Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          1SENXpLJnESHcFdt9Kpt59MrnvKonB6xZYlg1LSt4/Q=
Subject key identifier:   7B:70:91:E4:A4:F3:F7:6D:86:EC:53:4C:8B:98:71:99:3E:35:38:33
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       0194BABB99184078AFA2716153F8BDF1DAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          0F52
Signing time:             Fri 31 Jan 2025 05:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:44 +0000
Files and hashes:         1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
                          2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
                          3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: SRZMsc4c7vsUjTNERFQJitoy5D04bl+oQgZwgdQbyh0=)
                          4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
                          5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:99:18:40:78:af:a2:71:61:53:f8:bd:f1:da:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Jan 31 05:00:44 2025 GMT
            Not After : Feb  1 05:00:44 2025 GMT
        Subject: CN=7b7091e4a4f3f76d86ec534c8b9871993e353833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:1a:82:3f:f9:e4:94:ae:12:94:43:ae:93:
                    d9:fc:88:32:56:13:aa:ff:1e:dc:82:9d:ef:01:e6:
                    6d:a3:56:38:f6:85:65:ea:e1:73:42:fb:0e:6b:bd:
                    66:49:0f:06:ef:5f:7b:cc:9e:e4:4a:84:02:77:ee:
                    83:64:af:24:9c:c2:a1:e8:6d:6b:f1:f2:6c:f0:33:
                    88:e7:6a:0d:63:a2:31:0b:4a:e1:8b:58:96:3a:7a:
                    8b:85:e1:dc:40:79:bb:c0:96:75:5f:e7:e4:be:4c:
                    29:b6:90:63:a6:ba:ec:93:1b:70:5f:c4:c6:ea:c8:
                    e3:c6:04:db:be:e8:28:06:b2:09:bc:52:04:c7:29:
                    97:83:a1:27:be:da:ec:32:ea:0e:68:02:32:48:ea:
                    54:f2:f2:71:2a:b1:30:33:e8:1f:c7:69:c1:d3:5d:
                    06:33:ef:3d:29:32:78:85:15:e2:f0:e6:ed:ee:02:
                    d0:24:aa:89:9f:3a:fc:d5:5a:f8:6a:26:9a:62:3e:
                    e3:47:12:cf:fd:8e:81:92:65:9b:e1:a6:65:f9:c4:
                    6a:5b:b5:a3:d8:99:5b:9d:3b:04:33:a1:40:92:eb:
                    73:e5:af:d2:3b:9a:69:70:3a:76:13:92:a1:fe:5f:
                    05:87:50:04:78:df:d6:5c:e2:49:dd:58:6c:10:82:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:91:E4:A4:F3:F7:6D:86:EC:53:4C:8B:98:71:99:3E:35:38:33
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:47:72:bb:df:79:6c:31:2e:fe:68:4f:6f:8e:7f:f6:7f:
         25:1a:ab:8f:50:ea:ed:af:d8:8f:16:76:04:c1:94:74:5d:4a:
         49:6c:6d:6d:19:26:30:9f:fd:05:70:50:59:ad:aa:6c:ca:7f:
         47:1b:27:33:7f:ad:26:21:b6:b6:5a:ec:97:28:72:6b:29:87:
         75:c9:f5:5c:14:8e:b1:92:8e:f7:e3:e7:a1:41:37:d6:8a:ba:
         1e:5d:60:1f:8d:21:c1:a3:88:c7:59:67:74:f1:83:a6:92:d4:
         72:7d:ae:c4:c7:4f:d6:8b:fb:d5:87:8a:83:c1:dc:36:5f:5a:
         9b:bb:12:a2:ca:83:84:7d:1b:4a:79:92:8f:f4:3e:3a:e9:13:
         78:c1:e4:99:14:3c:9b:5e:e2:8d:b6:38:3d:e9:49:fd:be:e8:
         f4:66:19:b2:18:38:0f:5b:b8:a5:5b:8d:8d:d0:81:de:a9:02:
         e4:e3:a8:88:70:b4:47:07:36:4f:2a:5b:c5:19:3d:28:77:ce:
         c7:6b:8e:f6:5d:9c:c6:48:18:ce:aa:64:df:39:03:4c:7f:3b:
         11:af:1e:67:07:71:d4:d8:c1:07:95:f4:41:55:cc:82:68:88:
         53:e6:c4:f8:bd:19:65:c0:ab:ca:33:76:da:d1:56:6e:1b:ce:
         56:cd:41:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u5kYQHivonFhU/i98drqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3
YzMxMDYwHhcNMjUwMTMxMDUwMDQ0WhcNMjUwMjAxMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg3YjcwOTFlNGE0ZjNmNzZkODZlYzUzNGM4Yjk4NzE5OTNlMzUzODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqQagj/55JSuEpRDrpPZ/IgyVhOq
/x7cgp3vAeZto1Y49oVl6uFzQvsOa71mSQ8G7197zJ7kSoQCd+6DZK8knMKh6G1r
8fJs8DOI52oNY6IxC0rhi1iWOnqLheHcQHm7wJZ1X+fkvkwptpBjprrskxtwX8TG
6sjjxgTbvugoBrIJvFIExymXg6EnvtrsMuoOaAIySOpU8vJxKrEwM+gfx2nB010G
M+89KTJ4hRXi8Obt7gLQJKqJnzr81Vr4aiaaYj7jRxLP/Y6BkmWb4aZl+cRqW7Wj
2JlbnTsEM6FAkutz5a/SO5ppcDp2E5Kh/l8Fh1AEeN/WXOJJ3VhsEILW5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtwkeSk8/dthuxTTIuYcZk+NTgzMB8GA1UdIwQY
MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt
MjlhYzQ1ZTJlY2ZmLzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm
LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVxHcrvf
eWwxLv5oT2+Of/Z/JRqrj1Dq7a/YjxZ2BMGUdF1KSWxtbRkmMJ/9BXBQWa2qbMp/
RxsnM3+tJiG2tlrslyhyaymHdcn1XBSOsZKO9+PnoUE31oq6Hl1gH40hwaOIx1ln
dPGDppLUcn2uxMdP1ov71YeKg8HcNl9am7sSosqDhH0bSnmSj/Q+OukTeMHkmRQ8
m17ijbY4PelJ/b7o9GYZshg4D1u4pVuNjdCB3qkC5OOoiHC0Rwc2TypbxRk9KHfO
x2uO9l2cxkgYzqpk3zkDTH87Ea8eZwdx1NjBB5X0QVXMgmiIU+bE+L0ZZcCryjN2
2tFWbhvOVs1B8A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:24 2025 by rpki-client on console-fra.rpki-client.org