Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          rllwDX7LdNMTUPvhkXdpIjdrHmEhzj0Mag8zOoQjZBM=
Subject key identifier:   77:65:43:A3:E4:A7:A0:40:A3:96:9B:89:3B:EB:F8:21:54:AA:E5:31
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       01935199C59A55CAEEEE9488E4B703E9D283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          071F
Signing time:             Fri 22 Nov 2024 02:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:52 +0000
Files and hashes:         1: 1-nlkvRFb_0dY33_QQWe7MT55B_U.roa (hash: xM8t5GiicySe8TkQxN5K9fwDc3cDsUvknXQKAZ4xQ2o=)
                          2: 2EIFLOwIFc-tFxWKXZn3BMbPcb0.roa (hash: N4yQ0YKTphIul8vlPKPp5fRacDnW6DjK0afxc2YMy0o=)
                          3: 8dRFBxE7q7wYj5Gn_IZMeSxa7Q0.roa (hash: 0iyoldQs0UzbfYTDSjyE/7C446a3IWX9kaNVDAWoKp0=)
                          4: A-3Gf3UgxQIZ6Ky-Cazaqu17xIk.roa (hash: dgrM7o+8O9wsrCrNpqji+jQERTikBcq3GEqjrSbA/CI=)
                          5: B0TC2iGMBRMDn1N2DIvQDOq0SoE.roa (hash: uW6U50cDN6ctghDLiIEpTwqXkXRG3HEdRDgJur9Xhvo=)
                          6: CIRls3stTp9BOjHce35suioz25Y.crl (hash: 8bdqe3NNEfQEM1B2K15bZv5e2LMPIcA7+JrucMHYedw=)
                          7: HRNCM29Lfd6GUrjLWhfVEZK8Pk0.roa (hash: z48BydbyCcnp1XJbWLcmx5rliPkrqbTUFpr/Zni0HCc=)
                          8: MHOAoAb2Ho9DxPt7JuVse69xYFQ.roa (hash: CZN6ObcxQQuFBfuKs7zHMPPVIUln034kEHNFCP0mLCc=)
                          9: NcCO14KGGGK5bKqcWdAQzBhFLX4.roa (hash: 8TM468SHsaGRVM7etlYc/2v/ZsiAPeIf4EWBa7BQxT0=)
                          10: WfRMqwEzwStURAh01roSLkYv1U0.roa (hash: HNa0AY81x/+AccOuLe0azU0S7PEQCkT6eu3lt3/eu7c=)
                          11: _0QYzos7ynVKnH7lcLu1qY36xrg.roa (hash: 0xzC7OxTsdTnprRYKtPjnTAZu/n0tE97RpIbcO2C5DE=)
                          12: bPGVmwC5wVAJLJY_VqBl6LkbGl4.roa (hash: bQFYpZP0FaCpt2r9gHDSzWGF2kjGlh8i3ok1643W9vI=)
                          13: drL0dFt8ESK0rijIgcxamuW08M0.roa (hash: scNmkIiGui5gfwb9cU1BGgdxIhKnyOvTw0JqckMZuvQ=)
                          14: hngoQH6CQjGBgnCbmKNLXKdUXBw.roa (hash: TqTNZ820ppXGJLCRFqa9PENQljhPi82ohWIqz+Zpejo=)
                          15: mDOKm6eXSOn0c7Ld4ivRSRZObcA.roa (hash: FdbWTHllFp3rbTu1onhUq8kMxKWagodtiyaPa2Ga1+Q=)
                          16: nCze57cjIRCMGshiGLAyEq3Ponw.roa (hash: LkCADmNPCgQVqXTv0TQ5t5d3IzyZ0ofPj+bUmbp5Pl8=)
                          17: p5OBToLLw5pvvlKMmJQcKKUQ2J8.roa (hash: f0OvVP/T0hmS5D1Ng9LpF/4W8etUVwFGHZhXoxRNYVM=)
                          18: pbRnEKy35OIur1byAlEZ7NczUH8.roa (hash: /kzRKlyUb2SUK4mIXbDuF8XZ3zCvXcX6tO5XLbCzoBw=)
                          19: pf2HY1YBBgPNOVqGytnrvY00iBk.roa (hash: KSBo4fS9EaoZcRkSHUNonjstLAVW4GDNjZfc3U3i6+U=)
                          20: pnbDggFjR8Z1Qgc_1Qc-UDhj7rY.roa (hash: bHqcCRyP28KQV11RhwKXb+dqQODQv4qroixCpA+/B1w=)
                          21: q9XAMvZePT2XanZ5tFs3Z8C3BA0.roa (hash: JXjKyk067tuPpcj75S7FbQk7GIqT7ZRj0BuyYcKd28A=)
