Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
File:                     8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft (raw, json)
Hash identifier:          Czoe0tb1a6z9m2RKR6sZyM8l2W/PSAiwZ1wiRsZlTdA=
Subject key identifier:   F9:B8:C4:C8:9A:18:E1:00:E8:7E:B8:EE:9F:D3:83:D5:20:29:FF:CE
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       01936444450C6AE846330A0E79B263A2D310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
Manifest number:          1400
Signing time:             Mon 25 Nov 2024 17:00:15 +0000
Manifest this update:     Mon 25 Nov 2024 17:00:15 +0000
Manifest next update:     Tue 26 Nov 2024 17:00:15 +0000
Files and hashes:         1: 2jJsHDprUzLRJuNdjfRH19fWicI.roa (hash: GTcJF0ugmPJBYW5Leu+w4wTaP+suyRUy118kEj9/LZ8=)
                          2: 3M17nPKurqPoR32VvMMdY5ggCOY.roa (hash: MN8SuzVZ5wx05EaMf/an84Ni+13Rb0Yri9H1vZfHr3g=)
                          3: 61500ZJUIEc_uRVbojMCiFv8Dfs.roa (hash: x3vax1nTRdbekJYkTKHNlANvE4BTuad2+U0kgf0cZg0=)
                          4: 7A56hVt6dU5qoiAvVK6jGTcVzpA.roa (hash: WrPuXoX0ejV9tQW6wbPaQyxE5UCS7s5qr/uRZC2hWIY=)
                          5: 8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl (hash: v0eRipMAbPPkVSbmMX/x1d3qKw9M1HPpKm834vPIlIA=)
                          6: 8v8ixTQh9meH96hlUWbGdOMzduo.roa (hash: tFZPCzNCcoZRb25EMrpPm6Z8Oy034sPFDp+Zgl3juQo=)
                          7: 9boaKhnLfo_HAfDHKuZe-iJKJPQ.roa (hash: JaBkoH6AJkW8arvm6vCf1IrlP55rgUYUxhgyGIQuIrw=)
                          8: L0rh4yhnNJIJx1GXanKf7y5__ow.roa (hash: Q+A750hxYkOnxEHwRMkYs1OmRuU2h9+K5OYax2R+NxM=)
                          9: MIMDA3wjEWojgk1d1DGlbqXK_qU.roa (hash: HwT9HHHUopgEbTXMoW4tXMqhNTHzJq9PBTYarN1aZdQ=)
                          10: PYcNdz9g1UwzQ8kB4aPT5M_iTbs.roa (hash: g0qUohTQ0pCO+gEI+IR6ctS+FPce5P7D8n79nxKY0HM=)
                          11: QQvO66JvzT_scbKS1dmJO1TR8BI.roa (hash: TRHmzOMX8GqLDVR9N0W4d1gUwgf2N+YcRHGpEySDsBY=)
                          12: RCMacx0_msztvDZNxJNNqGN4kjg.roa (hash: 140qhpi3y+EAYqVEbhNXylDNjWqu1dn8n45lZD7S/OM=)
                          13: RFc79XAuqM4Yo_UdIx6WUvbrqlI.roa (hash: 40m33svNc3N1qh2ktzJhegOeQMwWtEe807tOxl205w8=)
                          14: TuT0lm9IITj6B6hOx1pAmrxFwUU.roa (hash: XxzbEq99Wh1U7QtJ/mvilJtjYCHV84UBmxAvQ7usbUA=)
                          15: VzaTH3tiExUxoFxCVXsmzCy44Iw.roa (hash: pS08NyPJPz1DeqkoKF3dc+YcBmYQsKmD+MAmCqhsB7M=)
                          16: XKgG62zA_oErLALpzkCNI0DmTv0.roa (hash: wJZ+gQJw5LYd0Ogyn/Nhy7AOAIhNmkdoMY4p8NT7WfA=)
                          17: Xt3T22cAyNAfx6uMEu7CwzoAqrk.roa (hash: rRMYxYu3pA2gBQErHXGOIHO2KMOBz6sZ2MNR2Agapa0=)
                          18: erTepp_xxbLV7Hda4yzdl930Vq0.roa (hash: oKJ85kpgtsJ9+RjDLhvKqXKKWicnESjTr44GZERK8aU=)
                          19: lB8pFzQBPl1m0xwMIenXAuoha00.roa (hash: iQL/Jo28JV5CoTaikNlh26gz0wU83V9IjaYDBMqnd18=)
                          20: lZLZkl_o98BRKCpVCGuA41hx6C0.roa (hash: APsOxLWqYm/TRJIVTwurPTn042NOhzGn1U8Jp43qcZA=)
                          21: pxCSK2sl_3RNhgcDV0ZM-cFtYN4.roa (hash: Ce769dsa8yq/HK/S7SF+LbK/5swGJsPkQ3hbCJmgmuU=)
