Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File:                     j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier:          Bfywpl85QZ2eYp1KhvgdTxLHrIAnyUsgMRbC5BDpmTE=
Subject key identifier:   07:62:60:C9:47:FB:B4:E4:70:51:0F:89:70:23:73:46:6D:9E:80:99
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       019351D0984F63E8BF23EFFA8958EFA1DBC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number:          0EF4
Signing time:             Fri 22 Nov 2024 03:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:45 +0000
Files and hashes:         1: 1-vIii3jAJIDZG2-jCM96LAXAqqA.roa (hash: rMde5jdYT4tZw/3L5jq+5s+4J2tkn9Crnmi5p4kKYDY=)
                          2: 3mERRw7E5XUgIBH_5pcwphPvXvk.roa (hash: r2r5lkOmQe2LFCismkyuTDNf9ACLsbZo52n6p6bb6Ho=)
                          3: 7R56_1SMoDLDij3kiNZrmfbQydU.roa (hash: 9tDCQRGfj/ixWua0clGoXTxSGSck22qxVLGw0KSNpkQ=)
                          4: E-at7fFEfuw1LhaoYYc3FRfO6XQ.roa (hash: 8fZfWD2S/PSFVpzy86LdHRpJs9otdP13r9CoGdp7NZ4=)
                          5: G-tJbQNhYWi2bxA3l-1ypOyN93U.roa (hash: mk2EDR8kJOQ2u8TvlylIA/NlXKa28TNZvc6ll9JkDF8=)
                          6: RxzxGM0-uMrw4ebSEFkcYJDRQW8.roa (hash: /SVi5aDIZsJDvgbNgwfdbGRIPm0sdTbBIhJHM59xRBs=)
                          7: _9Ca-4A_FKGdBTstsPnJdb4wD6s.roa (hash: nxUPJN6G3qyO9bhrzgu4OuPnGyTw6aqQCJ2+v4MntLU=)
                          8: cNHFwsOoDikZt5uSPJXZXaEBTeY.roa (hash: nHj4U3SdIUDhEPCxLvSlZncwpuKRzhfARJGc5ZH9Hug=)
                          9: dCrh_dPltT4bIq_iR7Oi9-T8VyE.roa (hash: VCVEZSuPwgdkGTUbQ03XEBWB8NevbIv3zBH00VcKa+Y=)
                          10: dTniicGpoRuThTZ6OxASv_yioIA.roa (hash: jmndkyBYe7wZ4qXr7bsaADZGa/wXnjj+CRpq+6Ozl+w=)
                          11: hRYV0IPTQbNWD03hYfgdgWeIlTg.roa (hash: cJBTfGQaT4WYtQ4nC184al31pcjRU+v5UJMXU8e0leQ=)
                          12: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: aLgsQD51x0jFqiDgNv/5iaYOJLfFbq8NWQjQ8Ni/TSk=)
                          13: laN9fAI54uKEgXiclySC4U5bPJE.roa (hash: 6C0fwRXHJnOf0i/lYAsmr5HzbBYLJWo8IfBTrCPj7BA=)
                          14: py7CaC981pUoomvLlluEXO_Xk1M.roa (hash: +QLUFNXRP2Ovm+NQaSnHacUtIA/gxgY+3GggSsOhw5Q=)
                          15: qGPZvfRNnWmr00eepmaYJPMjmDU.roa (hash: Xdg6V4RatXkBGaTy6MJnwG883/Tq5Hs2kfUyBiAMmiY=)
                          16: xBGehg-rWoErrndMqAPitvitPu0.roa (hash: mITwKMbJl7Pp9fOAoiT79a43cWlOOV82h3f57/WlObk=)
                          17: zd4oqZevcPI8RGzQuGHNrPLplmQ.roa (hash: PhzaY2rpouGuwAydj2VvJjEzg8U6QoNbRR9fK1kvn90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:98:4f:63:e8:bf:23:ef:fa:89:58:ef:a1:db:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: Nov 22 03:00:45 2024 GMT
