Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          Q+O6gIDujTfj32jUx6V+dEOzHO0I8EIuYVAjrqSuccg=
Subject key identifier:   B3:D1:B8:45:B3:DF:0C:07:D2:93:C0:EF:52:3B:67:9C:3D:85:22:21
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       0193516275D68872E7D1B315985EF1B6C4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 01:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:27 +0000
Files and hashes:         1: 204po-YL9cY1IO6qppj6YDejuEA.roa (hash: cVIvzov/e7izXqD663zBbhDeOa8fxfUaA8/oWdm+h50=)
                          2: 5tkx-XydFwIhqZusREBZrICKWo0.roa (hash: YHvf8ZI6X3G75FihbDI6iy5GLB6fxyewom96l2JYuCA=)
                          3: 9Wp5uJ5FUu9iEwoNbJBJ7ealmHc.roa (hash: HkDY53NBHCTKp0gGO25/bG3Caebh12DJk3xT8JHEaAA=)
                          4: Bi-xbkKZGLYVR7L_8_DFN-ySudw.roa (hash: E8CQNizRkx38pPxhj+5iIik0zOyBOnMsFwEcUc2955Q=)
                          5: Gye9AZhAnfllAu1RKNMTsvfzCWY.roa (hash: bCYxsH+OniMpy60b17XH68S9KGfW4j0GxW92bvRN/9A=)
                          6: PEnmIM5B5t3MJulvggi9ABmPubg.roa (hash: T/hZQjwr9tx0HfzC7KgsCxJrfa9tgCaE1we83Hn0byM=)
                          7: QjD8jBHCQ0Y0URI5q8nh4W2SwwI.roa (hash: zNP4n6n3i3e/Y3RERRfmfq7Q5tf7IGWW4XnRXiWnT7c=)
                          8: UWnjRB3JOhAErfEmrOz9axfAQRk.roa (hash: Dltaigs50tdnLcuRzNb5hrgCkCOA9QLp3pCWrbZjLfs=)
                          9: X8Rt8pADmRvwqQe7CCzyS067q40.roa (hash: CWPd0WDCCknwvYK0iacREh3kNOO+326roEMzPgstAJo=)
                          10: Yb77ClolpYtQLM-rWCa0RZKXAU8.roa (hash: I/vGqomlfLVT9wrTgzUl0pMWG7x1iZa19WWL/YANLdI=)
                          11: alcfXOsQo5HqeM4nNweim9JEHQU.roa (hash: P5CALig4hSDrjhUJzXK5iEoBHlsdwlpMqxUtXUmmBr4=)
                          12: fjZ44mI1WegJ06urnuSbAiWErW8.roa (hash: +4qWDrpy56GqczNokVnwCwBArSwZEHpwE4B4Pcz4dSI=)
                          13: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 4ntfSIyF6zx6hNYifweRpgarxHrK8UOg9p/9U6PPHkk=)
                          14: jeUKii257YZF57HIrTDkL6RoqJA.roa (hash: RnUdIWpXDSDrAIOEct0tNm6OdQUAnwaGfcv0qKnoT88=)
                          15: kzPZ0KJ95arlk5Im7AdiFxpzuc4.roa (hash: dd/M2NpVsiUmYKcun5euV2HnLmCwvXO9pCkb6hM01oA=)
                          16: qzXIptL5DM9u4nFjtIyyxAhFA6I.roa (hash: 3N7firtLU2tbShL0UdWIcnX91QIlSVdKySpDEyOVMB0=)
                          17: t6i6TohaGuo08iOK5EBzkneIIPE.roa (hash: 8Ww5dYJRuw/MzBf/4+VOEaVIh0bgD9Ka30jToaKYrp4=)
                          18: wdWAV6bbhHJ_nsPqROCChLfZtho.roa (hash: cRptelAZTYqhkfJ/LowFdznE3/mUxnJADKTqx+TNzQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:75:d6:88:72:e7:d1:b3:15:98:5e:f1:b6:c4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Nov 22 01:00:27 2024 GMT
