Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File:                     x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier:          FMXIJ9vL24uspLW8z9hSbVv38VdJcILYdIh0U9k+1ZU=
Subject key identifier:   FF:7F:D6:C5:EA:1A:B8:2D:7B:F3:42:CD:31:B3:BD:5B:F7:BE:06:74
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer:       /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial:       0194BABBAD231388415D45975166C892A95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number:          0EF9
Signing time:             Fri 31 Jan 2025 05:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:49 +0000
Files and hashes:         1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
                          2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
                          3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: rv3TkkShqmZWN/zMPxox3mqXGpg5fGMruQHCEzqBbkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:ad:23:13:88:41:5d:45:97:51:66:c8:92:a9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
        Validity
            Not Before: Jan 31 05:00:49 2025 GMT
            Not After : Feb  1 05:00:49 2025 GMT
        Subject: CN=ff7fd6c5ea1ab82d7bf342cd31b3bd5bf7be0674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:71:0e:3e:bb:c9:5d:25:91:7f:0f:3a:ba:
                    08:fd:dc:5b:ac:d6:4e:17:d3:c3:87:d7:b3:4b:b0:
                    a7:c3:e2:0c:32:3c:4c:12:77:d1:ee:79:b3:19:d4:
                    42:75:62:1c:e5:5d:b3:4d:53:f0:1d:df:ce:ff:57:
                    62:cd:59:88:79:fd:db:ab:4b:6c:f9:67:83:54:65:
                    40:8d:29:85:a2:91:3f:b5:bd:f2:f8:d9:c9:14:68:
                    7d:45:0a:1d:ee:4f:fd:4d:8d:c5:f3:1c:7a:f5:16:
                    2a:77:c8:f0:89:be:f1:07:bb:48:d2:09:47:e0:60:
                    22:e5:04:19:1a:6c:d1:cd:01:e5:1d:d3:94:48:dd:
                    a5:61:a5:78:b7:5f:b4:56:30:ec:d0:3e:fb:ec:99:
                    60:44:71:70:de:38:e5:1e:af:84:f9:ce:9c:ef:fa:
                    5e:14:f4:66:c7:6d:bd:45:73:92:14:4c:99:07:fd:
                    b5:1b:24:97:e9:d6:c8:d0:b3:ea:44:47:75:53:65:
                    61:22:9c:96:4b:ca:2d:50:fa:24:1a:89:dc:38:06:
                    fa:62:98:b1:8c:fc:da:29:c6:df:90:7d:7b:b1:47:
                    67:eb:06:f5:2c:70:b3:1b:92:21:36:29:29:a9:ca:
                    ab:ba:dc:4c:9b:e1:4f:c7:a3:20:a1:0f:88:0e:dd:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7F:D6:C5:EA:1A:B8:2D:7B:F3:42:CD:31:B3:BD:5B:F7:BE:06:74
            X509v3 Authority Key Identifier:
                keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:01:d4:cd:d2:91:26:ae:ab:2f:27:3e:09:e9:3a:6b:6e:
         27:61:8f:79:9d:40:2c:94:da:5e:24:a4:23:9e:9f:44:67:ca:
         0e:e8:8c:9c:b6:3f:b6:be:1b:7a:68:ad:65:64:40:13:12:e5:
         8d:03:9d:c1:82:16:f5:d3:ba:f6:36:d0:3b:3e:6f:0e:44:f6:
         e7:2d:0b:cc:12:66:89:49:de:fb:63:59:b0:e5:bd:61:59:68:
         05:bc:af:3d:20:26:29:29:c0:d4:f4:af:b1:71:00:7c:ce:35:
         ab:06:a1:ff:f1:63:7d:5e:8d:1e:71:bc:ed:df:0f:89:7c:e0:
         50:49:c2:94:cb:ad:91:b0:db:31:5f:5a:8d:17:3a:ea:0b:8c:
         13:e2:51:2d:6e:6c:06:b8:09:51:ad:91:63:37:6b:ba:82:40:
         c9:43:8e:da:f5:cf:02:d5:ca:aa:22:62:a4:26:c2:c4:ce:be:
         7f:13:32:0b:0a:8b:f3:2b:fd:ee:a5:ff:0c:f1:39:12:08:eb:
         61:83:2f:94:40:5d:5c:0d:9c:eb:71:8a:bc:a5:7d:91:4f:11:
         21:07:fc:e7:44:cc:e9:b1:1f:17:06:5b:65:08:64:2c:98:af:
         a5:ac:20:37:30:69:d3:31:4c:c1:67:9c:29:e6:61:3d:94:9b:
         7f:45:dd:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u60jE4hBXUWXUWbIkqlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjZhZDgzZjI1YzI4ODZhMjU4NTdmYjUxNWQ0NTU5NTI3
YzQ2ZjcwHhcNMjUwMTMxMDUwMDQ5WhcNMjUwMjAxMDUwMDQ5WjAzMTEwLwYDVQQD
EyhmZjdmZDZjNWVhMWFiODJkN2JmMzQyY2QzMWIzYmQ1YmY3YmUwNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs1xDj67yV0lkX8POroI/dxbrNZO
F9PDh9ezS7Cnw+IMMjxMEnfR7nmzGdRCdWIc5V2zTVPwHd/O/1dizVmIef3bq0ts
+WeDVGVAjSmFopE/tb3y+NnJFGh9RQod7k/9TY3F8xx69RYqd8jwib7xB7tI0glH
4GAi5QQZGmzRzQHlHdOUSN2lYaV4t1+0VjDs0D777JlgRHFw3jjlHq+E+c6c7/pe
FPRmx229RXOSFEyZB/21GySX6dbI0LPqREd1U2VhIpyWS8otUPokGoncOAb6Ypix
jPzaKcbfkH17sUdn6wb1LHCzG5IhNikpqcqrutxMm+FPx6MgoQ+IDt0zJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9/1sXqGrgte/NCzTGzvVv3vgZ0MB8GA1UdIwQY
MBaAFMf2rYPyXCiGolhX+1FdRVlSfEb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9hdGdfSmNLSWFpV0ZmN1VWMUZXVko4UnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85N2U0ZTUtMDI0Ny00NmJhLTgzY2Et
MzI2OGFlOTA5NmRjLzEveF9hdGdfSmNLSWFpV0ZmN1VWMUZXVko4UnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85N2U0ZTUtMDI0Ny00NmJhLTgzY2EtMzI2OGFlOTA5NmRj
LzEveF9hdGdfSmNLSWFpV0ZmN1VWMUZXVko4UnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgQB1M3S
kSauqy8nPgnpOmtuJ2GPeZ1ALJTaXiSkI56fRGfKDuiMnLY/tr4bemitZWRAExLl
jQOdwYIW9dO69jbQOz5vDkT25y0LzBJmiUne+2NZsOW9YVloBbyvPSAmKSnA1PSv
sXEAfM41qwah//FjfV6NHnG87d8PiXzgUEnClMutkbDbMV9ajRc66guME+JRLW5s
BrgJUa2RYzdruoJAyUOO2vXPAtXKqiJipCbCxM6+fxMyCwqL8yv97qX/DPE5Egjr
YYMvlEBdXA2c63GKvKV9kU8RIQf850TM6bEfFwZbZQhkLJivpawgNzBp0zFMwWec
KeZhPZSbf0XdMQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:05 2025 by rpki-client on console-fra.rpki-client.org