Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File:                     VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier:          04eXo1CBDRSmDH2D7ZmEIkZYuJDDouRGIjeqCkeFi1w=
Subject key identifier:   24:14:96:EB:B1:81:81:91:A6:4E:1A:F3:40:D4:80:5A:6E:C5:D9:37
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer:       /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial:       0192386E0B0C991C33D2B27C5159D11F15AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number:          19
Signing time:             Sat 28 Sep 2024 11:39:48 +0000
Manifest this update:     Sat 28 Sep 2024 11:39:48 +0000
Manifest next update:     Sun 29 Sep 2024 11:39:48 +0000
Files and hashes:         1: 1-5TM_PyTj4QjsBGIuWzsbScrvQk.roa (hash: DHo+iuqT2nv5UK21a0ttpld+HKKuhOThskT+rCu9hmQ=)
                          2: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: eXTbYpV2h5vYF9Od/qyLxd3fa0UtaeYqJOft8sjED9s=)
                          3: fTbbEFGF_OMh0a4_wLKlAr9YZsU.roa (hash: yHvGkwUDBaCnEWtdcIcy4tMre1rW9AFRPvIMkDaNsO0=)
                          4: wuEgu8e7lp7HSvYh6zhXw82kv4s.roa (hash: LNCgxlGxJxXZ/vLiHXBBwE33eyXnT7NiHjJsX5HTEao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:6e:0b:0c:99:1c:33:d2:b2:7c:51:59:d1:1f:15:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
        Validity
            Not Before: Sep 28 11:39:48 2024 GMT
            Not After : Sep 29 11:39:48 2024 GMT
        Subject: CN=241496ebb1818191a64e1af340d4805a6ec5d937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:d6:62:94:30:28:ae:57:29:47:2d:39:9b:
                    06:4b:7e:c0:a7:54:02:79:87:c6:be:41:4b:73:90:
                    e3:c3:80:d5:0f:7c:19:4e:4d:30:72:27:d4:85:f9:
                    e3:7f:b6:2e:5f:e0:b7:35:8a:b9:64:87:55:8d:ef:
                    b5:5e:2a:67:53:22:5c:42:1b:a3:3e:67:f1:e2:64:
                    91:8b:d2:df:5b:32:1f:65:00:ac:d9:73:c3:ef:fa:
                    58:dc:4b:da:64:91:06:29:04:bb:04:7a:3a:7b:b0:
                    b3:f5:f8:f0:06:9e:e9:4d:67:87:da:ce:ef:3e:21:
                    33:b6:62:93:38:87:b2:53:2c:78:56:59:2d:de:e2:
                    69:36:c1:1b:4e:bb:53:7b:8a:f7:0d:49:d8:c2:e2:
                    4a:43:d4:66:2d:01:18:d8:00:1c:13:46:43:9c:df:
                    b7:20:ab:97:cc:e5:79:39:0c:e6:62:b2:10:4d:3f:
                    d5:18:1b:cb:ee:66:1e:bd:8f:b4:1f:72:12:94:d6:
                    b6:e8:4a:54:bd:73:fd:a1:3b:c3:ee:c6:88:b2:80:
                    7d:3a:a0:4f:c0:a9:89:bc:89:06:59:32:2d:74:67:
                    25:93:14:0d:63:00:dc:c4:59:cf:a3:98:65:1a:ad:
                    49:3b:61:a8:ba:80:a0:68:83:e3:33:f0:66:a3:56:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:96:EB:B1:81:81:91:A6:4E:1A:F3:40:D4:80:5A:6E:C5:D9:37
            X509v3 Authority Key Identifier:
                keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:fb:ab:30:14:17:d6:82:92:2d:42:bf:f7:11:aa:33:3a:
         5e:85:f3:f1:ab:b3:47:ec:24:c3:6a:7d:4f:b2:86:50:7e:ba:
         bc:87:44:a8:84:1a:bc:04:5b:07:0f:9f:2b:86:09:e0:ce:6d:
         fa:e1:14:99:1b:c8:96:30:68:2d:d5:d6:3a:ae:14:68:94:44:
         b6:2b:1b:58:c7:f4:85:ae:0e:19:78:4a:87:8e:08:cb:06:fc:
         49:15:eb:f4:a4:53:5e:22:63:ee:f5:ab:e7:d7:47:ac:2b:1c:
         2c:3f:14:2e:ab:9b:37:f1:ff:e2:91:5d:1c:7a:39:42:cf:a4:
         df:0c:da:20:75:6f:05:7d:38:f7:70:e0:3c:55:52:6d:75:b6:
         c4:0a:d5:79:a2:fd:c3:fd:30:17:8c:a1:c2:f1:01:8b:a1:f9:
         e4:47:43:2d:9b:65:5e:aa:75:29:99:aa:12:80:58:43:fc:e4:
         06:56:ce:31:71:81:b8:16:5b:94:af:8e:7c:07:d7:62:ac:a7:
         08:c5:a9:56:de:f2:1f:31:30:b2:a4:10:2d:dd:8a:2c:65:c1:
         b9:42:be:c1:b5:39:f0:d9:fb:4f:0d:e2:8e:bc:ef:b4:2f:1b:
         28:8e:01:46:fe:4c:60:de:7b:8f:26:d3:85:3d:35:49:df:b4:
         d2:b4:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:37:15 2024 by rpki-client on console-ams.rpki-client.org