Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File:                     1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier:          STB8M1VRRDpYN5HzzmuRsbj4iZcKdILduBO8KXCEB5o=
Subject key identifier:   F2:27:7F:75:97:CC:0F:8A:03:45:0C:2B:6A:93:B2:85:A1:23:20:C2
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer:       /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial:       0194BABB396641645E84D2CC2E31C3D10B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 05:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:19 +0000
Files and hashes:         1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: uOP38GMPxb16leRoguqkVhInq4L0Wr3WUuFb9rk2vWc=)
                          2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=)
                          3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:39:66:41:64:5e:84:d2:cc:2e:31:c3:d1:0b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
        Validity
            Not Before: Jan 31 05:00:19 2025 GMT
            Not After : Feb  1 05:00:19 2025 GMT
        Subject: CN=f2277f7597cc0f8a03450c2b6a93b285a12320c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:f1:e5:5e:d8:88:6a:2f:03:2c:dc:7a:e5:
                    12:a1:11:9b:b4:ed:cf:8a:61:98:39:71:15:ea:e5:
                    82:19:c4:e2:31:db:a8:87:95:f0:13:a9:0a:a7:4d:
                    a5:04:bc:41:39:c0:9a:14:64:85:2c:d9:cb:13:0b:
                    66:4a:b5:72:ad:2e:08:44:94:bf:53:3c:a6:5d:4c:
                    f8:b9:33:e3:6c:94:29:54:5a:4d:19:16:9a:c8:64:
                    25:d9:6e:6e:ab:a5:1b:5a:ea:56:62:04:6b:20:ef:
                    98:06:4b:47:8b:98:5d:8b:17:35:6c:14:61:3d:81:
                    31:a3:bb:2e:43:78:b2:68:4c:79:6b:b7:f6:18:50:
                    e0:77:63:59:d8:de:c9:e7:b8:eb:2f:bd:b4:cf:52:
                    23:b5:43:ac:02:78:81:26:bd:9d:ca:ab:fb:14:14:
                    6b:dc:24:30:e4:35:82:23:6d:d4:37:54:2c:b4:1f:
                    95:cb:08:71:21:e6:a6:f3:eb:b5:c6:18:95:26:a5:
                    75:79:18:5b:2e:77:a0:79:ba:11:be:45:da:57:f2:
                    82:a6:5c:50:dd:5c:ee:07:89:11:e8:ea:dd:2d:88:
                    24:0c:92:ee:87:4f:75:9d:99:93:4c:26:5f:3f:28:
                    82:b0:e6:88:78:0a:9e:be:6f:7f:05:bf:9e:f0:e1:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:27:7F:75:97:CC:0F:8A:03:45:0C:2B:6A:93:B2:85:A1:23:20:C2
            X509v3 Authority Key Identifier:
                keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f7:6b:78:bb:f9:de:8f:95:f5:df:b5:c5:de:4f:67:96:55:
         e5:90:17:88:cf:cf:ec:db:b4:a5:2d:3a:14:b5:a9:c1:d4:c6:
         57:2e:f9:1d:9c:4d:cc:b2:62:c2:dd:ff:7b:ef:1e:01:72:99:
         fc:61:54:fe:3d:65:59:33:27:8c:9e:a1:1a:62:20:78:0f:eb:
         79:d7:ba:ab:57:2b:55:67:fe:29:bc:2e:ad:93:29:61:8d:9c:
         6b:81:37:c5:3e:a5:d5:6d:46:ce:dc:50:08:a6:41:ee:0a:ae:
         79:b2:af:cc:b3:f7:a9:e0:07:97:ff:76:2e:78:7b:bd:55:fa:
         5f:3b:c9:f7:53:a9:b0:b8:58:fe:cf:49:f9:e5:23:ef:94:e0:
         27:9f:4e:f6:a9:6d:7d:a8:19:e0:5d:bd:28:c2:16:4f:f2:38:
         de:44:da:ac:10:d3:6b:89:a1:19:a5:dd:ef:6f:6a:ba:6b:51:
         8a:7b:a3:34:a9:ab:4a:e7:92:61:86:21:b4:3c:89:5b:8c:7a:
         4d:d9:e3:dd:17:ed:bd:28:0b:c0:b1:ec:70:99:22:13:0b:60:
         54:e3:ac:fe:66:da:98:63:36:2d:f8:f8:22:f4:f6:05:06:79:
         2b:94:6b:84:6f:87:63:a1:e1:04:b4:b6:7c:24:1d:75:a8:b3:
         62:a1:66:f5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS6uzlmQWRehNLMLjHD0QuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2ZkZWNhZGIzMjYxMzM0Mzg3Y2YwOTFkMDJlMDcxM2I3
ODFkMzEwHhcNMjUwMTMxMDUwMDE5WhcNMjUwMjAxMDUwMDE5WjAzMTEwLwYDVQQD
EyhmMjI3N2Y3NTk3Y2MwZjhhMDM0NTBjMmI2YTkzYjI4NWExMjMyMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E7x5V7YiGovAyzceuUSoRGbtO3P
imGYOXEV6uWCGcTiMduoh5XwE6kKp02lBLxBOcCaFGSFLNnLEwtmSrVyrS4IRJS/
UzymXUz4uTPjbJQpVFpNGRaayGQl2W5uq6UbWupWYgRrIO+YBktHi5hdixc1bBRh
PYExo7suQ3iyaEx5a7f2GFDgd2NZ2N7J57jrL720z1IjtUOsAniBJr2dyqv7FBRr
3CQw5DWCI23UN1QstB+VywhxIeam8+u1xhiVJqV1eRhbLnegeboRvkXaV/KCplxQ
3VzuB4kR6OrdLYgkDJLuh091nZmTTCZfPyiCsOaIeAqevm9/Bb+e8OEW8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPInf3WXzA+KA0UMK2qTsoWhIyDCMB8GA1UdIwQY
MBaAFPl/3srbMmEzQ4fPCR0C4HE7eB0xMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YX2V5dHN5WVRORGg4OEpIUUxnY1R0NEhURS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQz
LWViN2JmMmJkZGQwOC8xLzEtWF9leXRzeVlUTkRoODhKSFFMZ2NUdDRIVEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4L2E4YTM2NC03NDMwLTRkYTYtOGY0My1lYjdiZjJiZGRk
MDgvMS8xLVhfZXl0c3lZVE5EaDg4SkhRTGdjVHQ0SFRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPdr
eLv53o+V9d+1xd5PZ5ZV5ZAXiM/P7Nu0pS06FLWpwdTGVy75HZxNzLJiwt3/e+8e
AXKZ/GFU/j1lWTMnjJ6hGmIgeA/rede6q1crVWf+KbwurZMpYY2ca4E3xT6l1W1G
ztxQCKZB7gquebKvzLP3qeAHl/92Lnh7vVX6XzvJ91OpsLhY/s9J+eUj75TgJ59O
9qltfagZ4F29KMIWT/I43kTarBDTa4mhGaXd729qumtRinujNKmrSueSYYYhtDyJ
W4x6Tdnj3RftvSgLwLHscJkiEwtgVOOs/mbamGM2Lfj4IvT2BQZ5K5RrhG+HY6Hh
BLS2fCQddaizYqFm9Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:35 2025 by rpki-client on console-fra.rpki-client.org