Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          mNpkFtKwpld6FT5eeSKUpYaTQULn0AwcK6GnBnFTpf4=
Subject key identifier:   BD:F2:F4:6C:7B:77:FA:1A:4B:C5:B0:1B:F7:2C:74:A7:89:D9:47:F6
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       019350F487C31911CE17A4B78918EE7BA5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0CDF
Signing time:             Thu 21 Nov 2024 23:00:22 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:22 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:22 +0000
Files and hashes:         1: 0FdlcGaUuRcf2thRcezoBxnSRd0.roa (hash: VKuLct5pGWdsop70amtrbvmvPJUQ8yIua68ahie6XrQ=)
                          2: 3-mfhji3K30To5cmP_y3PLXIgXk.roa (hash: 1REF9InTeB96yx/pDRI5YfSCFQN96qYq4bIoD1fjpxY=)
                          3: BMMlJiGAdWgUhKg-ZO7okAcs2NQ.roa (hash: qjZKrKkvQxt3VUTZhXvNPlF2wOq42WC2q1S6MHsF+hs=)
                          4: G1KtCem18xNVnjqg_i4gYFFnH08.roa (hash: or489x/aFiy9otvfjwnsIAdgsCfe9WYAKyIX4ntgn0o=)
                          5: IFEpMz2wo8FeMCVoBBODfosRFi4.roa (hash: p4vH79l/bBNU46l20JOOwJp8TbJhzDYQOfY0mfmiXgQ=)
                          6: JeN89iha8HnUuEoh21VtDyxOxhI.roa (hash: VKvJdXLNYbUTU4g8yZpcGLOmJ68OgB3qtjRlrikTFW0=)
                          7: NuGhRYAi8rDkFPRRxAFFor1Dxsk.roa (hash: smpepN8sAdz0WvaBQGqb/sfPxCOqcAlIAmm8DVkgz5A=)
                          8: VCmlh7pajkVWkmG_KKbb4mthI5o.roa (hash: 2tp565Iy5ZrHFLLImMFYFu/4A+RetFW6JZJqU4czAhE=)
                          9: XhJnyUwt5f1WjNJBWSLofkpq5J8.roa (hash: o25KFU+oM+St2fQ6mrAGhl/aPRRikrCrzPE9WUJSwrI=)
                          10: ZLUwrIoziKZU-m7mylQFjz-HZZA.roa (hash: u5xaQ54zmdZA5WDHsezyJTWHshp7SsMrlMX0dgzwtsQ=)
                          11: _z1NWtZIMCVFeHm4Mw9QXo0MDuM.roa (hash: m7ypxbyhmwDoexCQsfdbi9jobo86WItA2+Dwhf9R68s=)
                          12: aryV4T6Jo-ABn3ueXOoki0uxGsk.roa (hash: oqXmcAqy7nfbn66n3AnIwIzEyKolV9tHJHBeEo99pRE=)
                          13: cLFewt6tvSyET8c1mrxISiwMYvY.roa (hash: SIIkGDNfH5S6oMK2lTpzqiJb81G2rHZ6qQHgbBO4q7M=)
                          14: dIb4UKpTWpto9-sXYDN-JTVQRXg.roa (hash: +FL+EGgrDGrTQHmwYOlNU7oD8GKfHqxw1UYkYVHXefE=)
                          15: lGTKpj7YoUCGXF2Us2GxX8Ayr1s.roa (hash: XBukNQ76wTgpdaPf5u9zq34gNnhL9GKOolHXf5GIv0w=)
                          16: m6twPfVwWlVTaKMoyvsJk7Mi2t0.roa (hash: lmaStjkS7uKC8MGMePSNXbNGumjkrJOQvos9wHQk1GI=)
                          17: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: GFCLB+faZ91vVHR52YaMVuFBedZj/4Q/0ICaLkwfW9o=)
