Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          yoJfYXZ3OKse66Z7ROgZBoL87V9CJOUPwI4nGoIz5pc=
Subject key identifier:   AE:AC:66:0B:21:65:51:21:03:65:EF:B9:5D:42:E4:33:A6:46:43:10
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       0192F06521C400C732B2549D391CB5352A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          016E
Signing time:             Sun 03 Nov 2024 05:00:12 +0000
Manifest this update:     Sun 03 Nov 2024 05:00:12 +0000
Manifest next update:     Mon 04 Nov 2024 05:00:12 +0000
Files and hashes:         1: 7JdiqCpwMM4RS0slvPhvuSgQ0Zk.roa (hash: ZVqFQJMkDhXrES62OLJNsHEP1s89tgGhmHoViu58+d4=)
                          2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: XLp6JgSSyzJ12b8znW527PmHdi4yTUWtpa/Emhaq5gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f0:65:21:c4:00:c7:32:b2:54:9d:39:1c:b5:35:2a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Nov  3 05:00:12 2024 GMT
            Not After : Nov  4 05:00:12 2024 GMT
        Subject: CN=aeac660b216551210365efb95d42e433a6464310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:e1:b2:0c:47:ab:3d:58:a6:6f:fb:68:e7:
                    7d:b2:9d:a3:ce:e3:02:d8:3c:b8:2b:6a:66:24:0b:
                    eb:c6:e1:27:41:7e:45:e1:af:88:e2:57:b9:21:37:
                    63:c3:c7:53:5d:a5:1a:c2:b3:0a:24:aa:0f:61:ca:
                    0e:04:22:20:05:f9:e1:40:11:1c:7f:62:d9:eb:40:
                    ee:de:0b:4f:ef:1b:e8:1f:71:9a:b6:c7:e0:53:4e:
                    3b:af:0f:49:5d:5b:a5:ab:a9:20:93:ab:f0:e3:12:
                    ee:ea:48:7c:ee:3f:59:a4:87:bc:23:c9:d9:68:45:
                    d8:19:1c:22:93:19:24:28:a3:27:04:97:72:99:82:
                    ee:bd:3c:92:96:8e:be:90:54:a3:49:c2:fd:1a:de:
                    c6:7d:86:72:74:82:11:f5:a3:26:1d:f3:84:ac:64:
                    37:d9:9d:5f:18:a7:ff:86:54:7b:76:d5:72:7d:85:
                    ed:6b:14:48:b3:a2:8a:c1:2c:a9:b6:57:97:f6:1d:
                    98:41:53:4b:ab:98:29:a7:4a:68:6b:55:ef:34:ec:
                    b4:dd:ea:c2:00:9f:e2:ed:06:30:b3:66:04:72:68:
                    9c:2f:1b:ae:ef:41:2d:f5:ad:0a:69:11:ca:36:ee:
                    ed:bc:4a:02:ec:48:76:13:be:95:48:dc:6d:0d:31:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:66:0B:21:65:51:21:03:65:EF:B9:5D:42:E4:33:A6:46:43:10
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:80:9a:d0:1e:eb:0f:08:fe:1e:1e:fe:f2:d4:5b:1f:68:
         d2:44:59:6e:1a:b9:9b:46:57:6c:6d:27:51:20:c2:ea:d8:4e:
         5f:dd:7c:d1:9d:0a:aa:8b:60:86:94:07:ff:32:0f:7d:f1:2d:
         d5:c1:bf:7a:bb:3e:d5:18:cc:e4:f7:5e:42:79:57:a8:ec:60:
         f6:68:64:af:a8:18:6b:c6:d8:04:cd:be:eb:3a:c1:73:66:6c:
         1d:63:3e:0b:b6:46:9b:82:1b:c2:8b:73:33:70:b3:bc:70:77:
         ed:85:1c:a0:ef:d3:00:4b:12:d8:63:4c:52:32:a0:03:4e:bb:
         69:fa:48:9e:e0:92:2a:f1:85:63:db:22:5d:f7:c7:87:16:0b:
         fd:80:a4:f1:a8:74:d8:e8:38:a8:c9:da:5b:f8:4e:06:11:45:
         85:5e:d0:9a:77:e1:3b:87:9f:fc:38:87:52:c2:7b:d9:4b:d8:
         a1:eb:ea:45:7a:af:2c:ff:ee:03:20:f5:91:93:51:49:a1:1e:
         ce:b4:b8:08:44:bd:f3:7e:36:8b:39:92:2f:ed:1b:4c:98:a5:
         0d:9b:00:63:62:cf:d5:e7:4f:15:c5:6f:83:bc:b0:84:98:c5:
         71:af:7c:90:4b:e0:38:6f:5b:ba:5d:92:d7:f1:80:dc:f1:ef:
         b8:8d:10:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLwZSHEAMcyslSdORy1NSphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl
MTE5ZjkwHhcNMjQxMTAzMDUwMDEyWhcNMjQxMTA0MDUwMDEyWjAzMTEwLwYDVQQD
EyhhZWFjNjYwYjIxNjU1MTIxMDM2NWVmYjk1ZDQyZTQzM2E2NDY0MzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti3hsgxHqz1Ypm/7aOd9sp2jzuMC
2Dy4K2pmJAvrxuEnQX5F4a+I4le5ITdjw8dTXaUawrMKJKoPYcoOBCIgBfnhQBEc
f2LZ60Du3gtP7xvoH3GatsfgU047rw9JXVulq6kgk6vw4xLu6kh87j9ZpIe8I8nZ
aEXYGRwikxkkKKMnBJdymYLuvTySlo6+kFSjScL9Gt7GfYZydIIR9aMmHfOErGQ3
2Z1fGKf/hlR7dtVyfYXtaxRIs6KKwSyptleX9h2YQVNLq5gpp0poa1XvNOy03erC
AJ/i7QYws2YEcmicLxuu70Et9a0KaRHKNu7tvEoC7Eh2E76VSNxtDTEe/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6sZgshZVEhA2XvuV1C5DOmRkMQMB8GA1UdIwQY
MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt
MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3
LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxOAmtAe
6w8I/h4e/vLUWx9o0kRZbhq5m0ZXbG0nUSDC6thOX9180Z0KqotghpQH/zIPffEt
1cG/ers+1RjM5PdeQnlXqOxg9mhkr6gYa8bYBM2+6zrBc2ZsHWM+C7ZGm4Ibwotz
M3CzvHB37YUcoO/TAEsS2GNMUjKgA067afpInuCSKvGFY9siXffHhxYL/YCk8ah0
2Og4qMnaW/hOBhFFhV7QmnfhO4ef/DiHUsJ72UvYoevqRXqvLP/uAyD1kZNRSaEe
zrS4CES98342izmSL+0bTJilDZsAY2LP1edPFcVvg7ywhJjFca98kEvgOG9bul2S
1/GA3PHvuI0Qdg==
-----END CERTIFICATE-----
Generated at Sun Nov 3 10:38:27 2024 by rpki-client on console-ams.rpki-client.org