Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
File:                     1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json)
Hash identifier:          y3H7bg6nxfWyxtX0ZUz1S3+0eB0+vaT9lWO323IrmGg=
Subject key identifier:   1A:5F:95:D1:AB:E5:0D:A7:FB:0E:DA:8E:3A:A0:D9:AA:9C:3E:E2:A9
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       0194BB292271374107E29C217561EA11964C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
Manifest number:          0ECE
Signing time:             Fri 31 Jan 2025 07:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:22 +0000
Files and hashes:         1: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: 0d+mjNKRBfFkFCjHmBuoq6kTVLvyZiSpMTz83xN7HYQ=)
                          2: 1rvU47bf__v_KrHYYRPHuR8fgjc.roa (hash: HO9MgV76hbMMfAjtcpab0pQMUXJlCX3bhzQB4ONUQns=)
                          3: 2Eku4G4QcFntTeBnPdjQt16QDE8.roa (hash: /h0JlWzojsWTrZMYWqaSRG6HTNQqdKotAsOYfDdHfIU=)
                          4: 4eYVrcPkZyjD0mkwEJME-VY7e6k.roa (hash: oHmucjvYMOkZhGcaCPsx6SBBpQCoWNG7e3ruanzJ7qg=)
                          5: 4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa (hash: +SG76G9IyTI0k0seOJpd2UmxDLN7P9YRF6si6eLLNeA=)
                          6: 8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa (hash: /upIizdLvhAVo+dTJgi7w1RXZAYuejov/d8qUeJyxe0=)
                          7: 9qr8r8xTppJSHLya24yoc85Hk7U.roa (hash: lgokGB6Ll002voLL4TcV40sMF+WO24Rj8TUlgWDpzXo=)
                          8: IAaDUlLUfgx8yfwZmpcftz_J3zA.roa (hash: v1q3KD/AbTqO/Q8Ibts7qUHfFpUCjL1VF+LMfn/fbQI=)
                          9: Pj3zogl5ZYWOBY3ig7th641eV9A.roa (hash: 7ElQ3zJdzTdZczGF6CkoIorKYRoi8e4nnKid4Ex6yb0=)
                          10: QAKkeXuZL_ZFLh3yXryVAC9r4uc.roa (hash: UUlL1WVDgsXwZrqIFrcSXaDunz9z9QLg+VVmo+sK9RI=)
                          11: R42js5nag_6RbYvFzZ2Td6L5OKE.roa (hash: uif0n5GqdT1ug3dzXoIN9Ez/FZp4nUhIvywhixKjTHU=)
                          12: TUz_WJSMNczh0a4oE0JPAiZeFwc.roa (hash: W6HJwXWWYxWpF1iC+V/7g0tdFSADqlwW02aC7Kto7U8=)
                          13: UD8PeoC507j-R5gM4iVeaToplJg.roa (hash: E+NOjqQP7fFW4dktZcx7zBoGyfZltq1IW944Fil+FoI=)
                          14: Uvc0mIYrtGDSDiJY8e0YxhvZfsc.roa (hash: t1AKkHKCvtUzgk+Av5NTg1kvHY45d4XWobXLQBwd5jg=)
                          15: WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa (hash: PyohQrEbBmUFGkizOCRWLarzuzBDIMXrn/I9XNTnDqs=)
                          16: XIJUooGzzFBzLgFVyUb-bnI6Oy8.roa (hash: TCYLQRnuzWsgOnaV3SPssBWZuYXYMvyZ2XlBCOrqK8s=)
                          17: XSjZ6P2-J8Hkfl3O5rZuaXFNxu4.roa (hash: mDVKUCcUGNt3ihgIQHKFLdzsYM8bgFSt2hrni9Xfg/0=)
                          18: ZVz0SKvkjOxlciVFBqTr0VUiknA.roa (hash: uFR00EkEnl9o+CnA+h+cBK23mrxF+agDbELB+ERqUFU=)
                          19: q8aI8en4lXWEAOIqjltL2dKCNEM.roa (hash: mIK7Q6QxymI6Gyc9Mumf03eU529f/5ddct/D368l5+0=)
                          20: yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa (hash: 0y+iCbPQCXEytpzJVMYbIqcFI7KG0+fLz2JnONERKbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:22:71:37:41:07:e2:9c:21:75:61:ea:11:96:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jan 31 07:00:22 2025 GMT
            Not After : Feb  1 07:00:22 2025 GMT
        Subject: CN=1a5f95d1abe50da7fb0eda8e3aa0d9aa9c3ee2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:22:83:cb:44:5c:99:05:04:67:aa:b6:be:
                    d5:aa:65:f4:a8:72:85:e9:f5:12:dc:e6:f4:af:19:
