Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File:                     Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier:          +ijs2N2L1IqNGgX7Xn90mDjaErYJtu7YMYEaFIpDtis=
Subject key identifier:   9D:07:13:05:27:50:5E:4C:C1:35:1D:B1:24:27:D5:7B:AF:38:AE:EB
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       01935989E394317ECF2DF964B0CB7E873A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number:          1379
Signing time:             Sat 23 Nov 2024 15:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:29 +0000
Files and hashes:         1: IbI07LQ22nbhua3zdt6Hs0h6JHw.roa (hash: YftXpyfcnPKIfW1q7D3R5EZVbXQ65XG0/ZlZCZDnYP4=)
                          2: J2KVaAC8-Ih2zH8gS7TGr9o7N-0.roa (hash: 3OxuHqbj885+L0ozx/vZS5VboRpq8jKrsXRNqUysq30=)
                          3: OqeWW29XF3TV4JiYZMshFmcOmPI.roa (hash: 2zF8zdAiY1Vu65/7ReYALXmK4T7KsELGCYBnuIV1JXw=)
                          4: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: S7akv9Q/AyWX4z514Xj1Yl1tH0wb7bvobtiwB+GlYu0=)
                          5: iaCMHVBu0_bUpYbfLFCw69Xv6qY.roa (hash: n8YFksfLxTssmGnZHir4W6PzMs+W3yHclF985wiqCNA=)
                          6: ymmmTMOjuGw8y3bSiLrYGBxbTqU.roa (hash: oVcdMx9cjkPth4zxxRQNkD35x4VHhyi1C6lAViqenCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:e3:94:31:7e:cf:2d:f9:64:b0:cb:7e:87:3a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: Nov 23 15:00:29 2024 GMT
            Not After : Nov 24 15:00:29 2024 GMT
        Subject: CN=9d07130527505e4cc1351db12427d57baf38aeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:ff:cd:cf:ee:8e:64:87:a2:41:e8:0e:97:
                    25:69:4d:e9:50:c6:f0:d7:2b:af:f4:fb:48:9f:d5:
                    4a:8e:4b:45:28:7f:9e:b7:03:27:b6:08:38:14:de:
                    d1:a2:0c:6c:bc:a8:98:19:a9:70:14:fc:97:57:5f:
                    24:ca:78:8a:4d:86:e2:02:b4:17:11:06:71:15:dc:
                    e8:61:9d:03:14:54:07:0e:78:77:26:71:fe:9e:fd:
                    20:62:0e:d9:95:4a:ee:fd:91:1e:b2:a2:bf:44:7f:
                    be:98:fa:6a:dc:23:7f:73:20:8b:7a:37:65:e0:61:
                    0a:a4:31:1a:71:0c:c0:a8:29:e0:f7:85:ac:6d:bc:
                    1e:ce:d1:59:0d:b3:8c:dc:6d:42:65:df:c6:e0:04:
                    1e:c1:01:fc:d5:fe:11:b5:44:3d:2c:65:63:f3:cc:
                    c8:6a:4a:b9:24:40:05:30:07:b1:ca:d4:9d:2e:bc:
                    16:39:fa:1d:a7:56:8a:2e:2f:a5:e7:98:95:cc:8d:
                    d9:4f:8e:60:1f:32:6b:c5:f5:2a:84:9b:cc:4e:7d:
                    e3:93:7f:af:1d:27:5d:fc:95:80:4f:91:6b:dc:cc:
                    d8:2e:2d:b3:9d:42:89:4e:f8:dd:b4:71:10:56:a8:
                    d8:7a:40:fb:58:0f:c6:82:a9:b1:65:09:9d:e6:66:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:07:13:05:27:50:5E:4C:C1:35:1D:B1:24:27:D5:7B:AF:38:AE:EB
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7f:81:a5:88:c2:5f:ed:99:ae:da:0d:f8:6c:0c:13:ba:b6:
         f0:a0:26:c6:49:e4:5f:1d:b6:69:ee:eb:4d:bf:4a:ec:f8:4e:
         b8:e7:34:80:62:4d:b2:0b:0a:65:84:9f:db:cb:ea:12:95:89:
         11:4d:ef:89:fd:34:63:cc:21:32:bc:69:2f:46:ea:44:69:1d:
         37:05:08:bd:18:e6:07:e4:b7:dd:21:84:21:9e:66:cf:5c:d0:
         44:9b:85:cc:94:c1:ee:58:0f:d1:55:83:61:e8:80:be:7b:50:
         4c:12:d8:bc:b8:10:f9:2b:20:fe:d5:ce:33:45:48:d1:dc:0e:
         10:0e:4e:8a:c3:4e:2d:b3:0a:e6:a0:10:aa:ce:e6:43:4b:d7:
         c6:8e:f1:eb:3e:74:84:46:4e:3d:e3:18:b8:ff:99:e6:34:f1:
         7c:28:e6:eb:e9:d4:ba:27:57:6e:7c:c2:c1:62:f1:32:78:aa:
         06:5b:1f:70:f9:c4:1b:a2:d7:58:1d:b7:c4:b0:ab:2d:28:72:
         3a:71:78:c5:7b:bc:de:60:39:b4:f2:a9:a0:a1:6d:e4:d4:ae:
         63:c4:ca:e1:d1:52:98:86:40:b1:03:2e:a0:74:77:ce:7c:f9:
         ce:6e:19:18:a9:81:de:ac:7b:70:dd:09:13:b7:19:56:0e:c8:
         13:2e:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:59 2024 by rpki-client on console-ams.rpki-client.org