Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
File:                     gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json)
Hash identifier:          3hZJW9RSdf2capYG2dpyZgD6V0Yj7InSaNY/CYGMJgk=
Subject key identifier:   2F:86:38:AE:07:25:63:25:70:A4:17:68:98:E7:F3:78:7F:32:B3:B0
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       0193512BA57C493574C53AF4C906D2A535EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
Manifest number:          13C7
Signing time:             Fri 22 Nov 2024 00:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:34 +0000
Files and hashes:         1: 0DsAunQHMAa1anqwBnQf8L87k08.roa (hash: 4CYDsXqzeWOdfUGzwigkq/cDsm6mUcuv+UNKt0tFmmY=)
                          2: 110_suLtcjswCXLqOyWkehAlU3Y.roa (hash: LZVYuOhSk5WjJ+YkyMYZB6v7TaCXjd09kgiXNAaH1Gs=)
                          3: 1OezRia-k7vPALmaug5Tyf6JyZs.roa (hash: Ha3xi1O77ATOvN0AekzMfn+aCeju2C51gXeE1CbDPB0=)
                          4: 2Ux2-sFMGqNkq9YisOui_zRiQXw.roa (hash: KNpS3h73/l3mdTU4hV8Hw6XcAGf+fKEqpJulN9z3NHo=)
                          5: 6Da85dMqvHvmy8lCuuxg93OOhP8.roa (hash: imvmw8nDuzA/4Irg5m5mjSnZ7jyp+1C9pmmQWgNvVdU=)
                          6: 9QagZGTfrzWYic4RVf8zUllKgl0.roa (hash: 3P8Qlq/waR3Im72g4SxxsbIf0ZaXUU+b5Q7j/8DUwkE=)
                          7: Mk20FaHzKpOieZ8SK7qffdT4mAQ.roa (hash: iVzbUbC2kMDPdUzGPtRhsjWMZTKdn6/+ljj3DAgYmHo=)
                          8: OIycoHrm0hgQGsYzLZO8CWz2VUI.roa (hash: mUlVqYNYiaFrd22rLYt+/3mQnKmQ2H1WbBddT/ycfNM=)
                          9: PcHsOPvvBLW0cdBkMBpM18lkcLs.roa (hash: hWo00H+0ozAIpSCAIicb/huVM4T9A0n0cnTl3V4zF20=)
                          10: SnW5Q6MgvxY0HVOv-jCkShRtAuo.roa (hash: U3ivDH0Rl3VjTN9nypMWlTsY2l2CjMVISDEYgpYK5b0=)
                          11: ZkjTnH9bzJAeEEmFMpSZkdrS_nU.roa (hash: SSTHtwgd5HleW54wSTaEsUWSjqdtdToKKXkxVmuxWRw=)
                          12: bDHnN1ewGBDOb1NpqCuc5yx9Qgc.roa (hash: 0/qh9xJ9CnUJxUn7raKHV5tmfGcjGYb5Z3I7zfWZGX8=)
                          13: br_Om8zDletz1yEFWiyq5OYzj9w.roa (hash: 6U0g/gMECEK7Gkz1jM/Ltw4mIwAKwscQN+IZ+wQrZN8=)
                          14: cx5MnDkWtCTVYwugY5MQWLryIjg.roa (hash: XOw00r7YimDcUHhDfY12Cib4cfdJ6+Gg2+/tzNfmA7w=)
                          15: dRVb5fPlNXC11aKfjjgHOjjx67c.roa (hash: IFIiMsQ3vO7p68Ay6IyjjumBks2zRcZbS67rDiPLDsE=)
                          16: djptE8x8yamiFU_ltRR6R7rDUH8.roa (hash: zh/GbOtLHlv6QbsgN1xDECYhwlUqlFldtujTAapnZdY=)
                          17: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: wGvQkt6uxmom87EVEyf1qz4GNCZLpSQ5ubZ3P4qboO8=)
                          18: h2Q5w956czCaOD9s1UbLxhtwBsI.roa (hash: nKcJ57edtd57dmoTfHG358pNE/LdiSJ1CCv5aN3Z9M4=)
                          19: iYU_lbM2ySGzJ6PBenclEjfwp6o.roa (hash: 1ss6udgc+5lkD3srUnQuRPwemAcc41tyhbGh8xEphok=)
                          20: iuGhXTInPWKlbre9IuLF6ZSvg0A.roa (hash: ni1mklqJxWktBMB04MiJA5SIznBEW12NWZnOrp7RvDo=)
                          21: ojEIE9xUeewMY44GWt_SHDeMTAo.roa (hash: PgD7SHmkSGiVf1wdkkC/MHTPCWldezQ0mPs6NheMbmo=)