                          22: rMCrWMIVCGITsMDaAFH4lnAxKcc.roa (hash: GL7r8ElxB3JTVa44CohfjawotjkzE/ZqtBMLAEl5+9s=)
                          23: uJ53kTz2JG7ZPb2tTKFj7POuoUs.roa (hash: EWe5930292q8ioxtyZFyS8gBVPUggGLUUnSzYeN1fbA=)
                          24: x8ul3ML5g8mpdVyBWw-Hrh3s4Rk.roa (hash: n9SXyyI7N+MgIcejCH/491zOJn+M4zDhLo1x/DFpMUk=)
                          25: zZFAiAIoop0BhKszzuyxTR91NhY.roa (hash: MOueV8OoWFdHKDyJgbpfKcXYMmQ9KDkrD6kdNBbTVuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:44:45:0c:6a:e8:46:33:0a:0e:79:b2:63:a2:d3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Nov 25 17:00:15 2024 GMT
            Not After : Nov 26 17:00:15 2024 GMT
        Subject: CN=f9b8c4c89a18e100e87eb8ee9fd383d52029ffce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:3b:e0:40:73:8d:fd:99:64:e4:21:f5:dc:
                    8e:bb:30:eb:aa:49:43:9e:a8:93:f2:d9:4b:d6:ce:
                    a7:78:26:93:1a:4e:ae:f3:ff:8c:12:b1:7d:ea:1f:
                    8c:24:52:ab:ad:86:fc:9e:12:51:1b:ea:c9:16:3d:
                    37:b6:46:46:9d:93:5c:8f:ad:ed:9e:d4:3c:25:d7:
                    bc:27:38:66:6e:1c:cf:e0:a3:af:51:0a:37:6a:35:
                    76:8b:54:f0:75:75:4a:11:a1:93:7f:eb:13:4e:fb:
                    36:44:cd:4f:78:06:3d:84:a9:5f:c2:1b:6f:38:0e:
                    0a:9f:61:ea:4a:77:8d:d7:ef:b4:54:e2:bc:ac:83:
                    31:a5:86:c6:76:d2:93:59:f9:63:b6:42:3d:e3:8a:
                    87:ed:a6:cd:68:84:3f:58:2c:cc:d2:3c:48:e8:68:
                    56:0d:bf:a7:22:92:77:c8:39:7f:6b:3d:68:58:67:
                    ac:07:99:46:73:a5:b2:98:bc:7a:04:42:4b:7d:15:
                    c2:a5:59:dd:56:b1:08:32:9e:54:f7:7e:3e:33:ab:
                    cd:f2:4a:4d:78:b0:7a:dc:92:98:88:c0:83:72:73:
                    77:c7:69:ea:65:32:c7:56:4b:f1:81:f2:ef:66:f3:
                    ef:eb:ff:96:a6:f1:d8:39:12:96:5c:44:a9:46:6a:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B8:C4:C8:9A:18:E1:00:E8:7E:B8:EE:9F:D3:83:D5:20:29:FF:CE
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:21:a5:87:09:06:89:09:37:cc:cf:db:af:78:65:60:18:7b:
         01:ab:57:1c:3a:86:2f:64:3d:3e:05:a6:84:14:6b:35:cf:71:
         e6:a8:11:bd:f5:5d:f1:03:be:74:f6:6a:ea:33:2b:bc:fc:0f:
         44:49:e7:12:51:09:86:9d:e7:92:3d:12:fc:9b:32:2f:af:c0:
         35:be:a0:31:4b:8d:7c:8f:a4:3f:77:92:b9:3e:88:42:9f:a6:
         35:16:4b:93:fd:de:b7:82:df:f3:51:81:ab:3d:6c:14:4b:54:
         b3:5b:c9:43:10:21:7f:c2:c4:83:c2:35:ae:ac:9f:c7:18:be:
         05:63:c4:ec:01:c8:90:76:2d:1e:6d:60:27:b1:46:9d:01:fb:
         27:58:29:b8:d2:8e:04:83:8c:a3:9e:76:f0:a7:5c:7a:66:30:
         33:66:e6:d0:f4:35:3d:49:5b:ac:32:8b:37:6c:ae:cc:45:96:
         60:c0:93:25:a2:65:36:bd:88:af:91:f2:cd:e7:57:b3:37:36:
         62:b6:bb:4c:27:0f:dd:aa:5a:be:40:15:7c:bb:81:a2:99:03:
         04:eb:df:08:b8:b7:b6:bf:50:f2:61:12:3c:2a:1d:3d:1f:0c:
         85:58:3a:c8:60:0b:11:62:05:5c:ea:f7:42:83:f9:05:65:45:
         18:2f:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:32:50 2024 by rpki-client on console-fra.rpki-client.org