            Not After : Nov 23 03:00:45 2024 GMT
        Subject: CN=076260c947fbb4e470510f89702373466d9e8099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:c2:aa:ba:9b:75:80:0c:61:77:5a:4d:9b:
                    d9:01:64:05:ac:a4:89:c1:f9:9d:8f:67:ec:35:45:
                    5d:cc:1e:df:32:db:96:32:3c:4c:4d:1c:9c:b3:d3:
                    d4:30:6f:2b:09:83:a8:5a:66:d4:5a:33:f9:37:8c:
                    08:f4:9d:16:af:4b:58:26:79:32:14:e1:40:ec:dd:
                    bc:f2:13:d4:08:59:01:dc:f4:85:84:a7:a4:46:66:
                    50:4a:44:77:16:bc:ec:44:7f:df:04:d6:c4:cd:f1:
                    cd:0c:4c:09:be:25:84:f6:f4:d0:98:3b:42:8b:a9:
                    0e:59:0e:ea:59:87:21:c6:5f:f2:ba:5f:ab:77:da:
                    d6:63:97:93:e9:72:1b:12:e0:10:a9:3f:e3:2c:99:
                    db:20:32:af:46:90:7e:f3:cc:0b:06:3c:13:3f:fc:
                    a3:ae:d4:48:32:ed:bc:4e:a8:83:ba:b4:0a:65:1f:
                    8f:6f:0e:8e:1a:37:96:2e:5e:20:c4:24:32:58:dd:
                    5e:69:90:07:a3:2b:f6:9c:cc:8a:31:b1:31:8c:23:
                    80:95:51:61:e5:40:68:c5:fb:90:48:c8:55:52:db:
                    0f:43:96:4a:50:a5:45:bc:97:38:6d:33:8d:4a:bc:
                    af:22:39:f6:3b:09:fc:1d:22:52:ab:8f:59:fe:71:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:62:60:C9:47:FB:B4:E4:70:51:0F:89:70:23:73:46:6D:9E:80:99
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:ce:1c:bd:38:61:f0:ea:eb:19:3c:62:76:92:8c:22:40:
         ff:69:3c:19:5b:6c:a0:f8:cb:3f:57:47:b5:4a:d3:c8:75:66:
         c4:10:ca:3e:f7:26:54:69:07:27:94:09:3c:50:af:01:47:b9:
         6a:3f:3e:1c:f0:38:66:f3:10:6b:3a:cc:ec:cb:43:11:9e:bf:
         24:7c:81:5b:d1:3c:0f:33:2d:6b:60:7d:2a:16:de:b8:cd:ef:
         6f:76:68:f1:13:74:66:bd:7e:43:90:d4:d5:7e:f7:7c:e3:53:
         16:c1:db:e3:56:db:a6:c3:49:0a:c0:5e:8d:a8:6e:c1:c6:8e:
         8a:72:cf:56:9f:0d:91:52:55:3b:99:f4:9a:ed:0e:09:ef:8e:
         fb:64:0c:23:02:90:99:c2:63:e9:16:d2:77:ae:04:bb:db:fb:
         ee:4b:7d:43:a9:03:67:06:b2:c5:70:d3:a4:6f:a7:b7:4a:35:
         78:ba:13:82:4a:b8:88:82:0b:29:fd:b3:79:5c:28:57:03:f7:
         ab:6e:6e:2f:a1:58:45:d1:7b:17:3a:2e:dd:26:78:ef:5a:7b:
         1a:41:45:5a:4b:4e:4d:5a:2c:e9:53:be:6e:9a:a2:70:f5:02:
         6e:bd:2a:dc:c4:34:47:46:03:72:45:59:64:cd:1f:a8:bc:93:
         74:b7:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:28 2024 by rpki-client on console-ams.rpki-client.org