Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File:                     z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier:          +F1d0apvyHJ6M8mQRD0+MkAaqTw/n9V1OywVKNk3rCo=
Subject key identifier:   5E:6A:8E:95:F1:AC:B7:F7:D0:68:8C:00:1C:14:43:67:D6:57:98:FF
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer:       /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial:       019357D2BDFFE5658A4417DF790E84D404ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number:          0F04
Signing time:             Sat 23 Nov 2024 07:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:49 +0000
Files and hashes:         1: JEPxDUvX72VwHxVIo0s35H-piD0.roa (hash: btWSTl04LfqmPat6o+ZRfrLso1rrxL9Sw7N7h4W1UXo=)
                          2: NAgQc3aql-gPXw9hF6ln_evN2Dc.roa (hash: 0EdK/EiK0jX6cY0+WkXAJx6kGqD4VFLqkOxKx4w5BX8=)
                          3: oQd9BSSO8OeZmVzPbrxglhEv_MM.roa (hash: Qi8fVpOZHk0jlCbb8lQ3amvSeG7iMbEidaK8MMmgu9o=)
                          4: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: Wb5p1Q+WOM++HlYAZ2weug3IOg3HC13yiYjC0tnPL3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:bd:ff:e5:65:8a:44:17:df:79:0e:84:d4:04:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
        Validity
            Not Before: Nov 23 07:00:49 2024 GMT
            Not After : Nov 24 07:00:49 2024 GMT
        Subject: CN=5e6a8e95f1acb7f7d0688c001c144367d65798ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:46:e8:b1:c7:1e:d3:66:d8:2d:41:d6:d4:
                    43:d0:41:69:f3:64:87:ca:54:af:3d:c3:0b:57:16:
                    39:b4:87:1b:1c:f0:99:ad:b6:de:88:ca:71:60:d5:
                    92:00:44:d7:4d:0a:09:8a:0c:8e:af:39:95:7d:19:
                    ab:75:33:dc:bd:cc:d3:92:d9:b8:c5:dc:da:0a:19:
                    97:34:50:07:80:95:4f:ff:ab:f0:91:35:c4:d7:ae:
                    3e:fa:8f:b7:23:80:f1:d2:1f:4b:5d:55:f6:4e:fe:
                    2f:3a:53:36:44:ed:2c:8d:62:b1:26:91:e4:7d:3f:
                    f0:52:f5:a6:02:53:1a:19:4c:3e:4e:f0:0e:8c:f5:
                    7e:94:5b:8a:99:3d:92:ab:bf:55:d2:a3:3a:f7:45:
                    48:3c:c0:d7:3c:1f:58:da:4c:03:ae:ac:29:0d:0e:
                    5d:47:9d:84:ed:6e:3d:75:6e:f2:71:a5:45:d2:0e:
                    88:5e:49:56:2e:3b:87:1d:af:29:58:e6:41:98:82:
                    d5:69:4f:8c:83:7d:4f:f2:9f:2c:c2:ab:0f:2e:2d:
                    5f:1e:94:08:c2:32:4f:22:68:0d:63:af:b1:5e:ec:
                    02:9f:49:69:53:57:31:b1:2a:9e:19:d1:53:f2:a0:
                    2b:66:2a:a9:42:a5:09:36:d6:ce:8f:eb:07:03:55:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6A:8E:95:F1:AC:B7:F7:D0:68:8C:00:1C:14:43:67:D6:57:98:FF
            X509v3 Authority Key Identifier:
                keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:e5:f4:57:b0:d0:45:05:d3:56:ec:6d:03:24:ef:6c:ca:
         a9:40:ce:a5:06:58:49:55:2c:95:6a:17:e2:b3:d5:b5:5e:4f:
         aa:34:60:d3:ed:d0:56:16:bd:a9:3d:4b:7c:96:60:ce:61:c0:
         77:e2:64:1d:1f:60:59:81:05:17:23:9e:3c:a1:b0:ec:bd:5c:
         bd:12:fd:42:ba:23:51:65:c3:40:ec:99:ba:3a:4f:15:31:d3:
         77:9d:05:2a:8f:3d:b9:b1:36:89:19:40:4c:9c:95:1b:b4:61:
         cc:e4:f8:59:df:04:60:e4:d9:45:6a:44:c7:d5:c3:f7:e8:5e:
         4b:95:cd:7d:a9:26:0a:f5:73:a6:9c:45:5a:2f:6f:c7:ae:71:
         6f:d1:ae:e3:c0:f3:69:f2:89:22:4e:11:e8:87:9e:60:de:c4:
         43:8b:c3:6a:eb:b4:29:19:38:01:8f:d9:1e:6c:14:9a:a6:55:
         f7:a4:cf:8a:6f:09:91:b9:2d:6e:52:86:8e:da:48:05:55:93:
         6b:af:3f:61:30:48:0e:88:b1:d5:d8:48:f7:87:9c:e9:5f:2c:
         2e:21:45:d9:21:7d:55:c2:82:1c:d1:b8:c2:1a:7c:63:35:3e:
         a8:42:c5:c3:05:09:52:f4:0f:80:18:9e:2d:96:c8:3e:76:dd:
         f8:6a:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:37 2024 by rpki-client on console-ams.rpki-client.org