Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
File:                     UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json)
Hash identifier:          7YgORfnWD6BVkG7hNg1SRFbpa789nlBo5vjKKFE2HSE=
Subject key identifier:   6C:2C:E8:6D:30:DD:3A:F2:81:A1:EE:6F:A3:88:42:A5:EC:9C:C8:CE
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Certificate issuer:       /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial:       019352078248392D242D30E4A12016EC5A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
Manifest number:          12D2
Signing time:             Fri 22 Nov 2024 04:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:44 +0000
Files and hashes:         1: 2jsofi11deGPk4FrcXEFO0xbWyg.roa (hash: kYqa1MK/pqDhpyUu064W34nB3DyUd32knSHUgPLYfcY=)
                          2: JjqpQJRFdkC_qlkAgzLA33O3L2c.roa (hash: 213QdHO6OUOCu8dIB0MSX/yiLpko8ULOLCb4e7G0hYg=)
                          3: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: U9qtIJ5QgiCSahTH31nUDgF6FLhFsKeQXCNR6Kkw5A4=)
                          4: UZ9fzuPrquX6_Ftn_WGZjVEg_po.roa (hash: Y0KdOMn1Hql8iPmk4RQmsejACyFByQQNnYI7w3/SUTw=)
                          5: YY5wu9KHdpX0HUjgVdpIqlWwY68.roa (hash: NKs717XSi8XpXd4zGV9uzoLo2KbUT/lKjsTalwwhHpI=)
                          6: bBg87APjDYZsh_vVwNd8St1GATA.roa (hash: ph3gzanUfKJM/aYDf0ZzD7JQtXlReg/xbf2sXT3IBW4=)
                          7: lDdt4UF2QZ-5z9pnvQ7IJUll3VA.roa (hash: 6sAsVdZtS2W9wj4jvjiepAhAd86DeeCsPkBnX/cSE7Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:82:48:39:2d:24:2d:30:e4:a1:20:16:ec:5a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
        Validity
            Not Before: Nov 22 04:00:44 2024 GMT
            Not After : Nov 23 04:00:44 2024 GMT
        Subject: CN=6c2ce86d30dd3af281a1ee6fa38842a5ec9cc8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:73:7c:12:a7:d9:8d:90:59:d6:ff:99:c7:
                    c4:c0:7a:ee:a3:7b:4c:d2:87:aa:0d:1b:ec:78:81:
                    72:f1:fb:8c:7d:ca:05:db:6c:ba:26:3c:de:cc:f3:
                    91:3a:b9:f7:b0:ec:c5:48:c9:2c:22:ec:d6:6a:67:
                    d6:25:6a:7e:74:ed:fa:2d:79:50:94:92:ed:e4:a6:
                    5f:7c:b9:3e:ab:4a:bd:ae:78:77:92:39:d3:3e:50:
                    3a:05:0c:c3:45:c1:40:2d:db:43:c8:9b:36:17:dd:
                    fa:9b:b8:6b:97:9c:ac:54:d6:58:81:8b:df:73:8b:
                    8b:03:d6:d0:ad:dc:bc:17:c6:b2:e5:4c:dc:4f:dd:
                    3e:db:ff:cc:4e:04:fa:26:40:44:46:18:48:e1:48:
                    1f:4e:c6:04:82:fd:c6:86:50:ac:82:9f:0f:77:7a:
                    c7:87:b7:61:34:25:4c:6f:8e:fc:6b:11:d6:8f:34:
                    37:4f:83:79:39:1f:91:9f:ef:c4:0a:7d:72:c4:39:
