Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
File:                     DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json)
Hash identifier:          83jNsW4e6sBDHVrOZDerY1/fgpHtHfZaQuvYsjFLVuA=
Subject key identifier:   F9:CB:24:3F:6F:1F:99:FA:E5:BD:2D:8F:EE:05:5B:37:D7:75:EE:91
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Certificate issuer:       /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial:       0193523E22E3873B52D32874D38ACC32943F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
Manifest number:          117D
Signing time:             Fri 22 Nov 2024 05:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:23 +0000
Files and hashes:         1: 1-twt7w7mIitMLsMHX6lPmmqy3NY.roa (hash: uzM5SzgxHNOIS16oLyU7Zw5NP9v27eJuldsF0SUMFmY=)
                          2: 3VTCsRlWwy7HN5fY-lirjDzKV-w.roa (hash: KKrIQOTQ5K5YTjaRkoqHwc7KNVm40hHUsainwrZGbAA=)
                          3: 4pllpFU6ki2GH9jATgnwhcGsDmI.roa (hash: gkLvjPhnKcbigRqQ4fMvbkKq2pYi+czaLbAg+4UDJz8=)
                          4: 5OX6R-At2h1_HT-N-6-tRGgw38c.roa (hash: YMbGkA2MZU4sQTUFLExdOlIIV0qWhf5p8d4pQ7wC0GI=)
                          5: 74-XyhwIkSbY3Vpuw4HiRsXtkjo.roa (hash: V/j8k82CIFhm0wEfegFtdhmC4+lEdPnNjD+CPe3/Sws=)
                          6: 7N2xVI-MiMZXTn6yrjfjRtU4T98.roa (hash: eYJ7EkTiZxddUX/Gdk+mNm44br6ff8VMVtdrOgtDvD4=)
                          7: 9C6YKun9XgTqwL6WZGisioTnd-w.roa (hash: wSlCkYRj+gKXqKp/KXPWC7pa5apTpmyf+abx0rDSJoI=)
                          8: DdwRpu0B-TjMBdkReOr5bOQSSXI.roa (hash: gTGWW8Wlkj8N3l6cEDnDch7xyOCDeuDTikMsp382nQc=)
                          9: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: eoP0SD2rieBj36t//lIur8tLJN3qv1X+ypvKfvCEwF8=)
                          10: E9WoaL1vVaHzhBviWkVstqo1n9I.roa (hash: G6f/87dvVoIoUaWlU+VirNxZUQI+ZMbjkYgu+7Oja8A=)
                          11: I6ov3z-OG7CNLwf8_JG-ovBNYuY.roa (hash: 7B1ROOgLqOc7X18IMg7qeXzSeHsw+yKu2exZIG5k1sk=)
                          12: NTSuY7OnXkdtvr94EwHh0QyvXq4.roa (hash: Y41gZiYm4Wi/34aZUgqzwhSg1JZrSGbpU3NqiXBircs=)
                          13: UYeDvBfvEXZAe8Htw7ksyomso_g.roa (hash: sJhH6FIvR/+mPo+loOEsQRCDci3FvsYKPppq/BiVZlM=)
                          14: YwHV7gJbNUK1nzH2FnMRpuMOGd4.roa (hash: N540ZdDbtA7x1IaO2wKF7qeI12xRbTHx50kkKO9Zu+Y=)
                          15: ZfNoj4zmmlBS14Pgiw2ORD9PSyU.roa (hash: UMH6rlhLH+/lQNb1MpeTfyVf3vgCeeo7baNd12P3j7A=)
                          16: iJgJ4Es3F8Np7FPP0fqP5NwuzOw.roa (hash: gys7kvLj1D/72MU9cKBvrgaIeumcKqxsWfjOTzA7BiQ=)
                          17: z-G6j4NQgW7sG_v8yWH3I13jVRQ.roa (hash: 4Ba5Lf1ySw1AFbyAVYhVaN/R5rJEjA5B6cKwrU2sy/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:22:e3:87:3b:52:d3:28:74:d3:8a:cc:32:94:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
