Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
File:                     Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json)
Hash identifier:          QaQXTSkPa5bt896CbEn2W6gKS39orkbWI6h769bD9Tg=
Subject key identifier:   CC:9E:4E:BF:92:58:6E:8B:96:75:28:A0:74:B8:92:CF:73:DE:0D:30
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Certificate issuer:       /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial:       01936A7D6EC7BB8D7A54D2064EF22EB09509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
Manifest number:          015E
Signing time:             Tue 26 Nov 2024 22:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:25 +0000
Files and hashes:         1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: 4r/lfT9w047C35Y/G5XUWK9DZJxCUt1qvArAPIcsqj0=)
                          2: XHNoszxm0532vuZMbAgVjqgc4K0.roa (hash: l+c4VqLNlk1/VKP5mF/z1cmXUx2uW0hAey9fSowREzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:6e:c7:bb:8d:7a:54:d2:06:4e:f2:2e:b0:95:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
        Validity
            Not Before: Nov 26 22:00:25 2024 GMT
            Not After : Nov 27 22:00:25 2024 GMT
        Subject: CN=cc9e4ebf92586e8b967528a074b892cf73de0d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:48:f3:2b:01:65:3c:f8:ad:68:fb:23:90:
                    50:38:79:55:b5:85:d0:1f:ae:a3:e6:62:c2:fc:f6:
                    71:de:f7:ad:20:66:30:58:90:ba:af:b7:9b:b5:bf:
                    a1:f3:24:30:fc:c8:52:d2:61:51:3a:91:c6:53:a9:
                    38:48:cc:0f:2a:81:87:7d:c0:8e:fc:76:3a:48:cb:
                    63:e2:16:10:8c:38:33:0d:cf:a7:ed:0d:78:72:a7:
                    9d:9b:0a:90:c1:89:49:f7:c7:49:8c:48:d7:a4:16:
                    f3:0f:3e:78:10:4d:41:64:2e:53:8e:2a:4a:08:3a:
                    f1:be:34:00:48:ce:e0:32:ef:77:df:d3:da:c2:d8:
                    91:7b:8e:11:41:f2:19:d5:49:ad:ff:fb:39:f2:0d:
                    2f:a7:2e:ff:f6:d4:0d:e1:0f:63:89:3b:fe:33:a7:
                    b1:08:ee:0a:8b:8d:13:21:7c:78:b9:59:79:b8:a3:
                    55:c2:5a:a3:f4:86:86:aa:46:68:5f:3b:ec:d5:f3:
                    ea:21:13:f4:29:bd:c9:4c:73:fb:54:7d:65:c9:ad:
                    ca:20:82:81:0f:a7:33:16:6d:76:a4:2f:43:08:aa:
                    1e:23:72:0c:da:0d:4a:10:6f:d9:6d:ee:30:82:23:
                    9f:ef:3d:29:f2:52:19:e0:a6:98:b7:55:e8:d7:90:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9E:4E:BF:92:58:6E:8B:96:75:28:A0:74:B8:92:CF:73:DE:0D:30
            X509v3 Authority Key Identifier:
                keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:49:91:f7:a6:39:e2:77:6b:fa:27:7a:79:f8:46:e9:8c:36:
         2f:44:ef:68:65:7f:ef:35:a6:93:d8:91:fa:42:12:b0:30:d0:
         08:63:5e:8c:be:b0:c5:a9:14:83:40:f3:42:7e:f2:2b:06:80:
         f5:f3:7f:db:90:2d:97:e5:a5:fb:e7:cc:0f:43:65:66:93:f4:
         27:be:84:4e:c7:f9:5e:69:df:a4:ad:ce:3c:27:cb:e3:a8:99:
         8f:93:c4:69:68:fc:b9:50:af:f9:a3:6f:f4:76:fb:bc:a7:78:
         a0:91:98:51:92:92:29:53:d5:3c:0c:d0:94:0c:a2:20:d0:38:
         7f:81:a4:f0:dd:00:46:88:6c:83:34:5d:98:80:86:b8:a6:b7:
         ea:e3:39:b8:5b:a1:c2:de:06:bc:dd:2d:80:7a:c4:50:96:80:
         8e:5f:16:3a:08:f5:74:d7:78:53:8e:09:67:21:2a:3c:20:07:
         25:39:3a:b7:f8:d2:f7:c5:26:36:2e:7c:fc:83:50:82:67:ac:
         1d:35:53:b4:bd:cd:5f:cb:6f:66:75:d8:1f:e1:83:c9:52:36:
         44:de:9b:95:74:ec:8c:12:65:31:ed:d1:0a:0a:eb:72:df:d3:
         38:79:62:84:92:fe:45:22:ed:df:8b:df:e0:aa:0b:61:38:7c:
         0e:95:c4:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfW7Hu416VNIGTvIusJUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmZlZTJlNjkwNmUwY2ZkN2M5NGMzN2M2NGZhYmY0MWUx
NGM3YjYwHhcNMjQxMTI2MjIwMDI1WhcNMjQxMTI3MjIwMDI1WjAzMTEwLwYDVQQD
EyhjYzllNGViZjkyNTg2ZThiOTY3NTI4YTA3NGI4OTJjZjczZGUwZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdtI8ysBZTz4rWj7I5BQOHlVtYXQ
H66j5mLC/PZx3vetIGYwWJC6r7ebtb+h8yQw/MhS0mFROpHGU6k4SMwPKoGHfcCO
/HY6SMtj4hYQjDgzDc+n7Q14cqedmwqQwYlJ98dJjEjXpBbzDz54EE1BZC5TjipK
CDrxvjQASM7gMu9339PawtiRe44RQfIZ1Umt//s58g0vpy7/9tQN4Q9jiTv+M6ex
CO4Ki40TIXx4uVl5uKNVwlqj9IaGqkZoXzvs1fPqIRP0Kb3JTHP7VH1lya3KIIKB
D6czFm12pC9DCKoeI3IM2g1KEG/Zbe4wgiOf7z0p8lIZ4KaYt1Xo15DzEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyeTr+SWG6LlnUooHS4ks9z3g0wMB8GA1UdIwQY
MBaAFBYv7i5pBuDP18lMN8ZPq/QeFMe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zOTA4MzctMmI3Yi00Njg0LTk1NTct
NjljN2VhNWQ4NzE0LzEvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zOTA4MzctMmI3Yi00Njg0LTk1NTctNjljN2VhNWQ4NzE0
LzEvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUmR96Y5
4ndr+id6efhG6Yw2L0TvaGV/7zWmk9iR+kISsDDQCGNejL6wxakUg0DzQn7yKwaA
9fN/25Atl+Wl++fMD0NlZpP0J76ETsf5XmnfpK3OPCfL46iZj5PEaWj8uVCv+aNv
9Hb7vKd4oJGYUZKSKVPVPAzQlAyiINA4f4Gk8N0ARohsgzRdmICGuKa36uM5uFuh
wt4GvN0tgHrEUJaAjl8WOgj1dNd4U44JZyEqPCAHJTk6t/jS98UmNi58/INQgmes
HTVTtL3NX8tvZnXYH+GDyVI2RN6blXTsjBJlMe3RCgrrct/TOHlihJL+RSLt34vf
4KoLYTh8DpXEng==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:54 2024 by rpki-client on console-fra.rpki-client.org