Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          IaDqDX9i8HwqjWFHhkh018g7DB2X0Pw2aotPRvaS6rA=
Subject key identifier:   F0:BE:71:BE:9A:D9:5E:48:1E:C7:36:E9:9A:FC:C7:36:34:34:57:EA
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       0193652008AAF3EA381E98B7BE76070EFEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          137B
Signing time:             Mon 25 Nov 2024 21:00:18 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:18 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:18 +0000
Files and hashes:         1: 9CogR6LqfmW1uYtsLzvzhwbkA3k.roa (hash: nkK52i9kAfpalGFIx/h2yFbzakU59w8Sf2t8fQX2N0Q=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: s0krYHb9rJgQN9afVdcdnzSmzeZJUhnisbBYTu8ssiw=)
                          3: MwHfLJ9Q5bBSy-aM9QY_04WjN3Y.roa (hash: h6+1OppKAOcB8uPRzEXa5LdH6WcKnQwjGLqsT2EpuOc=)
                          4: oRNmNCc3MMhBkXSmhIPXkjENDwY.roa (hash: 3zZyv41LxqdSyUwfRJUBlhvAaY8g9lyLpudQItirRwM=)
                          5: pVskL0DAWRlyWW-7swKrwl8WJCM.roa (hash: zEsvqH9KMagpPZKx6GreVigy3ar/jlHEmcrp2op/Uac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:08:aa:f3:ea:38:1e:98:b7:be:76:07:0e:fe:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Nov 25 21:00:18 2024 GMT
            Not After : Nov 26 21:00:18 2024 GMT
        Subject: CN=f0be71be9ad95e481ec736e99afcc736343457ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:c7:0f:00:cc:6a:4a:3f:2d:7e:3f:6b:b2:
                    8e:c5:39:af:8e:23:d7:e2:9f:fa:42:5a:39:11:48:
                    a8:50:77:50:12:6a:2a:6e:22:42:b0:cf:1b:fa:c8:
                    d9:3a:a7:ae:0d:ff:3d:d0:56:3f:cf:af:70:4c:c0:
                    34:db:cb:df:9c:7b:5d:36:cf:60:23:9c:ee:fe:52:
                    61:a5:8c:83:0c:bc:5c:06:d1:0a:23:a6:d1:d1:65:
                    96:57:c8:4e:5f:69:aa:ff:19:82:d4:59:f2:44:ef:
                    27:63:0d:c8:ad:f2:bc:1e:4d:5d:d1:9b:f4:f6:ce:
                    4f:d7:b2:e1:2e:4a:b9:30:04:be:9e:82:92:dd:d6:
                    35:76:dc:2a:ed:38:aa:1a:e0:32:e4:10:8b:06:ea:
                    41:ff:db:09:06:eb:0f:d0:b9:72:9e:3c:61:14:fd:
                    6c:9d:6f:90:7b:a4:2a:f1:9b:86:f1:b7:4c:ed:75:
                    91:0e:7a:c9:f5:51:81:03:ff:9c:cf:62:c7:ca:b0:
                    06:08:23:a9:1c:6b:ab:3c:51:20:6e:7c:37:41:74:
                    90:6b:59:c3:5c:36:03:17:b1:2e:25:1c:c5:ba:28:
                    a0:e5:07:e2:9b:98:f5:45:95:45:a3:a4:f8:c3:81:
                    e2:40:11:9e:94:d6:58:2b:fa:d0:0c:97:d7:63:cd:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:71:BE:9A:D9:5E:48:1E:C7:36:E9:9A:FC:C7:36:34:34:57:EA
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:35:91:3d:d5:58:90:60:14:4f:fc:dd:de:65:3a:aa:5f:90:
         81:b4:22:59:12:64:fb:5e:69:47:ca:15:1a:6b:13:59:a4:b4:
         2a:f1:56:fc:cc:e0:6e:4b:62:36:67:da:b4:15:09:19:a9:6c:
         ae:53:0e:7f:27:aa:c6:25:d7:50:f6:c8:66:72:8b:90:14:d1:
         08:9c:15:27:e7:43:a5:12:31:ce:cb:c9:0c:c2:cc:a1:a6:a7:
         8e:92:a4:90:22:db:5a:d1:ef:f9:4c:7f:d9:a0:40:57:26:85:
         e3:37:e1:26:45:a4:e3:c9:5e:07:6b:0a:04:4e:42:e8:2c:6d:
         09:62:9d:2f:6c:23:85:49:da:10:0b:16:79:4d:4b:56:89:e1:
         c4:97:d3:87:14:e7:c6:9f:c8:59:8c:55:f8:2e:dc:33:f5:8a:
         ef:cd:7a:93:2a:05:80:a3:8e:e4:04:6d:33:5a:f4:f8:9a:c7:
         1e:93:a5:da:eb:41:c5:e3:a0:32:66:65:3e:b8:81:cf:06:5b:
         27:7c:72:14:f9:c4:6b:75:e6:0f:05:63:a8:0d:08:34:3b:98:
         8d:65:a4:a4:28:40:d1:7f:0a:d2:8f:32:be:20:8e:16:f4:33:
         f1:e2:0b:99:39:76:b7:5f:55:23:29:69:0e:c1:ec:7a:22:9b:
         48:e9:9a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlIAiq8+o4Hpi3vnYHDv7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx
MjcwYmEwHhcNMjQxMTI1MjEwMDE4WhcNMjQxMTI2MjEwMDE4WjAzMTEwLwYDVQQD
EyhmMGJlNzFiZTlhZDk1ZTQ4MWVjNzM2ZTk5YWZjYzczNjM0MzQ1N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr/HDwDMako/LX4/a7KOxTmvjiPX
4p/6Qlo5EUioUHdQEmoqbiJCsM8b+sjZOqeuDf890FY/z69wTMA028vfnHtdNs9g
I5zu/lJhpYyDDLxcBtEKI6bR0WWWV8hOX2mq/xmC1FnyRO8nYw3IrfK8Hk1d0Zv0
9s5P17LhLkq5MAS+noKS3dY1dtwq7TiqGuAy5BCLBupB/9sJBusP0LlynjxhFP1s
nW+Qe6Qq8ZuG8bdM7XWRDnrJ9VGBA/+cz2LHyrAGCCOpHGurPFEgbnw3QXSQa1nD
XDYDF7EuJRzFuiig5Qfim5j1RZVFo6T4w4HiQBGelNZYK/rQDJfXY82S/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC+cb6a2V5IHsc26Zr8xzY0NFfqMB8GA1UdIwQY
MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt
ZGE4NTFhNzE1ZmE0LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0
LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDWRPdVY
kGAUT/zd3mU6ql+QgbQiWRJk+15pR8oVGmsTWaS0KvFW/MzgbktiNmfatBUJGals
rlMOfyeqxiXXUPbIZnKLkBTRCJwVJ+dDpRIxzsvJDMLMoaanjpKkkCLbWtHv+Ux/
2aBAVyaF4zfhJkWk48leB2sKBE5C6CxtCWKdL2wjhUnaEAsWeU1LVonhxJfThxTn
xp/IWYxV+C7cM/WK7816kyoFgKOO5ARtM1r0+JrHHpOl2utBxeOgMmZlPriBzwZb
J3xyFPnEa3XmDwVjqA0INDuYjWWkpChA0X8K0o8yviCOFvQz8eILmTl2t19VIylp
DsHseiKbSOmayA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:33:56 2024 by rpki-client on console-fra.rpki-client.org