Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File:                     ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier:          BpYLtB7GyeZiu4oynrTnUIz+4jaRP2V2sOsR0SfvaWM=
Subject key identifier:   1F:F3:8D:20:7B:0C:7C:A0:52:65:BB:AA:01:C3:59:29:16:46:9F:A3
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer:       /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial:       01923AA6CE3B51DA74E8ED8CEA4CE7905145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number:          1026
Signing time:             Sat 28 Sep 2024 22:01:03 +0000
Manifest this update:     Sat 28 Sep 2024 22:01:03 +0000
Manifest next update:     Sun 29 Sep 2024 22:01:03 +0000
Files and hashes:         1: BStEwSLDvPGiWcywvWvfjsEkOiI.roa (hash: 3jq+7YEeLx1Swicb9uZbXi8H5mdyP2BYhgrNxOpAsvs=)
                          2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: 867wCN4zgRufp/xawzbOQr6QD+/ysB8VeTDpxYsFXXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a6:ce:3b:51:da:74:e8:ed:8c:ea:4c:e7:90:51:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
        Validity
            Not Before: Sep 28 22:01:03 2024 GMT
            Not After : Sep 29 22:01:03 2024 GMT
        Subject: CN=1ff38d207b0c7ca05265bbaa01c3592916469fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:66:09:07:1e:10:60:44:8c:72:80:43:ed:
                    03:71:35:b6:17:63:c7:c9:eb:1a:e2:05:7e:a5:9d:
                    86:86:63:47:9f:2f:f8:ca:15:05:e4:45:f4:e9:6f:
                    43:60:71:eb:3d:a9:40:84:9e:89:ac:20:6e:23:61:
                    4b:84:57:0c:4c:1a:7a:ce:fb:b4:c8:a0:f8:a0:d6:
                    ad:87:ae:32:9f:c8:a6:89:60:7e:c8:b3:93:35:d4:
                    0d:e9:a0:5b:f5:02:5f:35:24:c9:b3:d8:aa:85:f9:
                    ae:aa:c6:12:b5:9d:86:2f:85:0d:c3:7f:c2:cd:fd:
                    49:0a:59:d6:8d:9b:6a:d2:cc:57:ea:86:c8:f2:4e:
                    63:0c:e3:27:64:30:db:d7:26:c8:1a:82:1d:a8:8c:
                    b5:c8:bb:f8:56:e8:f0:fc:c3:9f:bd:de:ee:93:3f:
                    5f:f6:93:c3:73:0b:d4:b1:94:68:90:aa:a2:36:c1:
                    0d:f0:bb:c6:f4:e3:91:ed:e8:4b:9e:7a:22:4b:98:
                    65:1e:95:89:cf:e9:40:20:bd:36:13:b7:83:4d:59:
                    e4:fd:84:d0:3f:b2:a4:5b:f2:42:45:05:58:cc:f9:
                    40:ca:dd:f7:25:ee:9d:c1:51:b3:d6:aa:02:be:70:
                    31:b8:fd:d9:57:99:c5:59:40:57:c9:7d:82:36:ec:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:8D:20:7B:0C:7C:A0:52:65:BB:AA:01:C3:59:29:16:46:9F:A3
            X509v3 Authority Key Identifier:
                keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:75:32:41:4e:0b:f4:4f:aa:36:5e:2e:b1:f6:b2:82:41:32:
         35:63:79:09:de:ee:63:bd:dc:a9:9e:08:b3:5f:c9:ba:5f:aa:
         02:79:3c:a1:91:3c:80:f6:2d:97:1d:d4:7b:d5:79:84:33:5d:
         98:17:0a:79:e8:28:2d:b6:df:71:13:ca:d0:a9:ea:6f:3c:21:
         67:dd:d7:14:7e:18:04:6d:68:f7:88:19:44:c3:ae:4c:0b:d3:
         84:67:4c:0e:ee:c5:b4:84:65:23:2b:c7:ac:a8:22:68:04:0a:
         3f:b7:11:5b:95:a7:5f:21:27:ba:fb:be:fd:b2:c5:5e:37:77:
         d7:1f:e2:ef:06:10:63:e7:4a:7c:63:b5:8d:76:19:6b:61:8b:
         8c:96:5b:a1:e5:48:6e:b9:d2:02:be:c6:c8:09:79:6c:3e:f8:
         a0:c9:db:4f:07:9c:ea:f5:71:26:5c:90:71:29:e5:1b:64:cd:
         e1:fa:23:38:40:40:9a:2d:1d:ba:56:84:ab:fc:85:bf:37:12:
         eb:30:de:6e:e8:b9:68:63:d5:02:0f:9d:76:24:72:cb:db:1a:
         df:8c:36:77:e0:f5:33:93:c4:81:f0:23:43:74:c2:fc:43:e3:
         f0:c7:c5:76:34:16:c8:7c:c9:d0:f3:12:ce:f4:32:49:f9:04:
         21:69:fa:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6ps47Udp06O2M6kznkFFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjQwOTI4MjIwMTAzWhcNMjQwOTI5MjIwMTAzWjAzMTEwLwYDVQQD
EygxZmYzOGQyMDdiMGM3Y2EwNTI2NWJiYWEwMWMzNTkyOTE2NDY5ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ARmCQceEGBEjHKAQ+0DcTW2F2PH
yesa4gV+pZ2GhmNHny/4yhUF5EX06W9DYHHrPalAhJ6JrCBuI2FLhFcMTBp6zvu0
yKD4oNath64yn8imiWB+yLOTNdQN6aBb9QJfNSTJs9iqhfmuqsYStZ2GL4UNw3/C
zf1JClnWjZtq0sxX6obI8k5jDOMnZDDb1ybIGoIdqIy1yLv4Vujw/MOfvd7ukz9f
9pPDcwvUsZRokKqiNsEN8LvG9OOR7ehLnnoiS5hlHpWJz+lAIL02E7eDTVnk/YTQ
P7KkW/JCRQVYzPlAyt33Je6dwVGz1qoCvnAxuP3ZV5nFWUBXyX2CNuzK4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/zjSB7DHygUmW7qgHDWSkWRp+jMB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3nUyQU4L
9E+qNl4usfaygkEyNWN5Cd7uY73cqZ4Is1/Jul+qAnk8oZE8gPYtlx3Ue9V5hDNd
mBcKeegoLbbfcRPK0KnqbzwhZ93XFH4YBG1o94gZRMOuTAvThGdMDu7FtIRlIyvH
rKgiaAQKP7cRW5WnXyEnuvu+/bLFXjd31x/i7wYQY+dKfGO1jXYZa2GLjJZboeVI
brnSAr7GyAl5bD74oMnbTwec6vVxJlyQcSnlG2TN4fojOEBAmi0dulaEq/yFvzcS
6zDebui5aGPVAg+ddiRyy9sa34w2d+D1M5PEgfAjQ3TC/EPj8MfFdjQWyHzJ0PMS
zvQySfkEIWn6IQ==
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:10:30 2024 by rpki-client on console-fra.rpki-client.org