Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
File:                     q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json)
Hash identifier:          Lc8qJMxNnJSXyjS//KBArQ+gcv9DbSpR9PYh4HPiATI=
Subject key identifier:   E5:88:CC:2C:E0:6F:9E:78:51:28:78:47:9D:E9:33:4E:7F:00:97:B6
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       019351D0BCE88264719450E2B5DAAC18286B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
Manifest number:          13BE
Signing time:             Fri 22 Nov 2024 03:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:54 +0000
Files and hashes:         1: 4WTR_sKm65nSX28ISX3qws06mP4.roa (hash: 8GNE7+y30MD5aM1Ec+H20qCtBOsHTruL2533Ue/4QEc=)
                          2: 5pK3xn3RCSbk28U7jV8jcGcESU4.roa (hash: h44wKcfskSFru8PL9R92s4SZAdR+vmjR3VnoWV+IDTQ=)
                          3: BXFaGupvGb_7rosXRBrR7aOH0w8.roa (hash: jssnzwh1IuaaBKw9sa2HjgvzIVkc9gxKHfJAlfj7Iws=)
                          4: CahWVKP_0bIEKAfTmMtB4qo7BDc.roa (hash: iNIpk6kDPIYfwV0h3DMiLTGPePxwscztM50ez7AXK2M=)
                          5: HYtlY-2j_vSeX_uq2SGHzBognak.roa (hash: 2HncDdj5ZCAS6DrPCX1fVuqXTSr2hGtL+sP3suTpTwg=)
                          6: ItAidq3sGRivBWnzKcWHv-cD7G8.roa (hash: 72z2D8OfvpJHzui7MX33dOz/z4gXRUgII6B4X4MWPeY=)
                          7: M0tZkzEB-l6x3EnB5p7mc2j91X8.roa (hash: SNi1TbU6dM9XMLc93mDEYrtbjMTIMhyhyeG5hAbx344=)
                          8: RSB-EpGcYmQqvCP-_BMVPLhK9Ks.roa (hash: MzdnDNmX9sqic4qV75otVvW5P1tM1d7/bzN2H6IaQR4=)
                          9: SdaG1RUEHlXcZNj5OsLUlcmslQM.roa (hash: fAyJgcwRz9/whIxsTCHa+XB94tUVRGhIK4b3BVgxI68=)
                          10: TDxmdUodxC01LUCz-tTkywx87Sg.roa (hash: CQGzfI1i1yJkz1Smpy/O7ZObykHZ/tzRPlR5Rg93DD8=)
                          11: XNlhcLkLDurD8O7vESTK-nzs2Yw.roa (hash: iOznDb8OFv5UyI15UM2/OaQUDebPbBS2HTjA6EN6A/Q=)
                          12: Ywh2-3KIoOsu5EdBQ5QNJs0HDqw.roa (hash: yY7zjKPTo3zmJ1WuCe9EEHgZ0/LrVMCUBOoAIdt35aM=)
                          13: ZIn96X5OvK-g4P0h-1dlUB5coaw.roa (hash: rI5UuZ0o2bUkkTyQ9sMOnKVDt6bMLQvz0fya4XOB7zA=)
                          14: ePe7G_jdSjKbB1Uz720fv_BYuMQ.roa (hash: WfA2uaIcb68XATM/Q/1gprXXV45s5CHzeZMPsBePt9I=)
                          15: nnfKzFjuayeWVX0R4afQKe02SNI.roa (hash: pz2QXz+J7Zh87iJT3LJvKHTJAF1aP919m7VYj0ndx2U=)
                          16: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: kdiR3EtS//l3tr0G5nB8ZMPJ923qQlcArTlkldGtD3U=)
                          17: uv5SozVCIDIOvAPihsaU09GX_aY.roa (hash: 3mJ5bbxrMrLBSzi6MJPphOqkhhxS4tmISAnB0CcBk5o=)
                          18: vAW17GDaUkTUMZuOdGo8sHl_ETY.roa (hash: GrIhvYqH2pNqXS9qR0GcsVok7mJKdJvSyFUUcQBmyPc=)
                          19: vogq3NHUqKHUvj-hdw2XqWWT_uE.roa (hash: LqlqEik9pTeEz+KOg2q6xCeUZGhz+jlMBxP0LfH9dj4=)
