Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          xhv9EiH5hwYWzeXH4X6Lv44Kx9n1xB1ueE4NCb84m9k=
Subject key identifier:   6C:84:B8:D2:7D:A1:C4:41:CC:ED:71:BA:6A:0E:D3:D4:29:F9:B6:7E
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       0194BABB5924675779F5312C89A231AABD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          0EDF
Signing time:             Fri 31 Jan 2025 05:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:27 +0000
Files and hashes:         1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
                          2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
                          3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: Xbhq1s1przEDVFtpjzFSvVBrpVPieL+DvVc3YBqtqwU=)
                          4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
                          5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
                          6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
                          7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
                          8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:59:24:67:57:79:f5:31:2c:89:a2:31:aa:bd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: Jan 31 05:00:27 2025 GMT
            Not After : Feb  1 05:00:27 2025 GMT
        Subject: CN=6c84b8d27da1c441cced71ba6a0ed3d429f9b67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:89:0e:78:78:6b:36:7d:44:42:a8:4d:5a:
                    a2:cf:a6:7f:a5:22:b9:2c:a9:d5:9b:3e:b2:6d:e7:
                    37:65:db:59:d2:d5:58:6b:09:41:8a:65:3d:4e:a9:
                    91:16:03:d8:cd:98:96:dc:e9:87:49:ea:c7:1b:57:
                    e2:fb:d2:1e:bb:bd:80:f5:3a:c5:d2:aa:7f:9e:9a:
                    a2:93:90:8d:b1:dd:b1:71:67:c0:71:18:4b:92:19:
                    49:e9:80:dd:98:e3:07:6a:b6:81:b8:33:8a:39:40:
                    79:29:98:e5:0f:ac:a3:ff:1f:6a:0d:19:9b:cd:4a:
                    3c:b1:c5:36:1d:12:7d:6f:cf:e9:ec:d8:b5:43:21:
                    d1:03:dc:52:46:aa:73:ff:78:cb:21:59:c3:79:e1:
                    2a:09:0e:6f:e2:43:f6:ab:d1:28:3a:9f:6c:44:79:
                    bf:40:5a:69:55:2f:d4:5e:38:51:c6:33:7f:a6:6e:
                    eb:0a:c4:79:4e:41:11:d4:49:ff:c1:8f:09:48:7d:
                    d7:ff:e9:30:4d:19:d5:bc:ed:18:2c:a7:1b:10:1b:
                    3b:c9:68:2c:10:28:9f:59:0e:37:57:4f:bd:38:ac:
                    a2:7c:8e:f7:64:6e:ea:1a:86:19:f8:49:95:c4:c7:
                    45:12:b2:38:72:78:3c:68:62:32:9a:59:76:01:51:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:84:B8:D2:7D:A1:C4:41:CC:ED:71:BA:6A:0E:D3:D4:29:F9:B6:7E
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:43:82:4a:27:89:de:1c:b1:bc:ce:41:5f:49:c6:18:81:17:
         df:cc:89:38:b4:77:08:19:ca:ae:44:3d:66:b2:40:83:e4:f6:
         5a:dd:ee:3c:0e:bc:79:94:2f:c2:cc:3b:24:9e:ba:53:21:0c:
         97:5c:48:0e:e8:4a:60:d5:89:0c:4b:c8:45:9a:fd:bb:e8:e5:
         f4:85:44:90:78:86:53:28:04:b9:98:da:15:d6:80:f0:5e:63:
         02:4d:d4:29:60:bb:9d:00:67:bd:85:18:e1:40:65:8b:b7:a1:
         0e:7d:19:a1:e6:2d:e6:a6:66:bf:75:b4:64:6d:d1:ab:05:ac:
         73:ab:7d:bc:59:ee:2e:70:0e:ed:9c:d5:f5:44:fb:c0:e4:36:
         c8:53:dc:f1:90:b1:d2:51:40:9e:50:f5:85:ae:77:b9:99:c4:
         c7:3a:9a:99:31:70:72:7b:46:de:09:b4:f0:c0:18:ce:0d:62:
         98:f5:a2:a8:cf:f6:2a:13:01:3c:70:3a:1b:01:d8:17:fe:3b:
         34:3d:d9:02:d3:92:19:ce:af:19:1c:f3:85:76:b5:27:45:c7:
         d7:cc:65:44:a0:3b:95:b5:5c:e3:a6:69:c5:55:40:03:33:79:
         bd:30:9b:32:56:01:69:ce:05:66:28:5a:c9:29:cd:ad:fd:9d:
         0c:56:fe:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u1kkZ1d59TEsiaIxqr17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy
NDMxZjQwHhcNMjUwMTMxMDUwMDI3WhcNMjUwMjAxMDUwMDI3WjAzMTEwLwYDVQQD
Eyg2Yzg0YjhkMjdkYTFjNDQxY2NlZDcxYmE2YTBlZDNkNDI5ZjliNjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+yJDnh4azZ9REKoTVqiz6Z/pSK5
LKnVmz6ybec3ZdtZ0tVYawlBimU9TqmRFgPYzZiW3OmHSerHG1fi+9Ieu72A9TrF
0qp/npqik5CNsd2xcWfAcRhLkhlJ6YDdmOMHaraBuDOKOUB5KZjlD6yj/x9qDRmb
zUo8scU2HRJ9b8/p7Ni1QyHRA9xSRqpz/3jLIVnDeeEqCQ5v4kP2q9EoOp9sRHm/
QFppVS/UXjhRxjN/pm7rCsR5TkER1En/wY8JSH3X/+kwTRnVvO0YLKcbEBs7yWgs
ECifWQ43V0+9OKyifI73ZG7qGoYZ+EmVxMdFErI4cng8aGIymll2AVGg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyEuNJ9ocRBzO1xumoO09Qp+bZ+MB8GA1UdIwQY
MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et
OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi
LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEOCSieJ
3hyxvM5BX0nGGIEX38yJOLR3CBnKrkQ9ZrJAg+T2Wt3uPA68eZQvwsw7JJ66UyEM
l1xIDuhKYNWJDEvIRZr9u+jl9IVEkHiGUygEuZjaFdaA8F5jAk3UKWC7nQBnvYUY
4UBli7ehDn0ZoeYt5qZmv3W0ZG3RqwWsc6t9vFnuLnAO7ZzV9UT7wOQ2yFPc8ZCx
0lFAnlD1ha53uZnExzqamTFwcntG3gm08MAYzg1imPWiqM/2KhMBPHA6GwHYF/47
ND3ZAtOSGc6vGRzzhXa1J0XH18xlRKA7lbVc46ZpxVVAAzN5vTCbMlYBac4FZiha
ySnNrf2dDFb+Gw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:22 2025 by rpki-client on console-fra.rpki-client.org