Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File:                     ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier:          jo+YZVt/9iguOrc9ijFbwpSALka+3dNU5YENfSlFLd8=
Subject key identifier:   2B:9F:E6:33:90:76:37:B4:4F:CE:50:44:06:F6:9F:1E:88:9C:39:A9
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer:       /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial:       0192110653702E9E4BF4328FF13D2BCB7CCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number:          126A
Signing time:             Fri 20 Sep 2024 20:01:20 +0000
Manifest this update:     Fri 20 Sep 2024 20:01:20 +0000
Manifest next update:     Sat 21 Sep 2024 20:01:20 +0000
Files and hashes:         1: c1px2pkOzTIYBRhJdwY5ADyj50M.roa (hash: msJWWJzuD6uMhJVJMnJjkD9zkpxMNqa9+30wdc4H768=)
                          2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: /WqQX0xMPj4fcgP4PmAJGIW0b98YpZRVYbHgxa9Ii+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:11:06:53:70:2e:9e:4b:f4:32:8f:f1:3d:2b:cb:7c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
        Validity
            Not Before: Sep 20 20:01:20 2024 GMT
            Not After : Sep 21 20:01:20 2024 GMT
        Subject: CN=2b9fe633907637b44fce504406f69f1e889c39a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:88:e4:63:ab:fe:22:b8:52:e1:8a:fb:7f:
                    af:7f:7c:15:97:c7:62:ba:ee:0b:44:e5:0c:c2:6d:
                    71:0d:a6:17:ee:57:a3:f7:9d:70:aa:85:79:f5:e8:
                    9f:d1:f2:a5:87:65:b0:ee:bc:17:99:21:85:9f:24:
                    d3:d8:74:71:d4:00:e4:6f:4e:a7:4a:dd:dc:27:01:
                    ea:35:67:3c:5f:14:30:3c:f8:07:40:cb:97:de:07:
                    d4:57:53:5c:69:9a:1b:1e:f5:2f:cd:7e:57:b9:e0:
                    a8:1a:59:47:56:72:d1:49:37:6b:dd:dc:51:6f:d3:
                    69:32:a9:23:fb:7a:aa:e6:81:e9:ce:e8:51:97:a0:
                    dc:49:dc:74:89:b7:08:0e:0a:02:38:82:5f:f0:5a:
                    ef:11:90:38:92:8d:b8:1c:74:02:49:aa:31:d7:ce:
                    45:43:2e:0c:48:2d:86:4f:83:cf:ca:8b:64:2e:1c:
                    25:84:a9:a6:7a:fb:38:cf:1c:d4:32:da:96:6c:3c:
                    9a:ea:e6:83:f9:f4:63:8e:4a:87:a0:c0:67:b0:b2:
                    e2:5d:9c:1f:3f:0f:3b:21:3e:8c:d5:b8:02:88:95:
                    f2:ad:e4:b5:7c:96:e9:b3:da:50:61:ea:bc:9c:90:
                    e1:8f:cb:5a:9e:a7:0e:3a:b5:d0:40:32:32:26:55:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:E6:33:90:76:37:B4:4F:CE:50:44:06:F6:9F:1E:88:9C:39:A9
            X509v3 Authority Key Identifier:
                keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:df:fc:b3:48:26:aa:c9:b9:97:6b:8c:33:9b:97:05:07:fb:
         65:30:51:ec:cb:1f:4e:f0:88:6c:cf:77:a1:c2:a0:c5:1d:28:
         93:a7:d6:30:82:0a:21:93:87:11:52:86:e9:39:46:03:f6:3a:
         c2:65:a6:de:fa:f7:2a:dd:3f:1f:44:5c:cb:02:1c:ad:c8:f1:
         6f:43:48:3d:3f:61:77:41:88:36:e9:54:f1:38:97:e3:95:23:
         8f:82:a3:98:22:36:e6:0b:c5:0e:c6:da:84:b3:1e:19:4d:92:
         0f:42:43:65:e3:6e:02:0f:12:5a:a7:05:f3:f2:b5:5d:b8:35:
         a5:a1:8c:85:22:d5:a1:a1:e0:8d:01:77:62:5d:bb:7e:53:21:
         a2:8c:38:24:e1:22:a7:fe:fd:d6:a8:58:a0:c7:40:06:c7:8b:
         0e:c6:4c:60:f3:bf:79:54:96:4e:ea:c8:fe:64:62:fa:eb:d9:
         9d:57:8b:1e:35:4a:42:e5:9f:47:78:72:15:82:4f:70:d7:d9:
         c1:52:70:93:72:9c:b1:8d:37:56:e2:6b:60:e2:10:80:16:f8:
         59:b0:11:0b:12:5d:34:3f:87:f9:f5:99:4f:b9:67:33:5a:e5:
         f3:24:b2:a8:f2:89:9d:7d:52:77:bc:25:3a:0e:e3:6d:22:46:
         07:54:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:43:06 2024 by rpki-client on console-ams.rpki-client.org