Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File:                     mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier:          QSL47J6j1r2g1KckvvE51ieKWe6bC6uXgoAVwm+eqec=
Subject key identifier:   00:48:02:6B:E2:23:A6:1D:E2:68:67:32:91:4B:8C:49:88:F0:E2:7D
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer:       /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial:       0194BAF2118116A2992E91F3A63A7332250E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 06:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:13 +0000
Files and hashes:         1: 7TyGUQq5_upn7OI_8rMQkinORFg.roa (hash: KGYsAjI6sTjQq+H3tQWHe4y4uTdeAqiVMRj2OW3ueCg=)
                          2: An6YNgwh93187k654T-zbgMGRlg.roa (hash: nmjx1IvTXJQBFo0I6BDxNzxZSqlRyAfA/ku4fVVGSzU=)
                          3: lCx0H2SpviByt755DhYFFB87u3g.roa (hash: AZWgazLt+yp5aameWZEf9hj1qI2zyq8kEBHr5Xd8xo4=)
                          4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: dRP1C5ST1Df7WOqqap/OnJeG7sos9WSPCqWXZDRIBnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:11:81:16:a2:99:2e:91:f3:a6:3a:73:32:25:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
        Validity
            Not Before: Jan 31 06:00:13 2025 GMT
            Not After : Feb  1 06:00:13 2025 GMT
        Subject: CN=0048026be223a61de2686732914b8c4988f0e27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:df:83:f2:eb:9f:0f:39:d4:05:0d:d3:19:
                    71:de:48:5f:83:1c:70:34:5d:ba:86:78:89:7f:19:
                    dd:08:fc:64:b2:80:27:6b:e0:0b:a1:62:82:c8:40:
                    63:01:2a:e7:5f:fc:71:16:40:d5:e5:4a:39:ff:d5:
                    8e:d1:eb:c4:76:54:7a:67:54:81:d5:1e:28:35:66:
                    f4:05:81:d0:c8:ac:e0:76:fc:ee:08:80:fe:f6:76:
                    cd:8b:11:0c:3d:a1:08:c3:7d:d7:9e:6c:00:83:1f:
                    a5:2e:14:cd:49:6d:01:20:44:bb:46:7f:c4:e4:04:
                    43:c0:91:40:b4:13:5d:9d:f4:00:d1:b6:e8:91:ac:
                    06:7b:de:5b:63:4b:b0:5e:43:5c:4e:cd:0f:2e:d9:
                    b1:3d:17:f8:a1:94:61:a4:f0:24:92:18:88:d2:8c:
                    cb:16:bf:86:80:db:04:04:41:3d:a7:bc:32:40:89:
                    6e:f2:c2:ed:dd:fb:2c:dc:c0:48:f9:8b:36:f3:85:
                    a1:a1:f6:a6:44:ad:48:61:23:7e:6b:85:ce:5f:d7:
                    85:9a:88:85:c7:3c:21:72:84:fb:87:4c:a7:c9:ba:
                    f5:7e:ec:1a:2b:06:69:fa:53:b9:af:ed:85:d9:34:
                    c6:66:b9:0f:ab:1d:6f:bd:18:f9:3d:08:e6:9b:99:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:48:02:6B:E2:23:A6:1D:E2:68:67:32:91:4B:8C:49:88:F0:E2:7D
            X509v3 Authority Key Identifier:
                keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:63:2a:de:84:9b:1a:eb:00:b2:dc:a8:2d:f6:4e:cc:2f:
         27:56:cb:43:f1:04:f2:a8:d3:2b:f5:ba:f4:96:4a:de:a4:94:
         77:78:98:b5:06:f7:0b:78:5c:53:4e:28:c1:e1:0f:68:ec:a9:
         b4:c3:2b:04:aa:0e:96:86:d0:91:06:62:7a:35:90:03:9b:eb:
         5d:9e:fc:b3:bc:c8:c5:00:47:e0:4d:04:c0:af:7b:62:a4:42:
         6e:e9:ab:d9:35:82:89:a8:a4:3e:c8:25:fe:23:84:f5:5a:73:
         bd:6a:e8:e6:db:48:9c:f9:b8:e8:f7:d2:f7:74:b8:a4:71:09:
         8d:2d:35:79:a7:2c:75:b1:56:46:9d:ab:28:0d:11:1e:50:8e:
         fb:82:5d:04:03:e1:13:cf:99:fa:26:a1:1b:4b:82:fd:1a:e5:
         63:f1:b3:cf:aa:ef:6a:d6:b2:fe:ac:98:03:49:83:37:06:39:
         d5:7f:3a:5f:5a:34:25:c9:bf:4d:eb:60:d9:47:c2:52:5a:ef:
         60:6d:d8:3f:7d:da:d3:db:8a:47:d8:21:af:77:5a:82:16:4e:
         f2:e2:94:5f:e8:eb:93:03:88:8a:65:f6:d7:78:d2:5f:e0:02:
         e5:91:90:e3:77:99:2e:f6:64:20:37:71:1e:e1:07:21:e7:08:
         78:f7:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:15 2025 by rpki-client on console-fra.rpki-client.org