Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          8AeKKXmgXbp06EBGFVNBFbQxpJTWaBscOKB8fBNUCx8=
Subject key identifier:   15:81:E1:83:D4:1C:84:77:6A:51:8D:D9:5D:F6:4D:48:29:A8:04:4B
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019351D07C1D3C194E2E0266CB11E81B240F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          13AE
Signing time:             Fri 22 Nov 2024 03:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:37 +0000
Files and hashes:         1: 1pifBgAI9K4y1isrFQGusq0kpi8.roa (hash: +5BFO38ldTKc0my5rUtjTluFp4yr8blPCBCxl3FbLFY=)
                          2: 3Vw_kWWRb3icvjig6N0_cHXQuyg.roa (hash: Eiz2leRLXL49slH7RaYA+SUZeu5DbVsOQ8DZCyIXEp0=)
                          3: 6WmXeuQKrPGkhDE4qPfCvkGonek.roa (hash: hPS82uf2lOQYKYL365Uk1hgjktO8iLw3s5pYOUy9kgA=)
                          4: 9ut8u_rYJ-GVgefvLk_VPyEcamQ.roa (hash: L4Y3x1kKHZSYwqR/BtbLrseHt/9bQEU2CI5XE1PoJrg=)
                          5: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: MDx3dFGvY9+wubBLjMT4bHgjUK+CacOIw2E8DCyqkdg=)
                          6: EgjAv4-0d5sYVyLqoZrqY9fONOg.roa (hash: yy+gocPuw8u9GXNZoKzuuB1G1/9BQaOenGkFeljtdFk=)
                          7: EhX1hPDzJYnH9DoG2wmKa06SULU.roa (hash: /rdvF4NzWW9XJvcM7kiH8OMJ8+UDbzP2g52qpC5yIJg=)
                          8: Jtjp9Pjw9bDhqx_KXCVPgzzvz-w.roa (hash: bFbB/AAE7jp+6XxtVtvcQnpK68zgeHRquWJuVRovXQU=)
                          9: MV5dYJDLLpX3RBmhci7pFCsR54g.roa (hash: hR97hadtABUdUsW1eszjpxxPWOPvza5t0ja26QPtMoc=)
                          10: VNt3XbpCqd2PzdJAS7T-_RLuypY.roa (hash: zL0RXX724mjJJROiHsVbJbw43kd35eRlMOUEoohTF3Q=)
                          11: e1JiciVaOfpVCHAFcvyGphPl63I.roa (hash: elNIyWiN5O0gjoKi9lxb83cVwQjaVM2/UKdFeIafZD4=)
                          12: oaELbxW93ALbUENig83lmVqvfCc.roa (hash: ZoOuRkxRHMgym+2Sb0DIaUKF3Sw4+zZEMxGSAHYLhpc=)
                          13: pFNu8k4uIydhPl4EdBCPOJcUBC4.roa (hash: UoA/kyCP6JVDXcPEUFg52wFEYnuGpla/p+xE0/RbGhg=)
                          14: qEXGY-jaqd3dTzf4pyyiJ2LXY-o.roa (hash: BUhu3JLgUPjG7TVVQe6yZDe/h6+134hEuARe1OWQ6q0=)
                          15: qJ6WysllYVLPnrlfLVZ01u8n2BY.roa (hash: bvDs+Su0TF6vByOWKz1ztpBJ/3teRzsXLI4qT/0OcOA=)
                          16: tHVUApeqKwSn2ZYG3gd2WBK2C_Y.roa (hash: 7CH6eRlHBpSIhsNTO/nD+NmzwnuywYJjpuOfHSSMXVU=)
                          17: y78aXxmWAjVwZU66dZwKeK5p8fA.roa (hash: pzN7ebygW+8/Ppklp6WoTmcinhYqYxNsH+e5w8fd0xs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:7c:1d:3c:19:4e:2e:02:66:cb:11:e8:1b:24:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Nov 22 03:00:37 2024 GMT
            Not After : Nov 23 03:00:37 2024 GMT
        Subject: CN=1581e183d41c84776a518dd95df64d4829a8044b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:9e:8d:80:bd:2d:43:8b:d6:0b:8e:69:05:
                    64:bf:83:79:d8:ca:bc:c0:d5:fb:af:99:b1:19:09:
                    12:e3:ea:f7:99:57:30:91:65:97:e5:fd:02:8d:14:
                    bd:70:51:5d:63:d0:f4:06:65:27:92:dd:3d:11:b6:
                    f4:fd:de:42:c8:6c:1a:8b:aa:c4:02:75:51:59:23:
                    32:06:76:92:6f:91:ec:41:8b:0d:df:57:31:a8:76:
                    3c:44:aa:06:48:2d:b7:7e:2e:25:78:49:75:70:68:
                    a3:df:c5:ae:03:8e:5c:ca:58:43:82:c3:e8:1f:67:
                    60:d5:77:67:d7:5a:8f:2c:2b:82:b7:2b:cf:12:f5:
                    d6:9f:90:d1:c1:95:9a:2c:fa:3c:a8:29:1d:59:59:
                    55:55:22:e1:95:0f:09:c3:49:18:6b:bd:68:cb:ff:
                    3b:e0:f4:cf:81:83:f4:e8:d8:35:11:a4:30:8d:1f:
                    26:84:07:d8:10:2e:4f:ee:8f:e6:e2:f7:e8:9e:91:
                    77:b2:2d:a4:91:20:79:d3:77:3b:6b:cf:91:e7:d3:
                    98:20:07:61:2f:9f:e6:d9:06:09:2e:ba:a6:a8:9c:
                    94:d8:cc:6d:39:00:c4:48:01:7d:13:a4:2f:2a:5a:
                    e4:19:7d:9b:af:0d:ac:2c:4c:a0:08:14:c1:b7:a8:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:81:E1:83:D4:1C:84:77:6A:51:8D:D9:5D:F6:4D:48:29:A8:04:4B
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4a:54:01:07:fa:70:d3:30:df:2d:05:7a:44:04:b1:01:ae:
         ec:aa:69:20:d3:98:53:73:73:fa:40:01:a4:86:44:9d:2c:83:
         0d:77:0c:2d:2a:13:e4:0a:cd:e1:00:6d:11:5e:91:bf:0f:9a:
         29:15:07:bd:d6:1b:07:59:21:5d:81:4c:0c:e4:73:ee:3b:3e:
         26:61:b9:94:27:2f:b4:6a:8f:5d:e6:d9:fa:e4:4c:de:0b:8f:
         97:0d:f6:c0:a7:d7:e8:12:a8:dd:72:86:6f:66:da:b0:0f:73:
         db:f3:af:bd:91:7e:e8:59:41:5a:f9:f7:7c:7d:6e:c4:9d:94:
         10:0e:10:39:c7:31:71:47:b2:1a:8f:b5:d4:73:4b:73:0b:ea:
         db:12:77:3a:40:fc:66:64:9c:f5:5c:ba:4a:34:ca:79:2c:5a:
         83:39:8e:8a:15:87:f3:3d:b4:7a:08:da:69:63:e2:40:98:49:
         13:4f:b6:d4:cd:70:d3:43:e7:65:fb:17:5e:00:ee:95:66:81:
         fb:36:b7:d8:5a:12:d9:bd:e0:58:d9:e7:13:6b:b4:68:74:20:
         08:9b:ca:ba:29:05:02:12:43:75:20:83:54:ee:89:99:70:13:
         bf:27:07:9b:55:ef:e9:9a:59:39:62:22:90:d1:df:ae:53:7b:
         f2:16:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:08 2024 by rpki-client on console-ams.rpki-client.org