Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
File:                     ybHXw7TuhyMzamWFOapzRvI9Z3I.mft (raw, json)
Hash identifier:          Gh4B2tzYCQNCbkOhqXDPmWn0PJdr4BL4rjtCj7PuMMU=
Subject key identifier:   7E:A8:36:4A:68:36:F6:0B:F7:99:E5:36:30:ED:71:BF:B2:D8:F9:5A
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Certificate issuer:       /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial:       01925D6A2B7FE29EB2BAE9E6DAB7564B6E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
Manifest number:          128E
Signing time:             Sat 05 Oct 2024 16:01:31 +0000
Manifest this update:     Sat 05 Oct 2024 16:01:31 +0000
Manifest next update:     Sun 06 Oct 2024 16:01:31 +0000
Files and hashes:         1: 8I1BY2okATe8r-BTYrDN0_RMJvU.roa (hash: ZbJevq7jewI+co+8U01BQ1bwgN/Ezt/vQQXgooJ6VLc=)
                          2: ybHXw7TuhyMzamWFOapzRvI9Z3I.crl (hash: w98bS46gbmDZOx8AAlUxyQEwobngzBILzIx/hcQ9osg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Oct 2024 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:5d:6a:2b:7f:e2:9e:b2:ba:e9:e6:da:b7:56:4b:6e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
        Validity
            Not Before: Oct  5 16:01:31 2024 GMT
            Not After : Oct  6 16:01:31 2024 GMT
        Subject: CN=7ea8364a6836f60bf799e53630ed71bfb2d8f95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:4b:c2:b6:bd:89:1a:bc:a2:1c:ea:e8:a9:
                    59:e9:11:10:dc:ac:4f:cc:ad:16:4c:a3:fe:58:01:
                    c0:af:0e:06:41:68:6e:4e:0b:8d:e4:d6:fa:79:c6:
                    59:19:da:ca:8c:47:47:db:64:d1:9c:3d:78:0a:9b:
                    2b:fe:fd:48:a4:f0:9c:11:cf:a8:63:c5:1f:47:11:
                    28:93:bc:c8:ae:a8:40:13:7d:c0:59:1a:1d:37:97:
                    a5:41:75:ff:3c:a1:b9:70:3e:43:e4:c3:44:42:74:
                    ab:89:98:15:3a:b6:75:46:ec:d5:78:1f:a4:cb:31:
                    1d:ec:c6:df:2f:63:25:93:51:ed:75:dd:80:a5:59:
                    21:27:dd:20:e1:6e:75:02:99:6c:e7:d5:9f:4c:e7:
                    4a:02:b9:b5:4f:81:d8:e5:2d:63:47:e4:c1:6a:22:
                    7b:c6:b6:02:c3:dc:c8:0d:b1:60:00:cd:c1:4f:1f:
                    53:62:0e:c4:6d:35:63:65:7a:31:24:42:53:2c:45:
                    b7:77:f6:fa:c8:a0:c1:68:78:35:bc:12:16:15:2e:
                    c1:d9:91:73:61:cb:34:14:ba:83:eb:b7:3a:36:e0:
                    2a:82:69:b9:8b:09:fb:39:14:55:56:aa:4e:48:bf:
                    74:7e:68:0f:6f:ee:8e:ea:cc:ea:8c:6f:2d:92:33:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:36:4A:68:36:F6:0B:F7:99:E5:36:30:ED:71:BF:B2:D8:F9:5A
            X509v3 Authority Key Identifier:
                keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:54:53:ae:2e:82:c8:bf:c9:81:05:85:93:73:5d:44:2e:e2:
         b9:56:e0:6c:2b:1d:78:3f:9c:a3:ee:fa:2a:ae:7a:7a:4f:bd:
         62:87:9e:42:ad:44:e7:3e:fb:10:6e:6c:f0:ec:ed:74:f4:e0:
         eb:3c:b2:56:4e:a2:b5:6f:6d:7c:6b:c2:b3:d2:e5:9e:28:08:
         07:a3:0a:3b:82:9d:98:a6:4f:5a:19:01:a3:60:32:ff:04:5d:
         9f:57:46:55:ef:90:57:1f:d7:78:43:75:58:0d:ee:cd:96:c9:
         06:01:03:b8:18:6f:3e:11:da:ad:04:ed:29:64:52:67:2c:c6:
         bd:6a:70:eb:c6:5e:4b:81:05:ad:54:ee:97:c6:ac:c8:00:4d:
         39:14:ea:0b:9c:af:f8:3f:b2:43:43:1e:ff:13:23:fc:0f:1e:
         9a:ab:90:64:f4:34:38:d8:45:09:33:79:12:81:ed:f1:a0:1e:
         57:59:4c:48:df:48:6a:25:67:18:a3:43:cc:91:ed:ef:cd:b2:
         df:e5:9c:f6:9d:50:6c:47:60:72:f2:5b:ed:c9:fc:ad:1f:25:
         32:d7:5c:9b:20:39:14:90:d0:81:2b:c6:36:a5:86:4e:2d:39:
         6a:ec:2d:18:e2:48:49:fc:54:94:6e:6f:3d:a6:1c:5c:23:90:
         eb:c7:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 03:16:15 2024 by rpki-client on console-ams.rpki-client.org