Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          0yPMx3JcwYheT6P2hMgoPkBugPLE2xoOJZSb58Yct2c=
Subject key identifier:   16:D6:7F:BC:CD:12:2B:20:3C:D7:15:9C:B7:8D:9A:54:85:F0:98:FA
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       01936A46B26E42A7DE477F658E353CD04BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          02FE
Signing time:             Tue 26 Nov 2024 21:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:38 +0000
Files and hashes:         1: 6bhCteonUaYq3N8YAVIXEF-v1lc.roa (hash: LQi50V8UgfI4VSYQXERdCEV8Rmc/2hcTy/UG13v57lk=)
                          2: q_Id4JJar4HSuuqDmAqMVZH6SBk.roa (hash: 9Cn9JtoUOkGFH0pXpyC2kCTvdwqxnV3IU/o2wV1nl7U=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: 6GQwrqt5Iqzjzcfyxs3XynjyIFOshSftqOlimUx6MTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b2:6e:42:a7:de:47:7f:65:8e:35:3c:d0:4b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Nov 26 21:00:38 2024 GMT
            Not After : Nov 27 21:00:38 2024 GMT
        Subject: CN=16d67fbccd122b203cd7159cb78d9a5485f098fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:b4:09:b6:fb:d3:d6:59:8b:05:72:9b:ed:
                    2e:f5:82:92:9a:ec:24:b6:b6:c8:64:14:7f:59:56:
                    78:da:29:c5:25:33:05:e1:61:ab:97:eb:c9:a3:b8:
                    68:b3:88:3e:b5:05:74:7b:a8:73:ac:b4:c9:2e:0b:
                    2b:a6:02:bd:f8:a8:89:ac:58:81:84:68:d6:c9:7a:
                    82:c9:d1:7f:17:ac:59:0e:d7:24:1b:3c:c4:25:d8:
                    c0:8a:02:a5:ad:d0:8d:95:e5:7c:31:69:7e:e1:94:
                    78:6e:e0:59:ad:ba:5d:cd:46:bb:8b:09:42:3c:9c:
                    ea:e9:71:9e:31:52:f8:20:29:ba:0d:8d:b8:fb:bd:
                    8e:ed:20:b0:66:c1:25:fd:f8:aa:7b:3f:d6:d1:44:
                    9b:ad:01:30:1a:ac:b1:fc:13:3e:17:eb:8c:77:b7:
                    95:d8:cf:0c:76:00:e9:34:0e:41:c3:d0:19:ae:4e:
                    9d:75:9f:94:e4:aa:1f:eb:d5:1d:14:fa:30:8b:3f:
                    4f:93:60:9d:9e:93:e5:00:a2:3d:b6:c8:96:40:20:
                    17:ba:dd:60:8e:88:cf:5b:c3:b7:78:7e:bd:34:50:
                    4b:a2:43:06:34:3e:f9:66:18:05:0b:ac:83:34:c0:
                    51:f9:b8:43:1c:df:71:99:12:26:6d:cb:b1:29:d3:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D6:7F:BC:CD:12:2B:20:3C:D7:15:9C:B7:8D:9A:54:85:F0:98:FA
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ab:39:df:4e:4a:84:02:71:02:4c:32:08:6b:53:8d:7d:79:
         0a:11:a9:12:f2:fb:11:af:04:01:7b:8f:91:ec:2b:a1:87:cb:
         2d:42:ac:98:d6:16:e9:d3:59:d7:59:ca:a2:41:32:13:8e:91:
         46:bd:15:9e:0c:9b:a7:d5:94:11:70:0e:52:ad:a2:da:df:16:
         d8:a6:34:b2:34:a9:28:4b:1e:75:c2:fd:31:df:44:03:20:bc:
         3a:52:53:2a:46:a9:a6:f6:9b:01:ad:70:95:c2:5a:b4:14:d3:
         12:cc:d5:81:c3:2c:e2:aa:db:be:32:d1:cb:d8:3a:5c:90:98:
         3f:cd:1d:28:09:f8:0f:7e:4b:64:fc:3c:d7:b8:10:28:64:27:
         01:e6:05:93:18:5d:ec:3f:fe:2c:fb:bb:ab:1d:63:62:13:8e:
         cd:f0:98:89:80:72:c5:77:a3:e9:9b:ad:f8:69:40:45:78:a3:
         63:a0:03:c7:99:5b:c5:d4:64:c1:f5:9e:cb:02:a8:51:12:3c:
         0f:a7:ad:4e:fa:9d:e0:f2:02:4b:20:f1:fd:87:5c:57:06:38:
         83:29:9f:63:8e:71:ab:5e:38:ef:bc:a1:2d:b7:9f:de:e3:8d:
         c0:37:6c:39:f5:94:80:19:8b:60:82:54:1f:3f:f5:5d:7d:94:
         da:7a:22:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRrJuQqfeR39ljjU80Eu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5
MWMxZjEwHhcNMjQxMTI2MjEwMDM4WhcNMjQxMTI3MjEwMDM4WjAzMTEwLwYDVQQD
EygxNmQ2N2ZiY2NkMTIyYjIwM2NkNzE1OWNiNzhkOWE1NDg1ZjA5OGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gG0Cbb709ZZiwVym+0u9YKSmuwk
trbIZBR/WVZ42inFJTMF4WGrl+vJo7hos4g+tQV0e6hzrLTJLgsrpgK9+KiJrFiB
hGjWyXqCydF/F6xZDtckGzzEJdjAigKlrdCNleV8MWl+4ZR4buBZrbpdzUa7iwlC
PJzq6XGeMVL4ICm6DY24+72O7SCwZsEl/fiqez/W0USbrQEwGqyx/BM+F+uMd7eV
2M8MdgDpNA5Bw9AZrk6ddZ+U5Kof69UdFPowiz9Pk2CdnpPlAKI9tsiWQCAXut1g
jojPW8O3eH69NFBLokMGND75ZhgFC6yDNMBR+bhDHN9xmRImbcuxKdN07QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbWf7zNEisgPNcVnLeNmlSF8Jj6MB8GA1UdIwQY
MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt
ZTMwMzg3YjNmMjExLzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx
LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcas5305K
hAJxAkwyCGtTjX15ChGpEvL7Ea8EAXuPkewroYfLLUKsmNYW6dNZ11nKokEyE46R
Rr0Vngybp9WUEXAOUq2i2t8W2KY0sjSpKEsedcL9Md9EAyC8OlJTKkappvabAa1w
lcJatBTTEszVgcMs4qrbvjLRy9g6XJCYP80dKAn4D35LZPw817gQKGQnAeYFkxhd
7D/+LPu7qx1jYhOOzfCYiYByxXej6Zut+GlARXijY6ADx5lbxdRkwfWeywKoURI8
D6etTvqd4PICSyDx/YdcVwY4gymfY45xq14477yhLbef3uONwDdsOfWUgBmLYIJU
Hz/1XX2U2noiJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:31 2024 by rpki-client on console-fra.rpki-client.org