                    99:fb:d6:88:65:7f:d4:b1:45:b7:a1:37:f8:65:8e:
                    b7:82:19:91:46:f7:e7:06:a0:87:27:88:c3:bf:3a:
                    9d:14:1d:15:f3:1d:95:3a:a9:00:06:4f:c1:23:c0:
                    6f:8f:d5:54:8c:f7:52:55:9b:da:23:02:ed:34:4a:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:E8:6D:30:DD:3A:F2:81:A1:EE:6F:A3:88:42:A5:EC:9C:C8:CE
            X509v3 Authority Key Identifier:
                keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:6e:8a:1c:13:fa:84:08:a8:34:ae:76:9b:76:1e:43:ba:
         a8:e6:eb:ce:18:65:c2:37:16:fa:7f:51:b6:1e:3c:e8:2f:40:
         86:83:0b:55:48:83:a7:ba:99:49:7c:1b:58:2c:6c:78:66:ef:
         9c:cc:b3:93:85:80:43:fe:49:e2:b5:e9:6f:73:cf:f4:12:b7:
         df:da:fb:fe:aa:8c:a5:fb:73:34:26:fc:ca:61:78:ba:ec:11:
         60:6a:ba:b8:5f:a6:50:ad:be:50:9a:2e:72:6d:41:19:a4:86:
         d2:2d:e0:b1:5d:f3:0e:83:40:bf:85:02:f7:b5:34:fb:2d:20:
         29:a9:57:fa:0d:9c:bc:bb:d0:c9:64:d9:ac:96:20:f9:42:60:
         6a:e4:69:02:ce:4e:8e:a6:77:dc:c1:1d:5b:73:9c:3c:d6:59:
         98:79:7d:63:85:8a:32:08:06:68:82:b2:1c:7f:5e:f7:1d:48:
         65:24:d1:f1:48:db:86:15:d9:8c:a3:02:bb:25:3f:74:db:8f:
         90:7f:9e:85:2d:dd:38:9e:ec:e8:86:e8:98:5c:e3:10:22:c0:
         5c:51:91:5b:65:06:17:6a:86:55:ff:ee:22:43:ce:f9:f8:d5:
         c3:80:06:ff:e1:94:5d:a6:3c:5e:f1:8f:5a:09:ef:89:7a:07:
         4a:8c:ef:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB4JIOS0kLTDkoSAW7FqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5
ZjA2ZDkwHhcNMjQxMTIyMDQwMDQ0WhcNMjQxMTIzMDQwMDQ0WjAzMTEwLwYDVQQD
Eyg2YzJjZTg2ZDMwZGQzYWYyODFhMWVlNmZhMzg4NDJhNWVjOWNjOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku1zfBKn2Y2QWdb/mcfEwHruo3tM
0oeqDRvseIFy8fuMfcoF22y6JjzezPOROrn3sOzFSMksIuzWamfWJWp+dO36LXlQ
lJLt5KZffLk+q0q9rnh3kjnTPlA6BQzDRcFALdtDyJs2F936m7hrl5ysVNZYgYvf
c4uLA9bQrdy8F8ay5UzcT90+2//MTgT6JkBERhhI4UgfTsYEgv3GhlCsgp8Pd3rH
h7dhNCVMb478axHWjzQ3T4N5OR+Rn+/ECn1yxDmZ+9aIZX/UsUW3oTf4ZY63ghmR
RvfnBqCHJ4jDvzqdFB0V8x2VOqkABk/BI8Bvj9VUjPdSVZvaIwLtNEqKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGws6G0w3TrygaHub6OIQqXsnMjOMB8GA1UdIwQY
MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt
Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh
LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkapuihwT
+oQIqDSudpt2HkO6qObrzhhlwjcW+n9Rth486C9AhoMLVUiDp7qZSXwbWCxseGbv
nMyzk4WAQ/5J4rXpb3PP9BK339r7/qqMpftzNCb8ymF4uuwRYGq6uF+mUK2+UJou
cm1BGaSG0i3gsV3zDoNAv4UC97U0+y0gKalX+g2cvLvQyWTZrJYg+UJgauRpAs5O
jqZ33MEdW3OcPNZZmHl9Y4WKMggGaIKyHH9e9x1IZSTR8UjbhhXZjKMCuyU/dNuP
kH+ehS3dOJ7s6IbomFzjECLAXFGRW2UGF2qGVf/uIkPO+fjVw4AG/+GUXaY8XvGP
WgnviXoHSozvnA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:27 2024 by rpki-client on console-fra.rpki-client.org