Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
File:                     T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft (raw, json)
Hash identifier:          ZwxnqZH1+n2mHT3ta9eKq7XJG8BJGwHD1jLqmbfYI8w=
Subject key identifier:   74:DD:70:61:7E:86:33:E8:83:78:FE:52:CA:6F:05:DF:5C:F7:E6:2C
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Certificate issuer:       /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial:       01935207227B6F327529C37BF8A9329CD2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
Manifest number:          099F
Signing time:             Fri 22 Nov 2024 04:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:19 +0000
Files and hashes:         1: 2m84-v_WRPTPKqeB2oBWp-wF748.roa (hash: ge/GZa0KnBL1KFiuwr6WpIKT7Q5PP1eQ1iEIdD5hVug=)
                          2: 6pM18plyUt9BDV5L-srMOekZIQY.roa (hash: v02pKGOPcPfOgUU13ykKoGyDLljBvBlGzqNBiQXF+vA=)
                          3: A8Wc3duBJtVhykztMgkourqup_4.roa (hash: 3vpC331zuOCowctHXD2TKDvtKwjar4jwcDzP7pnBhXo=)
                          4: DTQiwkcntQ0-txJSsczm1npul-A.roa (hash: QWCspNVgTirKnfJOpI/o+h4B/ap4qwHigQOer6PHRYc=)
                          5: DaHJf5zJdrEzBmXp8PhirWbB7RE.roa (hash: ovX/TVikZEguwDMzOaVMvouuyRj94KbWv/RhwSOgbuE=)
                          6: JeDDSNjqj1WefQTX5TgZq5lmcDw.roa (hash: TfXqm1f0e43lVwoRS4r1FBNLXMJgy+iGtoTeg5MWyzc=)
                          7: LhcU6q6XSrL7olgf4Tkv5MGrYSQ.roa (hash: RL3SNKZIDwBBKGtzQ1FbVKbhm6WJYDutbug8yuOuKxE=)
                          8: OsicbGrofONzvOMYzzSMeh1M0Ro.roa (hash: cIt9peiom5yBpS37bJ6SfpideKQZn/MNW4WW281bDto=)
                          9: RIjEtAgDzMAjBuDaBW8lDvBRgJ0.roa (hash: Qow8gSHe9p3dxJ7TQtkGiheYjQ1ml+R3pUDg61lZD4g=)
                          10: RXbUtLpCxRi4oJ1zzHYpr6LADf8.roa (hash: Elr+0I+QysQi1URCHVbD/OTm8/AG5akb3LUFRA6wW3g=)
                          11: SEcZb4R0u8MfgoJ7iNfrpjcmIVY.roa (hash: vNREnY4TFwEPTIPeFNGWrRS+cATOkp149qqiYdJAKGA=)
                          12: T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl (hash: lM8QHRuReN0X03gdEYvDLph+gmqatvk3y6JVVYkfBHc=)
                          13: Zdk8eoDX-vo8Li_z5Tv7WXP8fJ4.roa (hash: WiuUr0iaUFE7sB0UL9ZosdAItIKr11RXPQKKBpFm/t8=)
                          14: b4GojdWCA5BaU8wbLa-IRlT4xDI.roa (hash: xE21DMe+AQqr7AdB3C4Zum3m2QPximajIaTBdoIPuKE=)
                          15: c330l5lpzb6UmqDwhQnQ2hj9lgQ.roa (hash: yALrgX/STXEGPonPq0sH/OBXgIb2CbDaR14UTrlr3As=)
                          16: cAwqfrtb7RGZwQ4-1glnZSV1hmw.roa (hash: DexdHx6Dwepza0uinTLhNHB2OsSdkoVGadlVgHRZqMI=)
                          17: deo_7Q0ZdHf29iEmlt-bW0HVgAQ.roa (hash: NncfswgXYv42I5hNAfH13K4oE7VRz0N5rRXgaxySKHs=)
                          18: hd2m0u7j4h2l16tVgVqf_Bb5_yk.roa (hash: plGx6vgePNJ8WZLMIS2qBFnIUYX5vxlb0x+uwleu7ng=)
                          19: kizCGElwEzSBkrAkhDp2Id7pwU8.roa (hash: py/FK/iHrG7oEGI1PxlCIc+BKaVqBdDtGesJhhFTe24=)
                          20: o1jgbAFismXY3VPAgrDieU-wwSE.roa (hash: WYZaAat6UBV179+8m/F18drS+QVBRUTRa9Dk7xAat2A=)
                          21: pPI6fzprB5YmsTIFYekS4DNS1E8.roa (hash: HigY8qqvhQY4n8vNDQ/jqgLDViAxkcanHGlh9/Tqb+k=)