            Not After : Nov 23 01:00:27 2024 GMT
        Subject: CN=b3d1b845b3df0c07d293c0ef523b679c3d852221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:6f:43:61:5b:e0:97:5a:92:43:c0:3a:24:
                    28:76:08:1b:a1:94:3f:8b:fe:67:a5:26:8e:d6:1a:
                    df:67:6d:98:8d:f6:cc:ca:05:15:9b:f4:53:cd:a3:
                    26:f7:e4:7f:3d:da:97:08:00:94:5b:c4:97:29:a7:
                    fd:bd:1a:f9:6a:a4:25:f4:d0:22:c0:bd:3c:b0:78:
                    38:82:e1:2b:9c:95:1f:81:88:8d:a4:11:92:41:be:
                    d7:76:15:1e:72:ab:52:c7:97:cb:5f:0b:81:37:ba:
                    2e:fe:33:d8:5b:5c:a5:27:38:d7:d9:7f:fa:d1:93:
                    d5:ba:05:64:88:7e:ef:6a:40:ea:3b:9e:06:09:bb:
                    fa:86:2c:8d:4c:8d:68:17:6a:9e:35:4a:f5:71:5e:
                    30:3e:e7:7c:3e:a6:55:83:2d:41:b9:b1:bd:a4:c9:
                    e8:f8:3a:b3:e0:c8:2a:90:cd:07:81:23:9b:9e:5f:
                    38:17:cd:f3:11:e4:1b:f2:bc:55:1f:db:96:8e:f9:
                    24:15:95:77:cd:d1:44:bd:3e:4c:d5:8e:ac:19:63:
                    1b:87:15:af:2c:60:ef:34:c4:ab:57:e2:02:6f:25:
                    d6:5c:29:f5:92:f4:56:f2:de:61:bd:d2:2d:30:bc:
                    35:fc:3c:d9:15:22:13:a0:62:ec:9c:11:bf:9c:83:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D1:B8:45:B3:DF:0C:07:D2:93:C0:EF:52:3B:67:9C:3D:85:22:21
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:6c:ac:16:7f:0b:47:de:3e:17:2e:0d:ac:7c:49:7d:a8:
         39:5b:81:ed:a3:6f:74:62:ca:15:86:4c:bb:a8:63:e5:f4:55:
         3d:c4:1b:5c:5e:c6:89:7d:77:88:57:c8:e0:43:9b:13:69:69:
         cf:3c:b5:ab:4f:ef:88:0a:09:6e:41:f3:64:b9:aa:44:1b:2b:
         89:1e:24:09:e6:98:0f:73:00:84:48:44:60:98:d9:f9:b9:d9:
         de:d2:f2:ff:7c:b4:5d:4d:87:ac:39:db:0b:76:4d:a8:98:18:
         dd:43:5a:83:98:a8:5e:d8:ec:e1:12:4b:a1:c0:70:eb:5f:5b:
         66:80:a3:8e:bf:c3:8a:0e:cf:fb:28:a9:8d:02:dd:ef:58:c2:
         5f:cb:70:d6:7d:d2:f7:cd:23:57:5d:c1:1b:91:3f:b3:6d:a1:
         10:84:09:f8:ec:cd:b3:94:92:ac:c5:9a:bf:e6:29:0e:b0:a3:
         74:0d:21:c3:53:ef:8c:98:3c:79:92:9c:d0:41:67:ef:7f:30:
         10:e3:e2:35:cb:7b:ac:65:42:e6:47:39:3b:bc:13:3e:c7:b0:
         67:eb:e0:9d:40:3e:f7:73:e7:1a:33:d8:b2:49:03:72:13:ba:
         39:c4:ea:eb:09:28:06:ae:44:b1:3f:27:c8:c9:93:e6:7d:f0:
         61:77:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:31 2024 by rpki-client on console-fra.rpki-client.org