Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
File:                     K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft (raw, json)
Hash identifier:          evI4IBxqObszSW2PJ3+cd2uDTdtXQ5KK1hPZr0BLxyg=
Subject key identifier:   FD:00:42:C1:D7:E6:F2:A6:28:99:32:04:1B:0B:C8:FD:F7:63:38:1A
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Certificate issuer:       /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial:       019353BE9989D4BA575D26BD91A71942C947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
Manifest number:          0B24
Signing time:             Fri 22 Nov 2024 12:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:20 +0000
Files and hashes:         1: 1hFvZi6C-UgUdw17nh-v0VxCKuE.roa (hash: uxUSuyP/9LsDye89whx4kt423bTb2MPfvF1BxN2piDQ=)
                          2: 27ldqk-jKBnu8LVqYTk_i_DIGQ4.roa (hash: YD7PapvI+fv+K9HFAgNWvcJNEUwxQ/HOsDdaPLfW+p8=)
                          3: 5WUDK7bTpUz_tjpeIAGa5CBjRa0.roa (hash: 47R576uZrxoaOnno9+vdB1897HLU63zrYwh6gLnBORM=)
                          4: 9_gONkhZAXVY-qIkd5NP2Ii86ZE.roa (hash: MTXq03LqBYlKwXS/Rq/SfVia1+MPHzn/A/nL3Z0II94=)
                          5: B6M1Vsu_UgmqSPvi-drD94BkcDQ.roa (hash: QBgPWZchSnwpv+pWNpHJHLYbvTf5ZQ0ZloskKfwiRg0=)
                          6: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl (hash: qCiQ8AuAx1povmKBIH161AFoVSXAHbhb3oJF1YGTi0I=)
                          7: QHz5RnBTFdJRquF0NP-26ruWKn0.roa (hash: taijIFai2/Pc8zOTk9q+vkGlwfhGsj5fwFqx1WAw6p0=)
                          8: QM_egHDcrR5q7nQYoBWntLtbrf8.roa (hash: JUyicMrB30y0J1zYURmpfu8mjeoieQp5GegTUKCNjqU=)
                          9: RnD1Asljl7mn6v42kRVUFWlYwTg.roa (hash: NXYgKP4UGicUO8cYaOfH06MbyYnaLEsQzh86kiSgxsI=)
                          10: S5azbY9FJe1jXVxfaVqb4PpayZI.roa (hash: n5t6PwOg50nHTbgEd7qMNT86raoDPa83i2MHKoxSrJc=)
                          11: p6w56tZfHOP_ZGcBHF9QKvsy6F4.roa (hash: nIR9beM3z0SQIE8U74il0g9rsOeSSgY90BzU/EhLIZk=)
                          12: pUN9oAwy_WWSpziePCmks_6SHRE.roa (hash: Hhy4qO1BprlOMcnZIy/n8L8w7FuVUfpM29EdCbbZ5tI=)
                          13: tQDmd_HVthGlh-15RwSiluD0ZXw.roa (hash: n2v5hMPR/jbnVttaRvQHSX1MtJExMkz7vX/MDwLW7dE=)
                          14: vdUGTvaJnk6jVS1dp_5pFhxoius.roa (hash: aQN/FjAV+TOzRf9vyI7efG6pWnTiQ/9wvqErdaLMGqk=)
                          15: wh8J7RB-BmB8aELJ3lFn9XJ00zw.roa (hash: OqqZhygKCmF503lAhK61n1l4VE+q41GXX/rk9zfL/YM=)
                          16: yyv1D2qI27bauPstP8jHFSXNpeo.roa (hash: Sxrzc1lcTsK9rH5txG2i/iG81mOTq4nJkLi0RU9h8Ls=)
                          17: z7hQ2VZFDIsRx1Dhc2oaVl9p-hc.roa (hash: FS+N9+SB4TBjtQFyIlWwysQ5OGB36fojo2Tdd8qJXJg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:99:89:d4:ba:57:5d:26:bd:91:a7:19:42:c9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
