Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
File:                     93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft (raw, json)
Hash identifier:          IwzkVvM/uzsVu+5rzcTm3JDNPFScKQdjMPp7e1ll1lA=
Subject key identifier:   69:02:2E:99:71:65:0A:A2:89:D9:31:EB:43:70:EC:70:99:11:01:2F
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Certificate issuer:       /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial:       01935387ED40550F1F8045BCDD00DE12A20A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
Manifest number:          1394
Signing time:             Fri 22 Nov 2024 11:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:37 +0000
Files and hashes:         1: 08SMiwwmuJe9iT_EamZdA2Erw58.roa (hash: elCL51owtW/musIBcU0P3I+or+r535DqClc0pQhOciY=)
                          2: 1QlU1qea2dJlbU2dd622iH5e7TA.roa (hash: kLSdiFAlksJuN40Tk4Sl9AQoa0RwwEbOTbqA8ILUhZg=)
                          3: 3v8t-T_1Z1mJhtaQZINyjyjPSnE.roa (hash: DGRvhUsu67g0JZlFpKbNd0i1dFvQPP8NpdEVm4vVN78=)
                          4: 53NqsmzyQf_88gG9QeAaiy7bE04.roa (hash: WS1blP18xRJm+pHN+kkJ6AdJBrrJz+2YZ5hBh103o48=)
                          5: 71iubwt9WxGYYgKF1WDcJWnDxPI.roa (hash: kmQ05b5nZMymFwgjq+wKGNTMtGbXqSawuDVqn0Hzz3g=)
                          6: 74EQ4cQFoD0t1GS9-XszfOzPubg.roa (hash: 7XaR+875j+L0dueXg+FMPf0znrQnfs20mf27Q74sTVI=)
                          7: 93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl (hash: MiWA5qFgl1mNN/NjuTkK7TUvZSv2D3z5/UPeL5F7qBI=)
                          8: AiSM8CjQZqeCdf7479Nm1yQHRjo.roa (hash: DFxH8vt9O6FF8AdG4j9bRWe3GoaasPISCASJyF3r2Rc=)
                          9: CB41sOkpNDCcpoYVbTjI0Hl6Cug.roa (hash: 6BiCh5CzND467RshahM/SfPsX1fWbLKGCFumUEjJmGI=)
                          10: D0VY1tnyW1sc1eci763M9M_Qb-w.roa (hash: Gx4ftABrrrIUB2Otbma82QUFNE7z8rSGuxi9F+Ny6b4=)
                          11: DhQoCmHaZB-KcIBOcwJUb_Tf4GM.roa (hash: vQKsfMWiN0sAvipDPKJDRIPjgfAUBToBlMwvvoe0G1c=)
                          12: Gu-VxjT05ndmrS5-mKliAsGc-RY.roa (hash: hxSWxbUYRwbqgh9dcymk6VW3hT8/kAUKHrkjPR0pyzM=)
                          13: HD9kcrEP7U4PMxwMZJa6QqrBK5k.roa (hash: Eu3NZQHQYqcF7RvdVYswrcAidNOqbPsMPIoGdfw1B4g=)
                          14: O-8ti_JrAXg0yeTy70UsW1FRGEI.roa (hash: jJ2eiTyu2wJYyB43RXJNf6Nn43dBw08nrCHtrcct/k0=)
                          15: VBvrP_8pGTVwE0p15o-RtI5bJHA.roa (hash: jgoYtBF7XKAKJ21+av6N94S12aHIAd8+jwF4jFrqWzg=)
                          16: YpnmOw9MOo6PIkz2nTjspWkJeNo.roa (hash: 1hInVVZyI9IXhmPSbUPMrT/9yFwt97n3V8jhFRd6Fgk=)
