Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          N0B2QAT0h/tBzTp8RkVeRYZP5ESdES8+nj9e4gIZwa4=
Subject key identifier:   18:45:83:49:E1:C5:F1:C7:FE:86:31:DE:BF:91:30:8B:37:75:AB:15
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       0193519942B615274D530C4E2726A2EC7F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          108A
Signing time:             Fri 22 Nov 2024 02:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:18 +0000
Files and hashes:         1: 2KsSUWbcOO6Hxy9iG3liFTkCUOU.roa (hash: HV3ijVhB9QSA7g51FdvM05xbR+nlabhNHPrP/L+Aumk=)
                          2: 4tJv7qwzKkLrGqSxf2vcE95yXP4.roa (hash: JOPklIUYdmYvAd5cg+iD8+CWmol9wnQSSXc6OU63lvQ=)
                          3: 5BAfn1Ea0bJZUwmLYmnOsts1O5U.roa (hash: TVMIrS2Rcc+PtJ8ezEgyUsgKaR7bDA7Y3TbZ7oDGOEk=)
                          4: 6UijgvbojW5kb6rnEkqL4RJXcmg.roa (hash: DZ1usarxkmmuCyed5pXk8jq/8+sEHU0LWKQLEmdTLX8=)
                          5: ASQhZEoNzDl00bnwNNCUJ3xINAw.roa (hash: G4BWNW8esl1Np3V/sXgF+3I2sPwgOtE2eR2oxOZ/Iho=)
                          6: GEGxo7x5arOrDEswEY0lvBywzpA.roa (hash: XEGE+UmJTmdEEW+Z+x2hcBUw0HYtS4KzsDOd8UpQZWk=)
                          7: Ii929d5cfpG1z1xjYHb88nEFwLM.roa (hash: tLx0SQC28zSCMfpZkMRer0zfj0YCAiUT2c3qcbyIhlQ=)
                          8: OApgk7CRycRnP48UAd6TyPZDeq0.roa (hash: TMltobx10ocPPW9x6lxEDbjE3lDcD5kKXSBKvt4ZBak=)
                          9: R7nBR1U-kcoUCuGQ3nr3mNIeqs8.roa (hash: qQklwnPoKT34zAh3dEEKr+7P8cYomkT9ZpFie2HqPEc=)
                          10: TZzPnpLteaPFeJLUKEdqNO6jsYc.roa (hash: 2pxwaY7W9JmM2Hw3KfUkw5bQ7+F7B1xV6wqHk6rxz70=)
                          11: _XkhiMZJyk0DR_XTK8B2JDtWjcs.roa (hash: Owp7dOiZ1WljEXhbdQC7ZZOzszoyZi+5K1U22LJmSrE=)
                          12: dSKGXjWcvdK6af4AMTK8TYN-u0s.roa (hash: Ed3NzIZMSn8FAzIzd3nZvtqBrI2VgQPBnmW7zwC7E0g=)
                          13: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: /Bh9iA54+LQ0J2QFzqg6nuw6QUumdGbRKqAfeseqTvk=)
                          14: s9ux3PVbaXJO1emFzFEeQi-h4u0.roa (hash: fNgfUDYYgOyoHRInFEjEYsUJ/GSkfxzDHi5M1471sao=)
                          15: x5oTl6rhNlADCUtKNByrTG21Qwk.roa (hash: IUU3UwkVd0K+2uvIAoRAVZJiN+DHujuOIzUgGzlWw44=)
                          16: xmJ3uEpjtFFBai2EVlXYd3C-VEQ.roa (hash: HiRxE7tCJ8nBvkqRXjq5PtfqwQjxuRotzYPFl+Kr840=)
                          17: yjnWEHz99qRXQaiuOj3eX-lZUxQ.roa (hash: 0t04om9xaUU0t9kKinFX4XEsDKCPL9C2scRotBNspks=)
                          18: zTrMA_HibrtAOMog3FQnjc7EFeI.roa (hash: zYFMKXSotT5QD/FkE89lTH6d2PyqTdpEOMJRR65qN6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:42:b6:15:27:4d:53:0c:4e:27:26:a2:ec:7f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Nov 22 02:00:18 2024 GMT