                          20: zhwqWaOe_xsyv2EvMb848WZXIos.roa (hash: 3QRSYPX4Owb4GOR/4NIUBkUeugP7SpSKH0ov8V2bEe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:bc:e8:82:64:71:94:50:e2:b5:da:ac:18:28:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Nov 22 03:00:54 2024 GMT
            Not After : Nov 23 03:00:54 2024 GMT
        Subject: CN=e588cc2ce06f9e78512878479de9334e7f0097b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:7f:09:21:b8:09:06:3b:4e:ef:23:ba:0f:
                    ed:dc:a3:f1:4f:7a:86:82:ff:f2:86:e2:e8:4b:28:
                    95:e7:fd:6a:41:20:4b:cc:d0:f1:61:df:fa:6a:72:
                    42:f1:4c:9c:f3:f8:91:ad:13:c8:84:de:bf:38:d5:
                    8c:44:32:3c:98:f1:e4:3e:1c:56:d7:5f:77:33:8f:
                    56:d5:7c:42:f7:94:0d:9b:23:39:f6:dd:86:18:44:
                    7f:50:85:7b:5c:80:86:84:63:0b:d2:e6:5d:8d:f4:
                    42:04:fd:8f:9c:23:17:9a:f3:b5:77:1b:ef:ec:bc:
                    72:6f:64:b6:49:40:01:b6:40:73:53:15:4a:af:f3:
                    30:b2:6c:b0:77:22:58:73:bb:69:4a:de:d3:ed:b4:
                    a9:56:59:36:5f:24:59:40:6f:b3:5b:e6:7e:0e:f0:
                    cf:85:22:d6:14:7f:31:e0:31:d6:61:f3:c7:2f:1c:
                    00:f5:cf:f3:7f:4e:d1:a0:91:81:6d:76:87:89:3c:
                    c1:48:b9:d5:16:23:67:5e:0f:ee:e2:85:a4:b8:70:
                    5d:32:df:0d:ce:44:e7:fa:79:ba:e7:0a:01:0e:00:
                    b0:d2:16:ac:1b:1f:33:27:af:aa:11:41:2c:6c:75:
                    99:18:84:33:a7:bb:56:af:56:d0:be:a7:71:85:6c:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:CC:2C:E0:6F:9E:78:51:28:78:47:9D:E9:33:4E:7F:00:97:B6
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:9f:a3:40:b7:01:8c:d5:67:74:49:24:ce:17:bb:cb:88:
         22:58:30:e6:77:56:18:d8:db:73:0d:eb:0c:a7:7f:c5:0f:42:
         b4:94:8c:47:78:d7:a8:fe:21:99:fb:53:59:b9:77:94:4f:b5:
         6a:12:f0:27:30:5e:74:26:94:55:7e:20:ae:2b:8b:81:71:d2:
         a3:d9:61:63:8a:03:33:20:0d:e2:ec:d0:89:11:4c:49:fb:18:
         b7:6f:d3:a5:af:46:ad:f9:93:e5:dc:9a:2c:46:4d:de:21:98:
         17:77:53:60:f9:75:f4:15:23:b5:65:ff:9e:68:74:93:51:c1:
         d2:88:0e:0e:88:43:a3:fc:29:02:b9:7e:e1:07:72:f2:76:97:
         6d:16:ac:ff:16:55:5d:30:cc:85:84:d2:d3:7e:b1:e2:3a:11:
         a4:cf:75:05:15:27:e0:bc:02:62:81:72:cf:e1:6f:8f:c9:ea:
         80:c4:2a:65:6e:24:a4:06:58:c9:45:a5:cc:1e:63:69:6b:c3:
         3a:5d:4c:81:74:53:bd:8b:ed:a8:ba:37:aa:55:6e:61:1c:e8:
         5c:e2:0d:bb:8a:71:c5:a0:0b:89:23:14:0f:22:dd:d0:50:98:
         38:eb:e9:0d:04:2b:e5:9c:f9:e5:6a:96:19:d8:64:0d:70:bd:
         1e:31:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:00 2024 by rpki-client on console-fra.rpki-client.org