Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File:                     E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier:          2GMtvXdgwxf7EAmXRaufouD9lX8Op4cnSHOKiakvCTc=
Subject key identifier:   D4:26:DD:F7:66:12:6C:26:C0:A2:90:AA:52:1C:9B:83:FC:62:F8:01
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer:       /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial:       01935688B3BF103EA6EFDBEB766113D7814E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number:          10A0
Signing time:             Sat 23 Nov 2024 01:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:19 +0000
Files and hashes:         1: 7nFl5X3Q94pv1-yGYLjIgD9aPlw.roa (hash: v+RRjck5OcoAgRQLawW0l0Lrs7aIQD7L2zTwWmqX1Qk=)
                          2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: A2X2NLT1WLI6Jw/GJhU/NXdQBhIMCb+nWToNYBmCJUY=)
                          3: yR2bgmkY4iY4hpD270iUn9DRuTc.roa (hash: OsarNx4T+0YovBM7+LZP63Gph6BdSilTKxh9WY7aNuU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:b3:bf:10:3e:a6:ef:db:eb:76:61:13:d7:81:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
        Validity
            Not Before: Nov 23 01:00:19 2024 GMT
            Not After : Nov 24 01:00:19 2024 GMT
        Subject: CN=d426ddf766126c26c0a290aa521c9b83fc62f801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:ab:89:4f:a3:79:b4:84:a1:f4:94:22:1a:
                    fe:1f:d9:41:01:69:a8:cc:b1:06:0f:c9:e5:ff:57:
                    30:2f:ad:44:c0:1b:e6:73:68:fd:61:22:81:ce:c3:
                    0c:c3:b7:0f:1c:1f:8c:60:0d:00:73:5c:17:2d:b0:
                    a5:cb:c6:38:7f:1f:89:4a:65:7c:8f:5e:10:9c:82:
                    e2:fc:31:95:55:b6:fc:47:64:8b:9b:78:28:6a:82:
                    23:95:fc:36:1c:00:ea:51:9f:a9:c9:cf:89:ad:18:
                    a3:f6:30:04:2c:50:31:3b:cc:1d:46:6b:e6:8a:bb:
                    5d:54:36:d3:95:80:d5:bd:f9:7b:d5:4f:f6:41:ee:
                    78:6c:68:04:8d:91:54:37:9f:01:4a:74:b4:2b:ff:
                    1b:65:bd:13:a3:a2:73:26:cc:f2:c4:de:d8:00:84:
                    04:48:9f:5c:1a:92:59:63:e0:10:c0:34:54:70:7d:
                    12:1d:b4:e2:05:bc:81:16:97:ad:4b:7e:a5:aa:b6:
                    8e:44:d7:cf:4c:c1:7d:bf:5a:bd:10:d1:85:c3:d8:
                    e5:96:9c:01:92:c7:eb:23:e7:c7:28:d5:7c:26:3b:
                    5f:92:ef:52:7a:53:87:d7:9c:26:33:45:96:bc:31:
                    03:52:5e:fa:2b:02:4d:b6:da:c1:45:5e:95:9f:b7:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:DD:F7:66:12:6C:26:C0:A2:90:AA:52:1C:9B:83:FC:62:F8:01
            X509v3 Authority Key Identifier:
                keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:be:fc:47:de:5d:52:50:ae:73:d7:79:90:25:a7:77:3c:
         7c:5f:21:cf:93:fc:6d:6e:0e:4a:e8:55:ba:b4:9f:5b:fb:46:
         47:22:a2:b7:ca:91:9c:cc:cd:11:a8:d2:9c:df:31:89:00:77:
         fe:36:a4:90:07:f0:5a:f0:fe:5c:86:c5:85:ca:52:f9:7b:35:
         17:ca:89:14:c0:5c:93:37:21:2f:b1:58:18:d2:a4:f4:3a:c6:
         b7:18:c3:23:82:14:cf:51:7a:2b:21:78:48:ae:54:11:37:a0:
         76:23:38:15:32:4a:da:13:45:fb:d2:d0:56:b4:e1:1f:5c:92:
         2a:07:51:35:12:45:56:60:ea:24:31:12:c1:5a:06:e3:06:d1:
         48:cb:28:a2:a1:63:5f:55:dc:65:44:11:49:ea:be:30:4f:fd:
         c9:f8:b0:cf:fc:49:81:d1:6d:be:53:f7:b7:ed:98:34:3b:f5:
         d7:d1:bf:a2:6d:ef:91:7b:2b:36:e2:35:42:56:67:08:2c:87:
         24:4e:8e:81:c0:ea:d1:93:3a:e7:c7:a0:21:b1:db:62:ec:95:
         26:3c:a4:26:d8:80:b1:1a:26:3c:69:d0:32:85:87:19:38:4a:
         82:68:0a:2e:38:93:a7:b5:cb:40:9b:48:33:d7:b7:c5:c6:10:
         b0:ba:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:17 2024 by rpki-client on console-fra.rpki-client.org