                          18: ynWzSQjCcrHJR086z85tz57VMtc.roa (hash: bFiiVvqCpVrTVNAZJuV4x217m7y0NqVdcP5LenUwvrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:87:c3:19:11:ce:17:a4:b7:89:18:ee:7b:a5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Nov 21 23:00:22 2024 GMT
            Not After : Nov 22 23:00:22 2024 GMT
        Subject: CN=bdf2f46c7b77fa1a4bc5b01bf72c74a789d947f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:5f:24:5d:68:7a:59:b5:78:9e:78:5a:be:
                    16:eb:ca:e3:96:c9:57:88:aa:52:da:31:2b:c1:e8:
                    26:a0:a0:66:ca:2a:d9:c3:d2:0f:3e:ab:4a:f8:e8:
                    92:47:96:1c:35:a7:ca:0d:02:e4:7e:4f:9c:21:74:
                    9f:28:12:eb:42:d1:d8:2d:86:3b:26:c2:2e:9a:db:
                    f2:c7:ba:ee:a4:fb:2e:1a:2f:24:e1:84:10:8f:ff:
                    23:72:24:85:94:6e:39:48:e3:fa:6b:81:a3:87:2b:
                    18:bf:3c:9d:23:32:39:61:b4:9f:35:d9:86:e0:4d:
                    cc:d4:4b:2d:1f:47:d8:35:43:dc:8d:ff:3b:7d:bf:
                    cf:3d:e0:e8:35:8d:7a:99:a5:6a:c4:ef:f4:a5:61:
                    e2:e4:81:e4:f8:1a:64:1f:88:96:0d:11:83:a2:c9:
                    45:39:11:57:26:0f:6a:0d:33:9e:83:88:2b:d3:c4:
                    62:11:40:38:69:80:c6:44:fb:b7:df:d7:fa:31:b8:
                    30:78:e2:25:f2:1d:4d:db:ce:cc:a2:ed:f8:06:f6:
                    95:49:cd:6b:d4:d2:3d:9c:c1:7b:bc:34:00:a4:8f:
                    33:2e:43:40:51:f0:c7:45:85:98:18:41:a3:1f:ea:
                    75:63:ee:cc:e2:78:4e:da:16:5e:a6:e2:6c:66:f2:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F2:F4:6C:7B:77:FA:1A:4B:C5:B0:1B:F7:2C:74:A7:89:D9:47:F6
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:59:12:bb:47:b5:7b:52:e8:37:30:bf:0f:11:2b:d0:30:1c:
         2a:95:99:80:9a:66:60:f1:d7:89:d1:0b:56:77:ec:cb:72:5e:
         95:21:1b:a5:28:29:3e:1f:a7:91:40:24:4b:05:19:70:ee:56:
         df:03:9d:3e:4e:f2:0c:78:02:c4:7f:e1:96:0e:21:38:2a:d6:
         bf:29:45:ac:19:94:0d:b8:e1:62:2d:de:2b:0f:75:3c:8a:00:
         ac:ad:91:4d:8c:90:b7:97:86:d1:b8:ed:c3:87:ef:a0:cb:7c:
         d9:7a:c2:66:22:76:43:a6:ca:a6:6b:3a:e2:f5:54:bf:bd:9c:
         c5:d8:48:81:83:f7:fc:1d:f8:d9:81:a1:92:da:ec:59:6a:c0:
         20:85:45:97:29:4f:a5:a4:b1:c2:31:c7:60:6e:03:7a:b1:5c:
         24:21:bf:6d:32:cd:dd:94:4e:df:07:41:0c:d1:cc:ba:3d:29:
         97:ec:b1:5f:c5:e0:f2:bc:ec:64:a7:8a:ba:46:27:e8:02:10:
         13:9b:7f:78:3a:d8:4f:ab:b8:aa:5e:3e:b2:b2:89:ff:a5:06:
         3b:eb:50:71:e9:dc:4d:3f:38:73:00:56:17:aa:81:cc:0d:d2:
         6b:d0:a1:1f:f9:24:fc:49:f8:71:3f:8b:ba:d3:30:b6:1d:56:
         dc:8c:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:37:50 2024 by rpki-client on console-fra.rpki-client.org