Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File:                     VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier:          WPED/Paa7DPnKuW8vywsxXa8v67g4N3doosjP7m00ys=
Subject key identifier:   5E:96:7B:55:92:83:D9:29:50:FA:09:18:9C:69:90:78:EB:28:4A:6A
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       019355E418D3C01BB4F046DE8B2C258A11DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number:          07C7
Signing time:             Fri 22 Nov 2024 22:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:32 +0000
Files and hashes:         1: 8IuHfo6E4cUTGshNOClhHiJp1mc.roa (hash: 0QqNKDmAWWhyG+T2k2hVqnE/bjRv0Atu7GHaE14p2U0=)
                          2: 9O7pgTAAYGBvXE-dc9Xvy4bho3c.roa (hash: ucObeVeLvD0eo3HQCNWe3AzytyWoQDXoM4Zn0TXDQI8=)
                          3: AA76tAX11u6Tvej1TTsjMVmYjXA.roa (hash: O0FK00lUKts0QfDT9deeGxe+OudU5RHCjpSHoUxUxq8=)
                          4: FPEUJ4Xp10_2M2pN38tI-Gm6p4U.roa (hash: 6g98dSodFnb2M9rRdyhQ+HwfjRvC0dwrS/bv95B/354=)
                          5: L7FFdoaCel3lnz7OVmdEcreqAqo.roa (hash: ObHXuST+excf8VAEkygq15/6fxqeavbqPqP57FSMoK0=)
                          6: PPQPE4n9TDt84uapgqytLIKSRLA.roa (hash: GmDINEYBe0/qDumSVx25E8hSj54H1k1VQX/9D3vzaxU=)
                          7: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: u/GRavUzoIoXJ2TZjACLbxUe8Tc0WZPkZUwxjovM1XY=)
                          8: VkZPKedOtHrcuDVy4ZrwyR6nd_Q.roa (hash: kLbxP6hPt6Ul0FDFpRfptZ74kIilMnW/RZspyBrT85c=)
                          9: aT0MHlzm8GC7MGbx1ZD1NTAxTkU.roa (hash: IjSrwSY+qtD2r0d/O7WBoA+TmWxvw9RM5yFY/RtHBCU=)
                          10: kb-ItpMgjVYudNdKRc7g-s2a9yg.roa (hash: f2c7ckXZKOxpUVC6Jsl8fwD9beeB0PtfMBM4YN1W4Os=)
                          11: mN-mW5yVO6_amtq-y_qPGwUPjU8.roa (hash: pPiL7gl3EsOrCU1vrIyBa02OQRzE3zu7EeYxqmAoRZ4=)
                          12: nR85oGpRiVKNpWfXKa04FDgV9ec.roa (hash: LPZv692yT5ylKA3II66KiAU7Fc3QOqbTVZ/QFz0DCwA=)
                          13: oVycwtHHW5dobDhspj5JtdhcUWY.roa (hash: iuPIHTwyaebzzLyzDCoiKStsls0/u04kzANYEx1uqQk=)
                          14: q7k-W6x6dOnCdVXA78sps5viTqQ.roa (hash: pt0WQRgxp+dj8oX3L0U4VxN/ESekK9fwVuCf3jIDtvg=)
                          15: rYCUqNavSCplGVZUIEeSN5JOv4w.roa (hash: TCfG91WtHnb2hVtEjD8MgtDBWOWxWV9/hL6i76tVj8g=)
                          16: toLfcjUXr5Fv7m8I3ZqcEfTJ5N8.roa (hash: nm/X65Fir2zuukKfLOrebn/74+TfFPwFPOEvgfpsfFc=)
                          17: wdtE_3D6FbAFHOP--1DXG-ZWJC8.roa (hash: J1WwYWMorgPFnCHZe01D/31oPYzRXvtwLXf7IpXryQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:18:d3:c0:1b:b4:f0:46:de:8b:2c:25:8a:11:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Nov 22 22:00:32 2024 GMT
            Not After : Nov 23 22:00:32 2024 GMT
        Subject: CN=5e967b559283d92950fa09189c699078eb284a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:70:c5:76:1f:e0:6a:e8:64:36:c9:60:25:
                    90:6f:39:c0:73:fb:5d:72:12:78:1a:3f:46:df:ba:
                    ee:89:f7:3b:26:4f:31:b6:da:28:d2:86:7d:7f:e2:
                    0b:ee:2f:74:8c:36:be:83:0e:03:c3:02:16:50:d5:
