Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File:                     p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier:          2lbPkUYBYLFiUP4Frq3+Jmaw/A58Y+c0U9ctgjrtWuk=
Subject key identifier:   5D:03:25:C6:A9:01:7F:2F:A0:F6:3D:31:E0:59:78:DA:AF:A3:0E:40
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer:       /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial:       019352AD5251ED965907579D12B57EAEE51C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number:          046A
Signing time:             Fri 22 Nov 2024 07:01:50 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:50 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:50 +0000
Files and hashes:         1: QfttnT_FBz1kPMxiPY_Fqcz1Srk.roa (hash: xKquDK9e3goIq/bl0isJMOHSNhfgv8Q8XAm4LH0pLQ8=)
                          2: kbc-IxGpssdAHUT1uPBj0BbfVlg.roa (hash: ky5EATG11/GeHWO2ELx46SoADBV+MW9LHbbZ7Xk1A08=)
                          3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: 5Ot9u81zb2WrER8a34QQ8CTrCRJMvF8BM59kaW20KXY=)
                          4: za0ZatGHFQRe--bq9TPDPS18TWE.roa (hash: RhYmoGnzvWGLWwQqCebcUggmUDd4njVxoCFdSGCBwTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:52:51:ed:96:59:07:57:9d:12:b5:7e:ae:e5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
        Validity
            Not Before: Nov 22 07:01:50 2024 GMT
            Not After : Nov 23 07:01:50 2024 GMT
        Subject: CN=5d0325c6a9017f2fa0f63d31e05978daafa30e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:34:74:e0:7b:a9:65:2c:ab:9c:30:3c:93:
                    82:a4:fc:89:ce:57:bb:ad:2d:6a:31:bb:85:79:14:
                    35:0d:df:29:cd:32:a7:11:13:87:bc:a5:cc:a1:5f:
                    a5:ac:c8:d0:2d:a7:87:95:52:4b:95:c7:e3:d1:da:
                    54:25:f5:60:50:c8:b0:7a:44:93:11:52:04:07:21:
                    60:52:44:76:b2:40:2a:0f:f5:d4:f9:01:6f:8a:b2:
                    a3:19:f0:fa:d8:fd:4a:db:38:a7:e2:54:27:db:33:
                    19:a2:52:9f:a5:f1:53:18:bf:89:c9:c5:45:ed:07:
                    c1:be:65:43:42:1c:c2:8d:1e:8d:8f:de:a2:2d:ac:
                    5f:bd:30:dd:50:a1:f9:6b:44:b7:be:d0:99:5b:34:
                    a6:a8:9d:3a:82:d6:7c:32:52:9b:fa:7b:43:7d:61:
                    76:74:87:46:00:f2:b1:1d:c3:36:ea:6e:80:62:7e:
                    76:6c:a1:2c:66:e9:4e:89:17:b1:45:df:ee:fd:83:
                    86:22:75:b6:44:66:97:2e:6a:2c:98:c9:e5:ad:8d:
                    a8:33:ed:d6:26:7d:62:c3:e8:8f:a4:c4:55:a7:07:
                    b9:a0:25:da:bf:86:06:7f:58:8f:28:3d:f2:cc:c4:
                    18:a3:d9:45:7f:1e:9e:84:e9:58:ba:4a:c6:2c:49:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:03:25:C6:A9:01:7F:2F:A0:F6:3D:31:E0:59:78:DA:AF:A3:0E:40
            X509v3 Authority Key Identifier:
                keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:9e:3d:41:49:ba:75:ba:0d:4a:4b:9e:b3:21:54:fe:42:
         82:10:29:20:18:4e:13:c7:00:20:a0:a0:2c:0e:92:c3:3e:b3:
         9f:a3:ba:a6:a5:a7:a3:53:d4:2c:67:dd:a7:03:48:66:41:30:
         c5:fd:4b:0c:ca:21:2f:25:51:ac:38:33:1d:eb:25:ee:4d:16:
         dc:76:37:f4:19:8f:c4:71:ca:a5:10:a9:28:c7:51:2e:14:3a:
         83:f3:d6:c8:9b:94:95:dd:e2:04:60:a2:e1:59:64:3b:85:be:
         78:9f:0a:05:e2:71:75:83:95:6e:92:de:cc:92:2b:bd:1f:4d:
         9c:a5:8c:33:86:23:12:53:54:26:01:bd:43:e5:88:98:50:fc:
         45:33:93:17:7e:d0:17:0e:94:1e:99:61:5d:13:98:c7:fe:b6:
         3e:5b:d3:fc:ee:2c:fa:93:ee:38:c6:a3:13:80:ef:49:7d:e3:
         f6:a4:7c:67:50:33:8c:42:30:25:4a:30:bc:5c:56:6b:99:f6:
         f6:b2:6b:bc:c7:09:50:a5:0a:eb:10:ef:c7:77:a7:ad:b8:b8:
         eb:f0:47:2b:2d:07:66:78:11:b9:d4:6c:3d:a1:72:de:a4:88:
         2e:b2:8f:8f:dd:2a:3c:09:9d:8c:c3:36:6a:46:e0:7f:81:01:
         d9:8b:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:02 2024 by rpki-client on console-ams.rpki-client.org