Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File:                     MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier:          EzfeUAM44uRUTRghzL9QcR8o42ow8FsPsR/X9hC9OLE=
Subject key identifier:   45:1A:12:29:E3:58:9E:E7:F1:80:D7:FC:60:12:4B:7F:E5:D2:3C:9F
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer:       /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial:       01938BF74F2F396FF7C87EA0BC24CE46B9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number:          128B
Signing time:             Tue 03 Dec 2024 10:01:00 +0000
Manifest this update:     Tue 03 Dec 2024 10:01:00 +0000
Manifest next update:     Wed 04 Dec 2024 10:01:00 +0000
Files and hashes:         1: 623k6gsGXBa4ksVmTwjUipYrUAA.roa (hash: SkP0HZnhVeKNbahDYxYQU+FCG2Vk0GYz1Qka/F0GL6w=)
                          2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: SBa0LGWzQmVjPNUUwlisLQynF8EWQ+1cyn2qbWcdqt8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:f7:4f:2f:39:6f:f7:c8:7e:a0:bc:24:ce:46:b9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
        Validity
            Not Before: Dec  3 10:01:00 2024 GMT
            Not After : Dec  4 10:01:00 2024 GMT
        Subject: CN=451a1229e3589ee7f180d7fc60124b7fe5d23c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:f8:61:41:a7:d7:29:59:b8:ea:b7:88:2f:
                    b4:f2:42:e2:b3:00:8c:c2:36:f4:73:6a:ab:88:0e:
                    1e:fb:8b:99:78:51:25:8d:d1:23:60:1a:20:98:9f:
                    32:45:b3:a9:39:6d:4c:90:3f:7f:06:1a:a1:de:c4:
                    c7:ce:a2:23:f1:c3:1f:da:d5:7a:03:44:69:66:24:
                    c2:d1:f3:85:5f:74:b0:1f:ec:16:60:73:25:3a:29:
                    d6:80:a9:6b:65:4d:57:17:38:b0:66:66:11:da:73:
                    85:0f:46:3b:e9:f3:4d:63:ea:a9:fb:45:c8:d5:b0:
                    5e:13:01:5b:15:95:75:81:fc:b1:a0:7c:b5:0c:8a:
                    0b:57:bb:e5:c6:99:97:fa:88:bb:3a:6f:33:3f:2e:
                    7f:28:53:e3:ef:c0:f5:26:f3:e6:7e:78:b4:de:ac:
                    ae:74:44:09:26:07:02:d2:5b:e6:3d:dd:13:5f:ce:
                    5b:68:25:ea:17:72:02:13:72:d7:23:be:19:c2:68:
                    fe:0e:cc:06:30:4c:72:0c:de:0d:9e:3d:9d:54:9a:
                    a4:fd:f3:7c:be:8d:f2:04:8a:e2:df:ec:bc:49:4f:
                    9b:ee:16:02:09:96:b9:88:ae:20:94:93:2c:b6:11:
                    82:70:ab:84:2c:83:0c:67:2b:e1:c2:70:3c:40:7e:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:12:29:E3:58:9E:E7:F1:80:D7:FC:60:12:4B:7F:E5:D2:3C:9F
            X509v3 Authority Key Identifier:
                keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:08:b5:6b:1a:e9:71:a5:60:d8:76:8e:b0:89:c3:f4:32:0f:
         50:10:d1:c6:67:60:ac:80:85:2c:ba:88:55:ea:de:a4:5f:15:
         08:a0:5f:c4:48:6b:bf:89:2b:0d:b6:0f:37:a2:f9:9c:46:a9:
         ab:23:4b:fd:81:9c:d7:15:da:0e:30:84:4e:71:31:e0:d6:8d:
         ad:72:b9:f6:8a:fd:78:2d:0e:c2:d1:5c:04:ba:8f:e4:7f:db:
         af:53:02:c4:e1:fd:75:e9:e7:ca:47:64:07:72:b8:33:63:16:
         5e:0f:2f:72:8a:ff:21:33:aa:3f:c6:7e:2f:54:e1:93:c4:11:
         00:95:bb:0b:60:ab:19:7d:b2:fa:7e:d8:8e:08:6d:29:86:7c:
         7e:75:7a:81:9c:32:0a:a6:61:b3:be:eb:5e:0f:86:fa:b6:a6:
         3a:4a:e9:e7:bd:f4:11:6e:46:31:8a:54:64:f8:10:4e:ec:21:
         eb:89:62:88:32:99:f9:30:15:fe:7d:8c:92:75:5f:fb:c5:6b:
         0d:f3:d8:29:1e:db:cf:cd:1e:13:cd:f2:2d:bd:a4:3b:9b:9d:
         82:b7:89:52:5d:9c:7a:91:16:ee:2a:f1:05:15:b9:a5:b0:42:
         66:1d:0b:0b:2a:eb:6e:d3:99:ca:39:bb:7c:1a:8e:4b:97:1e:
         f6:e9:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:41:00 2024 by rpki-client on console-ams.rpki-client.org