Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          CokpepSzSgiLwsgYZnMC45zKswtem1zy+EGvicAw84Q=
Subject key identifier:   9A:4A:33:BA:2A:74:1F:A9:93:AE:E5:DE:81:4D:48:2E:97:B6:51:29
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       0194BABB3FEDBA863881432E02AF35EB5989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          0E98
Signing time:             Fri 31 Jan 2025 05:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:21 +0000
Files and hashes:         1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=)
                          2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=)
                          3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=)
                          4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=)
                          5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: 0PyQAZNXzRYKhLYFuHjxKkQUE2eLb1EMrYVBMEFFW0Y=)
                          6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=)
                          7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=)
                          8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=)
                          9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=)
                          10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:3f:ed:ba:86:38:81:43:2e:02:af:35:eb:59:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Jan 31 05:00:21 2025 GMT
            Not After : Feb  1 05:00:21 2025 GMT
        Subject: CN=9a4a33ba2a741fa993aee5de814d482e97b65129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2b:2b:00:3f:45:60:3c:6a:51:c1:1c:97:15:
                    52:0a:23:b2:0b:57:dd:b0:3d:29:4d:e3:87:cc:02:
                    0b:29:c0:5e:c2:df:c5:69:53:08:fd:e4:26:ee:97:
                    62:5b:60:57:d3:37:f3:e6:80:31:83:33:5f:8e:e9:
                    71:8a:2c:5f:21:b0:49:a8:35:26:70:41:a7:a4:b9:
                    25:ed:b3:81:8a:49:11:69:bc:65:eb:bc:44:55:22:
                    08:17:5c:aa:48:c9:09:91:ad:1a:17:98:84:c1:79:
                    56:da:6b:6a:dc:aa:01:98:ac:a3:a0:d8:40:61:f3:
                    b4:12:59:96:90:f8:c9:67:35:e8:d5:6a:c7:38:a9:
                    2c:ed:34:3f:c7:c8:ca:e6:2f:b5:29:17:3f:05:88:
                    c4:e7:ba:13:c6:a6:4b:46:84:da:fe:8a:5d:30:a5:
                    be:9f:d4:e9:40:5c:2e:3b:a1:a7:04:cb:64:79:56:
                    ad:69:cc:6e:16:87:9a:8f:36:44:a8:90:b9:be:0f:
                    f5:a6:56:6b:1f:c4:07:02:ca:f0:2b:ae:bf:c9:2a:
                    e8:2f:10:ec:46:a2:9a:c9:fd:8f:b3:27:f1:fd:c1:
                    ec:8f:23:88:a1:50:b1:7a:90:ef:3d:28:55:f1:ee:
                    20:10:c5:ad:a2:49:cf:2e:9a:dc:eb:40:8c:15:e2:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:33:BA:2A:74:1F:A9:93:AE:E5:DE:81:4D:48:2E:97:B6:51:29
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:4f:94:a2:4a:f3:bc:cb:f5:c2:dd:57:15:c6:85:79:33:
         31:26:b1:c6:40:5d:f8:07:d2:d2:19:6f:7f:00:11:0a:df:e8:
         c8:85:1e:be:1e:e1:b0:8a:58:7a:92:7b:76:b0:f8:4c:ab:c8:
         34:4c:0a:a5:4f:26:3c:39:46:f8:09:4d:02:dc:e0:71:2f:a0:
         5a:06:37:86:1e:a7:6e:29:e0:6a:e3:d2:b2:5d:d8:f2:5f:43:
         d7:9f:9a:f6:93:1a:31:83:d8:77:e4:03:80:1f:9d:25:60:58:
         62:0a:6b:49:19:2d:b4:f4:83:55:6d:25:4e:cd:1f:9f:84:07:
         c3:3a:1b:c2:df:8b:f6:67:27:8e:ae:66:d7:5c:25:0a:f7:c9:
         9c:7f:ed:dd:76:91:a2:8f:54:6e:19:34:56:fb:08:80:31:8e:
         c9:02:39:9b:ee:a4:bc:5b:96:1a:51:43:a1:e0:c6:d2:96:69:
         41:58:d8:8a:82:77:f4:fe:7d:ed:e9:4a:2e:31:11:e8:67:e2:
         d1:ef:13:8f:ec:58:1b:32:90:c5:ef:4a:01:1a:0e:52:aa:b6:
         04:7e:b0:a1:c2:d6:ac:85:3e:a4:b2:e4:5c:65:eb:d7:90:1f:
         61:3b:3c:39:b6:f6:05:49:16:6f:e1:02:3d:76:83:44:0d:ba:
         1d:8d:6b:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uz/tuoY4gUMuAq8161mJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjUwMTMxMDUwMDIxWhcNMjUwMjAxMDUwMDIxWjAzMTEwLwYDVQQD
Eyg5YTRhMzNiYTJhNzQxZmE5OTNhZWU1ZGU4MTRkNDgyZTk3YjY1MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SsrAD9FYDxqUcEclxVSCiOyC1fd
sD0pTeOHzAILKcBewt/FaVMI/eQm7pdiW2BX0zfz5oAxgzNfjulxiixfIbBJqDUm
cEGnpLkl7bOBikkRabxl67xEVSIIF1yqSMkJka0aF5iEwXlW2mtq3KoBmKyjoNhA
YfO0ElmWkPjJZzXo1WrHOKks7TQ/x8jK5i+1KRc/BYjE57oTxqZLRoTa/opdMKW+
n9TpQFwuO6GnBMtkeVatacxuFoeajzZEqJC5vg/1plZrH8QHAsrwK66/ySroLxDs
RqKayf2Psyfx/cHsjyOIoVCxepDvPShV8e4gEMWtoknPLprc60CMFeIH2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpKM7oqdB+pk67l3oFNSC6XtlEpMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlVPlKJK
87zL9cLdVxXGhXkzMSaxxkBd+AfS0hlvfwARCt/oyIUevh7hsIpYepJ7drD4TKvI
NEwKpU8mPDlG+AlNAtzgcS+gWgY3hh6nbingauPSsl3Y8l9D15+a9pMaMYPYd+QD
gB+dJWBYYgprSRkttPSDVW0lTs0fn4QHwzobwt+L9mcnjq5m11wlCvfJnH/t3XaR
oo9Ubhk0VvsIgDGOyQI5m+6kvFuWGlFDoeDG0pZpQVjYioJ39P597elKLjER6Gfi
0e8Tj+xYGzKQxe9KARoOUqq2BH6wocLWrIU+pLLkXGXr15AfYTs8Obb2BUkWb+EC
PXaDRA26HY1rUA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:43 2025 by rpki-client on console-fra.rpki-client.org