                    f2:9e:fe:cc:61:0a:3b:35:d5:26:20:9b:0e:9e:65:
                    23:ef:a7:7d:e5:6e:7a:8c:f7:83:83:c9:d1:36:54:
                    8b:1b:2c:fd:96:b5:ee:92:b6:d1:a2:57:a6:f7:0a:
                    51:bf:ef:b0:b8:32:40:0e:15:d3:be:cc:1d:35:41:
                    b4:ae:9d:cd:b7:a1:dd:df:fc:7b:77:84:11:17:52:
                    2d:e2:8b:14:30:6c:2f:3c:02:67:df:ea:54:ce:c4:
                    e3:a5:42:71:53:bc:a9:b7:e9:d0:c4:2c:aa:12:08:
                    25:f3:a0:0e:b0:51:0a:c3:a2:d7:0b:2e:e0:08:3d:
                    e3:f2:6a:61:52:f0:29:10:54:fb:18:ea:39:c4:fa:
                    3b:6c:9d:7f:77:e5:ec:95:19:b4:61:6d:2f:65:60:
                    54:e7:98:2a:81:2d:3a:29:bd:99:00:3b:5d:d8:72:
                    73:0d:45:d5:56:2a:64:89:99:e3:64:9e:3a:36:c5:
                    05:42:7f:57:cc:25:6b:2f:90:9c:a9:5f:3d:95:c9:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:96:7B:55:92:83:D9:29:50:FA:09:18:9C:69:90:78:EB:28:4A:6A
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:51:c6:6a:dd:21:43:b9:a3:7e:38:58:70:75:a7:f2:2c:
         47:26:0b:c1:3b:02:7d:44:28:04:df:4f:65:af:86:c3:3e:0e:
         b9:75:dc:2a:ac:4a:f6:78:f1:0b:5a:f6:cc:5e:76:26:d8:7b:
         82:6e:3f:04:3a:cb:dd:9d:17:06:00:95:39:29:7f:24:8a:80:
         d3:dd:99:38:d3:cf:e3:99:89:89:dd:e0:ca:fc:68:24:9f:4c:
         04:76:43:2b:c4:a6:c0:1f:82:bb:43:28:22:b3:3a:97:11:4a:
         52:48:7d:cd:f6:0e:03:6c:ca:32:e7:60:46:28:2c:14:74:bf:
         e4:0e:1a:1d:83:d3:86:67:95:06:94:f7:e8:c4:3f:6e:0c:72:
         d0:ad:76:7c:a5:a8:44:77:39:b3:7c:e4:b1:aa:7e:2f:6c:1c:
         32:be:12:11:2e:9a:6d:6b:6a:63:f8:5e:4e:7a:78:c4:6f:3b:
         99:0a:f1:b9:4a:71:9e:eb:78:3a:a1:40:37:b6:14:9b:45:f2:
         15:79:0b:dd:9c:44:d4:7b:72:b8:9b:45:62:c7:97:fc:73:8c:
         e4:5d:91:3a:6c:f2:93:1e:e4:35:0a:22:65:e7:31:39:40:53:
         39:3c:8d:e3:db:a1:f8:d5:6f:1f:1f:18:e6:32:0a:0a:11:16:
         48:16:ef:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5BjTwBu08EbeiywlihHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjQxMTIyMjIwMDMyWhcNMjQxMTIzMjIwMDMyWjAzMTEwLwYDVQQD
Eyg1ZTk2N2I1NTkyODNkOTI5NTBmYTA5MTg5YzY5OTA3OGViMjg0YTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZFwxXYf4GroZDbJYCWQbznAc/td
chJ4Gj9G37ruifc7Jk8xttoo0oZ9f+IL7i90jDa+gw4DwwIWUNXynv7MYQo7NdUm
IJsOnmUj76d95W56jPeDg8nRNlSLGyz9lrXukrbRolem9wpRv++wuDJADhXTvswd
NUG0rp3Nt6Hd3/x7d4QRF1It4osUMGwvPAJn3+pUzsTjpUJxU7ypt+nQxCyqEggl
86AOsFEKw6LXCy7gCD3j8mphUvApEFT7GOo5xPo7bJ1/d+XslRm0YW0vZWBU55gq
gS06Kb2ZADtd2HJzDUXVVipkiZnjZJ46NsUFQn9XzCVrL5CcqV89lcneWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6We1WSg9kpUPoJGJxpkHjrKEpqMB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEdRxmrd
IUO5o344WHB1p/IsRyYLwTsCfUQoBN9PZa+Gwz4OuXXcKqxK9njxC1r2zF52Jth7
gm4/BDrL3Z0XBgCVOSl/JIqA092ZONPP45mJid3gyvxoJJ9MBHZDK8SmwB+Cu0Mo
IrM6lxFKUkh9zfYOA2zKMudgRigsFHS/5A4aHYPThmeVBpT36MQ/bgxy0K12fKWo
RHc5s3zksap+L2wcMr4SES6abWtqY/heTnp4xG87mQrxuUpxnut4OqFAN7YUm0Xy
FXkL3ZxE1HtyuJtFYseX/HOM5F2ROmzykx7kNQoiZecxOUBTOTyN49uh+NVvHx8Y
5jIKChEWSBbvGw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:05 2024 by rpki-client on console-fra.rpki-client.org