                          22: qtbRqc_GfqudrqQeORiTylCX8lc.roa (hash: eIX7vHWs2TiJ6dBUKQ9hUrFynOfOfW9uGq+gDO7jQec=)
                          23: t_rVk3c-j9XvEsul0sWKvhf2Mwk.roa (hash: EhAqGHmfLqA2sCQH3IdVFTDjPB0HqI9gM1ScMJUsIZo=)
                          24: xgAjK3UpVlbWMJ5lH01QCmJPhRY.roa (hash: sdbZUGo1C9uD51rJjlYvxRl1v4mVkvQW97kGxU3scoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:c5:9a:55:ca:ee:ee:94:88:e4:b7:03:e9:d2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Nov 22 02:00:52 2024 GMT
            Not After : Nov 23 02:00:52 2024 GMT
        Subject: CN=776543a3e4a7a040a3969b893bebf82154aae531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:6b:78:c1:d1:e4:a7:8c:7b:e7:33:b7:68:
                    df:19:02:74:80:79:c4:40:53:61:4b:e6:9f:bb:d8:
                    9c:61:e2:4a:f0:cd:e9:f3:65:56:81:3c:ef:ba:72:
                    15:60:fe:9a:b5:1a:ec:a8:f8:18:16:fc:cc:84:cd:
                    e0:5d:d7:52:19:c2:4d:ee:62:36:e9:bf:e2:a2:20:
                    25:0b:9f:8a:fa:66:91:7f:26:e0:3f:ca:99:b3:a5:
                    16:59:fe:34:ea:67:9b:f8:e1:c2:25:76:2b:bb:9f:
                    f0:fb:29:2b:01:29:9e:b6:2d:48:6f:e2:64:f8:8d:
                    d1:cc:0f:cf:ad:3f:9a:29:b0:6b:1d:b9:28:b8:56:
                    59:6d:e8:33:23:46:c0:69:6d:f3:27:be:9a:c8:d4:
                    3c:a8:10:b9:7c:3d:ff:ff:f2:1d:32:c4:dc:61:f2:
                    e7:cf:77:2c:4d:fb:f5:2c:0a:72:70:36:37:86:0d:
                    c0:1b:56:0d:6f:f3:0a:34:c3:d6:cb:e4:bc:d1:b6:
                    1a:4a:57:97:5c:aa:ee:a8:53:0b:a6:df:f0:f3:8c:
                    54:65:ea:06:f2:eb:3a:1c:21:fe:c5:11:a9:43:8d:
                    db:f2:4c:dd:74:be:2b:76:2c:54:9e:00:7b:90:d4:
                    e4:8e:90:c8:fb:f1:03:9b:0c:bf:92:c6:ce:f7:3e:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:65:43:A3:E4:A7:A0:40:A3:96:9B:89:3B:EB:F8:21:54:AA:E5:31
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:79:98:82:7c:75:fb:bd:59:ef:02:8c:8d:d2:4d:09:7e:a9:
         b6:61:aa:f1:bd:d7:74:3d:19:43:d9:dd:7a:63:14:76:6e:fc:
         79:d1:41:5c:f3:48:5d:0d:6a:3a:21:24:8d:09:8c:ff:e3:7b:
         3d:e2:d8:30:db:3b:a1:43:2a:44:c8:75:a9:ef:3d:aa:6c:1e:
         a1:7a:e5:a8:26:75:b3:d7:0d:2d:03:52:03:d1:f7:8e:10:b2:
         58:c1:b9:c6:e0:d6:41:d1:fa:e2:1a:4f:1c:65:07:f3:b1:74:
         39:1d:ce:c2:bf:91:91:c9:59:f3:33:25:f6:66:27:07:5d:41:
         19:c4:19:87:2c:4f:bb:2c:a9:5c:bb:02:70:40:e6:e1:43:06:
         20:51:f7:94:be:d6:da:5f:e1:dd:71:ff:c4:7c:e5:69:72:82:
         fa:cf:34:e5:c0:bf:91:56:2e:4e:bd:02:31:d7:de:b8:f4:29:
         35:94:cb:ca:a5:de:31:6a:77:81:ec:18:2a:35:a2:b1:df:2c:
         8f:1a:c2:26:25:51:dd:1e:fe:b3:b0:3c:fb:95:a2:db:b4:bd:
         9a:50:1d:25:6a:8b:65:1f:2a:90:95:5c:6e:46:e3:96:2c:06:
         a7:30:5f:ad:c5:37:ae:b3:bb:34:5e:f8:72:5a:6d:8b:b2:0c:
         8e:c0:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:48 2024 by rpki-client on console-fra.rpki-client.org