Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          H99uFpwe/z3RMzqIQluIfIESW4cUTQegZvITlMr1LNA=
Subject key identifier:   FB:6F:9D:29:2A:19:B5:EE:1D:A2:8E:B4:03:98:31:7D:95:6D:86:85
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       01935207A9E8B296F9C04A8C166B1271BA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          0E97
Signing time:             Fri 22 Nov 2024 04:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:54 +0000
Files and hashes:         1: 3IfxZ5duxf2BxQKpkHZt0Z0KkY4.roa (hash: AefYol+LCnbGQeEJAIVxkn82qvOlk5BOgvlmQ7y3JmQ=)
                          2: 4HGdUJgIXmJ3-WW9WLP2-bLUONU.roa (hash: CJvzUMoWllpKfnhRmXp8bpNyoGiPiVL+tnnKVtoAKZo=)
                          3: 4cB2kaLagEGv4gzRmT80Ivwv3Wk.roa (hash: 30jYV2KDEMZDuRIN8BhVHzNbofo+zoSGX6T67hGB/Z8=)
                          4: 5JfSXt_BAmHEjAHsPvpQLUR1yUQ.roa (hash: gj2//N5GYjpXJwxpiYQDI2iiWJkgjB4KC73N8lCA7es=)
                          5: 6sdQrR4TonhANcqWy0dng88bxRw.roa (hash: 6rxCsEsz4Md9I1JG7iryWQWRGUnbYmBonB/UG/wjVaY=)
                          6: 967jHKlTGHF6p_fnIQffTEiFSY8.roa (hash: W26pGP/iFrXvCsXem8n6fHGpte6sengtAh99pPRu1W8=)
                          7: AUMXcf8bFjbjEi7a_J7xzBdo68I.roa (hash: Gm7e43dbS+dI11t6YWkLzxjandfa05xXFGtWhsc5sHA=)
                          8: Dbg-4DQ8S_5pPCDRn5r3gCws1UU.roa (hash: aFYQmveefWf1K7OwylOxht0xEv7ZgGm01p5pzEkAOG8=)
                          9: H2zF0ffKDxLdGqFdSqXFX9aGKBc.roa (hash: S1WscWiPmUAKzIehQtfc9C4/zC2aCmlsWze0RUShMBE=)
                          10: HXBdsUuoKRRzsS6BlYEqrggj9QU.roa (hash: +03peTSq14B1VFNk5+erzF8RDmS4OejS0QUNrZHgegw=)
                          11: H_wqu7WdKGNY6syXPSObO72PUm0.roa (hash: c6drQqgCHC5mAJxoYHoAXJUf9w+BNVPCISpYPAsl5rw=)
                          12: Jx3yB9v3MG_-CiuEpjo-X1Cvo7Y.roa (hash: ii2Ec14BbqpbNZNI9eP09r8g97paoHETvblaNc3vOGY=)
                          13: Ld4yADymVVsInSnqFvq3ZrFU9fI.roa (hash: Awu3rDldjtPWGG9BiN6RIWAazGOHmFuHxK47K2t5fos=)
                          14: OT8U_4aADhtndkIZj_tJd7-RH1g.roa (hash: CCv3Kooj231IyGIX622PRskXV660A5dftSz82yqGeXo=)
                          15: QAzWbYXfWDxjnDnvvSL6G9HohWM.roa (hash: NjE5eeaoiJyKcCOGxAgceg8nO3Uk/1htLC6b7IfXqog=)
                          16: SC8DI0mKcmygQ-O4OwQ5w6_t_1A.roa (hash: 2g9jv/pkUd+44wd2mxd8a5Lu+7xTzvASG66KMQzNC0g=)
                          17: Zac6K5GvXSnv5iYhUf3WGl69O34.roa (hash: NDO4iSBlSfU3DDjjLSzPR+xW/47dp1NcC12EeV4lod8=)
                          18: _sz6NiYtXv8h7uPpzAqKUTfI8uE.roa (hash: Twwtdp5xQJ5tvOi3bvvi0pkQVZ+6/kB8+FzTZLznbok=)
                          19: bTyvhvXAfSkPlSblz32b9YLktug.roa (hash: U1SxG8/Kx9+0F9Rzxt9g6f7guf4oOCvDTX2a5bgPF9M=)
                          20: bhhyHor-RCJ6G5UoB1c0iWU3HNY.roa (hash: 5N00fK3d1v6JRClWIo13OrtGJe94haNvcEXJCLUxYjk=)
                          21: fPUi-ZZp3JWAJj7umOdcp57sf5c.roa (hash: 4wvcpsXCwsZbMsrEGpjtelAlrZw5LWwG0P0aUwt0lSs=)
                          22: hpjgyNsmNJf-Ig7l4Th01W8hCLs.roa (hash: xFBYCLPPo2ssKVAPnO8XF577xIyOWoeoCw+6gAzNdAc=)
                          23: j2mhF_7j2wyl_syrPrf2Ec8-90k.roa (hash: K5jh5x286Arb/af47yCy+SzGVVEvFZl6agnwqWBmFlw=)
