Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
File:                     8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft (raw, json)
Hash identifier:          dTaPGs7Shy5IMAKUR5w8tcYhjmfYjyOdGFdIHZEmobQ=
Subject key identifier:   EC:FD:38:0A:81:66:DB:CC:79:59:43:76:27:49:20:50:9E:FB:70:D9
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       0194BB5FD3E16DF44DB0044550233090FD04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
Manifest number:          14C4
Signing time:             Fri 31 Jan 2025 08:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:06 +0000
Files and hashes:         1: 1-Ib3ePsRA5A4NzmQHsGZ6WhlfLg.roa (hash: KapOr1wMzQ4a6V+iTDayaFAT/0xfPbcJAwEYW1S99AM=)
                          2: 3nPG-CM1jjEmXF6XDlPgCgntfQg.roa (hash: Sb1ZHVgBDy5ifPkmmrVoXHsKaHLar+3PzllY+7Vhpsc=)
                          3: 4bHfzm1fuJUKFdFvq81Zj1J7nZ8.roa (hash: cYPYZrlg6fQ6IO6sn0agmIqG6bfzhmVqtlsX+KCd26U=)
                          4: 8Rolr5OJ1dzd9HFyiXZ4ZEGAQGM.roa (hash: tjg3E+tyUpdBogIYVbng/9VqHzajhMWxIYYVh3BiD/g=)
                          5: 8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl (hash: XEZFiGCoKjyNqQINAhRa1aoL96RLhkWq/vrYMxHLkIM=)
                          6: 9-Y0aWZrtpwstXXpKAi4n__bel4.roa (hash: GAFuW8iAmDtblZCnA4ow69qvWKaKSY18TY/SvaQs/uE=)
                          7: 9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa (hash: r9B2NrNcCL1IbHEMQ2e6VWbR42EMOv3qQYj9s2HeM6o=)
                          8: AZTESLYY-mvlV0veUW4ZBWEzm8g.roa (hash: ciMWe1lrVuJefVZEepfsD7kzpuER+m7qCEup6vMAnls=)
                          9: Ce54HXmEqo442T4WiTV5bqG4HBA.roa (hash: DQvuX8+aqZbZMDcPsGVQwpJiPV/SBuugEDbFK3zQvko=)
                          10: ETN8QHIyryapaJmjoM3ECXryN-A.roa (hash: WdBvGRMmsIYdfXiH6W0xJOuPciG8AXZo+omUaskYZi8=)
                          11: EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa (hash: gmkGHYqKxDCqtYbJRJf1ZjpQV4FPkXqmKecKGoXCqA4=)
                          12: KRkXrh5vqktxAukUYwKEkf01PR4.roa (hash: FhB06ea4PPxnlbrSmHt+yVwcmkem9lE6fs+aLQmy5mg=)
                          13: M6tpw9WDHHcOBE7Nu4iTuKE-VyM.roa (hash: AHwFhMzSzOOXUMkTHVHZW6pPfRFju6dYa9b60DMHno8=)
                          14: QhJUonZBW_fT73-XbPcVZYc3RHk.roa (hash: TIqK93h88mLvgfr4sUBZgCaJnzbrngDXh0FwECuC9BY=)
                          15: SvYQ5sCmAP7iFMfAbK2d4Xeymww.roa (hash: 6CQ8nfmpzKfv8CzE6lBzT9PDPbZGKV6UDDligyI3Rh8=)
                          16: TwcW7ry__ldmLwpiB7VevhQqAqI.roa (hash: uBxAlXDXXFqGZEkkBChFuQhwTVN5EZjcpMYp/y3cS/k=)
                          17: YiC_n7H1zYmlKRYY1bOGnbCPCwQ.roa (hash: FQ2xUm5MAH+gaygCe7xlfZTXRPyJzw6HwmD4EbMVd4g=)
                          18: ZWCXXdfhMKu44PX-A6YEp2UiZPA.roa (hash: QZ9nw6Rb8b+5Ipz/WfFz/MQUV3NqW6gj+wcTZJ283/A=)
                          19: _mvpzQdrT-UPeHFVLuGvqi5s8sg.roa (hash: 2qnT0PTv3mf8zPz3H6aGiUOr76hH+q7zL6DiRLrU15Y=)
                          20: nQ01TE9bkgT7MHtnfuIKieMDQVs.roa (hash: PQllWkaIIrk9fGOMmKB59IFgvI4YVZ3f4SJIjaMjjZk=)
                          21: nTRkDpYpiL-ve1IY46M2TqndeFk.roa (hash: SEjOrg3ZcX1knDKPyX19VTb93fK3PLiRwqrksI18Hm8=)
                          22: oz8WuNequXvsoaSrfyjDTnTQW3k.roa (hash: xlVm6Ij0YZyImV9HgneJ0I8dGPn1CBP8GzwgQHOUY74=)