                    1e:0e:78:99:26:f5:cd:cc:97:33:65:a0:25:2b:fa:
                    97:b6:db:cf:c4:80:69:5f:bf:b6:57:8b:b0:1f:43:
                    cf:cc:7a:d8:11:a8:9c:76:a8:9a:8c:c4:f4:9d:fc:
                    03:bb:9f:c6:75:7e:82:f9:3a:14:03:8a:5a:cc:f5:
                    5a:48:aa:7a:3e:ec:7a:ac:a4:27:26:f5:8a:a9:d3:
                    93:c7:49:4b:8d:9d:b8:9b:8a:11:f7:79:49:3d:3a:
                    35:77:f0:d6:a7:a3:6b:3b:1b:38:05:de:7b:d6:a6:
                    ac:d8:02:2a:cf:d9:ca:05:67:06:45:31:16:d7:85:
                    4c:a4:18:7a:a7:16:73:cb:d5:85:03:5b:1f:55:1c:
                    a3:bb:11:d7:b0:95:d1:f7:e4:39:d6:6f:5c:ef:ab:
                    27:03:90:46:65:98:0b:a7:44:2c:fc:5b:cc:40:da:
                    ec:1a:b1:a6:78:b0:46:1b:19:3a:92:43:c4:43:a0:
                    2c:94:ea:02:8d:da:03:7a:4a:64:61:64:8e:54:a1:
                    35:f0:42:85:27:52:67:b1:5f:dc:a9:04:05:d1:6b:
                    71:07:ca:5f:c0:2f:dc:b7:98:be:ba:9a:65:f8:34:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:95:D1:AB:E5:0D:A7:FB:0E:DA:8E:3A:A0:D9:AA:9C:3E:E2:A9
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fc:9d:bb:f5:2e:a6:b1:05:04:57:6a:2f:1a:22:f3:4c:ee:
         55:22:ec:8b:7a:91:d0:01:f0:80:20:07:3c:00:51:c0:7e:bd:
         be:69:61:73:3a:8b:5b:2b:24:b3:5e:71:a9:fa:54:dc:a7:46:
         b0:49:60:e7:66:ec:2f:5d:a1:dc:9a:26:b8:6b:b3:6b:ee:cc:
         10:cf:5c:4e:46:2a:c0:48:e9:60:5f:f1:d3:4c:51:b5:66:f9:
         c5:76:04:65:5b:54:07:3f:a2:6c:22:12:bb:30:2e:b7:59:5d:
         f5:4b:1f:4b:02:92:1a:9f:5f:64:93:85:ec:91:b7:5d:98:8f:
         0d:be:d5:24:3f:fc:d4:7d:40:06:11:88:fc:f0:97:29:a1:08:
         b0:bb:fd:fc:81:a2:ca:36:9d:2c:fb:a2:9d:ad:55:c3:a7:e4:
         b4:03:d3:42:89:5e:db:76:0d:80:cd:3f:10:b9:e6:83:ee:fc:
         08:f4:9e:3d:cc:6a:5f:39:82:90:08:a4:31:f1:2a:76:cf:fd:
         e4:50:72:17:b8:9a:15:1e:6d:56:64:f3:58:ba:33:e0:a4:af:
         0f:26:d2:79:27:c0:0f:3e:4c:4b:3a:e6:99:13:d7:31:50:69:
         7a:f3:aa:11:7a:24:5f:34:20:ec:52:0b:80:ed:4c:4b:36:18:
         49:40:7c:4e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7KSJxN0EH4pwhdWHqEZZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjUwMTMxMDcwMDIyWhcNMjUwMjAxMDcwMDIyWjAzMTEwLwYDVQQD
EygxYTVmOTVkMWFiZTUwZGE3ZmIwZWRhOGUzYWEwZDlhYTljM2VlMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25Uig8tEXJkFBGeqtr7VqmX0qHKF
6fUS3Ob0rxkeDniZJvXNzJczZaAlK/qXttvPxIBpX7+2V4uwH0PPzHrYEaicdqia
jMT0nfwDu5/GdX6C+ToUA4pazPVaSKp6Pux6rKQnJvWKqdOTx0lLjZ24m4oR93lJ
PTo1d/DWp6NrOxs4Bd571qas2AIqz9nKBWcGRTEW14VMpBh6pxZzy9WFA1sfVRyj
uxHXsJXR9+Q51m9c76snA5BGZZgLp0Qs/FvMQNrsGrGmeLBGGxk6kkPEQ6AslOoC
jdoDekpkYWSOVKE18EKFJ1JnsV/cqQQF0WtxB8pfwC/ct5i+uppl+DT4CQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBpfldGr5Q2n+w7ajjqg2aqcPuKpMB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4L2IwMzIxMy01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1
ZmIvMS8xLVRyR3pTSkFKSnU2WUJjZkNHNlJBY3lIeWlRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvyd
u/UuprEFBFdqLxoi80zuVSLsi3qR0AHwgCAHPABRwH69vmlhczqLWysks15xqfpU
3KdGsElg52bsL12h3JomuGuza+7MEM9cTkYqwEjpYF/x00xRtWb5xXYEZVtUBz+i
bCISuzAut1ld9UsfSwKSGp9fZJOF7JG3XZiPDb7VJD/81H1ABhGI/PCXKaEIsLv9
/IGiyjadLPuina1Vw6fktAPTQole23YNgM0/ELnmg+78CPSePcxqXzmCkAikMfEq
ds/95FByF7iaFR5tVmTzWLoz4KSvDybSeSfADz5MSzrmmRPXMVBpevOqEXokXzQg
7FILgO1MSzYYSUB8Tg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:35 2025 by rpki-client on console-fra.rpki-client.org