                          24: v7KuNdN723ttyHSraAdYyiyupos.roa (hash: KuzQa3UPQVf1cOHAkeccPVoeh+KpI/V/vg4ycPWEj5w=)
                          25: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: NupIFqU4tgDP7Q7ob0kCRhWQDWUGgGekFbLAMgFEIL0=)
                          26: xUSySMxx-UQLj9FeHRSQV3KwwAY.roa (hash: UsvZof6+HEGhlHCWIM98WX4NzTdn6PghYHD7SDDqNrM=)
                          27: zSqUp796r4Xx4pjkiCFlLAaoCXY.roa (hash: yS65spk8C+pNpAIgjEzppS7Meyyfs65tccj3rlQnP1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:a9:e8:b2:96:f9:c0:4a:8c:16:6b:12:71:ba:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Nov 22 04:00:54 2024 GMT
            Not After : Nov 23 04:00:54 2024 GMT
        Subject: CN=fb6f9d292a19b5ee1da28eb40398317d956d8685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:9b:63:b9:bc:cb:c7:bb:7f:d4:19:88:6c:
                    8a:12:7c:a9:c5:ff:3d:24:d4:f5:60:c7:70:11:42:
                    27:db:68:96:cc:56:cb:5d:6b:d1:98:2f:72:f2:b7:
                    35:6f:c4:59:2e:17:85:0e:23:86:1a:20:67:6d:86:
                    d5:6b:2e:41:c8:f0:ae:f7:71:8e:a2:94:1d:a1:cf:
                    4f:08:d7:10:ea:b1:2d:c0:79:f3:b3:fe:b3:08:85:
                    fc:08:cd:5c:69:1d:e0:24:78:7e:75:16:20:fb:5b:
                    0c:ae:41:a8:24:cf:1c:b7:61:e2:16:fb:4d:0e:fb:
                    28:15:8e:ff:cb:2a:da:33:96:6e:6c:43:cc:c2:bf:
                    2f:69:b0:44:a6:29:88:a4:7c:e6:02:5f:50:73:81:
                    1e:73:71:a2:dc:0f:7d:47:b4:f5:f8:a6:87:30:44:
                    d6:a1:f4:0b:07:1b:26:9a:bc:32:a5:31:81:c8:e1:
                    9e:00:c6:dd:a1:76:62:8b:42:22:c2:3d:be:5d:54:
                    91:36:b8:8f:ea:fb:51:fd:35:5a:42:cb:44:03:b8:
                    5f:45:20:e8:8a:34:cf:a2:3b:4e:a7:0d:2a:48:5f:
                    3e:0f:6b:74:03:d6:95:45:e8:0d:0d:55:20:96:61:
                    7c:d1:8b:23:85:9d:c0:b6:1f:d7:22:a3:f2:d8:f1:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6F:9D:29:2A:19:B5:EE:1D:A2:8E:B4:03:98:31:7D:95:6D:86:85
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e6:78:55:0f:0e:cb:ed:bf:e4:34:11:78:e7:e1:b3:79:90:
         ea:da:1d:b7:68:76:14:15:0e:f8:0c:c3:c0:8b:c8:e6:92:16:
         fa:68:d5:cb:ee:53:3f:fe:ae:7c:e9:f4:01:48:14:de:92:3b:
         63:4a:d0:b0:8d:68:94:84:ee:37:8f:ad:a5:fe:7b:2d:9b:e5:
         26:f7:bd:2f:23:a7:74:94:f7:e3:fc:fc:7d:a4:a3:16:f6:39:
         0f:61:cb:bb:75:be:9d:42:8b:69:1a:6c:57:12:9a:25:db:2a:
         b4:ea:ef:c3:31:6a:a5:7a:f6:af:59:6f:62:25:14:fe:3e:f7:
         a4:fd:77:7c:11:c7:a1:6a:e4:f0:71:7a:75:12:5a:13:ea:88:
         47:a3:b5:4a:6f:11:c9:5b:a2:04:f7:2d:49:ad:72:a7:5e:40:
         ca:c4:09:1c:b9:93:ff:74:53:96:28:db:12:61:94:4c:05:eb:
         bb:1f:cb:fd:c7:43:ca:0a:57:d0:28:f4:d8:eb:0d:4d:ab:1e:
         a4:cd:9f:38:a3:f9:da:3a:3e:ec:41:e3:0c:96:59:91:44:a8:
         84:ea:87:50:8d:ae:d5:41:22:d8:c6:49:00:fb:2b:65:b6:f6:
         8c:2b:a0:3f:d2:e3:2c:6e:fb:fb:93:e3:0a:8d:6f:f6:40:3c:
         31:a6:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:51 2024 by rpki-client on console-fra.rpki-client.org