Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
File:                     ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json)
Hash identifier:          LdaIEykqZMS4+G1obwJLaZ/phD9xWrjTTDs0ShvgVQk=
Subject key identifier:   BC:19:47:16:C0:5C:4D:07:74:14:25:1C:B5:1F:C4:AD:BD:6E:FB:97
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Certificate issuer:       /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial:       0194BA84585F389F0F6CBEE3B1EE643C4B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
Manifest number:          10BF
Signing time:             Fri 31 Jan 2025 04:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:22 +0000
Files and hashes:         1: 47NYg-phdSB9NeK2va9JIKsAb5A.roa (hash: 86ZHiVMTfTtd+skHx8yHsEGyhHphyGuDVxjbPZ3RryU=)
                          2: 9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa (hash: r/TntNYFZZscNnR6FrYLxeeivbdyseJ1z7nSB0IzeU8=)
                          3: PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa (hash: ekiRbPByfTM7Fnyz7R+Df6+K5P9KMDqYABA3L68ThWc=)
                          4: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: wkdjdXiAKH3tO9m0UAU7ZdfuiZ/xhmY22+j2boxpJNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:58:5f:38:9f:0f:6c:be:e3:b1:ee:64:3c:4b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
        Validity
            Not Before: Jan 31 04:00:22 2025 GMT
            Not After : Feb  1 04:00:22 2025 GMT
        Subject: CN=bc194716c05c4d077414251cb51fc4adbd6efb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:63:5b:86:d4:d0:13:a1:1a:50:64:49:cd:
                    8b:fc:98:a0:8d:fe:31:0a:25:e1:aa:27:50:24:5c:
                    3f:8a:b0:04:28:9c:83:07:35:d8:a9:ff:9c:44:a9:
                    82:09:01:a3:38:6e:ed:c2:70:cf:5b:df:d2:08:75:
                    d9:fe:88:48:2d:ad:af:b2:bc:a3:72:b4:f0:7a:69:
                    23:a1:b7:cb:52:55:b8:13:b2:6b:81:8d:27:94:a1:
                    ee:11:17:48:37:5f:45:ed:01:4e:80:06:b9:61:07:
                    c5:d6:b0:0b:ed:47:4d:b4:f8:bf:f4:f0:e5:50:c9:
                    dd:96:9d:bf:0c:3e:9f:f9:6b:22:97:67:e2:79:9d:
                    a8:d4:55:83:be:78:e7:c4:08:59:75:10:e7:e5:45:
                    86:db:e5:19:d2:f6:25:06:89:da:53:96:fd:34:bd:
                    ed:f6:e3:2e:b1:ee:5b:4c:ac:ad:00:d4:e4:2e:19:
                    97:96:2b:67:c7:d5:27:d2:85:32:91:43:7f:66:dd:
                    a4:55:90:e7:02:e3:44:87:7b:0e:d4:9b:f0:5b:7d:
                    28:00:53:3a:74:dd:76:fb:b5:54:e3:1d:bc:c2:22:
                    83:98:9c:5c:ee:ee:a9:8c:d9:53:bc:38:07:23:c0:
                    7b:5d:76:7a:3a:6e:24:5f:fd:63:b6:f0:4c:9a:4a:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:47:16:C0:5C:4D:07:74:14:25:1C:B5:1F:C4:AD:BD:6E:FB:97
            X509v3 Authority Key Identifier:
                keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:be:94:fb:9a:84:df:0a:22:1a:36:5a:a4:02:b8:b5:ca:70:
         99:05:e1:7a:42:4b:0d:78:07:49:3e:41:38:bb:c9:8f:1a:66:
         c4:6c:aa:71:b4:4d:63:c6:ec:36:ff:de:0d:9d:ec:57:b8:c2:
         5f:e4:85:87:a8:ee:a4:b4:4b:6b:d5:0c:49:9c:63:35:5d:b3:
         2e:ee:32:82:b3:02:c6:43:c8:5b:8e:fc:34:d7:b3:8b:35:cd:
         2e:ec:d9:fb:f7:6b:e1:08:2d:0c:9e:26:34:9a:c6:6a:23:37:
         03:5f:00:5b:a8:3a:00:37:b3:20:91:5c:f7:00:b5:a5:ea:a0:
         1d:23:83:a4:3d:c0:4d:09:41:cb:7d:80:5f:9a:b3:cc:54:68:
         d9:02:70:01:10:19:30:06:56:4b:3a:b4:aa:a3:32:86:cd:d4:
         f7:8d:91:66:de:f1:00:5d:7e:35:c1:ab:82:d5:e2:2c:74:fe:
         be:b4:b8:6e:d9:b3:e6:04:10:5f:20:d9:7b:43:1f:69:f8:12:
         73:6e:f1:cc:16:1d:9a:15:71:fb:ee:d1:5a:39:4f:10:c6:33:
         f3:a3:05:c5:ab:98:a2:24:ff:e7:8f:fa:c4:6c:b1:67:ed:6d:
         c0:1e:a3:24:79:03:7a:b7:c4:9a:24:c3:30:8d:00:38:98:a7:
         fe:22:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:32 2025 by rpki-client on console-fra.rpki-client.org