                          17: aSfI1J6Bgu3rqaEIE084AZ9b6pI.roa (hash: FZkfObYTynUk8qwFY+KJ29s9MbIvFtGIw7SDxOdIGbQ=)
                          18: fv4yBGRCO4HNGn_n27mvIXMhsM4.roa (hash: zUbqrw6BZwhT5340Ep2QHivER3OiqqMeQFGjPQsK45g=)
                          19: fvUKemEIJpfn_j3bnm3afrQiB4I.roa (hash: ERPf+5SN3Q89DthAAuXM8c4lZZYmWJLq2OQ6W07dB/c=)
                          20: gDJWkiL4oI68wgwbV7a4YFt7Urg.roa (hash: YqBWmExJlZoKMRISKRUlh/tvpvRSIbRLV6XCU1HH4V4=)
                          21: hGSWc_z0bl4bEYSvaaqI3Yxep5M.roa (hash: JXRvi+Y1N6Resq5tcARWwJC+l+hT8eH1rY2cCWJXTik=)
                          22: icYdpu9HcREOGMi2GAsXxpblwbE.roa (hash: Y02PZ7nm8ZckSBD/mChAGCBgS45TzPM3+Ig4mcq2bzE=)
                          23: keuKt-dF86Ri4yFMN9FHIezBpVI.roa (hash: vSaWA6uiQSFnBJnH6qE1Y6a5yTbvHiGaOJT13h4dKp0=)
                          24: mwhJ8uq9F_nov2fljLpsQfUuXEw.roa (hash: oud9F+4gspdMiDxOM1/uOv7p8rbzJtaUiNUt75qegy8=)
                          25: naN_wk-eaom_oZasZnM08I6laXM.roa (hash: reArNPeh5sy/5z31/gOHoE8pb//a185oVNqpk+f3DK4=)
                          26: oUvAsEzc1h5Cmx1eLMuAYWNV7vo.roa (hash: rxjs0a+O3tdqGRXUgs/nyOHUgml3msPz3xm+Jpmi/dE=)
                          27: pL4MgbxaVeM95ofhP4s7O22kFY8.roa (hash: Ev2lsVAQBBNeeECkda7BvxLWK/Mk6VY1ZRK8X51X9C4=)
                          28: rwt5oht0TgJH3_j0YKODiMyqDPQ.roa (hash: 7JeYqHcrWUAeOJEmLbTWMhgHfLaiqcWRE/5+38j9Obo=)
                          29: s6IgUTP3ECu7MSKGKCp6DDWVXVg.roa (hash: l1/AoZw5GxpCBTtKp/KnfoWM2+Q1bZ6TEMewYkLTDLM=)
                          30: tfk2vjCoFtP56d9PvwtT-qQ6SjU.roa (hash: Ak0f4gcCulLmPBcTPDeYH0HZVt+6XxNpBIz8cPCox3U=)
                          31: u4ngFqwT-Gtmu-qWULVksAZdQz8.roa (hash: W+6V3VgIrriLFJf+tFWbO8Y9X+fEX++QWsK4POohGEo=)
                          32: uLb0IG0h1MSYmhYwGZJpjOTCduI.roa (hash: 6g1j7fZQVGPlWkpbjr8nXn7jMIK9S12HJJoopdFYi3I=)
                          33: vlw60xom7GBngXO7zR8qpYIoeYU.roa (hash: jJOy9bGUdrayXXpiR+/srObAS1H4ddgFhRKLEA50u3k=)
                          34: x41ICQgBBY6WdtSq8gC-IghgZPo.roa (hash: zBPJJa9Xymv+wW5zuTTNUVz8AJs3TZ8hoAsKCk5VVQM=)
                          35: xvCcGjnQpyLYtTvYTNTtyKDjpQM.roa (hash: YAgCr4Fya2YYuNzY0Zp/WjtExl0p7JLFBDh0omMbfXE=)
                          36: y-kHeyrmzVoHIuhRZU-dEdauAzo.roa (hash: SytMjCNFfsOObaGn5u0io5LUi9le9uBKulFZJbfl/mo=)
                          37: yhdk6Jf3Xgzw7WseCHpbnLCZ_IY.roa (hash: raPqjdR767gLSyUpVzNm6r8SbmoenG039bn/JlVzsMY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:ed:40:55:0f:1f:80:45:bc:dd:00:de:12:a2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
        Validity
