Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File:                     Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier:          1LNojFzSfkT9rZMAEEsYFQLUojlKSlN/LbiFgKBftWs=
Subject key identifier:   3F:0E:5D:C6:A8:63:01:69:59:76:05:13:D5:EE:88:BB:1D:F6:AA:5C
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer:       /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial:       01935319B3009D3241A7F3AC895D60C15646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number:          085E
Signing time:             Fri 22 Nov 2024 09:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:13 +0000
Files and hashes:         1: RYEAi9yX0N1Rfnxw8nMNMvh6wBY.roa (hash: HrPV+eRePLA4H3X8CNiCJlNUqhrweTXjnqnhLh9jVsg=)
                          2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: 1E1zppRMHalD2K6KZaTK5YPsGlHYLPvTUq164ZnOUrQ=)
                          3: dGhbZhRYpGgZU3lKXYyBi8GOt9Y.roa (hash: pDrp53JEt67GFJ8hEo43iCRgCUtt1FEigGzlUKtOYh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:19:b3:00:9d:32:41:a7:f3:ac:89:5d:60:c1:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
        Validity
            Not Before: Nov 22 09:00:13 2024 GMT
            Not After : Nov 23 09:00:13 2024 GMT
        Subject: CN=3f0e5dc6a863016959760513d5ee88bb1df6aa5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:81:56:8c:98:9b:16:82:df:48:2d:72:92:
                    7a:65:f2:d1:72:a2:06:89:7a:6d:f2:e0:97:6a:94:
                    73:3d:1c:74:7c:f3:b6:8b:44:a4:fb:fe:fb:68:59:
                    8d:87:3c:80:e6:3e:5a:66:70:2a:ba:86:81:2d:eb:
                    0e:b7:49:4c:aa:bc:d8:2d:cf:66:54:59:88:f5:73:
                    59:13:11:19:7a:c8:3c:bc:3a:31:f9:9c:c5:2b:b3:
                    0f:9a:f6:cf:e8:ac:f9:b6:be:fe:6d:30:4e:15:58:
                    b0:6b:b2:2b:3c:ba:7f:fb:22:99:0b:cc:2c:bc:a6:
                    16:6f:b6:69:8d:e9:c3:04:47:5b:77:c2:9d:2b:ea:
                    e2:7f:97:d8:0f:f9:f7:53:6b:69:8e:6a:0f:5d:e2:
                    da:44:c1:8d:68:1f:05:fa:cd:da:da:c0:5d:93:08:
                    a1:76:78:9c:8c:c8:68:21:3f:64:4b:c6:5f:e7:3e:
                    b0:b4:65:51:d7:65:c9:9e:6b:0d:58:c6:0a:37:61:
                    d5:e2:29:12:6c:e6:72:c2:1c:87:a0:83:87:32:3f:
                    3c:48:31:d5:c5:d2:72:77:85:3c:1a:3a:3c:22:b8:
                    50:6f:ba:64:74:6a:9c:52:d0:1d:92:6d:f1:48:87:
                    18:07:28:29:50:01:da:98:49:30:f2:8b:b8:47:0e:
                    70:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0E:5D:C6:A8:63:01:69:59:76:05:13:D5:EE:88:BB:1D:F6:AA:5C
            X509v3 Authority Key Identifier:
                keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:da:5a:25:9e:06:ed:0d:65:c2:86:25:ba:2e:47:54:e1:
         26:cc:e2:ab:3e:38:a0:74:a8:fd:bd:fe:2f:e4:49:f3:ce:b9:
         00:ec:37:62:ab:d9:3f:0a:19:00:7b:41:47:0b:ca:f2:46:6f:
         83:b1:ad:51:1b:94:24:2e:a5:a2:50:8b:90:45:5f:9b:de:cd:
         98:0a:b9:4d:d4:41:f4:cc:e6:b5:f1:0d:64:91:7b:05:2f:3b:
         61:1c:bf:12:d6:2e:68:ed:a1:6c:10:61:f8:28:4d:dc:8b:af:
         8f:c6:fc:06:40:54:bb:88:ca:78:38:d8:33:5c:a4:2e:66:c3:
         c5:5a:7d:4e:81:e3:08:b1:09:de:03:32:40:cd:e3:a1:34:dc:
         d2:3d:9c:c8:e7:fb:6c:63:6e:e6:82:38:bf:2d:de:60:4f:7a:
         ae:05:dd:10:51:38:c9:7e:9a:53:18:9c:ea:4a:c0:91:1f:2c:
         25:0a:5d:cd:50:52:be:e5:7c:a2:8d:85:85:fb:f2:df:52:62:
         80:dd:18:e0:2d:e2:94:78:58:cc:3d:c0:35:9c:98:e8:dc:d9:
         b0:07:a4:b9:73:ef:6e:0b:86:f0:27:fa:55:b4:35:52:c9:1a:
         be:b1:1a:b9:cc:84:1e:46:af:32:0e:7c:78:fa:24:90:2c:9d:
         0b:ce:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:53 2024 by rpki-client on console-fra.rpki-client.org