Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          e3yHojlNhZByn4tpDRX4KdBTOdNCM5i25oLBoBXAGWE=
Subject key identifier:   2F:B3:19:11:B1:B7:31:13:E8:BC:44:77:81:6F:07:7C:94:64:72:C0
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       0193523E14A312314F58501E2582B262F0E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          09B7
Signing time:             Fri 22 Nov 2024 05:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:20 +0000
Files and hashes:         1: 23L-thOGWEr4xG4ZrX5I2DlacyU.roa (hash: 2SERHsAq1xN4ySjB9fDelZDy/nn/iwZf0z+CScDedM4=)
                          2: 31Z5S7BCYnqgy4kfxJRlGj_HC_4.roa (hash: rultGqOkmWcP0FiT94GFj8tIfILAFGmLqNFtAygDOlE=)
                          3: 7sdqB9tk4uU0z9qYZwAUqnkFPZE.roa (hash: SfJBADP9nxk1XRqv8TGRYYDwuFn6KOuU/MMLN7SOUok=)
                          4: 8jf2XNRzBx5QyA3HLVePZL6fm9Q.roa (hash: pAnO1ov+7nF/52OLU3jsz1UvlXHOTuVVY5UNL4uGIOg=)
                          5: 9n96BTfEQYh7UD0i0pJ_xR_0HsE.roa (hash: QB7TBRObULZLgqkqillBBWtJe5vTGqeAyOFmEadhudY=)
                          6: A2yCegDJJYkKr-fvKULtnLFaaHA.roa (hash: kdcB6NysY/wH/ozb0ibji9cXckznga+MzbIFYos6NAk=)
                          7: AfYm6QPcPnGIYaT4GgjAL6uV-5c.roa (hash: vu3N4DZ2T3exeWnKktMw8sfYE+WGXgvdo7zdBJWDZ2s=)
                          8: DuKPBdqM3cl4qcXLKNVwx9-UKjE.roa (hash: 5Z5HMPjYR6D2KZeF3msbLmxYy6YxqohNZc+9NRsHshs=)
                          9: HFTD_iNbKCBj-HaRnTC5hbJLEKA.roa (hash: xl/1lROUOFgR09/r7MRRWwXVZO3+p3JWCFdG6JZQIK8=)
                          10: KM4EsQt38wiNlA7zw5hCf7tlKEc.roa (hash: HADWXR3bREAVKKqMNgi3nNZkI1L5hRUlHk1L+L00bmo=)
                          11: Lo4jmEJhT4yn5QYXStqGkAS9MzQ.roa (hash: qodPFHGizbglrD7vQroISyQAfjouvHcylOaUEFu/TMs=)
                          12: XSiQZchcW1JuxztZtpJh1dxR4bk.roa (hash: UUfxfvtDQ8r3Egj/6Suu0k1sPFlIImwmQUaRbOHixWk=)
                          13: ZATyVbfQ8EC17OamvzXOVqGPnrM.roa (hash: ja4uYIp8AVdz2MZjSgeppsaeXUjD85JBBoHkvfMMsS4=)
                          14: Zwv0qqT7oHkjoyH-geGbuOP61rI.roa (hash: 9ZtW2oyA2mgGxhULtmRDGgTuqBM57jmntQdRBZvy3gA=)
                          15: alg23em52u81qKf3TWMm9rQtp00.crl (hash: afGBoohI0/R5lw4kBbfBYaeoLapZbimDJGSPVoM6eq8=)
                          16: oZnVT418idK-bBV1Ix8JYSLtndk.roa (hash: Pp+Q8Q0cOFtcTfJz0XOMouer5ztwh90IK6Sm1DJHuDU=)
                          17: omMb_3NDozAdBNp2zvwxtuGlwCY.roa (hash: okLlJYC10W5vxkROeHKsmDc/ytuwL9DLRCRztt6Tqb8=)
                          18: rKbW1lWdjk3xYG-VI4YlY75ihpU.roa (hash: 28a5C9OJvV457TiaNDS6BFI9/yshwZW9egAR14veQH8=)
                          19: sNlULiOb4A4kbuIjCbf6SC2XO-k.roa (hash: H9ZPcVCAwcTxjh7qyb8k/S3+i+I0cX2ivHQzUddHJW4=)
                          20: vHOhxSNIOwz3ZBtwX9ssT_oSkW4.roa (hash: yg/wsbvGY5wNDBubL1680BcQVApj4h7RMcdhsiG1tNI=)
                          21: xwkIedAY7dN4dS0IGQzr3j5jNCc.roa (hash: 3vmzY+EamKs+w6FK9pt6HD2RM0lYchzRci3DzO5i2ws=)
                          22: zym2re5XDkvnW32AI2WUnlrVOd8.roa (hash: VHa3h0Y72YtNG0ZIV7FvG/xg0q8npAi9m6gzd2jNLkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:14:a3:12:31:4f:58:50:1e:25:82:b2:62:f0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Nov 22 05:00:20 2024 GMT
            Not After : Nov 23 05:00:20 2024 GMT
        Subject: CN=2fb31911b1b73113e8bc4477816f077c946472c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:1b:67:51:5a:85:1e:fd:86:e0:a5:2c:94:
                    d0:c3:c2:67:76:b7:40:da:00:6c:4c:40:51:de:81:
                    d0:1a:5d:84:0e:f2:b3:13:51:fb:77:8e:84:24:34:
                    ba:0e:68:ff:15:33:bb:d5:35:bc:6e:45:1c:9a:4f:
                    5f:aa:f9:56:75:33:8c:4d:36:58:e5:5e:c3:2e:5f:
                    13:53:6d:c2:43:04:24:50:cc:0a:06:ea:a1:79:6c:
                    31:bc:e7:09:27:69:fa:2c:cd:dd:77:46:be:1b:ad:
                    bd:e4:30:77:78:bf:a7:9c:4e:8e:26:ac:aa:3c:90:
                    8f:6a:60:18:ef:71:8f:49:47:b5:22:63:e5:15:00:
                    75:72:00:ee:a6:89:53:b7:0c:26:6a:76:18:eb:3a:
                    a9:4b:41:64:b7:68:64:a5:ff:74:1d:cd:9b:7d:b8:
                    8b:25:61:3e:04:37:58:70:97:5a:df:06:90:e0:e2:
                    65:48:db:ef:c4:89:64:4e:df:6d:f5:07:14:33:55:
                    c5:c8:2a:82:50:90:a1:3b:71:6b:a8:ab:34:b8:50:
                    23:cb:3d:09:7e:71:72:84:49:be:5a:e2:92:cc:30:
                    4e:c5:5b:ff:46:1f:06:bd:13:79:98:ff:ce:89:91:
                    2a:1c:4b:a8:b7:77:9d:fa:35:17:6f:47:8d:d6:c2:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B3:19:11:B1:B7:31:13:E8:BC:44:77:81:6F:07:7C:94:64:72:C0
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:23:bb:a0:cb:be:a4:b0:24:30:2b:4b:94:4f:17:87:1f:a0:
         29:5c:58:73:94:01:64:d5:3f:81:cc:ae:d8:e9:51:ea:53:67:
         fa:86:07:19:2b:c3:59:15:67:23:6d:27:d3:60:47:44:ba:0a:
         46:3f:06:7c:b4:86:47:dc:de:56:79:85:19:12:bd:4c:da:b9:
         40:e5:62:4a:f3:9f:0f:a9:76:e0:3d:75:23:85:bb:06:27:f6:
         30:26:1b:28:b7:9c:30:20:d3:10:07:6b:97:4b:09:00:e1:5e:
         8b:34:3e:7c:89:35:d5:c9:16:78:40:f8:bd:35:0c:10:ba:d8:
         d9:42:20:26:bb:de:6c:cc:3a:b1:50:d9:5d:1c:67:92:a0:63:
         a5:a4:e5:09:f3:18:59:e8:d0:62:21:e4:a3:c4:97:b9:23:7b:
         ce:5d:60:b3:61:de:2c:c6:d3:12:5e:a4:37:f9:66:02:37:82:
         b2:93:1b:41:c7:ae:02:c6:b9:41:6d:42:54:c3:71:7c:da:bd:
         08:a5:7f:0d:44:be:12:d6:95:c1:d0:cb:4e:74:6d:76:bc:be:
         82:d3:1f:55:37:08:e7:b7:48:2a:6c:fd:70:c1:74:b8:76:b1:
         1a:87:7f:76:2c:fe:85:36:62:a4:b8:3f:d8:dd:62:f5:c9:ee:
         d8:d3:f6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSPhSjEjFPWFAeJYKyYvDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQxMTIyMDUwMDIwWhcNMjQxMTIzMDUwMDIwWjAzMTEwLwYDVQQD
EygyZmIzMTkxMWIxYjczMTEzZThiYzQ0Nzc4MTZmMDc3Yzk0NjQ3MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbAbZ1FahR79huClLJTQw8JndrdA
2gBsTEBR3oHQGl2EDvKzE1H7d46EJDS6Dmj/FTO71TW8bkUcmk9fqvlWdTOMTTZY
5V7DLl8TU23CQwQkUMwKBuqheWwxvOcJJ2n6LM3dd0a+G6295DB3eL+nnE6OJqyq
PJCPamAY73GPSUe1ImPlFQB1cgDupolTtwwmanYY6zqpS0Fkt2hkpf90Hc2bfbiL
JWE+BDdYcJda3waQ4OJlSNvvxIlkTt9t9QcUM1XFyCqCUJChO3FrqKs0uFAjyz0J
fnFyhEm+WuKSzDBOxVv/Rh8GvRN5mP/OiZEqHEuot3ed+jUXb0eN1sJHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+zGRGxtzET6LxEd4FvB3yUZHLAMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCO7oMu+
pLAkMCtLlE8Xhx+gKVxYc5QBZNU/gcyu2OlR6lNn+oYHGSvDWRVnI20n02BHRLoK
Rj8GfLSGR9zeVnmFGRK9TNq5QOViSvOfD6l24D11I4W7Bif2MCYbKLecMCDTEAdr
l0sJAOFeizQ+fIk11ckWeED4vTUMELrY2UIgJrvebMw6sVDZXRxnkqBjpaTlCfMY
WejQYiHko8SXuSN7zl1gs2HeLMbTEl6kN/lmAjeCspMbQceuAsa5QW1CVMNxfNq9
CKV/DUS+EtaVwdDLTnRtdry+gtMfVTcI57dIKmz9cMF0uHaxGod/diz+hTZipLg/
2N1i9cnu2NP2fg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:06 2024 by rpki-client on console-fra.rpki-client.org