Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File:                     TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier:          w6lc8aR7/wPZCqZAJLDQn6UYEA3owkCy+jCk0Zxld+Q=
Subject key identifier:   B4:EA:B3:01:CC:41:EB:8A:3C:8D:38:C4:7D:DF:9B:39:26:03:D1:EE
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       019364B232E09289C50333B7B69170C90287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number:          139A
Signing time:             Mon 25 Nov 2024 19:00:20 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:20 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:20 +0000
Files and hashes:         1: 02HcPtPfECDB46FwVnUKldpukZQ.roa (hash: TtOufFcg2LX67lD1gmfZ6Uhk8HaY0JyuUZA2t3vQtn8=)
                          2: 0QYQvmVhgY8fHxwpDhjjkHqTUsc.roa (hash: a/Etd4yVGnVihCDZXW5D/KOysk3eFfb2eIjBlzz70hg=)
                          3: 40uOc8fzMoC7OpbqEKMrVJU00Rc.roa (hash: PCcOdhCuq3dJ8wuFVaNAtRUgMLGjjZLLd/y/RX+XY4Q=)
                          4: AKvyC_ZJBSo8bu8Ji2tAERDc7FA.roa (hash: nyeNHAuiwqAhjLExCY7F2K/so0t/yFRpvlXOsNfCufI=)
                          5: BmYmhagUQ9q_rtxCeXWJy2Ag1WY.roa (hash: S0CDxkjEHunaaCBV+8OKTt6vVwl500p3sBwJIxdveSg=)
                          6: E2tWxKbX3A0132-oiWAReSGLPLE.roa (hash: 3T+tTA66hNZ7RQ7ctuZAwTDXFRHpsdF3y1SKAWC50cc=)
                          7: Hjq4NBkOSSTHCZca05Zwqpt7lc4.roa (hash: o8drUsYV0dNiIbOpjwSS3DBHPkivmenzUo5cZ2B3iEI=)
                          8: JE-tGR0kP80vpqc3jvrvRP0_Sd4.roa (hash: BfG46qaYZUjbChwrjJ/BU520uhdW0at5Ws/3M5P7gf0=)
                          9: Lvb6L7LGXm4-nCkhySVpft5zjtk.roa (hash: kA6Tzi/HJIsarD78IIROFiXCuLvXDWV+rg2OhEO6hZQ=)
                          10: O4ZJsF1ZttF0eNnj_84xdHD914g.roa (hash: mG+q/FoM3PPe1S1SUuipUmlglhgxjyEUwS7R+O4NKFE=)
                          11: Oruqp_-VsbDULCBBfh1Cdk4Jzqk.roa (hash: N2WQbrEgXU2YLaDACSQSK+21Zf3fN6esOf+ry1j01+I=)
                          12: QvcAa__rqiZtX9AwsXEv5UYiCeI.roa (hash: o3WUNQ31rmLoxE/mUKgX/Nv+l3fh61cGYUTA4il0onE=)
                          13: Qy1qD0ZlMKv8w29CO7u2go1xRng.roa (hash: 98lOCdIWdvmyh0ofx4tBkWZ5+8JiSjrXsCx/f7jn7eU=)
                          14: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: YwDMgDA6dLlUWKfkv60gC1ZNa9FQ7yUR1sh8SNCGD5c=)
                          15: Uh8NfV6vByce58ziWyEyb7R5EfY.roa (hash: /a/EqQRr21nDqVeB0mJ9uRNfVJpZWbo6iC/NnXTKZjU=)
                          16: ZONyg8OM3t--uctbjqMgZ6B3hXs.roa (hash: YivsHcnBm7JBVxNFX+vZn5/kp0lFzmCAKPYRpVz6yDU=)
                          17: _3wPtC_StjLM9iyOjz3MiQvA3Tw.roa (hash: Cs6VWv4VvG1KjtaKIuXuR7VhPzdVbT9h2YFUbZWwnzg=)
                          18: cug377GHKyRnXerIRZmull_8wvo.roa (hash: IxNsay94By86aM/+bn9cOHol3sZyJ69Yy/jhl0itHu4=)
                          19: fIm9jMAajXrEPaJkgeJcAp1c7As.roa (hash: yV4EqmfDghDalnBYEGQyWKuTsRUvB1P882bhDMqFRfg=)
                          20: i4hV2A65IeHohLh2YK4F0CaRzpY.roa (hash: /fpnt1+vePN1fcA/2rIiLevMQcaQxreQtbKIXisvBKA=)
                          21: k5DY5RUjAUWi7NYlWDIE5TaT-Q0.roa (hash: dCJ3NUhf7ZfioMcZ4kTUXzfQlVlChd4EM9Wuk4gyYlk=)
