Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
File:                     ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json)
Hash identifier:          rHhKy3YPWNMpayFbTmXujF+ZcK0veSQhv9BsD4tM1e4=
Subject key identifier:   79:9D:3A:1B:9C:02:67:C3:ED:C1:51:8B:36:B9:76:EB:25:87:F7:48
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Certificate issuer:       /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial:       01938B51F70D4A4F34FB5A8CCC24F5E5409E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
Manifest number:          10DB
Signing time:             Tue 03 Dec 2024 07:00:24 +0000
Manifest this update:     Tue 03 Dec 2024 07:00:24 +0000
Manifest next update:     Wed 04 Dec 2024 07:00:24 +0000
Files and hashes:         1: N4v9jIbzL9oTxUdj-UAmS7ju9pA.roa (hash: hWQ+K6hkG3yRxQV0Acz6PsPJR/kO6SDumChJc3mGD7M=)
                          2: Q_Sma2Dm8SlszCDbo43XrSMCzTg.roa (hash: c6j9OVodQPwHtAofIG7HvpHVuzwUycCaNObAofh0VdA=)
                          3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: yb9qKrxCduRkGW1SJSXeuoZ2xyDJlIcTmNh9uZCDNNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:51:f7:0d:4a:4f:34:fb:5a:8c:cc:24:f5:e5:40:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
        Validity
            Not Before: Dec  3 07:00:24 2024 GMT
            Not After : Dec  4 07:00:24 2024 GMT
        Subject: CN=799d3a1b9c0267c3edc1518b36b976eb2587f748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:04:59:c6:f7:92:7d:8e:7c:93:01:ee:67:
                    75:24:5f:7a:c1:40:df:1b:57:3a:77:a5:44:0b:ee:
                    77:ac:b4:2f:c2:5b:f9:47:42:27:c4:12:1a:5b:9f:
                    b9:35:99:01:09:11:7c:33:1a:d1:dc:12:32:36:e4:
                    29:6c:60:7a:0b:22:39:4a:2d:64:1d:fc:8c:da:c8:
                    4b:fa:37:a0:16:b0:3d:b4:10:e6:a9:80:a8:9c:af:
                    a0:96:0f:e5:b3:e7:bf:4a:ff:74:da:b9:6e:2f:d0:
                    25:87:8c:bd:9e:d6:73:80:28:f1:19:ca:be:ee:56:
                    2b:0b:46:fb:90:bd:61:33:b8:3b:e6:d6:f3:9c:d4:
                    cb:4d:60:2e:ec:4e:fa:f8:e3:65:29:f4:46:10:f6:
                    9f:c0:0d:60:e1:98:27:6e:9d:b3:c9:e8:c2:1a:4f:
                    3c:ee:bb:3e:d7:26:b7:d7:7d:a4:bd:0b:d0:d7:f9:
                    aa:78:bb:43:54:b5:9e:36:78:29:61:ff:29:78:e6:
                    26:ef:68:90:09:5b:07:f5:af:dd:3f:93:f8:a3:09:
                    f5:ad:50:6d:71:5f:c6:6e:f4:cb:d3:04:5b:e5:78:
                    1f:47:19:17:5a:87:a1:e0:f8:ff:a4:ca:ac:15:a6:
                    57:03:75:35:f3:40:06:cf:fd:99:22:00:bf:a9:50:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9D:3A:1B:9C:02:67:C3:ED:C1:51:8B:36:B9:76:EB:25:87:F7:48
            X509v3 Authority Key Identifier:
                keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:33:0c:27:b3:51:e8:73:3e:ce:92:80:6f:5b:63:a2:f2:
         9d:74:25:58:37:f9:a5:fd:a3:ae:05:fe:60:9b:18:fd:79:ef:
         3b:64:5a:8f:46:31:cc:84:12:41:0a:72:50:9d:8c:8c:5c:ba:
         cc:83:1f:59:bb:36:71:84:b8:79:e6:93:95:be:a1:06:f0:51:
         e4:01:9b:7b:8d:3b:2b:ea:21:19:82:73:b5:55:ac:27:93:17:
         11:da:13:a0:2d:32:bd:58:e0:cd:4b:d1:87:fc:7a:8a:a4:05:
         f3:50:95:dd:b5:0d:2c:14:67:a4:71:97:15:51:6c:d4:7c:af:
         2b:ac:a9:ac:cb:bc:dd:44:47:56:5f:87:47:1e:31:cf:fa:bb:
         25:ac:34:25:38:25:21:2b:f5:02:0e:e3:b6:2d:70:ad:3a:e8:
         d5:0d:9c:d1:ee:d9:bb:a9:ca:97:eb:90:a3:57:f9:66:d7:85:
         77:e0:2b:44:3a:e8:f9:19:b5:a6:cc:95:5a:18:c5:b6:96:96:
         7b:46:4c:73:f9:0c:02:ae:18:32:d5:46:f1:d1:cf:e0:33:53:
         29:bd:b3:61:91:50:ff:a2:a4:4e:13:31:0f:9d:67:ca:a7:fe:
         eb:6d:4e:24:ab:86:99:f2:ad:3a:9c:1e:a1:8e:76:0b:27:6e:
         86:f4:83:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOLUfcNSk80+1qMzCT15UCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw
ZTBmNWYwHhcNMjQxMjAzMDcwMDI0WhcNMjQxMjA0MDcwMDI0WjAzMTEwLwYDVQQD
Eyg3OTlkM2ExYjljMDI2N2MzZWRjMTUxOGIzNmI5NzZlYjI1ODdmNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2AEWcb3kn2OfJMB7md1JF96wUDf
G1c6d6VEC+53rLQvwlv5R0InxBIaW5+5NZkBCRF8MxrR3BIyNuQpbGB6CyI5Si1k
HfyM2shL+jegFrA9tBDmqYConK+glg/ls+e/Sv902rluL9Alh4y9ntZzgCjxGcq+
7lYrC0b7kL1hM7g75tbznNTLTWAu7E76+ONlKfRGEPafwA1g4Zgnbp2zyejCGk88
7rs+1ya3132kvQvQ1/mqeLtDVLWeNngpYf8peOYm72iQCVsH9a/dP5P4own1rVBt
cV/GbvTL0wRb5XgfRxkXWoeh4Pj/pMqsFaZXA3U180AGz/2ZIgC/qVCWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmdOhucAmfD7cFRiza5duslh/dIMB8GA1UdIwQY
MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt
ODJkOWE5ZWI0MzBjLzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj
LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq0zDCez
UehzPs6SgG9bY6LynXQlWDf5pf2jrgX+YJsY/XnvO2Raj0YxzIQSQQpyUJ2MjFy6
zIMfWbs2cYS4eeaTlb6hBvBR5AGbe407K+ohGYJztVWsJ5MXEdoToC0yvVjgzUvR
h/x6iqQF81CV3bUNLBRnpHGXFVFs1HyvK6yprMu83URHVl+HRx4xz/q7Jaw0JTgl
ISv1Ag7jti1wrTro1Q2c0e7Zu6nKl+uQo1f5ZteFd+ArRDro+Rm1psyVWhjFtpaW
e0ZMc/kMAq4YMtVG8dHP4DNTKb2zYZFQ/6KkThMxD51nyqf+621OJKuGmfKtOpwe
oY52CyduhvSDJg==
-----END CERTIFICATE-----
Generated at Tue Dec 3 17:48:27 2024 by rpki-client on console-ams.rpki-client.org