Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          Kn/Xx63Em6r2Rj9yu4K6lqDotdViH38d8/GCkPbjWME=
Subject key identifier:   88:B9:35:B5:35:55:C5:A9:B1:D7:75:09:72:60:65:3E:B7:36:C8:42
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       0193523E2684A68FB9327162DBCEB2C73E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          08D0
Signing time:             Fri 22 Nov 2024 05:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:24 +0000
Files and hashes:         1: 1-FnZaP0D_GsE8dtr9-cOJXN4i08.roa (hash: ZXF+gONjYri1sGnC/kh72MNb8h6oq7h/bJoQKmnUuDs=)
                          2: 51KQkCaUPs-I-X30INoIC6uT1Uw.roa (hash: WT/IcnC3YSzCt69cFFFhMJNh5YPCr+HbBLq3szk/8ak=)
                          3: 91_s1p75Zvsrh0f6bxCiE4YKGMU.roa (hash: gBKR2tl7Oq4gv2NUBRsifnNEdLImWRmDlwjMES0Qbxo=)
                          4: Abp9IL31-1kog1uerrLG_yRxPz0.roa (hash: lhTtPDTjItNi79CZcKdhehzNgaHC7J6U/1rQLcClNC8=)
                          5: Cp35cTyxUV2fTDU_69DmYUZbd7s.roa (hash: LLLsCynRfYgiMip2N4xECKusWOU5Rj0C0gUBvKNpt5o=)
                          6: KWVk8nqivC3auw2GGbUpgIuur5w.roa (hash: OZKAVWIPNoVsdMpt+NyF7Pqs1N0Bp7IU/bl8h8w/z20=)
                          7: PpsNhRF0le6WIDouS3rtKnnqXkY.roa (hash: tbaWdcOhQndowF1POmeMXmJ7p+bFj+OZa6cjRcrdBfI=)
                          8: Re7joGFrQP-5GaWryQNb7F5y0BY.roa (hash: CWivUKZbTwNroCgl5AqqFSBCRSQuY+yr4kpeUxcNlAY=)
                          9: TIqTAJrwAO6MFnJtDW8OSaM43LQ.roa (hash: zFWAavwWd5bFoGK3yWk926XIvEhPkpgWNZDN9ebNGto=)
                          10: UDmy9uNTZjNjDo-9bHSYuzMsvs4.roa (hash: P4ElWmx0ktNpC6372p5KXmg1/6tqm9aMS2+puJUpQw0=)
                          11: ZVLlW76AiqFm-Vu6WiohrwuwBXA.roa (hash: FhshLPpj1QHLE4QBA2raYSLjgLt6K43L3/QQeFa2UGQ=)
                          12: aIogUBz9MzFIGpwJXkh8AJu-44w.roa (hash: bGO+PtD07AcP5sLsq0sts46/74k65zmUlVwuJJpCXUM=)
                          13: a_m4suhyyL9flQPp241fj4DRVCA.roa (hash: 8XVetIJ9D/jeF/QQ0Oi5/OE3gev61B9ttSvU41YSX6k=)
                          14: eBmjzWIRmA1zUdsgfRB37e-hqok.roa (hash: pOMbGcnbc+lty6YDzP40O9muv0hiG8Mkr9M+6azooM4=)
                          15: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: MQGYy7dx8lwbRlQa9HiD9yoZlnI8eaY9HltGffbD2uQ=)
                          16: oUdR6XRPPmVUt1Uf3gHDXSutSLc.roa (hash: +gPzuEpCi3KQpNa5LQ5JuzZ9v5dH1hB8y5R3qCWRZGM=)
                          17: r0T-4BiZF4UmnQK759STVAGFrH4.roa (hash: +RH4H6g75jmuFmVcYAEFMPLKtp7SmhTTr4iKxA/Bvrg=)
                          18: sB9__xNUyayS9sCaeRE9Dos7pWo.roa (hash: +O22jIxQXhP37M37Our38M1OHXGja7QuD8clcgH5g2I=)
                          19: upkCue1jQTPqazKOQdrp3mqcai0.roa (hash: mN5Mm3CtwyZLSQk4+vAqHOhQ7Bw7yrm0KCN6tUonSD0=)
