Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          1W3sloBYXkc9HQ69MNbcpYU67LtDTZtsgK57Vg3taao=
Subject key identifier:   FF:90:B6:C7:78:6A:07:37:CF:EA:A1:8E:80:F1:D8:26:D6:7B:7A:85
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       01935274FFD94A462A89CCED5429BCD5E66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          0E97
Signing time:             Fri 22 Nov 2024 06:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:19 +0000
Files and hashes:         1: 5vgCgcviOLaVgJOyGCUdF0k_bxQ.roa (hash: txByLLTu7GrbmUPCyw0pChnKd3P0Lp8Gp8kzpBtZNUM=)
                          2: Jk3Oi2w57jd9sVdzA_ECByInxdA.roa (hash: WceOPKX8btegh7uanX/p+QU3a96nlF+X+g67lLCWaGY=)
                          3: PffA6g3RgEZ7uR3duANkbB8kYVQ.roa (hash: uYbiSTbdByAzcQ4UTNupPNeKGQfQfuLxI/gwFRdSuvU=)
                          4: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: P+wKCp0I0wyzmVt6RI1mUwUEadvCHv1K250yEMv6blI=)
                          5: qhfy9J3hmWj07IWPmBCIHeF7xFw.roa (hash: w7+8T/bLTspAk6W8SrIsoufPCTCPG1paPC/piEydfaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:ff:d9:4a:46:2a:89:cc:ed:54:29:bc:d5:e6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Nov 22 06:00:19 2024 GMT
            Not After : Nov 23 06:00:19 2024 GMT
        Subject: CN=ff90b6c7786a0737cfeaa18e80f1d826d67b7a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:dc:fc:69:4f:cc:fe:40:1c:4f:53:56:49:
                    a2:fd:ec:ee:25:fe:a7:f3:b8:5e:d2:c1:78:90:a9:
                    f1:4f:ed:b1:ed:3b:80:8a:f9:97:e1:a7:6a:50:60:
                    76:7b:8c:81:c7:ac:df:73:f2:1c:93:1e:bb:87:c6:
                    ff:22:21:f8:fc:f5:14:0b:d5:1f:c0:85:57:e0:ab:
                    96:64:4a:1a:5d:d1:6f:df:24:d6:e0:4a:fc:0b:2a:
                    8a:51:12:82:55:a5:47:51:f6:6a:3a:1b:2b:35:b3:
                    f5:e9:a8:36:c5:73:94:3a:e0:ac:c2:70:c6:77:b9:
                    ea:e0:39:c2:b5:24:a8:6a:3c:00:b0:f8:a5:ea:09:
                    92:fe:a8:4c:e2:70:c4:a2:69:af:ef:e6:a1:02:ac:
                    fa:f1:4a:3e:08:49:40:35:47:3e:1c:3b:17:cc:e2:
                    bf:f5:b0:2f:8a:5d:97:f4:31:6f:02:36:4d:33:a0:
                    78:20:0d:ab:78:3c:6d:18:65:81:56:e3:2a:00:f6:
                    c8:06:44:31:7f:83:f3:49:fa:ed:32:53:41:0f:f9:
                    16:b0:c9:6d:75:a0:d4:d2:95:70:f4:43:ea:cd:43:
                    79:e9:bc:fd:d4:89:df:03:20:9a:19:75:fb:c7:e5:
                    75:8e:1f:be:74:5f:88:32:ad:93:f7:1c:c6:21:cc:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:90:B6:C7:78:6A:07:37:CF:EA:A1:8E:80:F1:D8:26:D6:7B:7A:85
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:f2:4b:ad:ae:f6:f5:60:96:ac:e5:51:32:c5:57:49:ec:
         e5:01:81:95:03:af:d3:f9:3c:7b:d2:65:44:c1:4d:33:13:dd:
         69:7e:11:74:9e:a6:8a:34:1f:30:13:5d:da:fd:9d:e9:93:92:
         4a:5d:de:ea:40:e0:b1:6f:48:0c:90:07:63:6c:b0:78:5f:2e:
         fc:ce:81:6c:5a:d0:63:fd:2e:ce:c0:5b:54:7d:e0:5f:51:85:
         97:88:18:e7:c5:80:1d:c9:49:5c:81:c1:94:4d:4c:64:cc:8d:
         67:f9:c0:59:53:35:db:8e:c6:81:9f:94:db:a5:f0:ae:61:a5:
         47:67:58:6a:c0:e7:9d:b4:62:c7:e6:ea:30:cb:bc:3e:bd:71:
         88:e5:65:8c:cc:3b:48:7d:53:21:77:5a:90:7c:24:99:60:fc:
         7b:bf:64:d7:d7:0d:06:ba:07:d8:7e:89:a5:99:05:3a:25:6a:
         45:f0:7a:96:28:43:50:09:d8:51:58:d4:9e:81:7a:85:81:1a:
         9a:e4:b2:cd:6f:0d:e7:50:fd:e2:ec:b3:9e:fb:c4:e7:4e:26:
         4f:c9:be:48:0a:d3:6e:ab:4d:94:2c:68:4a:72:16:da:7c:11:
         bc:56:02:4c:fe:3c:7e:eb:34:1d:95:d8:12:7b:5e:e7:42:b4:
         f0:44:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:10:25 2024 by rpki-client on console-ams.rpki-client.org