Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File:                     1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier:          Hb35vGMLYa/9s3LSfuO1kQ6XjWiqKlgGOAEDnFUjVFg=
Subject key identifier:   67:54:32:7B:25:97:E6:34:15:65:F8:BA:33:14:92:21:2D:30:44:43
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer:       /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial:       019356F70073EA858998B00105946B9FA815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number:          0A99
Signing time:             Sat 23 Nov 2024 03:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:48 +0000
Files and hashes:         1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: Y1hS2PSq8bchhmYFnYDCv6DIdcPEUOMivazUFDCM350=)
                          2: b5w549IViWcbmcNJr4T0LECFv7E.roa (hash: ru9iQ7UEAAw5bf1It/5z/z8ZAU6wGHnlxbyQQUekpjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:00:73:ea:85:89:98:b0:01:05:94:6b:9f:a8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
        Validity
            Not Before: Nov 23 03:00:48 2024 GMT
            Not After : Nov 24 03:00:48 2024 GMT
        Subject: CN=6754327b2597e6341565f8ba331492212d304443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:5b:9e:4b:62:9d:f5:9f:2f:a8:c8:e0:81:
                    09:76:a9:da:0c:f9:21:f9:58:38:df:07:d1:8b:b3:
                    96:0f:cd:53:02:d2:7e:a7:7d:2a:d5:6e:ed:f6:61:
                    35:63:a5:12:55:41:0d:e5:be:72:9d:2a:25:e6:7d:
                    a9:b0:6e:bd:68:53:a2:77:6a:d5:83:23:5b:88:03:
                    7f:02:64:42:a6:bb:18:0e:7e:34:b0:92:2e:66:a0:
                    3f:ba:83:97:ac:7e:81:46:89:7f:0f:74:7e:e2:dc:
                    92:75:51:89:55:f4:2f:0b:84:1b:7b:92:c3:f9:5a:
                    51:33:24:a4:6c:d3:82:d2:7a:f3:55:bc:55:f5:d3:
                    67:d1:99:9b:74:b5:0d:0d:dd:38:5b:eb:36:fc:5b:
                    4b:d4:5d:cc:12:f0:eb:c5:02:6c:1d:33:fe:ee:2d:
                    fc:90:01:3d:c9:17:60:01:ce:a9:86:6a:37:be:59:
                    75:e1:cc:c7:8b:2f:7d:14:8a:b1:06:bd:90:ec:0b:
                    90:41:66:57:e7:91:f0:35:ee:9a:75:4c:8b:b3:94:
                    e1:c8:2c:67:1d:70:54:91:0c:98:c1:dc:2b:87:52:
                    70:d1:24:8b:eb:04:c4:b2:7d:b1:2f:c6:f6:a8:bf:
                    d2:20:9f:be:b8:e4:97:69:22:41:b1:a8:46:65:15:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:54:32:7B:25:97:E6:34:15:65:F8:BA:33:14:92:21:2D:30:44:43
            X509v3 Authority Key Identifier:
                keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:09:01:f4:ce:33:b2:c3:b4:06:8e:4a:77:c5:8e:ab:f1:
         3f:ae:98:79:ee:29:b5:5b:1f:cb:7e:d6:1d:6d:ef:70:b9:81:
         54:d3:93:07:65:01:eb:58:ff:97:91:7b:00:f1:4f:ba:36:eb:
         21:b1:cf:90:83:17:89:57:da:c4:29:ae:f9:5e:c3:3b:87:f2:
         c9:07:c7:de:b4:de:3f:dc:12:2d:1f:16:25:7a:ac:64:7a:77:
         1a:e6:e6:56:c3:bf:4d:e1:f8:fb:33:90:7b:09:7a:50:18:a1:
         9b:97:55:87:b4:e5:3b:7f:c6:b0:64:f2:f8:84:30:e3:20:22:
         b4:00:61:1a:a6:6a:2c:74:ad:f3:4f:92:98:4b:d3:c8:d5:90:
         d4:0a:fd:75:11:b0:b7:9d:e3:47:2b:f8:cf:f0:fa:b0:c7:36:
         87:ce:af:bd:99:e7:a9:5e:a3:b5:52:7a:ca:61:8f:07:4a:dc:
         77:ea:4d:ce:d2:01:b3:b1:11:f8:17:f5:8b:b1:f0:7e:e4:b8:
         ca:1f:00:fd:8a:44:42:80:bd:95:4a:f1:85:81:59:18:bd:42:
         29:e6:c1:8b:ad:2b:da:7a:d9:ef:f6:a1:df:35:7b:03:6d:c0:
         21:7c:3d:cd:f4:74:6c:04:6d:5b:13:25:ec:18:49:05:94:96:
         5a:25:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:23 2024 by rpki-client on console-fra.rpki-client.org