Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File:                     HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier:          Y3r6154r3lzXSbSMDS9TiwhzZdI/yNG6u+HC67Lfr9M=
Subject key identifier:   DA:80:E6:DF:1F:50:6C:48:23:B8:74:0C:0F:27:9F:F1:E4:F2:03:5F
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer:       /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial:       019369D99768DEE39A5403F0B14EADF133DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number:          096B
Signing time:             Tue 26 Nov 2024 19:01:27 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:27 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:27 +0000
Files and hashes:         1: Guq8UY9UwoB1dEGM-Fnv-Bt3kbk.roa (hash: fZrrHAcMYEBP85C5Rrhowm33LmVIMCYVNB82IeneJFw=)
                          2: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: EpaFn/u7hvaEYqStSJWwrcNsFKxNo85ZF+FJEeXgcP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:97:68:de:e3:9a:54:03:f0:b1:4e:ad:f1:33:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
        Validity
            Not Before: Nov 26 19:01:27 2024 GMT
            Not After : Nov 27 19:01:27 2024 GMT
        Subject: CN=da80e6df1f506c4823b8740c0f279ff1e4f2035f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:77:c8:b7:9d:88:22:6e:ff:44:cf:d5:f5:
                    c3:f6:36:d2:79:d3:5e:e9:83:36:80:55:08:b3:7e:
                    62:43:8b:58:97:cf:72:9e:c3:bc:62:7a:35:61:92:
                    f7:19:62:35:ab:2b:bc:24:4d:fc:40:2d:01:15:72:
                    19:c6:08:f1:15:30:98:60:d8:e3:0e:1c:30:36:a1:
                    ad:f3:c3:31:e3:a6:ff:9f:1e:8b:66:a0:a2:09:75:
                    38:3f:ea:bf:be:64:30:08:70:bd:36:b3:03:8f:4b:
                    1f:02:ca:2a:8e:2d:30:6e:c4:5b:5b:84:ec:88:49:
                    71:ab:fb:3e:ed:b7:f8:0f:af:8b:c0:77:a7:c7:35:
                    c4:92:cc:03:b7:8b:f1:4b:77:fe:4a:25:c7:c3:96:
                    dc:1f:67:df:4b:a6:aa:1b:b7:98:e0:86:0f:85:fa:
                    8d:52:ff:71:83:0d:58:8a:91:96:40:9f:b9:23:ee:
                    42:ff:5d:f5:4c:65:69:8c:fa:df:da:87:db:8f:23:
                    74:a5:d5:7c:08:09:f2:d3:40:1f:45:03:7d:de:d1:
                    63:8b:4e:c3:d5:43:0f:1f:08:a3:b8:f7:1e:c3:63:
                    df:76:ba:be:ec:34:3b:9b:da:31:0f:51:dd:7d:78:
                    04:e4:4a:24:ea:e6:c7:e6:c0:1a:81:ea:cc:8c:55:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:80:E6:DF:1F:50:6C:48:23:B8:74:0C:0F:27:9F:F1:E4:F2:03:5F
            X509v3 Authority Key Identifier:
                keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:95:0e:d9:e1:0b:84:16:16:3e:6e:01:ae:4d:96:6d:cb:c7:
         e8:41:c8:b6:a2:7f:f6:c8:c3:6a:14:9c:24:71:9d:86:d7:de:
         94:c9:71:c6:ad:ff:ab:77:7e:47:5d:b2:3d:33:d5:ee:c0:d0:
         cc:16:72:44:66:74:78:df:ae:d3:7f:56:58:a1:2f:7e:cb:13:
         77:48:68:b6:21:6d:74:62:c7:5d:b5:b1:0f:cf:bb:5d:34:87:
         70:ee:ee:d0:62:5a:bf:88:18:6a:ec:d3:5a:f6:eb:9d:04:96:
         25:01:f8:ad:94:0d:27:e3:01:4d:2b:4d:f8:6e:00:18:7a:2d:
         a6:99:b5:8a:0b:d8:45:b7:ae:ac:eb:6c:97:c0:ad:d4:e0:b5:
         90:93:66:6a:04:60:aa:a1:64:cc:d9:78:24:c3:38:40:0c:d3:
         d5:3b:b6:34:ed:53:bb:50:fd:b6:56:f9:45:8e:d0:79:cf:a7:
         a5:3e:92:5a:aa:e9:5d:4a:c4:01:ea:94:f6:41:39:d6:57:5d:
         86:9c:b2:b7:00:f2:fc:4d:a6:18:b5:0b:b4:be:e3:1f:7f:83:
         e5:08:38:ea:3c:e7:88:6a:49:4c:a4:00:16:4e:97:de:4d:2d:
         b5:53:7c:d5:b7:d7:4b:37:c0:69:35:12:ef:68:68:82:97:44:
         0b:98:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:36 2024 by rpki-client on console-fra.rpki-client.org