Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          gEjBd6taGEnYZsa+n/6wnLChNf6xp2857ehy8Ew5POQ=
Subject key identifier:   93:A3:16:F6:8F:05:A6:78:05:6C:3C:C3:3D:6E:27:B9:99:09:A6:3E
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01946E209C5FC6BDC0A13B68B17FA020F82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1442
Signing time:             Thu 16 Jan 2025 08:00:18 +0000
Manifest this update:     Thu 16 Jan 2025 08:00:18 +0000
Manifest next update:     Fri 17 Jan 2025 08:00:18 +0000
Files and hashes:         1: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          2: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: lVrLx9w6SaRoQVNcv97JR7GtXR7cfU674AUMdVp7RNA=)
                          3: EXOzgHW5xF_eCb4beMY-ADgtMig.roa (hash: JdWcweOl3G9hcB5kydjQVTXm2d9bZdeGrMw625AtAxc=)
                          4: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          5: LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa (hash: 4JsswUG9Ou5/9jUtsWyiDQhEMAGV7MLxdDyUU0ZVg4A=)
                          6: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          7: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          8: X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa (hash: 0wypLX2pYlj/wkC9RZ/dWCbs3OnpHFJIgo8rTP3dhfk=)
                          9: XyJzr7K8kDR7Crh0eGA64cNXh5o.roa (hash: O/tUpYLyJqFNhTOL8oVDzZYICuybOlG7LlJD8DubnZc=)
                          10: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          11: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          12: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          13: mDeAGVyiWAF47pXY_yRjdrhBIJc.roa (hash: yHPdV/sdxT3kKE70fyJDmdwrcaFh24i7D2+vtQY7LN8=)
                          14: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          15: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          16: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          17: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jan 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6e:20:9c:5f:c6:bd:c0:a1:3b:68:b1:7f:a0:20:f8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jan 16 08:00:18 2025 GMT
            Not After : Jan 17 08:00:18 2025 GMT
        Subject: CN=93a316f68f05a678056c3cc33d6e27b99909a63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:11:8e:c4:cd:f6:93:70:9a:ce:eb:ce:b1:
                    41:07:cc:af:78:76:07:e3:17:ed:b8:79:2e:c0:6e:
                    6e:7b:b2:78:a6:54:cd:d8:29:37:95:21:6e:30:01:
                    8f:bb:4d:92:76:10:40:9d:e3:49:84:20:36:45:6b:
                    7d:43:e1:65:e0:f7:5f:82:b2:d7:a3:52:16:e8:95:
                    37:13:76:f3:ad:02:15:1a:ee:6e:f8:df:53:49:16:
                    bb:33:5d:42:ac:82:ab:7e:b0:e8:1e:13:57:82:83:
                    41:2b:0a:71:be:b8:16:21:ef:64:63:b0:bc:65:df:
                    d6:4d:f8:d3:87:0d:d2:49:5f:a5:0c:ae:bf:45:35:
                    98:c5:29:27:e8:71:df:a7:d4:83:50:38:7f:71:75:
                    05:d9:a5:ef:0b:7e:5c:4b:6c:50:aa:60:c3:58:66:
                    bf:b4:de:ab:67:a3:11:78:fc:6b:d2:12:0b:b4:d7:
                    f5:13:a9:7c:a6:87:10:c4:0d:98:66:86:51:fe:8b:
                    5c:c7:b0:32:c3:c8:49:34:ff:b1:ef:93:76:f6:88:
                    b1:3e:c9:76:02:91:83:16:7d:ee:d1:47:a2:19:36:
                    65:38:ec:21:15:d8:76:37:a4:be:a7:7f:3b:48:ce:
                    ca:57:53:a5:fd:a5:cc:a9:4a:01:90:e6:9f:eb:b8:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A3:16:F6:8F:05:A6:78:05:6C:3C:C3:3D:6E:27:B9:99:09:A6:3E
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:f9:51:e2:4a:eb:a9:37:c5:c3:48:09:b7:34:fd:a3:b7:
         8e:f7:65:f6:be:56:a9:b8:cc:da:8d:11:bb:c1:98:1e:2e:54:
         03:a0:da:8d:27:8c:7f:1d:65:8f:f3:e2:c3:2e:e2:74:18:1e:
         05:a7:c7:d4:2b:86:9e:39:f3:b9:fb:b1:1b:14:aa:35:03:3c:
         d0:96:3c:f4:c8:4e:44:72:cf:ee:00:79:fb:4a:ba:0d:c3:7a:
         8a:df:bb:52:d7:a2:14:71:fa:52:9c:52:83:ed:9d:f7:04:d2:
         df:fe:0a:08:27:e0:6f:a7:53:82:9f:48:1f:87:d4:89:2c:40:
         04:e5:40:44:01:4d:a4:2e:fd:b9:f5:7c:d0:4d:a8:d2:8e:17:
         62:e5:f0:f2:c2:c0:23:1d:84:1f:d1:6e:89:70:d5:0e:36:7e:
         4d:3d:db:2d:3a:fc:20:1c:3d:de:3e:b3:71:4f:ea:87:4a:a9:
         ba:02:ac:4f:ff:f5:fb:aa:37:5e:af:bf:10:7e:0f:13:6e:b4:
         66:fe:0f:28:7e:c7:04:95:02:89:e5:3b:e3:d8:34:3f:73:f5:
         38:1a:9d:34:70:57:ea:a0:9a:80:2e:59:c5:b3:a1:90:21:b4:
         85:c3:87:c9:ba:9c:b2:9c:d8:fa:d8:50:9e:a2:93:12:80:f2:
         d5:bc:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 18:42:32 2025 by rpki-client on console-ams.rpki-client.org