            Not After : Nov 23 02:00:18 2024 GMT
        Subject: CN=18458349e1c5f1c7fe8631debf91308b3775ab15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:c5:c8:b4:e0:db:34:e4:81:cf:da:bb:2f:
                    40:f8:14:24:a0:25:2b:88:3c:57:ed:2c:fe:69:55:
                    25:ad:81:b5:bd:66:21:6c:be:42:56:fc:37:a0:53:
                    9b:9a:bf:14:92:43:ab:2a:f4:0c:11:52:3b:da:f3:
                    7d:81:f4:b0:7c:41:6c:c7:7e:41:f6:28:50:d2:52:
                    7e:c9:60:51:8d:d5:5e:0e:29:5a:fc:f6:4b:91:2d:
                    cf:89:aa:0b:e5:40:f1:ff:19:9c:cb:5e:2c:50:34:
                    62:68:f1:a5:e2:85:68:34:62:df:73:cb:fa:16:c1:
                    14:b7:ec:04:6c:5e:39:79:8a:40:56:52:7f:34:aa:
                    a4:5d:e2:3e:ae:8b:df:7f:c7:fe:16:9b:fb:e4:8e:
                    ef:5d:1c:77:2e:c3:26:59:76:36:5d:ae:d0:b1:c3:
                    03:d4:2b:bd:fc:e9:06:be:bf:26:e0:a2:5f:00:00:
                    85:04:92:c9:ef:25:1a:28:f6:5b:3b:ed:c0:13:bb:
                    83:39:07:08:02:8f:b6:b2:fa:b9:32:f5:ce:55:50:
                    e6:3f:b1:d7:27:9a:1a:62:f6:56:6c:23:08:0a:aa:
                    85:a3:13:78:30:23:e1:c5:99:48:54:ae:99:8a:2e:
                    1f:88:26:6e:f2:e9:00:92:19:01:1b:ae:ae:3f:81:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:45:83:49:E1:C5:F1:C7:FE:86:31:DE:BF:91:30:8B:37:75:AB:15
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:44:ed:3e:a0:28:34:a9:c4:9c:f7:c2:03:f2:11:ee:bc:7b:
         80:b7:68:dc:99:96:0a:1f:30:8f:02:0e:22:b4:a5:25:14:f4:
         77:e4:ef:f2:43:fb:46:b3:a9:8e:3c:36:04:69:f3:21:51:72:
         00:19:7d:00:e7:92:54:37:09:80:ab:d7:a7:8c:37:ec:e8:94:
         c6:7b:8a:80:8b:69:77:f2:23:28:0d:70:10:32:d7:4c:02:b0:
         7d:f9:8a:54:6c:b3:54:6c:d2:59:41:83:41:18:fc:e8:a0:8e:
         2c:8f:cc:4a:2b:5b:08:04:e6:81:3a:2d:0b:15:ab:fa:f1:ce:
         de:cd:7a:88:96:c1:2c:68:2f:4c:57:90:00:4d:f8:79:75:64:
         e9:2e:e0:79:84:75:16:af:f6:20:ef:3f:41:e0:8c:5c:79:cb:
         fb:3f:f1:86:fc:b1:80:57:e2:29:bb:44:7a:65:4b:53:99:ca:
         7d:7e:2f:1c:e8:c3:c9:c0:ea:8b:c9:ce:93:c0:70:3e:9a:a2:
         e1:ab:f6:37:39:02:15:5b:4d:f2:9f:7b:c9:67:ad:ae:3b:11:
         cb:fb:55:47:d8:c8:9e:a1:57:32:c9:e5:6d:12:28:a5:7a:35:
         40:18:6e:5a:fb:fe:d1:7e:26:22:45:20:52:f4:59:ed:e1:f2:
         a6:b1:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:38 2024 by rpki-client on console-ams.rpki-client.org