Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File:                     06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier:          yuxbb8MEZYPyVnd0JWBPE5bVCtuedVRQ0WoPPW0HRFU=
Subject key identifier:   F5:2B:8A:C1:C7:DD:34:8C:DB:FB:E5:E4:6C:B0:1E:9F:F6:BF:5B:86
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer:       /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial:       01938C9B5764513DFAD39AA43CF3D69F46FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number:          11AD
Signing time:             Tue 03 Dec 2024 13:00:10 +0000
Manifest this update:     Tue 03 Dec 2024 13:00:10 +0000
Manifest next update:     Wed 04 Dec 2024 13:00:10 +0000
Files and hashes:         1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: VlFvfNLKCH9tgxsDjtyshtRQyl89/cHJMVSlMm1Kteo=)
                          2: 1-HB9inSIrMO5lWy76NTYEVQ_4mM.roa (hash: ieQoMxH+KhT8fmdk1tLfAl5S4+nqZ2Y6dX0yEaM5gEI=)
                          3: FUYjq3S9XxtlJuaiBuAVR6jX5mU.roa (hash: a3vEuamY4t/XRj2np9Wc1PcYkgvgoKcsmuS/Kg2PVEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9b:57:64:51:3d:fa:d3:9a:a4:3c:f3:d6:9f:46:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
        Validity
            Not Before: Dec  3 13:00:10 2024 GMT
            Not After : Dec  4 13:00:10 2024 GMT
        Subject: CN=f52b8ac1c7dd348cdbfbe5e46cb01e9ff6bf5b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:6c:00:bd:3d:d5:3f:a5:01:a8:76:f7:66:
                    cf:9f:d6:6e:79:ac:83:ba:69:13:07:d5:c6:a5:14:
                    78:25:e7:86:92:91:aa:c5:15:e2:95:22:a5:ef:25:
                    e3:25:cd:de:82:8b:d2:4d:fd:d4:dd:a4:02:73:81:
                    a7:70:e2:86:0c:70:48:86:84:0d:fd:5b:a6:e8:12:
                    bc:5c:90:47:c5:19:3b:d2:5e:61:12:21:80:3f:bb:
                    1f:79:e5:8b:aa:ef:aa:9f:ba:58:10:12:61:55:d3:
                    39:4c:f5:a9:b4:42:9b:12:08:c0:e0:e4:ba:fc:47:
                    d9:88:17:d8:51:a6:2d:dd:b8:5a:89:d9:49:9d:39:
                    e4:13:3c:1f:21:04:53:01:c8:af:ca:1a:ba:a2:d9:
                    30:f6:12:7b:e2:73:94:e1:70:46:ca:a7:1d:7b:52:
                    37:40:55:00:43:5c:9f:59:34:07:6f:61:17:72:d4:
                    4d:32:ea:9f:6d:45:8d:7e:7b:34:32:c1:d7:28:93:
                    f6:04:0f:7d:45:9a:23:4b:4d:07:82:33:92:bd:74:
                    90:2e:ee:33:47:88:32:b6:4e:3e:d6:a0:35:6f:90:
                    20:33:f0:7f:1d:af:c1:c4:7f:91:89:4d:f5:24:0c:
                    da:51:ef:71:e3:d1:8e:16:28:35:28:4a:d6:78:8e:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:8A:C1:C7:DD:34:8C:DB:FB:E5:E4:6C:B0:1E:9F:F6:BF:5B:86
            X509v3 Authority Key Identifier:
                keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c8:73:55:dd:96:d7:68:a7:c2:36:2b:2a:0d:98:c4:12:64:
         a1:aa:7d:12:7d:ac:02:59:3d:10:25:cf:65:04:0e:43:0d:12:
         ab:73:48:02:ef:a1:af:5b:f9:c3:33:32:24:0c:62:9b:f0:d4:
         69:90:52:8c:ff:87:e4:42:32:ca:9e:dd:01:56:b0:34:63:1b:
         f5:44:07:dd:e2:f5:85:66:46:02:a3:e3:7f:45:fd:d5:ef:35:
         a9:f4:bd:4a:b3:66:4d:d2:85:e7:ce:ad:14:08:a9:d5:09:ac:
         f4:d9:aa:5b:bc:bb:6d:2c:60:8b:11:6a:ff:01:bd:a2:c4:07:
         2f:fc:71:94:1c:7b:cd:4b:2b:d9:55:01:2f:05:b0:d2:4b:32:
         fa:d2:a6:f8:fd:2f:4f:5d:c5:cb:67:df:78:07:9a:ec:5e:6b:
         3b:d2:07:59:80:a3:c6:6f:d8:2b:12:c6:66:9b:87:6e:08:f5:
         38:5d:49:b8:7b:d1:8c:d3:e8:d5:28:f1:ba:36:51:f3:5b:bf:
         4f:e6:80:65:aa:50:19:32:72:b0:12:f9:5f:e0:3f:ed:bf:3b:
         4b:da:a7:ed:be:bb:c9:36:43:7e:cf:96:74:5d:14:2a:ae:2b:
         be:37:31:c3:38:93:e1:b0:ac:80:5c:70:55:89:9b:58:b7:08:
         36:bf:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:14:58 2024 by rpki-client on console-fra.rpki-client.org