        Validity
            Not Before: Nov 22 12:00:20 2024 GMT
            Not After : Nov 23 12:00:20 2024 GMT
        Subject: CN=fd0042c1d7e6f2a6289932041b0bc8fdf763381a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:fb:c3:5e:1c:7f:ed:2b:2e:73:ce:3f:2d:
                    82:86:8a:6f:79:e1:4a:e5:83:b0:ef:1e:b7:7c:10:
                    a0:72:a9:ae:c5:de:f3:5c:b3:2e:e4:ac:f2:61:1b:
                    c0:20:d7:3c:7d:08:35:ec:98:1e:03:64:28:0c:f3:
                    30:82:de:b1:d6:b1:99:2f:2e:f4:48:9c:66:08:86:
                    a2:26:95:1e:3a:97:81:42:b8:bc:10:1f:9f:ae:25:
                    d3:ac:f6:38:e1:c8:21:da:33:6a:2d:07:7a:59:89:
                    28:f7:c5:6c:f3:ee:cf:ad:fe:6c:78:cf:5c:9d:ae:
                    34:06:0f:0b:e3:c8:80:c8:d7:58:c4:39:1d:ff:f8:
                    a9:1f:b9:70:93:db:b8:ea:2c:7c:0f:d0:6d:23:29:
                    fd:23:60:c9:c0:09:27:a7:29:e1:f3:96:df:b1:a1:
                    8c:13:09:b8:ee:76:ee:ed:8d:b9:71:fc:fa:17:b2:
                    13:6e:99:82:ef:f0:f6:03:b1:a1:12:78:51:a3:3b:
                    d8:6a:00:69:3b:46:fa:11:90:f3:bf:1c:08:6f:3f:
                    1e:07:d0:d0:28:57:a1:c5:4d:4e:db:2a:1a:88:33:
                    94:a9:94:e3:b4:33:52:37:e6:ce:eb:01:69:7c:88:
                    1f:5d:87:a3:00:e1:dc:41:21:8b:f5:10:3f:4e:e0:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:00:42:C1:D7:E6:F2:A6:28:99:32:04:1B:0B:C8:FD:F7:63:38:1A
            X509v3 Authority Key Identifier:
                keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:65:d7:f0:a8:c0:b3:04:11:61:cc:2d:4e:a0:06:cc:24:
         a4:44:67:76:d5:06:6b:13:26:82:f6:cf:38:46:d0:84:34:9c:
         08:75:05:9a:59:8c:e9:2a:21:cd:8c:78:8d:3e:83:f0:dd:b8:
         91:e4:20:1a:1c:cc:66:f4:45:3c:3c:16:2e:28:2e:c2:26:c1:
         75:9f:39:ba:90:cc:a0:49:2e:11:77:55:2d:4e:8f:ff:c2:8f:
         89:d7:05:e8:0f:e7:12:0b:c0:b8:d1:a3:d4:ff:86:f7:c4:f4:
         8d:88:70:c1:dd:4c:bb:ac:f3:27:ca:12:b1:79:cc:02:fe:7f:
         5b:7a:34:41:2a:51:4d:c5:d1:33:de:5c:50:6f:56:43:98:b2:
         9a:89:61:03:78:37:61:23:4b:6f:c4:bb:a3:e7:78:df:c6:2b:
         ce:be:9f:8c:61:ea:4c:61:04:db:99:7a:80:df:b3:c8:26:20:
         50:72:ad:b8:6e:5f:b7:89:72:c1:1b:35:12:af:35:29:20:51:
         13:92:c0:fa:81:de:b1:ad:12:89:d1:71:f5:41:24:dc:94:00:
         1f:4f:5b:f2:b2:fd:33:68:8f:03:3b:76:d2:6e:d6:ca:0e:76:
         db:a0:a2:bc:f1:43:dc:cf:04:a1:20:6b:48:64:c0:34:c4:68:
         d2:c4:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:31 2024 by rpki-client on console-fra.rpki-client.org