Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
File:                     vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json)
Hash identifier:          60jXqS3QXht8gi32gll1HC1DKDnrS2D7WNyV6zos+V4=
Subject key identifier:   D1:28:D9:A6:19:D1:37:74:6C:5F:94:FB:5F:63:CD:80:55:95:64:5C
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Certificate issuer:       /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial:       019356BFA6F87A4553CF7558B91297D01C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
Manifest number:          107D
Signing time:             Sat 23 Nov 2024 02:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:20 +0000
Files and hashes:         1: 6N2LM-QfhzlgoLsV5-T7zGOZNPA.roa (hash: 2RcLzq5npdizVa6JFR6A+hkgnmlMkA5piSMKXJ350J0=)
                          2: GvesPV3ovY0qaUXjE7QoWqPCu-I.roa (hash: 5wD+bTgu/ptjjGBqxOW4cm9adypJrOOVMzdpSNrFCsc=)
                          3: LN-LnaK88FGvfAVlogtvDaHebR0.roa (hash: MNdcqQ8uR93CitIZzKJcicFICk64eXFkf6pSgDJYLnk=)
                          4: PrZQBOqJFOH7HuNwGQE0APN-Pb0.roa (hash: RF9Th5H55rxiulce6/jgYZ7AFqVDlcAj2r58+CeegA4=)
                          5: Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa (hash: BzTY1HGFdq6/1OuudHn2dPpgYPVi9k1ezkXuUXqK9Us=)
                          6: WLco2E_B6E18GgYSy9FdVpDSqaA.roa (hash: hfi7lZCnbLgtdk3LmDsKbowurPcXdJAeRK6k3Zk8qAU=)
                          7: e5loy2yCl__Aq1bDuZdvmGzNyz8.roa (hash: Dh+Wp+TeDgmejxCUqTfNbdjfRvPKjruOVVz9qm0iSD8=)
                          8: fT2Il8eVe4lx4caJq-CCsZZkO6o.roa (hash: 7jcm6BFsJKVvBR9XTLjUZMDCy7bPcD+AjvAPi46OdMM=)
                          9: nYog6lA9ybxBqkB6-U4Sr4iiShQ.roa (hash: IHgqGTWHhR68bWYV/EuiJz9jkRKBZvBi7RZfgNyX5pg=)
                          10: pDfZriw_lIN8rfA0vBpA42g2grE.roa (hash: RWx9aANf2Lpxd+ILRy/yWTyz4hbCsb/sB6dExpqLEXg=)
                          11: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: XT8pMIPbTjwmNPCmI0wLFxkb1vn4wkaeu9Jxx1DO1Wk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a6:f8:7a:45:53:cf:75:58:b9:12:97:d0:1c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
        Validity
            Not Before: Nov 23 02:00:20 2024 GMT
            Not After : Nov 24 02:00:20 2024 GMT
        Subject: CN=d128d9a619d137746c5f94fb5f63cd805595645c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:8c:3d:dc:f6:e0:b1:ea:c9:a1:3b:ab:54:
                    3e:75:20:64:8b:0e:8c:6e:14:0b:ed:78:74:9e:f6:
                    02:35:dd:4f:c9:f7:d3:65:fe:95:ac:8f:6d:69:6f:
                    a8:1d:3c:e4:1e:4e:cd:0f:e0:43:d2:c9:d1:63:53:
                    5e:7f:60:d7:48:aa:58:de:55:b3:40:c4:c3:b4:f3:
                    13:5e:a1:4e:bf:ac:11:8a:50:86:1b:0a:ec:e2:36:
                    91:1e:c2:22:47:35:2f:4e:af:16:d6:80:78:5e:f8:
                    43:90:58:ef:56:20:5a:37:11:39:41:90:03:b1:c6:
                    dc:27:a5:40:1b:aa:00:56:75:5b:46:3b:d2:41:a5:
                    63:bd:14:16:1f:99:b9:13:5c:b2:b0:24:f4:c1:2d:
                    1a:6d:c1:f1:d3:ef:02:e5:29:a6:f9:c4:d7:a2:f6:
                    a6:8d:39:a0:3a:26:67:bf:89:58:45:1a:fb:db:54:
                    cc:76:d1:26:fb:3f:ef:e2:28:16:a2:15:1e:42:b0:
                    90:e5:93:1b:79:a9:9c:76:e5:35:5c:05:4d:65:84:
                    74:87:da:7a:b7:05:f6:9f:77:91:3c:87:3e:c6:e5:
                    01:9f:71:1a:ff:7b:58:21:3c:fe:a1:8f:67:48:45:
                    26:14:b6:b9:37:f5:f6:6c:5f:9d:08:25:b1:bf:6b:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:28:D9:A6:19:D1:37:74:6C:5F:94:FB:5F:63:CD:80:55:95:64:5C
            X509v3 Authority Key Identifier:
                keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:5a:44:37:d4:ce:c2:7c:40:e6:e4:e7:9b:90:32:e3:97:
         23:20:7a:e6:d2:ac:cf:77:f9:29:68:e0:29:20:43:c6:23:12:
         fe:43:f8:68:e4:dd:c6:9a:50:d6:1f:5e:fd:c4:3c:2f:d7:27:
         e4:e3:42:99:59:79:f8:99:b5:ef:c9:bf:b8:64:8f:6d:99:05:
         dd:7b:03:57:ce:ac:a8:41:2c:af:f9:d6:c9:fc:9f:15:2b:af:
         78:4f:75:83:e3:9c:8f:73:72:7e:88:32:3b:d2:00:85:18:c9:
         ac:09:4d:7c:27:bb:9a:ff:da:90:86:1e:81:cf:79:b0:1c:93:
         0f:11:df:de:45:00:4c:b4:2c:22:c1:b2:5c:8f:0d:4e:27:2b:
         89:04:fc:03:89:5f:87:7c:8d:c2:44:e4:79:d0:25:67:06:9a:
         95:51:d6:39:ea:48:c1:b4:54:0e:57:f0:c1:b8:eb:df:e7:b9:
         07:76:e4:d1:30:15:13:3f:3d:8c:35:07:09:a6:ce:ae:70:ba:
         39:ee:5f:ce:7e:78:03:07:97:13:71:93:33:9c:36:c7:32:e5:
         c7:90:83:12:dd:66:dd:1e:e4:e3:57:6c:3b:c4:b6:31:9f:be:
         d9:63:b3:69:27:f3:26:8d:d4:9b:39:ca:af:70:38:3a:8e:5a:
         62:e2:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:39 2024 by rpki-client on console-ams.rpki-client.org