Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File:                     tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier:          Mk/zx2k5h8vrXQlMbe4r497xzHjSfb5t4dlftnzD9jg=
Subject key identifier:   0E:4A:84:D4:13:E1:3A:92:DA:F8:FC:79:95:B3:48:D9:94:A9:BD:A4
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer:       /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial:       01938B51E97108818677753705DA159A7ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number:          138C
Signing time:             Tue 03 Dec 2024 07:00:21 +0000
Manifest this update:     Tue 03 Dec 2024 07:00:21 +0000
Manifest next update:     Wed 04 Dec 2024 07:00:21 +0000
Files and hashes:         1: 9ndbFwNA9GEsei_Fs84w5vZNkA0.roa (hash: NYQN7O4R5UrOhSZvKtONavR0VbYZqifRIoIDb4kywgs=)
                          2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: EtlXkOBhZ2s0w0vaKUr36c6lv2Aor1huo6FI7/lxspQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:51:e9:71:08:81:86:77:75:37:05:da:15:9a:7a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
        Validity
            Not Before: Dec  3 07:00:21 2024 GMT
            Not After : Dec  4 07:00:21 2024 GMT
        Subject: CN=0e4a84d413e13a92daf8fc7995b348d994a9bda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:0b:9a:69:9c:d0:b3:ad:26:3b:dc:54:0c:
                    e4:50:ed:e9:43:75:c4:8f:ee:27:30:e4:27:b0:10:
                    3b:ec:f9:02:5d:88:15:ba:38:77:e0:75:53:85:97:
                    40:b1:59:22:ee:9d:27:d2:a3:cd:ed:7a:48:be:80:
                    6d:33:a7:e8:b1:22:b6:a6:c1:c4:a4:02:24:5e:80:
                    a6:b1:44:6c:f2:11:44:1e:8e:c9:9d:24:18:f0:60:
                    4f:92:38:ea:05:80:f2:1c:f1:5a:d0:4d:66:de:b2:
                    d6:b4:62:52:fd:88:86:e3:f1:23:b2:e8:2c:bc:c5:
                    6e:0c:49:bc:c1:fd:c8:5c:92:91:c6:1b:9b:f1:74:
                    a7:ba:d1:24:5e:06:99:d2:e1:d6:9b:13:75:a4:31:
                    16:ff:fa:29:6f:74:e7:7d:87:0a:8f:49:5c:12:44:
                    50:75:f8:e4:60:2d:3c:f3:cd:ab:41:7f:82:ff:28:
                    43:fe:66:04:47:4a:ed:c4:c0:45:46:fa:26:c3:9e:
                    64:a8:ed:6f:59:90:cd:8e:59:28:ce:9e:c7:7c:ba:
                    22:ed:6b:d8:5e:c2:4f:01:53:d4:1a:07:85:0e:0c:
                    61:2c:3e:f8:21:3e:d2:3d:26:ec:e0:5c:ed:3c:a3:
                    98:0c:d0:16:01:df:11:ff:f6:d5:81:24:14:b6:6c:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4A:84:D4:13:E1:3A:92:DA:F8:FC:79:95:B3:48:D9:94:A9:BD:A4
            X509v3 Authority Key Identifier:
                keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:86:0a:81:56:50:e3:f1:25:d0:a7:49:bc:b0:ed:df:43:41:
         a2:6c:a3:14:97:84:f2:03:97:69:48:27:bb:f3:2b:b5:32:b4:
         36:ae:8d:c7:5b:d9:a4:8c:cb:80:3f:e8:a5:c6:2e:c0:5f:fb:
         6e:de:77:96:b8:46:20:44:a3:4b:1c:a9:a7:d3:4f:fb:59:98:
         24:10:da:7f:56:df:a4:75:32:6b:69:82:99:ed:45:c4:d7:6c:
         a9:67:57:d2:44:0c:1c:34:25:13:48:12:ef:24:89:09:ae:5c:
         a2:1c:64:fa:49:23:ea:7c:94:a1:9e:b1:e6:64:58:70:fc:5b:
         e2:ef:fe:b6:50:49:11:6f:cf:dd:31:f3:51:7d:c0:9d:cc:a5:
         a9:72:bc:53:a8:47:f7:ad:e0:c2:70:69:ff:43:c2:45:5f:ae:
         01:9c:20:17:f6:f1:f4:c6:12:4e:31:c3:c3:0b:c0:90:6e:fa:
         38:aa:9e:58:b3:10:cd:d0:18:ac:e4:c5:fe:c9:fe:7b:a9:8c:
         34:eb:89:75:82:0f:20:9d:88:42:81:cf:c4:36:d1:58:95:60:
         56:36:42:06:3b:0b:64:b9:7e:76:5b:24:1f:bb:03:d3:0f:02:
         26:b7:9b:86:a8:1a:d5:f1:99:5d:aa:26:ee:48:a7:61:c2:44:
         92:a9:5d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOLUelxCIGGd3U3BdoVmnq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTYwMzI2YmU3ZTVjZGMzNWI1YzAzNjQ0MTE2M2NkMjVh
NDk3NGQwHhcNMjQxMjAzMDcwMDIxWhcNMjQxMjA0MDcwMDIxWjAzMTEwLwYDVQQD
EygwZTRhODRkNDEzZTEzYTkyZGFmOGZjNzk5NWIzNDhkOTk0YTliZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUALmmmc0LOtJjvcVAzkUO3pQ3XE
j+4nMOQnsBA77PkCXYgVujh34HVThZdAsVki7p0n0qPN7XpIvoBtM6fosSK2psHE
pAIkXoCmsURs8hFEHo7JnSQY8GBPkjjqBYDyHPFa0E1m3rLWtGJS/YiG4/Ejsugs
vMVuDEm8wf3IXJKRxhub8XSnutEkXgaZ0uHWmxN1pDEW//opb3TnfYcKj0lcEkRQ
dfjkYC08882rQX+C/yhD/mYER0rtxMBFRvomw55kqO1vWZDNjlkozp7HfLoi7WvY
XsJPAVPUGgeFDgxhLD74IT7SPSbs4FztPKOYDNAWAd8R//bVgSQUtmzGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5KhNQT4TqS2vj8eZWzSNmUqb2kMB8GA1UdIwQY
MBaAFLUWAya+flzcNbXANkQRY80lpJdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0Nzkt
ZjQ4YWEyZTc1NGU1LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0NzktZjQ4YWEyZTc1NGU1
LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoYKgVZQ
4/El0KdJvLDt30NBomyjFJeE8gOXaUgnu/MrtTK0Nq6Nx1vZpIzLgD/opcYuwF/7
bt53lrhGIESjSxypp9NP+1mYJBDaf1bfpHUya2mCme1FxNdsqWdX0kQMHDQlE0gS
7ySJCa5cohxk+kkj6nyUoZ6x5mRYcPxb4u/+tlBJEW/P3THzUX3AncylqXK8U6hH
963gwnBp/0PCRV+uAZwgF/bx9MYSTjHDwwvAkG76OKqeWLMQzdAYrOTF/sn+e6mM
NOuJdYIPIJ2IQoHPxDbRWJVgVjZCBjsLZLl+dlskH7sD0w8CJrebhqga1fGZXaom
7kinYcJEkqldfg==
-----END CERTIFICATE-----
Generated at Tue Dec 3 17:30:43 2024 by rpki-client on console-ams.rpki-client.org