Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          7j3f2qsP4jVMqzFPxnI7peTcKo7iUSkdSW5iusJPQ1Q=
Subject key identifier:   CF:85:2C:2B:7F:55:96:BC:05:F4:AB:25:56:C6:80:DE:64:5B:16:20
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       019350BDB5F14075DA29599557037CF34039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          137B
Signing time:             Thu 21 Nov 2024 22:00:30 +0000
Manifest this update:     Thu 21 Nov 2024 22:00:30 +0000
Manifest next update:     Fri 22 Nov 2024 22:00:30 +0000
Files and hashes:         1: 1IKKl5D129PR13tfH9EnAc5gTB8.roa (hash: iA0vJ5ZLHSEXsbjJNTdpZXCajP0Jec7WUNXBiOI06g8=)
                          2: 2iOSPdxcehu75Ogz2Um5u0suk-U.roa (hash: D+xtsBduz7jekxB29JcyLp7MB/pUESFyLbymCN8qwfY=)
                          3: 69YcMBP-uNr-sKiCDn2ZzRP17Go.roa (hash: 2xLxHtFSIiBSI30gDaJLdZ7j3H6ZNX6Sre5Ts5OoFeQ=)
                          4: CPsPbTT5USZTRdc9U_lIcSUnlDs.roa (hash: VC9oX8BshooZh2yJzwH5bySY1utm4+lAEJdD7u0wx94=)
                          5: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: ZtuUrQsm/W/gA/qm1qcLZbgn88n3exo/fVul9XYCpvE=)
                          6: IRa40ysF7KSPb_0UZdvb1B7E4EE.roa (hash: AspfkgsJxuMvNsJ5mIVdNXG5W1QeQhUomyPgstQmCt8=)
                          7: Ioq8dEgWEGw17FFBHlp8Ijb1B0I.roa (hash: 5MRrmrVGkCCoEwU7Wt2uTHAZDxvvw11ihIOBqlM2zTo=)
                          8: PAiCNnAV6u6mkf1J0HF8F8NI5iY.roa (hash: ERaCKtBJ93GmlLidz6FpGTZn5SzSEX/hj2FcCEGNfyk=)
                          9: SUaToqcvrmjEPSgNDse5b-mysgM.roa (hash: 7uwtyo94RqUomwn4a9LhPwlOkrLTZywffvEA1PuKt+c=)
                          10: aBUo7thPCXwNTIZQqvHtYcEESlQ.roa (hash: aFhBSP/ByAz04uTBtewAfuX5IK3hFxExYxh6Ts6Elgc=)
                          11: bL5J4CTVCqQOMnxuxbSYy2JrE-Q.roa (hash: 7M5YkqUoPzo8TBbSU5e+uV1uf2ojs6rpJT2aANMLdKU=)
                          12: b_KA0pe_3SV4b4OIrpWiYpPfqCQ.roa (hash: 9qaURqUCpqCLxfGkQ5oErMtxlZU5r6GR8dAUbTuWkUg=)
                          13: jIi_Ru3IefpbXGryBWgXZbGXk20.roa (hash: nV1gn4fzr2q8Gp2YD3x2gKPIxa4piRup1xjqPBYefDM=)
                          14: lxESx365vJ_KpGfPw5vEvF19eHQ.roa (hash: bBgJqf9CbvF2T4+dpktIZXqmJ8kE/vDFoongBVgLSwg=)
                          15: n0CvIl2b7UvfyIc1gxoJi-Oz2eI.roa (hash: fg0PunZ6PRKyz+ZV/xf3hq1m9oiossSZ2ksPqTT3k4U=)
                          16: nGo4H51rOsitJmcNirgmciVehA8.roa (hash: qVRKoLl4pUkupVXlRxOrXacHtu3B5FhuftDzW97PDdg=)
                          17: qGrQAccuQhzBsMvH4rqiLv03ldQ.roa (hash: EpMU/v+u+8wfjnOchgwBhsnCfmM7qpUQlbsHXubI1rM=)
                          18: tcttpY6GEyQfNjf80Js2svKOx-4.roa (hash: C0hOHmf3E4D8brtMeRf2tpTgu1SNEK65QQr+Igbeglw=)