                          20: v5CdKVrBZkibWrREunobuYvhEvI.roa (hash: EURrNdPLmmSGa7rj0i/8iTEuPeWMYU7MMxIV+MBGdME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:26:84:a6:8f:b9:32:71:62:db:ce:b2:c7:3e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Nov 22 05:00:24 2024 GMT
            Not After : Nov 23 05:00:24 2024 GMT
        Subject: CN=88b935b53555c5a9b1d775097260653eb736c842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:2d:8a:d5:1a:09:30:b6:3f:ec:6a:1c:3b:
                    36:c5:fc:b7:f5:b5:bd:ab:6c:bb:98:32:b2:78:30:
                    5f:bf:f0:1b:38:6c:b2:2a:20:f1:7c:b1:06:27:01:
                    ae:bc:cc:32:ad:09:59:ff:05:10:8e:17:fa:a4:9f:
                    e6:da:5e:b3:52:72:9f:db:21:d0:13:5e:6b:43:ff:
                    af:84:d7:23:13:c7:6d:13:7f:5d:22:7f:4d:34:bc:
                    52:4a:8e:2f:a6:37:15:9f:60:ea:cb:2a:6a:d8:07:
                    4b:22:30:6e:c9:89:93:10:a8:0c:a5:03:f0:75:3e:
                    d1:00:3c:59:fb:25:f7:cc:45:57:fb:c3:fb:24:ac:
                    13:cb:30:72:f0:e5:ba:d8:78:ac:20:e9:31:83:4e:
                    24:64:63:c5:40:28:ce:88:33:d4:de:fd:64:9a:71:
                    7d:30:b7:d0:89:86:11:bd:bd:b6:97:d3:7c:3e:fb:
                    05:99:0d:a8:87:d1:0e:2d:eb:af:6f:1f:f8:86:83:
                    1e:28:f6:18:42:8f:61:2b:80:7e:c9:6d:2b:a5:7b:
                    14:d2:de:0b:14:56:75:4a:ec:9a:18:f0:56:3c:73:
                    0c:db:3e:d2:de:38:4b:5f:3c:0c:93:62:45:53:c6:
                    11:4e:6d:e5:e9:19:29:ce:3e:7b:89:d0:4f:ec:b9:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B9:35:B5:35:55:C5:A9:B1:D7:75:09:72:60:65:3E:B7:36:C8:42
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:09:7c:4d:76:6e:dc:ea:79:a4:16:02:2e:4d:a7:ea:5f:
         c0:61:04:6e:67:3a:ef:35:08:c3:65:9d:41:6a:df:a1:26:2e:
         86:0a:92:37:7e:d7:56:4a:f2:22:f3:26:0c:63:4e:89:ec:16:
         04:4d:64:fb:39:be:d7:77:02:02:d8:71:5d:7f:ac:d4:d0:b2:
         ad:78:f7:64:56:28:8f:90:35:54:7c:98:dd:c1:a7:f8:4f:e9:
         72:56:9d:19:b2:fb:9f:d5:da:b8:2a:fe:8f:22:3f:5d:f5:94:
         ee:7f:5a:0a:c2:b6:dd:13:49:53:5a:35:94:59:40:72:90:35:
         10:63:c7:5f:43:4a:dd:e5:db:4c:9c:31:bb:eb:47:66:92:f0:
         11:0e:c6:b6:12:0e:7a:7e:e9:e0:45:1e:33:55:d6:4f:8d:19:
         76:fe:a2:ed:87:04:85:f8:e4:b9:16:0b:f1:a7:f3:44:25:78:
         3f:3e:a5:d4:41:2d:e1:74:e7:bf:5a:8a:e1:42:87:81:b9:38:
         bd:2d:96:eb:4b:be:e3:cb:9b:d0:50:4e:af:84:6d:a4:b3:4f:
         58:2a:2f:16:fb:6e:50:3f:ca:4e:b0:50:10:aa:42:ab:b0:b2:
         12:53:63:49:9a:43:54:be:e8:97:f9:e8:55:4f:d7:eb:0d:a9:
         3a:c9:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:25 2024 by rpki-client on console-ams.rpki-client.org