Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File:                     mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier:          hBzBRuZmRgkncDny5BdoRi2IA2PL2b5IN3Lo0gfL50g=
Subject key identifier:   FE:20:32:E9:C6:BA:47:FE:B0:D3:35:76:3E:D8:01:7E:03:2B:5C:32
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer:       /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial:       0194BC3C7465C82C284C535D80CFB3E00371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number:          0386
Signing time:             Fri 31 Jan 2025 12:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:05 +0000
Files and hashes:         1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: 8RV2d9JK/nGdlZYdYq4xTT8Xgo374i2JJmTOTj/ZldY=)
                          2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 11:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:74:65:c8:2c:28:4c:53:5d:80:cf:b3:e0:03:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
        Validity
            Not Before: Jan 31 12:01:05 2025 GMT
            Not After : Feb  1 12:01:05 2025 GMT
        Subject: CN=fe2032e9c6ba47feb0d335763ed8017e032b5c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:ce:4c:02:1f:aa:18:e7:cc:f7:30:5d:18:
                    d4:5f:de:b3:66:81:2f:c5:31:a1:8f:b0:08:ca:de:
                    c2:c4:62:9b:31:15:43:99:55:98:95:04:0e:29:83:
                    06:4c:0b:f1:12:a4:1f:a0:21:bc:5e:ff:22:aa:fa:
                    8a:43:2d:ad:c7:0b:67:f0:41:73:ed:e7:ab:67:7e:
                    0e:12:17:ee:0b:dd:da:a0:b2:b0:e4:18:b4:74:7c:
                    97:ba:af:bc:55:b6:3c:21:94:a2:65:1b:26:47:a4:
                    60:cc:2c:e7:1f:bd:24:9a:d3:27:f9:40:a5:c5:9f:
                    7b:57:62:55:0d:4e:a7:04:98:c7:af:21:ef:b3:b1:
                    28:db:40:c4:27:62:c6:88:23:f9:c2:d8:17:a4:77:
                    c6:eb:00:56:bd:99:5d:75:b3:07:7a:27:a1:1a:b0:
                    11:2d:e0:95:ef:3b:e2:39:1a:4f:da:52:68:08:e8:
                    a4:89:bc:f5:bf:22:68:a7:a5:00:eb:4f:13:3a:52:
                    69:16:f9:ba:58:2a:26:c4:03:af:3f:79:2f:9c:d6:
                    40:9c:1d:76:06:65:9a:64:6f:0e:35:65:28:ee:8b:
                    bd:46:e4:3c:a0:6e:08:16:51:3e:7b:1d:e3:cb:2c:
                    98:ac:78:9a:bd:35:3e:4b:d4:9f:2e:ee:37:b9:95:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:32:E9:C6:BA:47:FE:B0:D3:35:76:3E:D8:01:7E:03:2B:5C:32
            X509v3 Authority Key Identifier:
                keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:ac:07:17:37:51:f9:64:65:b3:c0:19:82:71:1f:a4:74:
         55:2d:ad:31:7d:7c:e3:21:2e:c0:77:31:44:2d:0e:1b:18:66:
         e8:81:ce:a7:44:24:67:da:b0:9f:cb:87:de:f2:8d:1f:9b:0d:
         4c:d1:01:29:cf:eb:03:79:cb:76:1c:37:1b:5b:df:36:bb:4d:
         d6:25:cd:fb:c5:11:d8:7b:a7:3e:25:e2:8f:5a:87:d8:4f:7f:
         c8:86:1c:d2:7f:84:93:ff:28:bb:8b:6d:5c:3d:e4:db:42:21:
         9f:51:50:cb:3a:49:e6:5b:69:15:68:41:9e:1c:c0:ed:a8:1d:
         75:4d:37:e2:4d:a6:8c:72:9c:20:ba:97:27:4c:9b:14:aa:48:
         18:86:5b:9d:db:30:85:98:76:7f:70:27:b8:9b:dd:b3:2b:c3:
         b5:ce:8b:b5:c6:13:eb:ef:5b:68:f6:0c:49:05:73:63:82:e8:
         2e:52:71:85:1f:29:5d:f4:c2:6f:6e:4f:f7:1a:c0:d1:70:32:
         3d:5a:a2:ad:fe:a1:55:a4:d1:90:38:ae:cd:61:23:6e:ad:92:
         11:54:11:d4:ce:a1:91:de:4c:ba:2a:e6:a0:57:3c:02:dc:eb:
         e0:95:02:af:b8:2c:e9:2b:72:26:3b:bc:13:b7:9c:5d:77:b9:
         6f:5d:4d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHRlyCwoTFNdgM+z4ANxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWI1MGExMGQyZDU4YzY3NTAzZWFhYTcwMWU1MTA5MTVk
ZDUxOTIwHhcNMjUwMTMxMTIwMTA1WhcNMjUwMjAxMTIwMTA1WjAzMTEwLwYDVQQD
EyhmZTIwMzJlOWM2YmE0N2ZlYjBkMzM1NzYzZWQ4MDE3ZTAzMmI1YzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G/OTAIfqhjnzPcwXRjUX96zZoEv
xTGhj7AIyt7CxGKbMRVDmVWYlQQOKYMGTAvxEqQfoCG8Xv8iqvqKQy2txwtn8EFz
7eerZ34OEhfuC93aoLKw5Bi0dHyXuq+8VbY8IZSiZRsmR6RgzCznH70kmtMn+UCl
xZ97V2JVDU6nBJjHryHvs7Eo20DEJ2LGiCP5wtgXpHfG6wBWvZlddbMHeiehGrAR
LeCV7zviORpP2lJoCOikibz1vyJop6UA608TOlJpFvm6WComxAOvP3kvnNZAnB12
BmWaZG8ONWUo7ou9RuQ8oG4IFlE+ex3jyyyYrHiavTU+S9SfLu43uZXKrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4gMunGukf+sNM1dj7YAX4DK1wyMB8GA1UdIwQY
MBaAFJhbUKENLVjGdQPqqnAeUQkV3VGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTIt
OTBmNjcxOWU2N2I5LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTItOTBmNjcxOWU2N2I5
LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotesBxc3
UflkZbPAGYJxH6R0VS2tMX184yEuwHcxRC0OGxhm6IHOp0QkZ9qwn8uH3vKNH5sN
TNEBKc/rA3nLdhw3G1vfNrtN1iXN+8UR2HunPiXij1qH2E9/yIYc0n+Ek/8ou4tt
XD3k20Ihn1FQyzpJ5ltpFWhBnhzA7agddU034k2mjHKcILqXJ0ybFKpIGIZbndsw
hZh2f3AnuJvdsyvDtc6LtcYT6+9baPYMSQVzY4LoLlJxhR8pXfTCb25P9xrA0XAy
PVqirf6hVaTRkDiuzWEjbq2SEVQR1M6hkd5MuirmoFc8Atzr4JUCr7gs6StyJju8
E7ecXXe5b11Nzg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:44 2025 by rpki-client on console-fra.rpki-client.org