Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File:                     XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier:          kZdt/5BWWBT8L7NWAmqoxxe+X1L7u+poTt+CM3VEazk=
Subject key identifier:   79:CC:33:90:CC:4A:E5:4F:2A:B7:BE:28:BB:D3:12:61:7E:F5:E2:7E
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer:       /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial:       019369DAD3BF8AEBDE9E38EF5A3213D81B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number:          0166
Signing time:             Tue 26 Nov 2024 19:02:48 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:48 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:48 +0000
Files and hashes:         1: Smw3_T1wu66hyFmvZu1exlKZy4k.roa (hash: 0Bo44yOBLolOlzBkfY6YJEEmWNHd9HyWph+0ZsFyBgw=)
                          2: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: fOR6glHsH6s8mBccDsnNtH+lvlaiM81xX+SBCl2TwgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:d3:bf:8a:eb:de:9e:38:ef:5a:32:13:d8:1b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
        Validity
            Not Before: Nov 26 19:02:48 2024 GMT
            Not After : Nov 27 19:02:48 2024 GMT
        Subject: CN=79cc3390cc4ae54f2ab7be28bbd312617ef5e27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:53:6c:c4:6a:c3:22:4c:4b:74:67:8e:e0:
                    ac:6c:67:47:36:8d:8a:ec:91:a1:64:2f:b7:43:4b:
                    00:d8:f4:ba:4b:c7:2d:8a:33:20:5d:d2:13:0b:5a:
                    ee:35:5b:f3:5c:e5:40:5e:ce:4b:cd:86:3a:04:10:
                    9f:ae:6a:50:5e:de:7c:f5:4f:cb:46:ef:0b:fe:26:
                    53:c3:ae:b8:70:ed:9e:44:6e:ba:10:d1:d6:15:b6:
                    35:da:84:a8:0f:6c:5b:ff:b8:95:c1:4d:76:e9:51:
                    fa:aa:27:c8:59:23:c4:d3:42:e7:22:af:12:4c:0a:
                    a2:c9:2d:94:9b:74:97:f9:83:74:58:f3:7f:81:e2:
                    5c:3a:a0:57:a1:a7:0c:36:c5:2c:76:db:4a:66:1e:
                    12:d4:a7:df:21:19:9c:a4:2f:6b:cc:33:eb:2a:27:
                    b1:04:f4:57:e9:40:d5:ab:0a:78:76:bb:0e:e1:00:
                    61:c9:76:51:4c:37:e1:c4:51:b0:d9:36:47:22:9f:
                    5f:ae:8c:f6:6a:7b:71:da:1f:43:34:4f:3b:1a:26:
                    95:4b:07:4d:ca:50:c4:3b:6f:ce:22:23:b7:0c:e5:
                    ca:15:35:e9:8c:e8:e0:36:19:20:21:ae:e3:2d:13:
                    c5:69:2c:49:a0:1e:95:59:8e:62:4e:cf:a4:1b:95:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CC:33:90:CC:4A:E5:4F:2A:B7:BE:28:BB:D3:12:61:7E:F5:E2:7E
            X509v3 Authority Key Identifier:
                keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:f9:a0:2b:4c:71:24:23:6d:2c:f8:4f:99:05:95:44:7a:
         f6:62:55:81:37:b7:d0:00:a2:9b:e5:2c:da:f9:0f:e1:ae:74:
         f8:6c:53:08:9e:43:d9:ba:22:bc:4f:6c:63:0b:e2:b0:15:55:
         ac:2a:cd:7a:52:49:89:3f:fe:59:73:b1:4a:5e:51:44:73:c4:
         ed:ab:b3:ad:b8:93:a4:ee:c1:37:46:0e:25:33:64:d7:89:ca:
         02:54:df:e7:cc:9e:af:57:4f:38:3b:42:09:58:76:02:52:8e:
         49:88:35:0f:75:a4:4c:0e:d9:56:1d:a5:66:94:00:df:a8:ae:
         5e:61:3f:c1:cb:39:e7:2d:da:24:3d:36:80:03:c0:68:a5:33:
         cc:43:85:a3:0f:2e:f2:8f:e0:be:77:dd:bb:83:e6:6c:cc:4c:
         a0:5d:c2:67:32:97:e1:a4:88:18:32:a3:27:20:d4:1f:76:36:
         c8:08:7c:c3:51:f5:51:c3:94:4f:8a:7b:e3:11:b7:b7:1a:bb:
         4b:04:ff:6c:f1:b6:12:d0:b1:c9:51:ec:e8:e9:ae:47:9d:9d:
         a8:14:73:a4:c4:e7:11:88:46:2a:4e:6f:77:89:65:75:96:d7:
         17:a7:d8:52:e1:50:33:17:14:60:94:fb:3b:63:68:ea:c2:f1:
         d2:df:f1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2tO/iuvenjjvWjIT2BtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjQxMTI2MTkwMjQ4WhcNMjQxMTI3MTkwMjQ4WjAzMTEwLwYDVQQD
Eyg3OWNjMzM5MGNjNGFlNTRmMmFiN2JlMjhiYmQzMTI2MTdlZjVlMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthtTbMRqwyJMS3RnjuCsbGdHNo2K
7JGhZC+3Q0sA2PS6S8ctijMgXdITC1ruNVvzXOVAXs5LzYY6BBCfrmpQXt589U/L
Ru8L/iZTw664cO2eRG66ENHWFbY12oSoD2xb/7iVwU126VH6qifIWSPE00LnIq8S
TAqiyS2Um3SX+YN0WPN/geJcOqBXoacMNsUsdttKZh4S1KffIRmcpC9rzDPrKiex
BPRX6UDVqwp4drsO4QBhyXZRTDfhxFGw2TZHIp9froz2antx2h9DNE87GiaVSwdN
ylDEO2/OIiO3DOXKFTXpjOjgNhkgIa7jLRPFaSxJoB6VWY5iTs+kG5U5TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnMM5DMSuVPKre+KLvTEmF+9eJ+MB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1P5oCtM
cSQjbSz4T5kFlUR69mJVgTe30ACim+Us2vkP4a50+GxTCJ5D2boivE9sYwvisBVV
rCrNelJJiT/+WXOxSl5RRHPE7auzrbiTpO7BN0YOJTNk14nKAlTf58yer1dPODtC
CVh2AlKOSYg1D3WkTA7ZVh2lZpQA36iuXmE/wcs55y3aJD02gAPAaKUzzEOFow8u
8o/gvnfdu4PmbMxMoF3CZzKX4aSIGDKjJyDUH3Y2yAh8w1H1UcOUT4p74xG3txq7
SwT/bPG2EtCxyVHs6OmuR52dqBRzpMTnEYhGKk5vd4lldZbXF6fYUuFQMxcUYJT7
O2No6sLx0t/xqA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:00 2024 by rpki-client on console-fra.rpki-client.org