                          23: rH9fjtKyKbkp-JAaMAw2wwgD_Fs.roa (hash: fT5xVyhOymjjjY5+pYaIjInGs4R/KcUxc9NUcHlQFy4=)
                          24: tOidYiB9KzPdc_4JWd0kjK7tprI.roa (hash: u38Y9WyKByUf48bNFO8TfYCIxntXZKNsIAVE3xBRAVY=)
                          25: v1wHuyLD0lT9xLNIfHSO1rbSaRg.roa (hash: 8VY1fRQGtBjgC5UccCU2Q19IB1PWw1jc9tCUJQCQB4s=)
                          26: wbBa6kq84wlAZCi2sw9XVDGlU4Y.roa (hash: ojHeuXjdy0HfY/N5u8dGFLgNKoSvLkC1MNOhG4aofk0=)
                          27: ylcQYM_WtIj2alhU5bK9_ucFDHI.roa (hash: /8NsatT0ZgKYmrCOgxqRZGOkKbVdKua7/U9gvXPWvso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:d3:e1:6d:f4:4d:b0:04:45:50:23:30:90:fd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Jan 31 08:00:06 2025 GMT
            Not After : Feb  1 08:00:06 2025 GMT
        Subject: CN=ecfd380a8166dbcc79594376274920509efb70d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:3a:51:58:03:37:32:34:cd:ca:b1:6b:fa:
                    34:f0:79:05:0e:92:ad:45:ec:bd:c3:9e:89:e9:d8:
                    5d:d4:a1:36:7a:88:49:80:0d:62:6b:88:4f:8e:5c:
                    eb:2e:4d:f6:ab:c5:e8:b2:aa:13:c8:94:3f:d7:5c:
                    6f:53:c3:8a:94:cc:d4:49:83:7a:99:d4:82:e5:e7:
                    40:39:e5:ff:9a:a8:22:fc:6a:61:cf:82:51:bb:53:
                    0d:c6:72:c5:3f:2b:4f:46:db:60:0b:a4:4d:3c:46:
                    f5:db:7a:37:68:e0:c0:34:34:f6:7d:3e:4e:a0:ae:
                    df:73:ef:bb:2f:ac:e9:2c:09:eb:5c:c7:5c:7b:3e:
                    85:b0:99:dc:04:b8:b1:df:5a:0c:1d:29:83:9c:4e:
                    46:fa:19:f7:e5:4a:45:33:b6:21:29:ac:bf:6f:2e:
                    b0:1c:90:d9:20:76:d3:d3:5c:64:a9:9f:0d:ea:cb:
                    e1:73:d6:52:23:f2:f9:f6:b5:d0:4a:a2:ef:88:45:
                    45:e8:f5:72:8d:84:c2:23:b1:08:5d:d3:a3:bf:86:
                    f0:c9:6f:ff:ae:c6:b1:f5:e0:43:25:57:0d:ff:7f:
                    5d:c9:0c:85:b4:9b:c8:48:9f:be:5e:f4:76:ce:f9:
                    e4:ca:c1:44:7d:d7:ca:ee:43:df:52:4c:a7:f3:4e:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:38:0A:81:66:DB:CC:79:59:43:76:27:49:20:50:9E:FB:70:D9
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:59:ee:60:0c:37:df:87:b4:fd:17:6d:07:8c:e2:2f:d0:58:
         9a:01:28:5b:18:bc:6f:f8:a8:58:07:ca:9a:96:a7:e0:78:4c:
         c7:0a:ce:d8:5e:6e:31:1b:20:a4:b3:1b:59:34:00:2d:af:ec:
         03:67:69:d7:f0:be:a6:75:42:db:05:5b:e9:b8:b9:9e:93:fc:
         f6:ba:90:e9:b3:85:04:58:7c:6e:99:eb:22:35:c8:10:67:97:
         25:7a:37:d6:2b:ab:9c:40:36:68:24:f2:2a:5e:07:39:7c:47:
         0f:1d:c5:2c:60:a2:48:66:68:63:3a:ca:45:db:03:de:e4:d5:
         7f:17:55:a7:ff:08:c5:36:c0:80:b6:5e:96:a1:cb:d6:ab:07:
         02:36:f4:16:55:8e:5f:28:0a:d0:fb:c1:fe:8e:1b:ac:aa:65:
         b2:86:28:8a:fa:9e:09:1a:6e:f1:dd:47:e9:8e:69:16:1d:3b:
         37:84:ae:bc:8e:04:55:93:df:eb:07:f9:3f:70:c9:b0:03:e7:
         1e:a5:4c:22:4d:33:ef:8e:4c:a8:ab:38:cb:87:9f:b4:38:9a:
         25:d3:f4:0c:82:33:b9:32:b2:a1:c9:a3:1d:4b:61:93:25:a6:
         a1:c9:40:6f:fa:ea:60:e7:51:c2:a2:85:ca:48:4e:88:ea:55:
         04:21:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:16 2025 by rpki-client on console-fra.rpki-client.org