Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File:                     J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier:          EgswQgF+X4kMjhgOaHaqWlLyObe9XeQyhlWqYbi8da8=
Subject key identifier:   B0:F2:0A:E7:6F:17:E8:26:E4:FF:C4:DD:C4:D4:52:BA:61:C2:4D:16
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       0194BA848742CD04A0C86F7379D8B70A5527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number:          097B
Signing time:             Fri 31 Jan 2025 04:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:35 +0000
Files and hashes:         1: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: 2U2/sCkmfKtuzsVjJ4yRyqrLJDFnubjLZfJWA3Wf6GA=)
                          2: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
                          3: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (hash: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=)
                          4: WTHS0_mrkntFTwKYSZ523FW3dY0.roa (hash: KofyEyzWypys/rTtNM9UpTOaMnadl07Wa+WactOD2TQ=)
                          5: gYwIKw-xSLHcSjWk9Y0rdVBM4Hg.roa (hash: D/H2NTfVJPb6w7G//67beVKcW7TPtcjT3UnT0MdjXDw=)
                          6: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
                          7: xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa (hash: v6JdlRVd2u7tIbRYZCLJ9Bn+UkQd4MO8kZwoWQAa+WM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:87:42:cd:04:a0:c8:6f:73:79:d8:b7:0a:55:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Jan 31 04:00:35 2025 GMT
            Not After : Feb  1 04:00:35 2025 GMT
        Subject: CN=b0f20ae76f17e826e4ffc4ddc4d452ba61c24d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:c6:dd:af:c7:89:4a:81:bc:b4:81:f5:17:
                    79:14:be:15:44:98:d3:8f:df:b7:ff:44:66:0f:c3:
                    8c:0c:13:56:7c:97:17:8f:4d:fc:7f:46:72:e8:64:
                    96:86:6e:09:22:cf:48:3f:95:e9:5c:0f:4b:fc:fe:
                    69:eb:41:c6:3c:db:ec:4e:d5:22:c9:de:85:91:8f:
                    b4:c0:3e:da:9c:98:2c:01:9d:1d:b8:aa:2d:77:89:
                    5e:5d:bc:27:ac:d7:3d:de:0b:20:5b:1a:a5:dd:a6:
                    3c:5f:cb:3c:ae:ae:cb:88:87:6b:dc:28:6a:39:8e:
                    74:9d:a9:e9:ee:ca:5f:2f:cf:2a:a8:94:40:34:a8:
                    d3:17:3c:08:0b:80:10:d1:63:9d:44:f8:93:ef:b5:
                    17:7c:d2:f8:83:e1:c4:6a:32:1a:1f:15:cf:b4:42:
                    54:98:a2:4f:e8:76:a9:a5:4e:27:c7:4d:6e:0a:c5:
                    d6:64:54:c8:ef:81:9a:d8:0d:83:8e:53:f0:ee:d7:
                    b8:b4:fe:e0:1e:f2:5d:ee:85:f8:14:dc:b4:f8:99:
                    21:d3:06:d4:6a:c7:8b:71:53:9a:29:54:be:fa:11:
                    92:a6:6d:65:32:23:18:7c:80:a5:30:b9:39:de:34:
                    0d:97:5d:c2:88:3e:d8:1a:1f:5e:77:ce:f3:f0:cc:
                    51:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:0A:E7:6F:17:E8:26:E4:FF:C4:DD:C4:D4:52:BA:61:C2:4D:16
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:de:c8:d3:6f:7d:a9:b8:82:d2:97:66:b6:01:ad:08:87:d9:
         59:8d:0e:70:e2:57:5c:85:80:ae:9f:d2:12:a8:a5:09:2e:f4:
         de:70:43:aa:cf:ee:7a:da:53:d1:05:c2:08:b5:2a:3e:18:bc:
         5a:8f:2e:42:fa:cd:e2:cf:b1:29:22:a1:77:b2:b8:66:d3:51:
         fe:dd:66:3e:42:78:07:39:5c:f6:9b:26:b9:fa:eb:14:a0:5a:
         dc:c0:da:56:50:8a:f3:6b:63:de:49:18:06:f1:86:c9:78:93:
         77:18:50:65:0b:d9:f4:70:1c:f3:bf:5e:01:50:20:10:83:51:
         a4:f0:a5:98:cd:5a:7c:1d:3f:6f:a2:e8:e8:0a:18:a4:17:3c:
         ed:7c:9e:4f:39:05:bd:4d:fa:72:fa:6c:f7:58:22:3d:26:ef:
         0e:7c:a7:8f:b8:f9:2b:eb:24:96:4e:96:70:fa:1b:9f:e3:9f:
         d1:62:15:10:19:a6:ed:94:0a:aa:9b:97:29:6b:84:25:af:d7:
         c9:94:59:35:9c:1a:db:d5:d2:2c:67:fd:05:71:bd:ae:08:61:
         30:52:72:65:32:0e:f4:61:48:8b:bc:5e:69:1b:ad:bc:dd:5d:
         c1:2a:f9:85:71:d5:39:e0:13:26:fd:fd:40:97:17:85:5a:f9:
         27:65:ea:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hIdCzQSgyG9zedi3ClUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjUwMTMxMDQwMDM1WhcNMjUwMjAxMDQwMDM1WjAzMTEwLwYDVQQD
EyhiMGYyMGFlNzZmMTdlODI2ZTRmZmM0ZGRjNGQ0NTJiYTYxYzI0ZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIrG3a/HiUqBvLSB9Rd5FL4VRJjT
j9+3/0RmD8OMDBNWfJcXj038f0Zy6GSWhm4JIs9IP5XpXA9L/P5p60HGPNvsTtUi
yd6FkY+0wD7anJgsAZ0duKotd4leXbwnrNc93gsgWxql3aY8X8s8rq7LiIdr3Chq
OY50nanp7spfL88qqJRANKjTFzwIC4AQ0WOdRPiT77UXfNL4g+HEajIaHxXPtEJU
mKJP6HappU4nx01uCsXWZFTI74Ga2A2DjlPw7te4tP7gHvJd7oX4FNy0+Jkh0wbU
aseLcVOaKVS++hGSpm1lMiMYfIClMLk53jQNl13CiD7YGh9ed87z8MxR3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDyCudvF+gm5P/E3cTUUrphwk0WMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF97I0299
qbiC0pdmtgGtCIfZWY0OcOJXXIWArp/SEqilCS703nBDqs/uetpT0QXCCLUqPhi8
Wo8uQvrN4s+xKSKhd7K4ZtNR/t1mPkJ4Bzlc9psmufrrFKBa3MDaVlCK82tj3kkY
BvGGyXiTdxhQZQvZ9HAc879eAVAgEINRpPClmM1afB0/b6Lo6AoYpBc87XyeTzkF
vU36cvps91giPSbvDnynj7j5K+sklk6WcPobn+Of0WIVEBmm7ZQKqpuXKWuEJa/X
yZRZNZwa29XSLGf9BXG9rghhMFJyZTIO9GFIi7xeaRutvN1dwSr5hXHVOeATJv39
QJcXhVr5J2Xqnw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:12 2025 by rpki-client on console-fra.rpki-client.org