Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
File:                     ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft (raw, json)
Hash identifier:          xEJB7qtXFItsip7fFyJVAylIWwl8CP0eYEiaeyW3ApM=
Subject key identifier:   D5:0B:68:42:8C:E1:AF:1C:92:E5:2F:A6:77:22:FA:30:5A:AE:FA:5E
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Certificate issuer:       /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial:       01935952EBB7860D3512CE4EF2A5DE465DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 14:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:26 +0000
Files and hashes:         1: UlV4uF_SwoY2Ef5D8DQutQ8FOK0.roa (hash: mmrPzKRhsqtJRVMpOr9DbtTqsMMmC0MVEbs8hOTL4Wk=)
                          2: ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl (hash: BuaAa1ET8+0DZcsOSkDOod5vnT2R6xp+aeOzJnJs0x0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:eb:b7:86:0d:35:12:ce:4e:f2:a5:de:46:5d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
        Validity
            Not Before: Nov 23 14:00:26 2024 GMT
            Not After : Nov 24 14:00:26 2024 GMT
        Subject: CN=d50b68428ce1af1c92e52fa67722fa305aaefa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:52:5f:0a:ca:a1:2d:53:1e:b4:ba:ac:2d:
                    70:e6:6b:58:11:d7:09:cc:16:5c:96:a6:b0:e5:d7:
                    2c:fb:b6:fe:ed:36:68:84:95:37:ea:5a:17:a3:c8:
                    03:9e:49:c1:41:d2:58:bc:c1:98:6c:e3:21:2c:d8:
                    d1:71:ee:36:da:17:a4:1f:46:1f:65:91:ab:b4:e1:
                    29:13:a8:89:35:bb:7b:4c:cf:15:7b:15:4f:be:5e:
                    69:28:27:f9:de:e0:1e:8f:37:31:5f:bc:82:0f:62:
                    94:7c:34:1a:e6:ef:b0:c8:f9:13:33:27:20:1e:12:
                    b0:52:d9:51:64:9e:af:d7:c0:e2:8f:48:e1:c1:ef:
                    ad:33:28:95:27:7f:34:79:3e:12:35:5f:eb:ba:54:
                    fe:34:2a:33:74:a4:43:9b:0a:ec:33:cd:4d:71:22:
                    35:53:b3:a0:71:c9:da:10:32:2a:42:1c:e3:a1:92:
                    2c:4f:69:80:ed:5e:91:77:38:e5:29:1c:18:f9:03:
                    43:51:4f:e7:9f:bc:8d:83:17:90:35:0b:65:37:a8:
                    b8:7e:a6:f7:e7:ec:72:33:2a:43:41:97:3e:7f:20:
                    3d:29:a4:87:00:0e:90:32:c8:da:c8:a5:d5:2d:31:
                    12:46:c7:88:ff:63:36:bd:43:2c:6b:af:1d:2b:11:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0B:68:42:8C:E1:AF:1C:92:E5:2F:A6:77:22:FA:30:5A:AE:FA:5E
            X509v3 Authority Key Identifier:
                keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:17:5c:21:e0:d5:cf:ab:3c:77:03:3b:f2:21:5a:fd:fa:
         a5:06:a8:fd:23:7b:13:ca:86:79:e2:df:e1:10:70:17:f3:18:
         4e:22:22:c6:86:79:6f:8d:63:2c:ac:f0:81:8b:f4:82:73:07:
         c3:86:87:b4:ce:f9:91:e4:94:2e:3d:1e:e0:3d:ef:70:f7:c1:
         ad:59:c7:83:df:91:06:c0:99:ad:ae:09:0d:41:60:88:c9:28:
         90:8a:dd:41:3e:62:0c:23:75:17:12:bf:f3:c0:e4:26:28:40:
         3f:f4:61:bc:46:5c:49:af:9f:11:f6:ac:7f:eb:2a:de:75:31:
         b7:8f:d0:31:4e:2c:b9:be:77:d7:1e:c8:ff:56:5c:89:7b:7d:
         33:7a:e1:d7:51:29:0b:06:f9:e2:35:61:e9:b1:91:19:09:19:
         99:11:30:92:86:74:db:ab:23:a3:d2:04:2b:e2:d0:3f:9d:e0:
         72:0a:fd:ab:65:57:c9:72:a6:0f:9d:66:bd:a4:7a:1a:cb:d0:
         74:12:b4:49:7a:97:f3:36:e6:95:25:70:fb:16:72:e5:4c:d1:
         ac:97:c0:15:8b:0e:4b:89:1a:48:8a:31:6e:3c:32:5a:32:aa:
         5c:d8:cf:bd:be:89:db:bd:84:3e:6b:2f:58:77:a6:f4:9b:73:
         88:3d:98:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZUuu3hg01Es5O8qXeRl20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjBjMjMxYjgwMmVjNTc1YWRhZjY1MThjMWMwYWUxM2Yz
ZjFiYzEwHhcNMjQxMTIzMTQwMDI2WhcNMjQxMTI0MTQwMDI2WjAzMTEwLwYDVQQD
EyhkNTBiNjg0MjhjZTFhZjFjOTJlNTJmYTY3NzIyZmEzMDVhYWVmYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuJSXwrKoS1THrS6rC1w5mtYEdcJ
zBZclqaw5dcs+7b+7TZohJU36loXo8gDnknBQdJYvMGYbOMhLNjRce422hekH0Yf
ZZGrtOEpE6iJNbt7TM8VexVPvl5pKCf53uAejzcxX7yCD2KUfDQa5u+wyPkTMycg
HhKwUtlRZJ6v18Dij0jhwe+tMyiVJ380eT4SNV/rulT+NCozdKRDmwrsM81NcSI1
U7OgccnaEDIqQhzjoZIsT2mA7V6RdzjlKRwY+QNDUU/nn7yNgxeQNQtlN6i4fqb3
5+xyMypDQZc+fyA9KaSHAA6QMsjayKXVLTESRseI/2M2vUMsa68dKxGiLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNULaEKM4a8ckuUvpnci+jBarvpeMB8GA1UdIwQY
MBaAFH3wwjG4AuxXWtr2UYwcCuE/PxvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZEQ01iZ0M3RmRhMnZaUmpCd0s0VDhfRzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzMwOTItMTE0OS00OGQ5LWIyZmYt
ZDI3YWVjYzJiNzQ0LzEvZmZEQ01iZ0M3RmRhMnZaUmpCd0s0VDhfRzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzMwOTItMTE0OS00OGQ5LWIyZmYtZDI3YWVjYzJiNzQ0
LzEvZmZEQ01iZ0M3RmRhMnZaUmpCd0s0VDhfRzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR24XXCHg
1c+rPHcDO/IhWv36pQao/SN7E8qGeeLf4RBwF/MYTiIixoZ5b41jLKzwgYv0gnMH
w4aHtM75keSULj0e4D3vcPfBrVnHg9+RBsCZra4JDUFgiMkokIrdQT5iDCN1FxK/
88DkJihAP/RhvEZcSa+fEfasf+sq3nUxt4/QMU4sub531x7I/1ZciXt9M3rh11Ep
Cwb54jVh6bGRGQkZmREwkoZ026sjo9IEK+LQP53gcgr9q2VXyXKmD51mvaR6GsvQ
dBK0SXqX8zbmlSVw+xZy5UzRrJfAFYsOS4kaSIoxbjwyWjKqXNjPvb6J272EPmsv
WHem9JtziD2YdA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:55:04 2024 by rpki-client on console-fra.rpki-client.org