        Validity
            Not Before: Nov 22 05:00:23 2024 GMT
            Not After : Nov 23 05:00:23 2024 GMT
        Subject: CN=f9cb243f6f1f99fae5bd2d8fee055b37d775ee91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:11:41:ff:85:82:55:de:82:30:13:4e:30:
                    fb:8c:83:ca:46:80:48:06:81:83:46:15:75:bd:3f:
                    5c:37:1c:1a:64:22:10:55:27:c3:88:50:e6:bc:93:
                    09:12:93:8b:66:10:59:ed:50:a4:c2:b2:a6:ec:1b:
                    b1:82:86:c1:c4:e4:ef:80:e4:c5:dc:0c:b8:a4:27:
                    e6:79:fc:97:1c:94:1c:b9:86:c8:35:97:80:e3:6e:
                    61:c6:b3:7d:53:2a:f6:97:05:69:e4:59:bc:fa:46:
                    52:83:70:8b:98:aa:f3:42:f0:42:ee:3b:29:29:d8:
                    e5:f6:c4:e3:20:d5:2c:7a:3c:fc:b6:4e:9e:3b:08:
                    81:02:7c:20:85:b1:5a:95:88:e8:a2:16:d6:9e:83:
                    e8:f5:36:c9:64:e1:8d:e2:20:a0:02:9b:e6:78:3c:
                    85:0a:88:a9:0d:e3:ec:54:f8:8f:ea:d9:8a:4a:ec:
                    b8:ca:f2:4c:29:62:7c:af:f2:39:1a:62:bf:8a:26:
                    85:6c:9b:31:12:b7:d0:0b:f6:28:9f:13:27:56:4e:
                    17:4f:2e:7f:10:b3:33:37:96:bc:91:97:ff:21:15:
                    7a:9d:f6:20:72:58:e8:81:32:8b:2c:10:45:81:e7:
                    7a:50:1a:0f:d8:6c:e4:30:40:04:63:91:8c:1d:77:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CB:24:3F:6F:1F:99:FA:E5:BD:2D:8F:EE:05:5B:37:D7:75:EE:91
            X509v3 Authority Key Identifier:
                keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:08:53:82:3b:d5:d1:ca:84:f5:68:09:c6:0b:5f:e9:c2:
         d3:81:d6:16:8c:c0:d2:e1:6b:2e:a0:e9:77:64:3b:11:08:bc:
         64:21:9c:89:0a:ec:8f:7c:6d:19:40:d4:14:ab:a1:bd:b7:fd:
         f0:9b:1c:2e:6b:15:ca:df:e9:3d:6f:fc:86:19:ae:a9:00:c8:
         e5:29:57:17:b9:5e:92:16:7e:20:09:e4:9a:71:7a:cd:3d:6a:
         c4:bb:8d:96:ac:a9:e5:9e:4c:da:cd:ca:15:24:d5:ed:e3:da:
         ba:49:5e:df:d7:68:bf:1d:61:f0:3f:a2:08:8e:c8:bb:bf:09:
         08:a8:99:85:95:30:55:c9:d0:60:84:2b:e3:cc:a2:a7:f8:05:
         23:7d:72:14:26:58:fa:63:e4:ec:32:69:af:6e:d0:6f:8b:96:
         dc:94:53:c5:2b:46:69:86:03:d4:62:b0:7c:43:6f:01:66:97:
         12:b6:aa:0b:fd:88:45:a7:f2:8a:31:ab:bf:65:7b:a0:8d:1b:
         2d:25:59:3b:19:b9:4d:4e:03:55:a7:79:a5:49:14:dd:0e:42:
         c3:ad:54:03:76:ca:66:ce:fe:51:4a:04:de:f5:d5:dc:12:16:
         36:2c:2d:d4:37:50:b2:04:b5:c6:56:c8:2b:0d:54:a8:16:01:
         ba:a2:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:53 2024 by rpki-client on console-ams.rpki-client.org