Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          dcwIUSK2cTVC5YS5FkqzrKC9vR+AtgIpsNLegMKKsqU=
Subject key identifier:   1A:A8:5E:86:E7:E3:E5:EF:F2:C1:C1:8D:C5:51:C1:DE:88:D9:7D:FA
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       0194BAF276C82D31AD91887B0A7BCB881541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          149B
Signing time:             Fri 31 Jan 2025 06:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:39 +0000
Files and hashes:         1: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=)
                          2: EnWNHEKE4As2dY7z8H4f1zMv8PE.roa (hash: hirWkRxOPTdm/HJ/WnnegZ8yGMndTUx93DgHktqjC64=)
                          3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: jSyFrNAezftTXq/vbDfxSLOFJMga0nSBvtoxJwN9PSw=)
                          5: O9d_gV74yYpX6Um_s3aWdDm_Ej0.roa (hash: RbexetxXBeJZCWdrT/LqIU6zAstJlnMOcoJBHKsXhoQ=)
                          6: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          7: aQ0BCg7T0qvdq_rjilld2qmDCCA.roa (hash: FUk+EtDI/Bw1Ith6izcMbGQJ0XgwGEmYYqaLt5/+JX8=)
                          8: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          9: pGg5IZ4_Rh_E3JxX0-HT9TgVPxM.roa (hash: 5liIqRjQ5b6iul4uHIld/la3AWJyxn6cmBEC3D1GVaQ=)
                          10: s3By1xAgm0Piz-TUrYDBrs1WoXU.roa (hash: BgzNGbdXko+tn+sFUWTRIfviR0vd7FxJVj54FcWlz/E=)
                          11: yEAhGBhhnsGlSwmABMxYXMoVFmo.roa (hash: 4gRmJAIY5iMdHyen9IsOKFW1O1UVQrjj3rH4hihkCu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:76:c8:2d:31:ad:91:88:7b:0a:7b:cb:88:15:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Jan 31 06:00:39 2025 GMT
            Not After : Feb  1 06:00:39 2025 GMT
        Subject: CN=1aa85e86e7e3e5eff2c1c18dc551c1de88d97dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:8f:77:96:21:a3:14:f3:6f:df:07:80:f2:
                    d2:de:d3:dd:a0:87:0d:84:1e:7c:ac:0c:e9:cb:6a:
                    ef:75:4a:5d:93:d3:6a:f7:08:b5:3a:a9:8a:dc:ec:
                    7a:23:b6:f1:cb:31:d3:94:76:fb:4c:54:71:95:14:
                    fd:8d:60:03:68:be:6e:b4:50:be:23:51:58:db:a0:
                    7a:85:2d:f8:a4:a7:88:5a:1d:49:85:c6:19:b5:24:
                    e9:23:b3:60:cf:55:0d:ac:4b:83:6e:99:2a:44:d7:
                    66:b9:cc:6e:b2:25:2f:d8:5a:89:5d:eb:21:46:4f:
                    d0:4a:84:a0:76:dd:7b:0c:57:20:a7:8f:bf:8a:0f:
                    ff:94:f3:88:6b:ba:49:20:15:d4:8c:40:ef:be:a6:
                    9f:e0:b6:cc:61:d6:f1:c3:90:31:44:da:19:a0:d2:
                    06:76:24:42:7b:eb:b1:67:03:95:93:76:87:e4:04:
                    7a:0e:e7:d3:79:7a:ee:44:2d:e9:e7:44:9c:a0:f3:
                    82:55:ad:d6:6b:c1:e1:bf:22:b9:d5:8f:12:2d:5e:
                    be:9f:4c:ba:e3:fc:98:0a:7a:84:58:d7:2a:80:d0:
                    2b:95:5f:b4:f8:12:a5:99:06:65:ea:8c:bc:fb:8d:
                    bd:37:a7:b1:10:16:e2:22:41:f7:66:31:a0:dd:07:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A8:5E:86:E7:E3:E5:EF:F2:C1:C1:8D:C5:51:C1:DE:88:D9:7D:FA
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:fd:cb:24:10:f2:34:91:ba:17:40:ec:49:a6:d8:b0:78:
         ae:00:16:f4:40:0b:c6:aa:5d:c7:da:bf:eb:e8:57:22:c1:66:
         c9:4c:39:a6:81:cb:ed:48:4b:d2:41:a9:cc:ca:3f:cf:e7:d6:
         db:6a:c4:a3:7c:22:69:1c:b7:c9:8e:56:76:55:65:5e:fd:1c:
         da:f0:02:c8:d4:32:50:2b:bb:2d:91:b5:a0:c3:8b:ee:dd:35:
         33:53:df:e6:f3:69:38:45:71:49:18:6b:9c:e1:e3:2b:01:d0:
         a0:29:e7:e8:94:73:40:34:65:75:7c:ff:88:61:3c:6d:c7:e8:
         1a:a0:c1:88:a0:d7:ed:bd:e5:16:4a:9d:4b:fd:2b:6a:05:43:
         ef:61:7d:93:b8:4a:29:16:07:d5:12:f3:0c:52:14:40:84:67:
         5e:12:30:d2:a8:f7:e2:96:3c:83:e6:01:4f:8c:d8:db:98:45:
         3c:ce:58:10:f8:a5:13:40:40:30:43:39:28:94:f3:e3:94:e1:
         7f:0c:7c:c5:3a:a4:30:82:ce:fc:44:5b:19:5c:b8:32:89:fb:
         38:bc:ef:fa:a6:c5:d8:e5:d9:66:63:90:4a:69:e6:0a:12:c9:
         59:c5:ca:44:2c:3c:5f:61:ae:65:0b:99:f7:cb:55:82:a6:ff:
         f0:8f:db:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:38 2025 by rpki-client on console-fra.rpki-client.org