Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File:                     Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier:          7yCF0y/fJ9QTzs5kbrmYZyHl7F7OXwGwmxmwihuAoQ0=
Subject key identifier:   D6:6F:92:32:68:94:13:22:05:86:D7:13:10:DD:18:EC:A4:A2:D3:FE
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer:       /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial:       019358773AAFE4DD77A5AFB1DBCA057235FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number:          10B3
Signing time:             Sat 23 Nov 2024 10:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:28 +0000
Files and hashes:         1: HBzSI31KzcG6MtFGJxAl0JWKjfw.roa (hash: AY2nBHotOf4O7yqsIV9aH/QtOzLUdUAXVNM/GOUDX10=)
                          2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: QBNNiG3RiVPoq2Ba4jR9tMjKbWFcqfRnUb0vxl+gqHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:3a:af:e4:dd:77:a5:af:b1:db:ca:05:72:35:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
        Validity
            Not Before: Nov 23 10:00:28 2024 GMT
            Not After : Nov 24 10:00:28 2024 GMT
        Subject: CN=d66f9232689413220586d71310dd18eca4a2d3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:58:ec:86:6a:79:0b:77:15:a0:39:0c:c4:
                    60:67:88:5a:c1:09:cb:92:01:81:47:75:4e:31:3a:
                    d3:12:ce:c7:3a:20:65:de:c0:d7:40:a4:09:5a:81:
                    ec:95:89:78:b5:f6:6d:a4:d6:f9:f2:7c:f5:65:71:
                    07:3f:24:0b:15:12:c3:6f:bd:4e:ef:eb:e3:3a:fa:
                    5a:5a:f9:94:f9:89:77:34:fd:ba:13:47:28:ca:c9:
                    2b:c4:d7:5f:69:7f:77:c7:54:8d:ac:9b:d8:75:96:
                    5e:fa:c1:2e:0a:92:1f:38:d0:98:ed:c1:d7:6f:e6:
                    b7:87:3c:d0:95:3f:a4:ff:65:b1:a9:fc:5c:23:83:
                    78:08:45:76:40:5e:d2:2d:d6:4a:45:47:cc:bc:79:
                    0d:c5:b4:99:88:02:07:f6:25:3a:0f:85:42:0e:3b:
                    7e:7f:9b:54:17:3c:85:65:7c:ef:25:00:21:65:0c:
                    70:1c:14:59:55:76:d3:fe:23:e5:4b:99:0b:0e:f9:
                    d9:e0:b6:32:4b:e6:6b:60:49:a0:cf:cf:d6:85:4f:
                    d6:70:f4:6b:06:62:8e:b7:1d:fc:96:1c:d6:ab:70:
                    ea:dd:c2:69:fc:20:3a:78:4a:51:bf:36:cb:bb:2f:
                    fa:bd:cb:3e:b8:7c:b1:7a:16:ed:3c:93:cb:3f:7e:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:92:32:68:94:13:22:05:86:D7:13:10:DD:18:EC:A4:A2:D3:FE
            X509v3 Authority Key Identifier:
                keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:86:6a:ed:97:7b:b4:84:29:04:89:f2:d0:20:a4:3a:93:
         fb:03:48:d2:84:87:de:23:0a:fd:ab:70:e8:43:3f:d1:51:1f:
         c6:68:72:1d:ea:ab:26:88:96:9e:92:6e:93:f6:d9:f0:c2:b4:
         91:f7:51:ad:b2:6e:e6:c3:14:c6:b1:f4:64:80:df:81:9c:14:
         d7:6e:d9:9c:bc:76:5c:f4:f5:db:15:e3:ca:7e:e3:aa:ff:20:
         cc:eb:10:d5:dc:13:3a:7b:7c:38:30:b0:50:10:2e:93:ea:88:
         a2:9f:5c:22:67:c5:47:ee:da:d8:9d:bb:e3:a7:35:fd:81:45:
         24:7a:27:2f:29:f7:c9:0b:26:f6:d9:17:13:ae:dc:bb:77:d3:
         0f:dc:cf:03:ae:7c:77:3b:15:0b:44:72:33:cd:a0:16:d2:ef:
         b9:f8:20:67:3b:a4:b1:c5:a7:c5:99:b8:e5:7f:b0:82:40:53:
         b1:c7:11:dd:d9:36:d6:f5:4b:0d:a2:b4:b1:94:c2:9d:eb:16:
         8a:d9:69:78:a1:e9:c9:6b:51:d9:94:34:0d:08:39:44:a3:bc:
         49:55:93:5b:71:2f:bb:34:b8:31:fd:d6:33:89:e9:ee:9c:99:
         64:bc:c6:ed:69:e0:e8:10:6a:ac:96:a3:4d:74:0d:87:e5:5d:
         45:b1:ec:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdzqv5N13pa+x28oFcjX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y2MTdhZjM1ZjM3MjRlN2RhODYwZWJmYmU0ZWMxMzhh
ZTE4MDAwHhcNMjQxMTIzMTAwMDI4WhcNMjQxMTI0MTAwMDI4WjAzMTEwLwYDVQQD
EyhkNjZmOTIzMjY4OTQxMzIyMDU4NmQ3MTMxMGRkMThlY2E0YTJkM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV5Y7IZqeQt3FaA5DMRgZ4hawQnL
kgGBR3VOMTrTEs7HOiBl3sDXQKQJWoHslYl4tfZtpNb58nz1ZXEHPyQLFRLDb71O
7+vjOvpaWvmU+Yl3NP26E0coyskrxNdfaX93x1SNrJvYdZZe+sEuCpIfONCY7cHX
b+a3hzzQlT+k/2WxqfxcI4N4CEV2QF7SLdZKRUfMvHkNxbSZiAIH9iU6D4VCDjt+
f5tUFzyFZXzvJQAhZQxwHBRZVXbT/iPlS5kLDvnZ4LYyS+ZrYEmgz8/WhU/WcPRr
BmKOtx38lhzWq3Dq3cJp/CA6eEpRvzbLuy/6vcs+uHyxehbtPJPLP373WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZvkjJolBMiBYbXExDdGOykotP+MB8GA1UdIwQY
MBaAFE7PYXrzXzck59qGDr++TsE4rhgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEt
MTM2OTkzNjVjM2M3LzEvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEtMTM2OTkzNjVjM2M3
LzEvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcuGau2X
e7SEKQSJ8tAgpDqT+wNI0oSH3iMK/atw6EM/0VEfxmhyHeqrJoiWnpJuk/bZ8MK0
kfdRrbJu5sMUxrH0ZIDfgZwU127ZnLx2XPT12xXjyn7jqv8gzOsQ1dwTOnt8ODCw
UBAuk+qIop9cImfFR+7a2J2746c1/YFFJHonLyn3yQsm9tkXE67cu3fTD9zPA658
dzsVC0RyM82gFtLvufggZzukscWnxZm45X+wgkBTsccR3dk21vVLDaK0sZTCnesW
itlpeKHpyWtR2ZQ0DQg5RKO8SVWTW3EvuzS4Mf3WM4np7pyZZLzG7Wng6BBqrJaj
TXQNh+VdRbHsFA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:07:53 2024 by rpki-client on console-ams.rpki-client.org