Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          UjMYdZR2ZMdxzRrbZabsBuY72MXaQIw1lBBWNT7kYbQ=
Subject key identifier:   1D:7A:22:82:CB:76:71:72:B0:25:6B:ED:DD:0E:D4:77:85:51:43:AF
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       01935207542AD7E873C846D3C43C65BB0933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          0DAD
Signing time:             Fri 22 Nov 2024 04:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:32 +0000
Files and hashes:         1: 1b2V4qnXqsTIQYDRE7QsGw2sX0s.roa (hash: IdYVx1uewecoAGBizOQwrSy7ZpbXCi9IieOhcRV+ulA=)
                          2: 1tklf3q6JYrprvDP8U4tXu2XofU.roa (hash: vIbgNbl2Dhnrb9gVF06kLMGNdY+MdjXldDcqh0XeS7M=)
                          3: 20Hbt_I4W1h_ECR8adP23DFza_U.roa (hash: hvH+sdpA2O54FrijSSMs1k0qsF0koXxi52n1kDLKVcg=)
                          4: 5IKYG_DG3xL3SfVyFU8vuaVhaTw.roa (hash: 0Cm1F0BseqhVLiFxv+2LBD93fUkuIdMZGKGG9W2ldas=)
                          5: 79nlrqZrbuPqgSPHsc_fnLbyPZo.roa (hash: 3YgnQs0xlGZem/ninRi0GjZaS6/yxHMb1V+J0hVua18=)
                          6: 8OIf3s5rbAL6PwOmVlkJPZkibW0.roa (hash: y1YjjfFfDEHPJHpjFrXiaM4kWlR3FUi3I1alIgKjv4A=)
                          7: 9YV5KUlneSD8JtXB8YgIiYggsvw.roa (hash: AYr3p1wIpBXEdFUuPIqlP/k9BtunMGRTa039LGu6mY8=)
                          8: EycxawVVHS5mGfUvRl1GYOvOFok.roa (hash: V8qmFacrsVVZZhXgaVlG5Y6ukyEwFBBVxLcUpI1atVs=)
                          9: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: EkX3BKXlzhe8DF7B7mjn44R1cnaNdNYTIYuE94KGd7w=)
                          10: UOqf2nr1SMAuqDt3BSP1PANWF94.roa (hash: bonJXpnVrLNGM0WRkCLowPRXY0PEZAsM8203NXDUEbg=)
                          11: UvqK_DX7rWGwVO015iiJ8HfpDZg.roa (hash: dsU2Yn0zXD52rDI9siVdAY4y2U9VBjUWixXZsZIHYTU=)
                          12: g3i57TOI_fin9KYWvXWR-253wKU.roa (hash: 51F5hCiin6mMWNtwtMkbB4jP5Bs2TXtyU/UkVZmj9eU=)
                          13: oLmIrapC3jghCosEUBsb0K8a6_o.roa (hash: fUt/oBLdEGhI5d+fjDjdxNx7fcVi4OXDVLR+Hcs46bg=)
                          14: ohjvghtqJIakmbhvKxR7ocuVfCE.roa (hash: QzyoITJveDQ3vPMd2IfW2VcTnwBRMah7st7zGnLLNpw=)
                          15: uYw2e8yzvnaCIRMug4OJaHyv-Uk.roa (hash: bDqiQZbfW+PAtf/F8fb3SNPP3S7momjE/LgQrQYKapg=)
                          16: w3igBQtG0t2Tcgw2vBOVkdS87Ps.roa (hash: 43CdoNbVSSBYpHMwM4CA0FTgZYC2wYp9Wf+iHtxjUsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:54:2a:d7:e8:73:c8:46:d3:c4:3c:65:bb:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Nov 22 04:00:32 2024 GMT
            Not After : Nov 23 04:00:32 2024 GMT
        Subject: CN=1d7a2282cb767172b0256beddd0ed477855143af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:a1:89:ee:c0:af:97:90:5f:bd:83:7d:87:
                    c9:0d:2e:19:36:0f:56:f4:80:0f:fd:61:a2:ac:84:
                    03:07:1e:a1:a1:81:1c:c4:03:0f:d0:4c:97:a8:c1:
                    05:47:46:e8:56:a4:ac:d6:88:37:e0:e6:71:31:4f:
                    df:6b:7f:63:62:e4:a4:00:c4:28:82:e9:10:ae:22:
                    28:48:21:34:cb:ce:c2:ff:12:d2:ea:06:46:8b:ec:
                    c3:bf:2d:2f:71:87:95:17:cb:b1:51:a7:01:cd:85:
                    4a:57:ad:bf:29:96:b3:f8:05:4f:f7:00:f3:d5:8f:
                    d6:d1:39:5c:e4:fe:64:c1:87:19:c6:d0:56:0c:ef:
                    03:91:d8:55:87:75:21:a9:cf:ba:bb:a3:1f:5f:85:
                    ae:b7:97:1b:17:4a:64:13:b5:66:3b:29:6a:12:cf:
                    a4:f1:ce:92:ce:17:3a:3a:17:45:b1:ec:47:99:43:
                    98:85:2c:84:8e:d6:2b:f9:35:09:e2:70:06:6f:07:
                    f3:bb:40:26:5b:f5:78:d7:50:4c:8d:87:89:31:c3:
                    ca:a2:e8:b1:29:7e:52:bb:c7:5a:e3:da:d7:9c:17:
                    69:25:6b:7f:a8:ca:a7:69:ba:05:3d:fe:8f:76:c5:
                    b8:f1:ff:ae:bc:12:fd:d9:cb:b0:eb:ee:8a:ae:66:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7A:22:82:CB:76:71:72:B0:25:6B:ED:DD:0E:D4:77:85:51:43:AF
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:6d:d8:f7:06:61:55:bd:51:a3:a7:17:21:6a:52:d5:86:
         44:9a:be:13:55:b7:9a:fc:05:75:bd:a7:0c:db:35:c2:26:98:
         77:99:17:9e:3e:82:04:19:76:66:ad:dd:4f:00:4b:6e:15:94:
         f3:4d:de:52:17:f1:db:72:53:28:3a:33:50:bf:b2:cb:30:72:
         29:e2:26:f1:01:4e:c1:49:9d:ad:09:ef:95:b9:d4:a8:6e:6e:
         10:89:3c:35:bd:57:f8:87:1b:e8:ca:aa:2b:5b:15:bb:bb:3d:
         2b:1f:9e:fe:5d:03:db:5d:ae:bd:f7:33:eb:d9:23:99:c6:dc:
         c6:95:9f:97:84:d1:f1:52:e5:8c:f6:8e:e5:25:6e:1b:19:9a:
         15:b6:c1:f7:78:2e:55:cf:01:d1:fc:4f:94:a3:d7:7c:dc:9c:
         db:4d:98:d5:e1:61:0a:ed:3d:6d:a6:15:ca:88:76:e6:37:d1:
         57:fb:6a:da:26:f6:33:9f:95:9c:d4:6a:fb:e9:28:b0:8b:fd:
         c6:04:f4:9d:f5:32:61:e2:d3:7d:6f:7d:f5:0d:34:4f:b4:8e:
         75:33:1c:35:d0:a7:2c:24:8c:a7:5b:d0:f9:75:33:8b:18:32:
         d6:67:b0:7b:99:9a:ba:40:56:d8:29:2c:59:55:cc:42:f8:4f:
         ed:f4:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:44 2024 by rpki-client on console-fra.rpki-client.org