                          22: rLT2kzHu_P19bmRP3GkUpB238Hg.roa (hash: 8eA6O6plR4ZQ9CMeIq666LKoJH7VlJ8jk2PWMV8QM1c=)
                          23: s0CxskOevCC_li4wVr8931bXdFI.roa (hash: c2vQIcif22hKbc+AwCvGIU8hB52HBbIBglxb4oBC6nM=)
                          24: u_mf6VdBhl7uVcbRln1YvZc-0jU.roa (hash: 9N3f5UD+rfeQMlZdEvv17Zf+Q0fMXytQZVrXxXqC8WM=)
                          25: vapzFUrrI6AeHjyMy_7FVDotd04.roa (hash: duStscGJ+Tbahw/BkPtyz/vhUgo89BBRmCdvuOnEfsg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:22:7b:6f:32:75:29:c3:7b:f8:a9:32:9c:d2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
        Validity
            Not Before: Nov 22 04:00:19 2024 GMT
            Not After : Nov 23 04:00:19 2024 GMT
        Subject: CN=74dd70617e8633e88378fe52ca6f05df5cf7e62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:e4:5e:2d:74:ff:ca:0b:55:d7:ca:5c:ba:
                    94:a8:8d:db:31:a4:b5:e5:f8:fa:b9:23:44:36:ea:
                    7e:5f:75:1d:df:69:c9:1a:6e:64:96:4e:93:0c:73:
                    3f:99:0c:7b:f8:7e:a0:91:13:00:33:34:d3:06:c1:
                    42:e6:65:5f:e3:7c:9c:5e:d2:c7:9a:10:ca:65:8e:
                    fa:f0:0d:f8:99:7d:24:9d:83:00:b1:44:72:0d:06:
                    5c:d0:1b:ba:d9:43:a6:0f:b0:75:df:6b:83:6f:95:
                    20:92:02:b1:33:6f:a7:fd:e3:36:cc:dc:87:14:7a:
                    23:e1:c0:53:62:69:10:bc:53:a6:4b:9b:a0:08:16:
                    c8:74:d8:bf:74:6a:c9:d8:56:94:2e:ff:b9:53:3c:
                    4b:77:b4:c7:66:7e:8a:28:63:22:9d:51:0b:92:d4:
                    02:e1:ce:d6:46:3c:c9:9a:d6:fa:a6:d8:e4:a6:13:
                    62:11:d3:dc:97:3a:d4:87:d2:10:93:35:b6:80:61:
                    52:f2:e6:1e:2c:1b:24:cc:e8:e8:5a:4b:60:64:b6:
                    66:51:6a:5c:b0:28:77:8a:89:3d:05:4e:18:cf:7b:
                    1e:35:65:51:fb:c7:f4:f4:66:d7:3f:fa:82:00:c3:
                    de:49:32:c7:b9:fa:83:26:f6:b9:a5:64:d4:e1:28:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DD:70:61:7E:86:33:E8:83:78:FE:52:CA:6F:05:DF:5C:F7:E6:2C
            X509v3 Authority Key Identifier:
                keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:16:a7:c7:89:8a:75:be:0f:72:e1:9d:78:d4:fa:69:a8:28:
         dc:4b:a8:60:1d:71:fb:7f:16:b8:03:44:4a:c5:d4:12:95:6e:
         f1:33:80:2c:9d:c2:0d:3f:54:7a:67:be:d1:bc:b3:55:fd:1f:
         d5:e6:e2:d9:3e:8a:a5:fd:ae:46:89:3a:aa:7c:c3:2e:a1:f4:
         5d:dd:b0:85:8b:a7:11:28:d4:2b:43:b8:dc:82:6b:97:59:3a:
         34:6b:ea:a5:fc:9a:8b:51:54:80:af:4e:b0:6a:70:28:1d:dc:
         a9:fb:7c:d5:ce:70:de:40:d3:ba:60:73:56:74:9d:16:45:6c:
         ec:51:00:dc:e0:53:aa:51:d2:a4:4b:6d:04:40:1a:19:4b:0c:
         15:66:55:29:be:ff:08:a3:b3:fc:bc:80:47:11:1c:3d:c4:85:
         a0:db:b3:41:1c:b5:2e:51:f4:40:59:6e:b7:9f:33:a8:a2:a3:
         4d:22:58:1a:f2:07:90:0b:d4:c2:39:74:23:e4:0c:25:1b:b2:
         44:14:57:04:f6:69:f1:9c:d4:9d:46:93:43:51:fe:33:31:1d:
         d0:c4:4f:a6:3a:82:ef:cd:58:b5:21:a8:83:0b:ea:0d:70:15:
         10:d9:a1:d2:89:62:c4:89:d6:fa:5d:72:6f:d5:cb:1f:89:5a:
         31:67:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----