Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File:                     7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier:          aGDqNplA/aO6FLAqS73hPMl4DLYlDbsZCJg+TIdd9Rc=
Subject key identifier:   87:46:DA:75:3A:F7:BB:BB:71:66:28:C6:1F:EA:0D:87:C4:26:44:B0
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       01935274F1ECCF8C5712A42CE723BA5BF426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number:          1390
Signing time:             Fri 22 Nov 2024 06:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:15 +0000
Files and hashes:         1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: SPPs5KQUhuIPjCTlvJxYGF/PQq/K7o0PpDG+z3sPi5U=)
                          2: 8c1eVYczzD-nnpIBFqAiiUiKQqY.roa (hash: cL42ZHFCNA8Vu6aBb4ckAmDacEQfBd9NiOQUeLKDXbE=)
                          3: Fy0_hFiIZytB8xCPxEtWRkkTNRk.roa (hash: xAK8tz6Kc3A47MeH2eyt7VqHGHj7ufmuE6EAZWB07oc=)
                          4: GEthS81Dl3KiMgAyT0y0RVXOQCA.roa (hash: mmII5oXUWCMxrq9i4WIp5PAVBsrpa+8XgGGaajVW714=)
                          5: GIL1gcl0sSHqHY8XRGqFIveSXcs.roa (hash: 4E3tIs9etwgCI3f6a7acJoQvxEMMWI3GY7BXTR5THNg=)
                          6: Gkf8LJfUAIwty7LiSIOUV2S44h4.roa (hash: owfKuYWIIoqv4eOcR+1F837CvEtQL194axh+/jIF9QA=)
                          7: HZb4Wjv5U66SZicuD_pearnvsDM.roa (hash: T4nHIs/FJHVgZEBaUCGVrP1XJDwmapLQj0OByRq1v1E=)
                          8: LK7-5t1sWdOUZnQ_T4Sey86CR2I.roa (hash: 3LKXZZyLnKszoy1UCYNVmICVUbBBPobCz/rC+ckBN9c=)
                          9: Q9eEcFFhPdUcG7uje53C_tKgUbc.roa (hash: jCgyTc5lYwGrjTdNg7HPPFI5qnzPSRzhIguexEwawSE=)
                          10: T5Gf4YLLZsXZitPAS4ADk3CDtyE.roa (hash: iA9QTUdSHoDVOC3GMPtEAQMJJi7R/16K7Hwdn3T5mbM=)
                          11: UDqjZhAZdd2upS3TfyiyQ2Tao84.roa (hash: D44dzZkg46HWLfuz/pTqJDJF0ycjwlO18zbLPq9y+IU=)
                          12: Zouv1hLQdDMasxP0oUDJ7U6hCoM.roa (hash: A07pntAkAtGcNlmErF6oFdLrg8LX3MQGvHJ2nrcJGiU=)
                          13: qZhU4u_Zy3-GIFZqf2GA5b3zN5U.roa (hash: 3F/0U35s0SLoHV6aopuB7MWidV4ogt8Qpl0lcuoWcuU=)
                          14: rTIV-9QIVtUcwALSt8aooQQdy8c.roa (hash: JD5B5ZYwCWHbqGM/57QlyU1Z5R0nMEklTDhejC9ss88=)
                          15: tFircwNyBtq6WrCGFuYs7WuevGg.roa (hash: DZiasd6myKMTFl9daNNFAbTp1NlU0koSzXdCNVlijgA=)
                          16: uB7bKvT--Ew59H3DvlryuSHjbAY.roa (hash: zFieA3+KLvC5j8zdj1TQVcLn1w3vR5vs1k2M3BdKo8Y=)
                          17: v-6tflXDAC289pyY_6zlqVfhDcQ.roa (hash: TOtYrK545Gx7mm0NNB+lvZQpImMAoyXjb8WPXOFen38=)