                          22: pBZLCHsKLy0jHfpODXEfDBVhn6M.roa (hash: 7n82bgK8x8PUx2/PnavSfsOWpeSj+aKrBa1fJv19u7Y=)
                          23: w5j608_2d4CuWu9JPKmxbNR6qyM.roa (hash: 6er/h1D5qh4vFjhwksVsxcNz4MTBtenWeVQfOjWpacA=)
                          24: xw4WIuqW5_z8TP4XYEMcDEU0zW8.roa (hash: J+sxzIL4Q+xHnYghee36gCxx6Mrl2S3igMMVaWAZ9J8=)
                          25: zPYjomGhwGos4Sn1Htc73GW0sik.roa (hash: nBlqgnqZiewlUCFw1qcycrcj36q2cKIn19kHiwAgzGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:a5:7c:49:35:74:c5:3a:f4:c9:06:d2:a5:35:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: Nov 22 00:00:34 2024 GMT
            Not After : Nov 23 00:00:34 2024 GMT
        Subject: CN=2f8638ae0725632570a4176898e7f3787f32b3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:be:ee:89:06:48:08:76:22:bc:5f:ef:54:
                    f1:c4:0f:a0:dd:31:ff:55:c3:ea:c7:b3:90:2c:93:
                    72:90:e3:c5:75:9a:fd:0e:80:31:40:72:d2:b9:7c:
                    29:42:a7:73:c8:77:9e:1d:e1:97:f3:d1:c8:71:0d:
                    fd:f1:ea:48:5e:fe:6f:aa:28:d9:5e:98:87:98:a3:
                    f4:9d:7f:1e:b4:d3:88:7a:e8:bc:dd:2c:8d:29:ad:
                    42:ea:56:56:13:32:7d:9a:a7:3f:b9:61:bd:c6:fc:
                    bd:a4:b8:4b:b4:ef:2c:84:9f:73:43:52:5d:9e:1e:
                    f9:d3:f1:fc:94:7d:bb:e6:cc:0b:52:c6:2f:be:e0:
                    cc:42:0b:b8:0c:60:e1:36:67:45:59:73:7e:c2:71:
                    68:97:3a:27:36:e0:e2:04:1a:4d:9b:fc:ec:b2:52:
                    fa:34:be:49:d0:b7:93:ed:32:59:cd:ed:61:b9:af:
                    e0:23:0f:76:0b:a8:b0:ec:05:17:9b:49:50:f4:41:
                    6c:7b:38:08:cf:4a:f1:8a:2b:96:12:cf:2b:f4:8b:
                    37:a2:74:05:2c:af:55:58:07:8f:97:a6:10:ff:23:
                    55:06:c4:9d:7f:3a:65:b8:84:23:19:8d:0b:a4:74:
                    50:14:76:5d:ec:bc:d1:64:b2:51:29:76:f8:42:a9:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:38:AE:07:25:63:25:70:A4:17:68:98:E7:F3:78:7F:32:B3:B0
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:47:00:6e:e8:b2:89:8d:15:97:33:82:f9:c5:03:58:99:69:
         6c:43:19:54:67:a5:86:60:10:05:9f:35:f3:c7:17:1b:09:35:
         f1:5b:72:8c:9b:03:d2:41:53:04:ab:e1:c7:2f:ce:56:b9:15:
         a2:8d:ae:f9:4d:1d:07:c1:fd:78:f7:28:1b:3a:d7:8c:e1:9a:
         ee:32:02:1c:f6:63:29:63:01:dd:13:59:b7:c4:29:1d:01:79:
         fd:f2:bc:6d:51:12:e4:1b:b1:7f:b6:32:03:35:ae:de:d4:b1:
         60:e1:38:d4:72:85:f7:84:dd:47:4d:87:ca:57:a0:c6:fb:6e:
         0e:14:35:c0:51:f2:dc:03:c9:6d:32:84:68:cd:34:c8:dc:24:
         99:8d:b8:73:5f:a2:66:17:de:d7:4f:06:f0:5e:d4:9a:7c:ee:
         fc:b0:a4:b0:e4:78:c3:5a:f8:c0:20:3b:70:d3:c5:bb:39:58:
         3f:bd:cc:a1:4d:52:8c:47:ee:30:74:d2:07:1f:7f:25:1a:12:
         70:e5:c0:e8:28:02:0f:17:8e:a8:08:8d:82:3a:27:4e:cd:0d:
         3c:6b:4c:11:d6:4f:bf:91:e0:87:4a:cc:78:62:9f:7b:65:49:
         4a:19:2b:1d:28:d4:fd:e4:d3:af:15:f0:4c:2b:3a:5e:e9:7c:
         cc:76:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:17:12 2024 by rpki-client on console-ams.rpki-client.org