Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File:                     ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier:          9XU9/0XONfTtnPt4J1qJeXjIIRasQ3dDa3ifzcHA+mE=
Subject key identifier:   FB:CE:BB:BC:27:96:CB:8D:7B:69:29:19:F4:1E:18:2C:83:18:DF:09
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer:       /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial:       019356F707CCC1DFDB523AE6B33097FB2DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number:          0829
Signing time:             Sat 23 Nov 2024 03:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:50 +0000
Files and hashes:         1: MBD97V3_o0MK7Ddm40-MEcX3TaY.roa (hash: QKTK8AfQt4SiBQsLOUEcZPOl3KZFNlacnQcqFPVHvlU=)
                          2: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: AgXU+yfEWTTE+nAEU8onF7+0u9cXiMohh0YVP1y4giI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:07:cc:c1:df:db:52:3a:e6:b3:30:97:fb:2d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
        Validity
            Not Before: Nov 23 03:00:50 2024 GMT
            Not After : Nov 24 03:00:50 2024 GMT
        Subject: CN=fbcebbbc2796cb8d7b692919f41e182c8318df09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:c0:82:20:0e:7e:af:40:d8:c6:6b:8a:92:
                    d9:3c:2c:1c:d1:c4:63:e9:bd:08:03:b7:84:a7:c9:
                    8f:2e:36:1e:50:39:e8:2a:83:44:9f:6e:f3:9b:9c:
                    76:82:5d:44:40:35:9c:66:fd:a3:17:ef:68:b0:b9:
                    b5:af:5e:80:e8:98:86:ff:ef:d7:7f:68:b4:f4:50:
                    f9:c4:4e:71:20:9d:7f:9a:55:30:08:5c:3e:e9:e4:
                    0b:90:81:d0:03:eb:f1:e7:02:4c:10:8e:4b:55:90:
                    cd:89:bc:06:bf:06:4d:7d:ec:d6:71:00:98:7a:ae:
                    b6:ea:6a:63:d7:9a:71:23:29:5d:91:34:a2:c2:f0:
                    10:47:df:a8:a2:7a:80:d4:37:cd:fb:28:c6:b7:7d:
                    36:5d:9a:b6:9c:f9:7d:90:12:1f:6c:3d:e8:95:4c:
                    39:68:34:84:88:bd:cd:45:98:52:7d:e5:3d:b8:1c:
                    b9:85:f6:d7:c5:44:f8:57:2f:7f:0b:cb:54:c9:33:
                    14:5a:0b:82:bd:80:c5:1c:3c:b5:44:cd:63:80:00:
                    fe:01:d7:17:36:65:b3:96:4b:e0:66:67:3c:f4:6e:
                    a8:6c:b2:c5:71:8c:df:28:04:a6:55:10:ec:06:b4:
                    f4:7f:de:51:56:a9:7f:60:a6:94:f2:ad:f3:67:70:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CE:BB:BC:27:96:CB:8D:7B:69:29:19:F4:1E:18:2C:83:18:DF:09
            X509v3 Authority Key Identifier:
                keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:86:f4:47:94:f5:3e:aa:92:92:42:e0:4f:74:05:20:c6:24:
         e3:88:ed:8c:a5:6e:73:33:2a:e5:74:0d:9b:75:d7:ef:15:92:
         30:f8:2a:0b:c6:59:ee:b9:33:be:67:84:1c:a8:39:c7:c8:7e:
         4c:f0:95:30:18:09:ec:7c:3e:75:ac:65:95:8b:1d:04:79:5c:
         07:55:cd:43:51:82:20:94:f7:4f:ac:5f:64:5a:91:3c:ea:02:
         41:0f:b9:1d:06:bd:86:17:87:2d:2f:d8:70:b6:40:de:29:9d:
         3c:41:0b:cd:c5:d6:41:f3:2f:a5:ef:bf:00:4e:ed:cb:86:a3:
         cd:f3:64:5c:67:a2:da:ee:f2:39:d3:ee:94:db:e6:78:60:1c:
         cb:8c:eb:07:f5:b7:c3:76:b2:f6:f7:a9:bb:27:8e:d1:a7:7b:
         b2:9f:3c:85:61:4e:f2:52:2c:73:aa:3a:d5:c4:f8:c6:02:b3:
         1d:b3:42:d9:55:8d:2a:01:4e:15:17:42:53:3c:e9:79:87:c6:
         46:07:fe:fe:27:13:22:a5:5c:cd:02:dd:1a:a6:2f:14:d3:f0:
         e8:1f:89:6d:45:9b:55:03:01:4d:35:2b:7e:11:4a:81:49:e7:
         38:4e:13:0e:59:ef:21:e6:e5:6c:c4:07:10:94:fd:70:56:6a:
         46:57:e0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9wfMwd/bUjrmszCX+y3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGExMWE2YjFkMTg5NjU3YzdmYjk2ZWMxNDU4YmFmY2Ex
ODY0ZjQwHhcNMjQxMTIzMDMwMDUwWhcNMjQxMTI0MDMwMDUwWjAzMTEwLwYDVQQD
EyhmYmNlYmJiYzI3OTZjYjhkN2I2OTI5MTlmNDFlMTgyYzgzMThkZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRDAgiAOfq9A2MZripLZPCwc0cRj
6b0IA7eEp8mPLjYeUDnoKoNEn27zm5x2gl1EQDWcZv2jF+9osLm1r16A6JiG/+/X
f2i09FD5xE5xIJ1/mlUwCFw+6eQLkIHQA+vx5wJMEI5LVZDNibwGvwZNfezWcQCY
eq626mpj15pxIyldkTSiwvAQR9+oonqA1DfN+yjGt302XZq2nPl9kBIfbD3olUw5
aDSEiL3NRZhSfeU9uBy5hfbXxUT4Vy9/C8tUyTMUWguCvYDFHDy1RM1jgAD+AdcX
NmWzlkvgZmc89G6obLLFcYzfKASmVRDsBrT0f95RVql/YKaU8q3zZ3BTVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvOu7wnlsuNe2kpGfQeGCyDGN8JMB8GA1UdIwQY
MBaAFJ4KEaax0YllfH+5bsFFi6/KGGT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAt
NThjYjgzMDg3NWY1LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAtNThjYjgzMDg3NWY1
LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4b0R5T1
PqqSkkLgT3QFIMYk44jtjKVuczMq5XQNm3XX7xWSMPgqC8ZZ7rkzvmeEHKg5x8h+
TPCVMBgJ7Hw+daxllYsdBHlcB1XNQ1GCIJT3T6xfZFqRPOoCQQ+5HQa9hheHLS/Y
cLZA3imdPEELzcXWQfMvpe+/AE7ty4ajzfNkXGei2u7yOdPulNvmeGAcy4zrB/W3
w3ay9vepuyeO0ad7sp88hWFO8lIsc6o61cT4xgKzHbNC2VWNKgFOFRdCUzzpeYfG
Rgf+/icTIqVczQLdGqYvFNPw6B+JbUWbVQMBTTUrfhFKgUnnOE4TDlnvIeblbMQH
EJT9cFZqRlfgUA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:14 2024 by rpki-client on console-ams.rpki-client.org