                          22: oKegfjSQYVAAwzijVJTioyn78cQ.roa (hash: BqwzoGlA6R5gAwM59BpT7V7IMuzUckinXaIESywt2hU=)
                          23: sn0wWeziFvARuhx5VpRQcjq2g50.roa (hash: 8qlPXYq6+IIc6DVWE7Ibcxcf9XMvPbq3Sxk5aS50skk=)
                          24: xte_zZL6qDViq-RXAwMu9HyRPUI.roa (hash: z798amzVLPdwPm1RNpBKehVKSE6ZDaxq0jwir1l/4zk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:32:e0:92:89:c5:03:33:b7:b6:91:70:c9:02:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Nov 25 19:00:20 2024 GMT
            Not After : Nov 26 19:00:20 2024 GMT
        Subject: CN=b4eab301cc41eb8a3c8d38c47ddf9b392603d1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:c6:db:bb:3e:e5:cf:ad:93:ca:8e:3c:35:
                    3a:cf:d2:87:92:f8:41:cd:f8:5a:6c:9e:b3:a2:18:
                    96:1b:d4:6d:ae:06:16:01:99:a7:41:00:18:d1:c8:
                    ca:c3:85:19:88:09:cc:86:a1:57:07:49:4e:25:f1:
                    19:67:b7:15:72:8e:a3:a2:4a:ef:5b:65:69:11:93:
                    e5:3f:4f:3c:54:b6:54:ec:9c:97:91:68:a2:7d:c0:
                    a6:01:c0:1b:1c:7b:15:63:0e:19:33:f4:66:f4:23:
                    6f:ad:68:8a:bc:2f:58:0d:dc:54:ee:0f:56:43:56:
                    ca:bf:19:4c:f0:f0:78:a4:26:69:46:de:4c:83:fd:
                    cf:9e:62:47:f2:37:2b:7d:32:11:4e:98:54:2c:ef:
                    ea:45:1d:50:93:0b:4a:16:50:2c:c5:64:a9:21:9c:
                    0b:24:92:15:ea:aa:de:61:40:28:e0:45:db:51:40:
                    77:3f:a5:4f:22:b1:33:fe:91:3a:1e:6c:9a:e1:ec:
                    9c:91:d2:31:8e:02:19:c4:76:41:d2:25:d4:31:bb:
                    91:2d:b1:4b:08:7c:9a:42:73:58:81:73:fb:93:ec:
                    cc:95:0c:db:75:32:50:1b:a1:aa:49:0d:b3:6e:77:
                    65:91:ec:fa:ad:43:49:43:3b:5b:3e:12:ac:f6:55:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EA:B3:01:CC:41:EB:8A:3C:8D:38:C4:7D:DF:9B:39:26:03:D1:EE
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:d4:c7:aa:2e:39:6a:52:7f:c5:71:83:0a:fa:3a:d6:e4:
         1a:b3:e9:05:bf:f5:56:35:e8:dc:d3:24:ad:81:1b:c6:9e:13:
         34:c5:1d:65:2f:97:7b:7f:03:ca:09:5d:a9:8c:76:ac:2f:4e:
         e7:d0:9b:ff:14:b8:7c:50:b4:ae:8a:03:53:e2:2d:18:2c:d0:
         50:65:11:ea:e3:fc:b9:fe:58:15:29:73:2a:0c:36:ed:d6:ef:
         7d:84:a7:18:c1:ad:73:3f:40:a7:00:38:2c:62:40:e7:84:80:
         d5:e5:e9:ab:cb:93:76:bd:84:71:a3:9a:0e:a9:5d:7d:9a:dd:
         24:16:55:3c:a9:fa:83:a7:af:22:dd:a3:40:81:06:dc:3d:12:
         47:e4:13:a7:ab:59:ab:49:23:ca:7a:ea:e7:a7:3a:39:24:44:
         fd:50:b3:d9:d1:6c:47:b2:92:01:ee:cd:7b:bf:bc:14:5d:ad:
         18:90:99:50:4f:2c:0e:6a:01:66:3f:12:63:c7:f2:6e:7c:4c:
         f5:16:94:0c:70:1b:af:a4:26:94:99:2e:6f:6e:9a:c5:be:3c:
         a6:bd:e5:f3:5b:28:6d:dc:2e:08:b0:91:83:a9:1a:65:6d:45:
         d9:01:e0:e4:e0:a7:18:89:b5:ff:fc:35:16:f6:f6:6f:33:aa:
         69:cf:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:54:21 2024 by rpki-client on console-fra.rpki-client.org