Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
File:                     qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json)
Hash identifier:          1QQVY6+b2zJGZUzY3dbwcEtF2P6OILEE1rATrVJ63Ck=
Subject key identifier:   1F:0E:DC:F6:0A:71:08:CD:2D:B5:BD:5B:35:9B:C2:EF:CA:B8:AE:D9
Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
Certificate issuer:       /CN=a95f638862529b6dafd440e172a22f0120b09aea
Certificate serial:       0194BAF1FF599EC03DB5C9F86B5839787CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 06:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:09 +0000
Files and hashes:         1: 5LFA7pu9BAuW9Zs8wziojRaCNSk.roa (hash: UzC92ONklOjy0NiAl9iqdlk8UfZjfzE3sfwqDQwnG80=)
                          2: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: uNdGxroAqKrfQ8wxXKNB6gm1Y2l9US4OBcsJPce5b8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f1:ff:59:9e:c0:3d:b5:c9:f8:6b:58:39:78:7c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea
        Validity
            Not Before: Jan 31 06:00:09 2025 GMT
            Not After : Feb  1 06:00:09 2025 GMT
        Subject: CN=1f0edcf60a7108cd2db5bd5b359bc2efcab8aed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:46:11:ff:3d:d7:a4:84:ce:0b:16:9c:fd:
                    55:5a:04:24:64:32:c0:74:48:59:d8:3f:1e:34:b9:
                    b9:25:fb:c3:39:e3:57:ad:25:f4:0d:9d:62:d2:89:
                    1b:c8:11:e9:d1:c6:bc:be:d1:e3:d6:17:d9:99:a9:
                    1f:41:59:c5:f6:e1:4d:0a:5a:5d:a2:b7:d5:fa:97:
                    c9:9a:91:0c:b2:93:5d:ac:46:d2:67:46:be:38:e6:
                    96:5d:6a:de:5a:b6:ee:56:66:d0:88:01:f0:1f:b0:
                    01:de:d3:32:6f:45:59:f1:9e:2a:2d:a1:5c:20:3c:
                    18:c2:d2:c3:a3:76:85:aa:32:a3:8a:f2:03:7e:b6:
                    f5:f1:b7:d7:d9:36:9c:2a:57:1d:3b:00:43:ae:f2:
                    94:07:1e:e8:1e:3d:59:c3:8d:c8:d3:9d:e8:fe:52:
                    a6:d4:62:fa:9a:fb:5c:db:53:91:1a:ee:18:5d:7c:
                    0d:21:10:96:37:82:0e:57:66:3a:60:0e:d0:38:1e:
                    51:7b:25:c9:28:79:be:bb:f1:ae:60:57:6c:d8:5b:
                    0b:8a:db:a9:82:ea:88:b6:82:a5:9c:a1:da:3e:26:
                    f9:bc:f1:8a:8a:25:95:ad:2a:55:50:72:93:a6:57:
                    bf:d8:53:a1:d5:02:e4:c6:fc:71:7e:2f:a1:12:d1:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:DC:F6:0A:71:08:CD:2D:B5:BD:5B:35:9B:C2:EF:CA:B8:AE:D9
            X509v3 Authority Key Identifier:
                keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:af:4d:22:24:20:f2:8b:1a:24:19:b1:6c:c3:f7:11:69:e8:
         95:c4:4f:1b:d0:bc:ba:cc:5d:bb:37:65:91:ce:f7:6d:e9:bc:
         dc:fd:6c:7a:94:48:22:ab:91:44:38:5e:cb:2d:e7:53:56:1a:
         9d:0d:9f:aa:4d:19:61:69:2e:67:af:aa:66:9d:ee:5a:fa:60:
         13:d7:31:1c:7a:63:7b:af:a2:f4:2e:fa:0d:0d:da:56:ce:48:
         c0:69:e9:60:30:f8:c7:7a:61:3b:48:ef:29:f0:cf:7d:ae:d6:
         b8:a6:5d:1e:04:52:75:69:af:c7:8b:c6:a9:97:24:46:58:99:
         f6:2f:de:bc:d5:d4:78:5f:5f:b0:f7:04:5c:6e:57:df:51:c5:
         d5:a8:85:4d:6a:ad:c1:e9:7a:27:88:53:d5:d1:77:50:62:76:
         93:11:4f:e5:82:41:4f:42:9e:8e:1c:3a:36:3a:0f:8e:36:06:
         85:8b:96:13:8e:c5:75:fb:6b:70:e6:2a:73:25:9a:43:69:b4:
         94:bc:8f:15:82:fe:3f:13:dd:4d:2e:f7:40:da:d4:8a:54:24:
         c4:b1:a3:5a:21:43:24:70:c3:82:73:66:7f:a1:4a:70:54:a1:
         ae:ec:7f:78:9d:ef:ed:fc:bd:75:f3:45:70:f3:ca:25:13:13:
         ef:12:a4:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68f9ZnsA9tcn4a1g5eHytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NWY2Mzg4NjI1MjliNmRhZmQ0NDBlMTcyYTIyZjAxMjBi
MDlhZWEwHhcNMjUwMTMxMDYwMDA5WhcNMjUwMjAxMDYwMDA5WjAzMTEwLwYDVQQD
EygxZjBlZGNmNjBhNzEwOGNkMmRiNWJkNWIzNTliYzJlZmNhYjhhZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HBGEf8916SEzgsWnP1VWgQkZDLA
dEhZ2D8eNLm5JfvDOeNXrSX0DZ1i0okbyBHp0ca8vtHj1hfZmakfQVnF9uFNClpd
orfV+pfJmpEMspNdrEbSZ0a+OOaWXWreWrbuVmbQiAHwH7AB3tMyb0VZ8Z4qLaFc
IDwYwtLDo3aFqjKjivIDfrb18bfX2TacKlcdOwBDrvKUBx7oHj1Zw43I053o/lKm
1GL6mvtc21ORGu4YXXwNIRCWN4IOV2Y6YA7QOB5ReyXJKHm+u/GuYFds2FsLitup
guqItoKlnKHaPib5vPGKiiWVrSpVUHKTple/2FOh1QLkxvxxfi+hEtGwCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8O3PYKcQjNLbW9WzWbwu/KuK7ZMB8GA1UdIwQY
MBaAFKlfY4hiUpttr9RA4XKiLwEgsJrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hZjQ5M2YtNDFmZS00MDZkLWIzZmYt
ZWJiNTNjMjUzMDdiLzEvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hZjQ5M2YtNDFmZS00MDZkLWIzZmYtZWJiNTNjMjUzMDdi
LzEvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF69NIiQg
8osaJBmxbMP3EWnolcRPG9C8usxduzdlkc73bem83P1sepRIIquRRDheyy3nU1Ya
nQ2fqk0ZYWkuZ6+qZp3uWvpgE9cxHHpje6+i9C76DQ3aVs5IwGnpYDD4x3phO0jv
KfDPfa7WuKZdHgRSdWmvx4vGqZckRliZ9i/evNXUeF9fsPcEXG5X31HF1aiFTWqt
wel6J4hT1dF3UGJ2kxFP5YJBT0Kejhw6NjoPjjYGhYuWE47FdftrcOYqcyWaQ2m0
lLyPFYL+PxPdTS73QNrUilQkxLGjWiFDJHDDgnNmf6FKcFShrux/eJ3v7fy9dfNF
cPPKJRMT7xKkgg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:58 2025 by rpki-client on console-fra.rpki-client.org