                          18: v4gzHC-WFnf5oJQpD_g5y8gi5gE.roa (hash: W5/trwRP8exPS73zInEGf4UNDCxa95GtwRftQMKywCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:f1:ec:cf:8c:57:12:a4:2c:e7:23:ba:5b:f4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Nov 22 06:00:15 2024 GMT
            Not After : Nov 23 06:00:15 2024 GMT
        Subject: CN=8746da753af7bbbb716628c61fea0d87c42644b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:e4:fc:d8:52:09:d9:26:e9:08:a9:1b:83:
                    12:3f:d9:8a:f3:b1:08:36:1f:11:4c:d7:c8:e5:13:
                    f9:d2:5d:79:9a:19:32:73:80:69:49:c4:56:e0:64:
                    16:92:ed:8c:2a:8d:b4:22:da:42:1f:18:35:08:26:
                    58:1b:63:e9:d5:18:9a:7a:93:e9:49:e1:91:9c:f1:
                    cb:95:50:77:af:f6:68:cc:35:02:04:ee:d5:93:7d:
                    ae:8c:95:66:6f:1f:de:52:2b:a8:dc:b6:47:85:03:
                    e6:10:29:1b:b3:6a:72:b0:53:b6:5b:01:ae:4d:b9:
                    c9:fc:1d:09:60:9a:8d:2a:53:ae:40:53:e9:f9:9e:
                    97:4d:26:7a:54:57:68:9e:dd:d9:dd:19:e5:f1:a2:
                    55:f3:7e:f5:6f:d0:1b:9a:26:62:7a:5c:b3:13:4c:
                    01:ea:c6:a1:4c:bf:97:b9:fc:5d:d7:20:0c:42:bc:
                    90:56:cc:5a:79:71:4f:55:63:83:a7:9e:2d:98:9b:
                    29:94:65:d5:fc:ce:90:58:40:e6:83:6f:51:b1:73:
                    a2:c9:a8:e3:1b:e5:32:a5:5f:8d:3f:23:ed:b3:80:
                    21:07:3a:27:68:24:51:95:e8:84:c6:35:43:94:16:
                    d5:9c:05:8b:31:c5:9e:40:3e:3a:00:ed:1f:a0:80:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:46:DA:75:3A:F7:BB:BB:71:66:28:C6:1F:EA:0D:87:C4:26:44:B0
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:d2:1d:66:87:9c:91:d0:b6:59:91:9c:55:7e:e7:fc:d4:
         9e:53:7c:85:c3:13:a6:f0:b8:7d:85:30:28:3f:7d:e9:19:30:
         4a:71:af:a2:24:7e:23:70:67:f3:db:f0:dd:bd:76:0f:3a:e8:
         7e:cc:82:9a:c2:58:10:11:c0:63:65:fb:34:85:07:e3:cf:ff:
         7f:44:c4:95:9f:31:37:1c:2d:85:15:1f:fd:75:ee:e7:d2:21:
         f8:da:13:8b:dc:fb:bf:16:f0:a5:e8:6a:d8:ac:62:65:a0:61:
         1b:55:19:94:2d:84:9c:82:8c:c1:56:a8:2f:0b:4d:20:17:5d:
         bb:08:b6:d6:28:e1:70:8c:b0:e9:34:85:06:92:cc:8c:2a:a8:
         6c:1d:9c:52:1d:4c:02:a0:0e:ae:4a:6e:6d:95:3d:3c:b7:00:
         d1:60:c0:f2:b6:6b:84:16:79:f9:d5:2e:fa:4a:04:11:62:66:
         8d:30:0e:54:e9:8d:2e:2d:17:84:6d:d1:4b:57:d1:4b:06:14:
         09:47:84:a0:9a:69:ce:c1:48:8f:94:60:fd:e6:8d:40:57:e0:
         b2:d7:c9:4a:86:75:ca:ee:7e:9a:af:60:53:37:0b:55:c6:59:
         e6:90:8a:ed:e4:89:2f:39:ab:31:fb:01:c8:78:c8:75:5e:68:
         51:69:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:51 2024 by rpki-client on console-fra.rpki-client.org