subject key identifier:   46:0E:3C:83:E7:19:8D:6B:7F:07:57:53:06:0F:D1:2F:BF:77:13:35
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer:       /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial:       0194BA8498AA5C9F3A6F7E9873C242108AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 04:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:39 +0000
Files and hashes:         1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
                          2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: lhG7Tg7zTwcDP4xY2c4DrtrLhJqFLWKV5uVaMMagNQM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:98:aa:5c:9f:3a:6f:7e:98:73:c2:42:10:8a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
        Validity
            Not Before: Jan 31 04:00:39 2025 GMT
            Not After : Feb  1 04:00:39 2025 GMT
        Subject: CN=460e3c83e7198d6b7f075753060fd12fbf771335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:7d:d4:6b:eb:d4:07:8e:90:a9:dc:64:94:
                    34:2d:ce:73:c2:5c:02:99:0b:17:2f:2c:1a:91:e8:
                    e8:03:d3:c7:ad:14:22:eb:d6:e5:db:bc:b5:54:fe:
                    74:ab:3d:a6:1b:00:2a:68:6d:31:4c:68:b6:e8:15:
                    d3:6b:af:f3:ee:ad:20:e0:7e:d4:99:3b:4b:a0:9a:
                    45:a1:b0:68:c1:15:7b:1f:48:f6:39:82:0c:3b:ae:
                    5d:56:b7:8f:ec:6f:c0:5d:81:3a:26:3c:c9:3e:60:
                    43:1f:f7:99:0e:16:30:f8:5b:39:9e:0d:a7:f6:38:
                    a0:02:b7:4b:0a:5b:db:05:bf:9d:c8:d4:bb:1e:b3:
                    6a:1e:f7:96:e0:58:9e:41:21:ea:bf:d0:45:cb:7e:
                    b5:ba:1e:0e:c9:9e:c8:32:bc:1c:99:fd:2e:9e:d3:
                    62:83:41:5e:cf:94:16:13:43:17:c0:94:59:d2:59:
                    a3:11:6a:cf:bc:30:3c:ff:4f:d2:37:01:01:e3:5b:
                    3f:a7:41:74:e3:5b:c7:3a:e5:33:04:81:a8:b4:d2:
                    56:a4:5e:63:5a:ab:35:d1:fd:e6:0c:b6:28:b5:fa:
                    3e:14:34:e3:ca:ba:24:9e:f0:4f:4c:1b:71:94:5d:
                    fb:af:25:32:c0:d4:62:53:e1:6c:0a:5c:3a:27:a1:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0E:3C:83:E7:19:8D:6B:7F:07:57:53:06:0F:D1:2F:BF:77:13:35
            X509v3 Authority Key Identifier:
                keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:bb:43:ba:e9:d0:27:b4:59:5e:8d:32:17:da:2c:39:c7:
         9e:de:ec:f8:c2:07:47:6a:eb:9d:bb:34:c6:38:ea:24:9f:e5:
         69:27:c4:ec:c6:81:45:2d:06:8b:b5:e0:cf:bd:4e:e2:3b:f6:
         65:14:db:3b:3b:c5:2e:e8:9d:9c:c6:78:8e:da:98:40:3e:72:
         f0:f3:6d:8c:d7:0f:3a:16:73:3a:8a:c2:5d:52:c1:99:55:f7:
         b4:38:f0:3b:b5:7f:62:5c:74:75:0f:07:33:bf:ca:2f:6f:d9:
         bb:4f:7f:2b:93:a6:28:f4:5d:11:90:93:cf:79:77:b6:6f:3a:
         20:3b:c1:15:32:63:5c:74:c6:55:94:8b:93:8c:0a:10:4a:71:
         d4:de:b4:c3:1b:65:6b:3f:16:0b:ba:2f:b8:5e:8c:d0:50:b3:
         c1:93:59:f8:4c:a7:e0:0c:34:d8:06:f6:2a:50:98:bc:b0:dd:
         e5:46:8f:33:20:d0:d9:f5:a8:7e:40:03:f7:16:61:5e:5e:fd:
         76:f1:83:83:28:39:0c:b0:bb:21:06:5d:35:c9:f0:b4:36:72:
         a4:44:2d:cb:d0:f5:bb:18:cd:0f:29:be:28:b5:77:66:d3:0d:
         16:bd:0c:bd:43:17:00:5b:86:d5:98:23:13:b5:3f:da:21:5d:
         af:91:e6:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hJiqXJ86b36Yc8JCEIqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjRlNjZkN2NiYTc3Yjk3NzY4NTU1OWMyNDgxYmI5MDQ0
YzViNzUwHhcNMjUwMTMxMDQwMDM5WhcNMjUwMjAxMDQwMDM5WjAzMTEwLwYDVQQD
Eyg0NjBlM2M4M2U3MTk4ZDZiN2YwNzU3NTMwNjBmZDEyZmJmNzcxMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MR91Gvr1AeOkKncZJQ0Lc5zwlwC
mQsXLywakejoA9PHrRQi69bl27y1VP50qz2mGwAqaG0xTGi26BXTa6/z7q0g4H7U
mTtLoJpFobBowRV7H0j2OYIMO65dVreP7G/AXYE6JjzJPmBDH/eZDhYw+Fs5ng2n
9jigArdLClvbBb+dyNS7HrNqHveW4FieQSHqv9BFy361uh4OyZ7IMrwcmf0untNi
g0Fez5QWE0MXwJRZ0lmjEWrPvDA8/0/SNwEB41s/p0F041vHOuUzBIGotNJWpF5j
Wqs10f3mDLYotfo+FDTjyroknvBPTBtxlF37ryUywNRiU+FsClw6J6FN9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYOPIPnGY1rfwdXUwYP0S+/dxM1MB8GA1UdIwQY
MBaAFBAk5m18une5d2hVWcJIG7kETFt1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMTU1YzktMTNlMi00YjI4LWI2ODIt
NDdlYTNmODc0MzU1LzEvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hMTU1YzktMTNlMi00YjI4LWI2ODItNDdlYTNmODc0MzU1
LzEvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+C7Q7rp
0Ce0WV6NMhfaLDnHnt7s+MIHR2rrnbs0xjjqJJ/laSfE7MaBRS0Gi7Xgz71O4jv2
ZRTbOzvFLuidnMZ4jtqYQD5y8PNtjNcPOhZzOorCXVLBmVX3tDjwO7V/Ylx0dQ8H
M7/KL2/Zu09/K5OmKPRdEZCTz3l3tm86IDvBFTJjXHTGVZSLk4wKEEpx1N60wxtl
az8WC7ovuF6M0FCzwZNZ+Eyn4Aw02Ab2KlCYvLDd5UaPMyDQ2fWofkAD9xZhXl79
dvGDgyg5DLC7IQZdNcnwtDZypEQty9D1uxjNDym+KLV3ZtMNFr0MvUMXAFuG1Zgj
E7U/2iFdr5HmDw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:21 2025 by rpki-client on console-fra.rpki-client.org