Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File:                     YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier:          Bk7z/XF11Nqghjgr4dbDDv/U0Jd94XgWsWbCaih43bU=
Subject key identifier:   DD:9D:3D:D1:9C:AE:07:73:62:D6:89:66:5E:6D:AF:8C:0D:D9:37:81
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0194BA845CD8CD33395DF703F319B3F3EC2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number:          0831
Signing time:             Fri 31 Jan 2025 04:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:24 +0000
Files and hashes:         1: 4xpkugJm5O-bLkz-lOvDnuYcKWM.roa (hash: B9E95wF6v4Ywf48WupY+Ytw5Hk7wJ0SBxO0n9tZoJA0=)
                          2: 5oupLNM62GHiVX5PYESj19r91Ks.roa (hash: yuBvzT48iFbjDnHGtRPDeZ40C0r4KGDQdxGXQfHcACU=)
                          3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=)
                          4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=)
                          5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=)
                          6: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=)
                          7: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=)
                          8: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=)
                          9: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: Ze2ov9YH/TpawUyIntB4rCCnEjha4QgoGiJ/XSa1vMY=)
                          10: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=)
                          11: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=)
                          12: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=)
                          13: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=)
                          14: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=)
                          15: ufiNJ7oH6OnNQOp5WCbDZcS6fFs.roa (hash: ft+2DADbVaLgXn5IbVGPEM2UTUtfzZPECsxi5dLpDrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:5c:d8:cd:33:39:5d:f7:03:f3:19:b3:f3:ec:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jan 31 04:00:24 2025 GMT
            Not After : Feb  1 04:00:24 2025 GMT
        Subject: CN=dd9d3dd19cae077362d689665e6daf8c0dd93781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:55:3b:1a:3e:d6:e9:c5:31:e3:09:b0:21:
                    78:4c:59:95:8e:e6:2f:28:f7:e2:c1:00:bb:d2:8a:
                    a4:27:8e:6e:36:4d:fe:ea:07:31:22:07:3c:e0:55:
                    bc:db:74:ad:2e:40:63:dc:54:0c:34:02:c0:4e:cd:
                    4f:b4:e3:5a:de:7f:fe:a2:ef:3f:ef:ce:33:dc:1e:
                    17:74:5b:4c:2b:8a:df:8f:2d:72:a1:01:ca:a2:30:
                    00:40:cf:06:64:21:4c:cf:69:fa:50:12:8a:c1:9a:
                    31:d7:8b:ea:b4:2e:fb:3f:0d:9f:7e:e5:a2:4c:22:
                    57:51:cc:af:bf:f4:f9:8b:56:2d:bc:13:e0:84:c8:
                    96:a3:28:ae:bf:c8:c7:f8:d4:af:1e:79:16:3b:e3:
                    32:8c:11:4a:63:65:25:b9:81:a9:75:ca:82:ad:be:
                    5c:be:98:de:d1:24:38:9b:22:58:1b:2d:95:22:8a:
                    9a:cf:82:37:e7:e6:c6:61:8e:26:4c:72:92:de:3a:
                    05:29:52:ab:f9:c4:c5:14:fa:f4:cd:34:d3:d1:f6:
                    21:be:45:49:e6:75:6e:4a:ad:0a:11:87:0c:49:5d:
                    e8:63:b0:d4:3d:b3:da:7d:33:b5:be:85:17:bd:bf:
                    bd:45:23:0d:9e:f3:eb:47:ac:16:9e:df:97:ab:eb:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9D:3D:D1:9C:AE:07:73:62:D6:89:66:5E:6D:AF:8C:0D:D9:37:81
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7a:50:4b:3b:c6:33:1d:14:b1:13:91:a8:a2:85:47:30:53:
         d1:f8:20:ea:3f:5b:f1:cf:66:bf:1d:cf:13:34:52:a0:de:82:
         93:d7:b4:04:94:18:33:8f:54:05:d0:7e:3c:7f:97:a3:fb:15:
         4d:7a:98:9b:21:80:c2:a6:7c:66:23:e8:a1:cc:d6:44:84:8d:
         fe:9d:32:69:0a:e1:3c:52:f1:22:e6:34:ef:fa:52:7d:ef:09:
         56:46:0a:d3:7a:a8:8c:ea:22:f5:65:5a:a1:35:4f:19:2e:45:
         44:5c:c8:52:ed:32:f4:f7:78:a1:f0:b0:0e:da:0e:b9:af:97:
         66:33:a9:1a:e7:34:91:9f:49:fa:05:68:48:ee:05:ca:87:a0:
         fe:36:f1:bf:ec:ba:4d:8c:a1:13:b3:52:45:03:b5:94:cb:57:
         f4:c6:5a:3f:be:a8:ba:b8:41:7b:cd:3c:eb:af:47:b8:d6:c0:
         5e:cf:1d:4e:33:13:f2:1a:a0:e8:66:87:24:da:cd:59:93:27:
         be:2a:d4:a4:e6:18:b2:4f:70:b3:25:24:f1:e6:4c:e8:3d:99:
         be:39:36:3c:3d:1d:ec:08:60:c6:ba:95:29:66:0d:f0:4f:03:
         4c:a5:23:af:b4:fc:ea:81:5d:85:f7:63:a1:ad:5c:b1:99:6f:
         df:55:1a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:20 2025 by rpki-client on console-fra.rpki-client.org