Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File:                     CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier:          y9THNjUWVNkK2cXIth6N9Ga/dHaH4TUQQe2f3aXe0OE=
Subject key identifier:   A6:AA:1C:36:E6:E7:A2:FC:17:B4:F9:71:D6:27:ED:97:D8:59:4C:AB
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer:       /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial:       0193535148185804C9748E006974EE6C0D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number:          10BB
Signing time:             Fri 22 Nov 2024 10:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:55 +0000
Files and hashes:         1: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: nzdBWn2m23QfnynDEu8GN5UnXRN6UkBtZ/1tQIXxmxM=)
                          2: OdRlvRThVqtUOPnrWUbN0Sw5suc.roa (hash: 4qkGZCeCgWuQLgHUssa1QmwENMJDvAamh4TvwhwvfME=)
                          3: VpkumwRpPkerIRTvGF2Z0yKaUUI.roa (hash: rkI1AqxbfcLx/cSJqHBjlWxNS74Qh9/B/JvQrdVgtGY=)
                          4: Yp56FONBGOQSX3T0s6VQvQ7_ILg.roa (hash: Y1SjFvgwwVJz78xigK+kqjYU8zcaVkgvWxWJnZ2scFw=)
                          5: cPCmmEZLQBEPkXcziSUSzgr9A8M.roa (hash: 9oHg9VMQIEZDDm9PNgCyWP6uwuVuI5uEg0oqSov1DY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:48:18:58:04:c9:74:8e:00:69:74:ee:6c:0d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
        Validity
            Not Before: Nov 22 10:00:55 2024 GMT
            Not After : Nov 23 10:00:55 2024 GMT
        Subject: CN=a6aa1c36e6e7a2fc17b4f971d627ed97d8594cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:dc:9f:de:87:28:0f:69:e2:00:7b:ae:97:
                    f6:1d:e6:51:dc:dd:b2:72:75:00:86:8d:62:b8:e1:
                    9d:e3:7f:50:46:44:57:c6:db:17:f2:c6:86:6f:73:
                    99:bc:06:c4:9f:9a:61:df:67:58:e1:97:65:fc:e0:
                    1a:ab:2b:5f:be:69:3d:e1:7b:f7:07:ec:52:71:6c:
                    5a:84:aa:01:99:56:2d:67:3f:f0:e2:d3:8c:95:33:
                    50:77:06:6e:16:ed:dc:ca:d2:ea:a3:ab:06:23:4c:
                    cc:2e:01:a9:67:2a:53:6b:73:1b:56:b6:f4:f9:e9:
                    72:d6:d8:7f:38:d3:3b:55:ea:5a:04:eb:fd:ac:bb:
                    28:62:c5:da:42:a1:17:34:30:05:0b:43:99:4b:cb:
                    a3:c0:22:16:cd:47:f9:70:15:6d:16:28:78:8d:86:
                    ba:27:be:c9:e5:60:5f:a5:79:a7:5f:df:3e:44:8a:
                    ff:9b:6e:42:18:d1:e4:a8:99:4d:7d:b0:1e:ce:8e:
                    a3:94:c2:e9:97:9f:18:3a:31:56:cf:38:5f:35:a5:
                    f8:c3:a7:e2:9d:28:90:ea:98:32:4d:35:76:38:14:
                    a0:27:7f:cc:23:bd:49:00:93:d7:a9:36:f4:77:22:
                    e7:8d:58:c6:c9:1d:cf:e2:cf:1e:67:b1:bf:72:f3:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:1C:36:E6:E7:A2:FC:17:B4:F9:71:D6:27:ED:97:D8:59:4C:AB
            X509v3 Authority Key Identifier:
                keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:b6:80:db:63:01:6c:0d:92:3b:f4:db:c5:47:23:fd:1b:
         dd:7f:39:1e:18:d9:5c:4a:3e:91:48:8a:c1:44:fb:ad:fd:0e:
         a5:e6:30:b4:b1:8f:b4:e0:ba:9f:a8:b5:ea:7f:b8:11:af:0a:
         92:26:12:d9:90:05:2f:90:1e:10:f3:59:dd:69:3a:66:de:93:
         07:24:2d:00:c8:92:94:43:5e:cc:3c:cd:69:4e:90:d4:69:72:
         d9:b5:bf:91:cb:10:7b:14:f4:40:65:46:4a:16:63:99:88:76:
         d8:25:2f:01:3b:fc:5b:ab:60:f3:23:35:bd:3f:31:3d:ad:0c:
         99:58:3c:f3:2f:04:8f:ca:65:32:0c:96:ae:64:78:8f:a6:a6:
         89:07:1b:09:e9:5e:5a:b1:b9:29:1f:a3:91:9d:4e:8b:18:63:
         07:8b:f8:4a:02:ad:88:ca:42:ad:e6:b5:6b:4c:c7:a0:d5:90:
         26:22:57:00:9a:c9:60:de:79:56:93:1e:be:9a:f9:b2:27:18:
         81:5f:37:91:b0:37:a8:52:62:36:b6:69:96:d1:f5:d5:ac:68:
         c6:61:19:cc:f0:b7:99:b8:cd:70:69:e4:87:d0:b4:77:23:a7:
         6e:18:f0:e2:49:27:d1:05:91:62:3d:7e:7e:90:22:cb:52:63:
         a2:90:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:06:35 2024 by rpki-client on console-ams.rpki-client.org