            Not Before: Nov 22 11:00:37 2024 GMT
            Not After : Nov 23 11:00:37 2024 GMT
        Subject: CN=69022e9971650aa289d931eb4370ec709911012f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4d:71:e4:fb:43:d8:82:8c:7b:82:e1:1a:77:
                    be:29:c0:48:7a:75:89:04:c7:36:f6:9b:2a:b6:7f:
                    b2:10:b6:07:d5:be:74:37:d8:11:95:49:69:f5:96:
                    70:04:fc:7d:d8:bf:a9:87:d8:1a:85:cd:87:60:8f:
                    06:3d:d3:ef:ce:79:22:1b:96:49:b8:12:18:88:5c:
                    1a:5c:20:ff:46:5a:61:9c:87:b4:f5:12:42:7a:24:
                    7b:97:87:a0:d8:70:47:6a:60:d7:84:48:c1:a2:bb:
                    cf:8b:9e:11:f2:dc:bc:da:86:4d:31:f0:a6:0c:db:
                    34:65:2b:91:f1:56:af:7b:ed:86:ce:d0:5a:f9:65:
                    52:9e:27:8d:5b:8f:06:ad:11:bf:c5:b1:50:38:88:
                    0d:97:ab:27:42:65:d4:88:85:af:1f:f8:35:ae:29:
                    ac:62:de:89:b8:e0:65:8c:eb:0a:32:f5:cb:f8:f7:
                    3b:e3:26:a5:3c:3f:c0:0e:64:82:72:ba:e4:40:10:
                    c3:9a:88:6e:0d:0f:4d:15:2d:9d:a5:f2:4c:a7:45:
                    d9:c6:1e:2a:5d:37:3c:33:62:e8:e8:86:d3:dd:9c:
                    54:18:81:2a:ef:c6:c6:20:24:5e:cb:30:7b:14:0e:
                    d7:6a:d3:71:f5:6a:3f:94:73:de:33:f4:f2:6a:ab:
                    6c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:2E:99:71:65:0A:A2:89:D9:31:EB:43:70:EC:70:99:11:01:2F
            X509v3 Authority Key Identifier:
                keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ab:e0:94:57:65:2c:c8:a9:84:16:7a:3b:90:9a:99:fc:dd:
         60:d8:9b:20:0d:91:c0:45:71:5e:81:77:48:ac:62:57:73:f1:
         b9:ad:9c:6e:03:09:47:e1:eb:b9:41:68:b0:b6:ed:c4:a4:a1:
         21:de:e7:20:8d:eb:dc:08:fd:64:36:67:df:55:2b:d3:84:cb:
         37:e5:5c:4c:2f:b9:65:2f:b8:d9:cf:32:78:5d:d2:34:90:db:
         82:e2:f0:b7:ec:e4:ad:ec:fc:52:06:c7:d2:1b:a8:0b:b9:8b:
         bd:00:36:6f:69:d4:b2:2a:e2:d9:6f:c4:69:f8:4a:47:93:ca:
         ac:8e:67:1c:24:bc:8f:f9:9e:37:d0:24:3e:be:dd:45:2a:ae:
         a8:fb:5b:dc:82:30:6f:81:5e:96:0a:81:67:91:30:f5:0a:09:
         b0:93:83:a7:36:26:13:21:69:dd:27:c6:93:5c:db:3f:63:87:
         5e:87:56:6a:19:c2:d5:1e:76:36:0a:11:a5:b5:03:23:37:33:
         c8:1c:c4:1f:59:03:d3:18:6f:a7:0b:c8:d0:9d:74:d6:8b:a6:
         9f:eb:71:8a:a5:c0:21:db:0a:d4:f2:3a:25:d6:3f:d7:4e:5c:
         3c:c5:91:87:dc:79:4c:2e:d7:19:1e:a8:6a:93:49:15:85:86:
         8c:46:2f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:44:10 2024 by rpki-client on console-ams.rpki-client.org