                          19: zA3I63Idda3lePMw--61fwIc4oA.roa (hash: AuDqxdejDmMsNJT0/OQc251ls4w/z3lr7g+wKjTokMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bd:b5:f1:40:75:da:29:59:95:57:03:7c:f3:40:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Nov 21 22:00:30 2024 GMT
            Not After : Nov 22 22:00:30 2024 GMT
        Subject: CN=cf852c2b7f5596bc05f4ab2556c680de645b1620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:03:88:1e:d7:e4:71:d0:88:23:d4:1c:ab:
                    9e:25:f3:2e:89:79:c5:27:23:b2:1d:49:0c:4c:bd:
                    64:68:90:c7:99:3a:7a:67:09:e9:8d:e3:70:26:2b:
                    c6:58:c0:8a:de:30:37:b3:4d:44:c1:13:3c:eb:3a:
                    b9:62:30:1e:f9:11:bd:46:f4:0a:65:61:8b:31:e5:
                    c2:c4:26:4f:3d:9e:66:97:d5:a4:52:99:8c:a0:eb:
                    09:c1:1f:85:02:3a:3b:28:d9:01:b7:fd:33:dd:de:
                    e1:f4:27:59:5b:c0:51:d3:a7:54:28:2d:be:a2:e3:
                    33:86:98:8c:0d:84:ab:de:39:cc:68:8d:1e:fa:5f:
                    2a:8a:31:86:a0:23:58:e3:d5:26:bf:d4:8a:92:a4:
                    26:a5:06:18:68:a8:96:8a:3d:9a:f4:c2:fc:f4:12:
                    ac:e6:0d:f5:be:fd:fa:32:a3:39:be:e7:5f:35:91:
                    a4:75:cb:f0:86:14:de:3f:8d:46:f5:16:c2:8e:4c:
                    fd:d8:56:18:94:ab:6a:5a:8c:12:d3:d9:48:40:37:
                    8f:8c:0e:01:07:f9:8c:06:d6:38:eb:96:56:9e:32:
                    83:74:be:06:08:54:06:00:8c:53:6a:f1:cb:06:c5:
                    12:e2:23:4d:65:3f:02:17:b5:d4:4c:48:e1:86:9d:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:85:2C:2B:7F:55:96:BC:05:F4:AB:25:56:C6:80:DE:64:5B:16:20
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:ea:16:c4:48:b8:ce:12:c1:b7:57:76:31:58:ab:04:d9:
         9f:55:c8:f2:1b:7d:14:87:c4:48:80:a7:fe:a8:84:b3:14:fd:
         d2:40:be:af:a3:59:48:fd:58:1c:16:62:7a:47:a5:0a:e1:ea:
         b7:af:7a:c1:fa:e3:2f:21:1d:5a:1c:e1:4a:2e:57:33:5b:c9:
         49:1b:62:0c:85:52:24:e6:0b:a9:96:23:5b:1e:ff:7f:36:57:
         33:17:6e:87:9c:cb:a7:63:5c:ca:71:a3:fc:79:69:5c:32:39:
         88:fb:13:52:0e:0c:2d:32:d1:28:3c:20:22:93:f6:1f:5e:d0:
         83:ec:cf:68:40:f4:13:b2:2c:84:e6:9d:52:b7:3a:a9:c7:7f:
         07:43:8e:75:61:76:a0:87:b2:0e:08:9d:77:42:10:d6:f2:a7:
         e9:e2:8a:c1:2a:29:96:5a:24:a6:84:08:86:e9:d5:de:f0:2c:
         a1:08:63:e7:ea:ac:2a:17:90:6f:cd:f5:f1:fa:19:70:80:4e:
         9f:55:ee:d7:24:24:8e:64:f1:87:55:fa:58:b9:33:e5:be:50:
         bb:fd:88:1f:03:8a:5d:89:fe:99:07:a1:a8:f2:18:79:f8:46:
         ed:b1:fb:de:45:95:25:67:6d:8c:c7:24:39:09:59:54:24:19:
         09:ee:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:28 2024 by rpki-client on console-fra.rpki-client.org