Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
File:                     7VprotIki8R4KsD9s8ZLlGZAsJw.mft (raw, json)
Hash identifier:          fGzAHqFvSLU/2ccNQ7n8dYWmk4PgLQ21T185lBLkoV8=
Subject key identifier:   DE:5E:E2:E3:B4:FF:5C:1E:FD:56:CB:DE:84:56:16:D6:23:45:1E:DC
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Certificate issuer:       /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial:       0194BB5FFAB8BB16DAB6C2E47068FC4E591E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
Manifest number:          049F
Signing time:             Fri 31 Jan 2025 08:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:17 +0000
Files and hashes:         1: 314MaBVE3hjtYKkC4-99ME_UBjc.roa (hash: 7UXNIyhk1ejIJ/HGQxCr8shkd1oXUhsfxNUgODxpVqQ=)
                          2: 7VprotIki8R4KsD9s8ZLlGZAsJw.crl (hash: nH47u4sTwiW6tikMNMbOr4f1e+PIL1xN+Ilr6Pczaxw=)
                          3: IIp94GUi2CKDAXo7hzU1qNdLWVg.roa (hash: YmRe6VqQCgI0nMfOZ9MBk1EFIvFG9HxQKfWRMtofors=)
                          4: K2cl5DfywZ2FHhGLEEiE9l1uo7M.roa (hash: ibEDhV+yzuNtZt5ET+zP4p+w29VfnTjyjguslhXO6kQ=)
                          5: tgJhHxWB9k1nD0P-uBud1SgQj9Q.roa (hash: x3MqStSpB4AHpyiqWuAgIrBK5ybLesbTtKI3yKep0ZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:fa:b8:bb:16:da:b6:c2:e4:70:68:fc:4e:59:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
        Validity
            Not Before: Jan 31 08:00:17 2025 GMT
            Not After : Feb  1 08:00:17 2025 GMT
        Subject: CN=de5ee2e3b4ff5c1efd56cbde845616d623451edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:4f:00:3d:5e:9b:a2:c1:83:c7:3a:0f:8f:
                    dd:ce:90:97:4d:41:4f:64:d0:6b:70:49:a1:d2:97:
                    26:a2:8f:8e:d8:15:17:bc:4e:a0:87:70:f2:21:1e:
                    17:f0:81:4f:6f:db:03:ed:82:cf:f9:e7:a1:4d:ea:
                    b5:69:6b:d6:98:f4:67:04:0f:57:c6:eb:3c:4b:35:
                    d6:51:6e:5a:2f:2c:14:b6:eb:28:13:e5:e4:8c:c3:
                    ed:81:dd:81:1e:ad:24:17:42:77:02:af:cc:6b:75:
                    25:3a:74:b8:17:ae:a4:49:e1:c4:e9:13:cd:43:9e:
                    dd:17:d0:6a:db:e2:45:d0:3f:4f:b4:45:23:9e:a6:
                    b5:dc:eb:1b:59:ee:11:88:b3:15:14:7f:fe:4e:c4:
                    67:3f:a0:32:57:8f:0b:6e:ed:66:3a:e6:47:2e:56:
                    fc:99:1e:43:f0:13:b2:d4:07:86:56:80:f3:76:e6:
                    90:61:88:b9:0e:34:de:9d:48:98:51:9e:24:ac:3f:
                    24:65:0e:94:c5:e2:77:b5:60:2b:0a:f1:23:0b:37:
                    c1:9f:2f:2f:bb:39:e4:b8:ed:df:e4:42:d0:d9:43:
                    66:f1:15:5b:87:4b:33:ae:d5:37:d4:71:2f:b3:cf:
                    cf:b4:86:47:b2:6e:ae:b2:ef:fc:7b:7c:b8:92:7f:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:E2:E3:B4:FF:5C:1E:FD:56:CB:DE:84:56:16:D6:23:45:1E:DC
            X509v3 Authority Key Identifier:
                keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:56:cd:13:dc:d1:8a:1d:80:06:56:98:c8:f3:ff:69:c5:65:
         c9:54:0a:c9:a7:1e:4b:b9:ff:57:a7:bb:77:24:cd:0c:80:b5:
         cd:00:28:72:c6:81:c0:94:12:27:e7:7f:31:37:08:1e:11:3e:
         e8:aa:8a:96:0a:aa:a9:37:e2:72:29:9a:ec:63:6c:a6:02:d9:
         2a:a5:fc:33:9e:55:c0:09:d3:2f:fb:bc:49:0f:eb:be:78:dc:
         35:49:5c:1e:fc:3e:14:79:79:43:7c:cc:84:61:b9:b5:91:63:
         0f:66:38:2e:80:f3:6f:dd:0d:8e:13:5a:a8:76:cf:1f:42:6e:
         d3:a8:60:d2:83:ce:87:ef:ad:d4:fa:5a:e7:14:7a:30:02:5c:
         16:70:61:b7:01:d8:65:01:61:b9:2d:bb:a2:56:4e:51:df:f8:
         28:d9:9c:a0:96:3e:ae:ac:fc:ca:7a:ed:ba:f0:b5:2e:b0:d8:
         83:19:68:2f:81:33:0e:fa:c0:18:e7:47:7a:47:50:5d:6f:91:
         ae:24:80:73:73:e0:bc:fe:bb:cf:25:59:5f:bc:e4:9a:66:c5:
         04:95:5b:dd:3b:3f:30:c4:33:0a:d8:e8:0a:c2:ad:97:c3:03:
         b6:89:78:3f:35:f2:87:4f:5c:13:4b:b5:b7:03:ae:d4:dd:0d:
         ac:06:af:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/q4uxbatsLkcGj8TlkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNWE2YmEyZDIyNDhiYzQ3ODJhYzBmZGIzYzY0Yjk0NjY0
MGIwOWMwHhcNMjUwMTMxMDgwMDE3WhcNMjUwMjAxMDgwMDE3WjAzMTEwLwYDVQQD
EyhkZTVlZTJlM2I0ZmY1YzFlZmQ1NmNiZGU4NDU2MTZkNjIzNDUxZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJNPAD1em6LBg8c6D4/dzpCXTUFP
ZNBrcEmh0pcmoo+O2BUXvE6gh3DyIR4X8IFPb9sD7YLP+eehTeq1aWvWmPRnBA9X
xus8SzXWUW5aLywUtusoE+XkjMPtgd2BHq0kF0J3Aq/Ma3UlOnS4F66kSeHE6RPN
Q57dF9Bq2+JF0D9PtEUjnqa13OsbWe4RiLMVFH/+TsRnP6AyV48Lbu1mOuZHLlb8
mR5D8BOy1AeGVoDzduaQYYi5DjTenUiYUZ4krD8kZQ6UxeJ3tWArCvEjCzfBny8v
uznkuO3f5ELQ2UNm8RVbh0szrtU31HEvs8/PtIZHsm6usu/8e3y4kn97HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5e4uO0/1we/VbL3oRWFtYjRR7cMB8GA1UdIwQY
MBaAFO1aa6LSJIvEeCrA/bPGS5RmQLCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUt
MTA3YThkODViZDMwLzEvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUtMTA3YThkODViZDMw
LzEvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlbNE9zR
ih2ABlaYyPP/acVlyVQKyaceS7n/V6e7dyTNDIC1zQAocsaBwJQSJ+d/MTcIHhE+
6KqKlgqqqTficima7GNspgLZKqX8M55VwAnTL/u8SQ/rvnjcNUlcHvw+FHl5Q3zM
hGG5tZFjD2Y4LoDzb90NjhNaqHbPH0Ju06hg0oPOh++t1Ppa5xR6MAJcFnBhtwHY
ZQFhuS27olZOUd/4KNmcoJY+rqz8ynrtuvC1LrDYgxloL4EzDvrAGOdHekdQXW+R
riSAc3PgvP67zyVZX7zkmmbFBJVb3Ts/MMQzCtjoCsKtl8MDtol4PzXyh09cE0u1
twOu1N0NrAavnw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:44 2025 by rpki-client on console-fra.rpki-client.org