Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File:                     Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier:          I+dY1HTRlt2mQHDCe+J06L2MEbP4QNHdjQ+ZYc1kXP0=
Subject key identifier:   BD:63:BC:48:22:02:41:77:D9:66:BB:EB:11:5F:7C:DF:E5:95:02:F9
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer:       /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial:       0193572D9D1D8B695EEEED84FD6D356B3B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number:          0194
Signing time:             Sat 23 Nov 2024 04:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:27 +0000
Files and hashes:         1: PPdBUw_uc8EZTSLP0iOoV_ssa0w.roa (hash: juJGw6szvPa7DQmJCNxTjQ9iax9ELTL8qs+YNOxtcrQ=)
                          2: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: aH56bO9Azuwrd0Pb4yUKcvBpRuWPLLcp/LUMiYw3baY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:9d:1d:8b:69:5e:ee:ed:84:fd:6d:35:6b:3b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
        Validity
            Not Before: Nov 23 04:00:27 2024 GMT
            Not After : Nov 24 04:00:27 2024 GMT
        Subject: CN=bd63bc4822024177d966bbeb115f7cdfe59502f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:d4:a4:0a:11:47:b7:89:a3:04:3c:66:25:
                    e3:63:63:02:25:5a:af:0c:d7:ca:eb:92:a3:eb:af:
                    05:b2:87:15:ae:b8:46:b3:ba:ed:40:01:a0:ae:f7:
                    f3:f6:25:49:d0:46:0b:ff:2d:67:e7:4f:5f:3b:52:
                    e8:0a:19:8b:83:23:6f:a4:f1:6d:1a:f5:a4:5d:79:
                    8d:73:54:9c:a8:56:54:50:08:88:03:cd:4e:64:4c:
                    df:b0:6a:c9:00:1a:d2:e3:8c:17:d5:06:0c:a2:71:
                    9a:c0:3b:f7:e6:87:a2:47:0b:fc:e3:95:e2:0d:cc:
                    f2:76:94:f5:d4:76:0e:6c:b7:bc:01:7b:a9:99:ad:
                    e1:a0:e4:f6:b8:79:b8:f4:91:03:26:81:aa:33:c0:
                    f7:27:bf:7e:18:d1:83:75:5f:43:ea:83:38:45:5f:
                    c6:70:53:07:45:f3:ed:f6:15:d1:b8:ac:d7:ac:94:
                    8c:4e:89:40:f6:37:a2:37:bf:d6:d2:8e:ba:ca:be:
                    c6:86:72:cd:71:b3:3e:b7:45:6a:81:a3:89:3a:b6:
                    33:04:ac:74:8d:ca:f3:82:1d:c1:19:26:9e:31:a0:
                    d1:a4:4f:02:1f:44:0e:98:47:ff:71:c9:ce:51:54:
                    f6:ff:0c:ec:60:ea:fb:44:7d:6c:36:35:e1:9d:29:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:63:BC:48:22:02:41:77:D9:66:BB:EB:11:5F:7C:DF:E5:95:02:F9
            X509v3 Authority Key Identifier:
                keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:16:c8:e0:18:89:5a:1c:64:1d:bb:3a:d0:18:5f:d8:55:
         02:7b:e0:2c:5e:03:16:a6:5a:ce:ca:26:3a:21:00:77:33:86:
         a9:f5:fd:5c:5a:d3:13:92:71:62:b7:b2:53:ef:cd:6a:e4:21:
         96:ef:17:5f:55:b1:1f:69:fa:02:f1:7c:94:9d:32:d9:50:92:
         71:10:a6:db:47:ba:5a:ca:ae:de:01:f6:64:28:b2:41:12:2a:
         ae:83:e0:94:d5:8f:9b:ba:ec:9e:92:9d:9e:4b:81:8e:1d:35:
         4c:c6:cc:0e:17:fe:57:e6:4e:9d:c0:6a:d9:b3:41:33:46:8e:
         78:be:ad:b8:8c:6d:02:ae:31:15:a7:4d:96:65:27:de:26:46:
         03:40:57:dd:3e:f3:b0:fa:f2:9b:77:c9:47:bf:76:09:02:8d:
         c9:e4:bf:21:f9:01:99:66:b4:67:71:94:d8:ab:23:80:7e:d8:
         3e:1b:d7:a8:04:2b:32:56:95:5f:d2:89:60:92:e9:7f:80:c1:
         64:e8:e5:da:92:51:02:7f:db:03:c5:d7:a5:8e:4c:ed:a7:28:
         b0:38:5e:73:07:ee:55:e3:4e:fb:1f:1e:88:1b:4e:ff:e8:bf:
         dd:d1:15:1c:5b:97:c9:c8:af:bf:10:b7:3c:9c:8c:a8:b9:ed:
         fc:58:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:32 2024 by rpki-client on console-ams.rpki-client.org