Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File:                     EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier:          8ckaZphdxJGv/tNhZcsnxSYyCy9ToutTUYXoGNVKT5g=
Subject key identifier:   96:20:30:4B:9F:56:51:E8:A9:E0:46:59:98:B6:70:97:1B:70:46:BF
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       019351D04C92E733826638A3F73E4F886225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number:          061B
Signing time:             Fri 22 Nov 2024 03:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:25 +0000
Files and hashes:         1: 1-r0knuDj6p-n_dndpf8KWgRchMs.roa (hash: 9c1p/9uFVGi+eHJIPhv0+gkDnDUFVT/Tklf/k5OHPA4=)
                          2: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: 8yNwPi0BZZD9cvZI8Wg3OSeJQjZNYVdu2qyXlLI8hnE=)
                          3: PW0ptNWYyiHTNccs_QgxDEOQM90.roa (hash: oZLXXV1RYjmCNAvrffIMNFJySyrC+99lnApmqitlH/Y=)
                          4: QnOqy9Suw5lBQpKVHhITObvabCA.roa (hash: KG35b5ujsdrNXP5YtWj+zBoKoYGR/RUAvaiAUYJrWNc=)
                          5: bMW3SySRf0OaXjqK2w37ED0thaU.roa (hash: ZHFjibOSCa7PLB4PJWBGpK47fajsE70FKpux3t/IgUM=)
                          6: eopGswgy9S7acYRvgPpGI2Cyb14.roa (hash: 8YEKhU3xD/vAcsoM0rWvEOUN3ymxDJTvzC+gS8OLr6w=)
                          7: j9fsH4fji6u6DtjyUtf5cZA62wY.roa (hash: Nwmv4D79NmgxxwjoHZOXI+NI6uzf0SceDkg8prxoPzg=)
                          8: wv-lmmXFp7VOmJY6ALdcHdYbRzQ.roa (hash: i0kEaVpAsqL2i3UqJrHqN946cklrKqiAgnL1f2mTpag=)
                          9: xAY2KK-HQjaLjOiy3SHcg5Yq2Vw.roa (hash: wpF7ONvlh4HWErKLvh3u9kFUH2M54A3LUAZkTUufnqQ=)
                          10: yf6UlKfhP1z7ou2SWEVz6aWCgz8.roa (hash: dFXv1LGZFzoE31nqJwJ3rlY+fq6WQcIs0w7zDotgWAc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:4c:92:e7:33:82:66:38:a3:f7:3e:4f:88:62:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: Nov 22 03:00:25 2024 GMT
            Not After : Nov 23 03:00:25 2024 GMT
        Subject: CN=9620304b9f5651e8a9e0465998b670971b7046bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:35:81:d4:45:5b:8e:e7:2c:92:84:48:60:
                    93:9f:9b:17:0f:ed:92:ae:79:3c:e5:ad:eb:dc:3f:
                    ec:ba:5a:6a:05:e9:e6:a7:d3:5a:45:08:32:23:11:
                    41:79:1c:50:73:47:aa:01:1a:43:1b:40:80:ed:b7:
                    db:b0:97:80:0f:85:9f:8b:a3:6e:cb:a9:9a:b4:d3:
                    58:a1:bc:29:ff:6c:00:d2:f7:4b:5c:68:a9:a9:01:
                    ff:76:a4:2f:4d:4f:3d:84:3a:88:80:2a:5d:55:bf:
                    82:f9:29:bc:fc:b2:67:15:74:62:5a:f7:20:19:50:
                    66:5e:ee:6a:8d:1a:48:be:a0:b5:ab:1a:9f:53:41:
                    d4:03:81:d3:20:2a:fc:e1:86:3e:3b:53:b7:a9:6b:
                    d8:48:91:db:36:21:bb:cc:65:7f:f6:d1:32:b8:27:
                    8a:1e:08:d5:4f:0c:56:2c:84:67:93:b1:30:0d:99:
                    88:5f:d5:d3:dc:17:05:0a:6b:dc:0c:82:d6:1e:76:
                    25:78:da:3b:2e:19:62:a1:7c:69:a2:e4:7e:4a:13:
                    75:f2:4f:f4:08:df:b7:db:16:95:ba:99:13:e5:5a:
                    70:c6:bd:e5:7e:0f:ce:1b:b7:4c:2c:06:d6:8b:7d:
                    fe:60:fd:d7:79:aa:51:db:f6:2d:78:bf:96:17:21:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:30:4B:9F:56:51:E8:A9:E0:46:59:98:B6:70:97:1B:70:46:BF
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:3b:9c:39:47:29:f1:63:76:58:f7:fe:a8:c0:db:ba:e8:
         d1:2f:72:53:c3:f5:2c:c0:5a:5d:80:4e:43:02:d3:4b:ec:09:
         f5:8a:d4:f6:23:1b:73:66:bd:f5:aa:4d:96:b9:e1:f6:ca:ae:
         8e:9f:16:a1:08:f4:58:c8:3e:31:d9:d4:77:46:17:81:75:77:
         8a:47:6b:e1:57:c7:ed:a8:c9:cb:04:79:b8:eb:4d:7d:cc:40:
         c6:55:28:e8:02:b4:f3:14:e8:ca:cd:8b:85:4a:44:28:29:b3:
         c9:df:a6:86:d2:b4:12:06:98:fc:fe:83:72:e6:c0:5e:7a:0a:
         10:07:05:89:9b:9e:53:69:65:64:ac:47:d9:a6:fc:2e:15:1e:
         37:67:3b:4a:fa:fb:34:c3:f6:cf:40:57:b8:ee:80:86:dd:d3:
         bb:79:a3:55:5b:f4:17:8c:55:50:d2:73:94:38:3d:3d:ba:81:
         8f:18:5b:dc:90:86:31:1f:75:0e:d1:c4:90:55:af:fd:a6:0f:
         39:21:b4:da:33:4c:61:0a:37:42:77:cd:d8:4b:45:8e:60:c5:
         c2:3e:cf:38:59:24:68:31:07:db:01:fa:3e:e8:84:f4:a8:57:
         32:33:06:da:e7:d6:9d:5f:b3:c8:9d:92:7f:f8:e6:2f:27:0f:
         df:73:78:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0EyS5zOCZjij9z5PiGIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjQxMTIyMDMwMDI1WhcNMjQxMTIzMDMwMDI1WjAzMTEwLwYDVQQD
Eyg5NjIwMzA0YjlmNTY1MWU4YTllMDQ2NTk5OGI2NzA5NzFiNzA0NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuw1gdRFW47nLJKESGCTn5sXD+2S
rnk85a3r3D/sulpqBenmp9NaRQgyIxFBeRxQc0eqARpDG0CA7bfbsJeAD4Wfi6Nu
y6matNNYobwp/2wA0vdLXGipqQH/dqQvTU89hDqIgCpdVb+C+Sm8/LJnFXRiWvcg
GVBmXu5qjRpIvqC1qxqfU0HUA4HTICr84YY+O1O3qWvYSJHbNiG7zGV/9tEyuCeK
HgjVTwxWLIRnk7EwDZmIX9XT3BcFCmvcDILWHnYleNo7LhlioXxpouR+ShN18k/0
CN+32xaVupkT5Vpwxr3lfg/OG7dMLAbWi33+YP3XeapR2/YteL+WFyGabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYgMEufVlHoqeBGWZi2cJcbcEa/MB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7g7nDlH
KfFjdlj3/qjA27ro0S9yU8P1LMBaXYBOQwLTS+wJ9YrU9iMbc2a99apNlrnh9squ
jp8WoQj0WMg+MdnUd0YXgXV3ikdr4VfH7ajJywR5uOtNfcxAxlUo6AK08xToys2L
hUpEKCmzyd+mhtK0EgaY/P6DcubAXnoKEAcFiZueU2llZKxH2ab8LhUeN2c7Svr7
NMP2z0BXuO6Aht3Tu3mjVVv0F4xVUNJzlDg9PbqBjxhb3JCGMR91DtHEkFWv/aYP
OSG02jNMYQo3QnfN2EtFjmDFwj7POFkkaDEH2wH6PuiE9KhXMjMG2ufWnV+zyJ2S
f/jmLycP33N4Ng==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:19 2024 by rpki-client on console-fra.rpki-client.org