Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File:                     ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier:          kU6+ILpprP2iRXG6uJ04jU/cZfX4fT5kjcVdozU1vVw=
Subject key identifier:   A4:1E:1D:3D:E5:F0:83:79:8B:A9:A0:08:C0:5B:89:49:F7:F4:76:0B
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer:       /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial:       0193696A8DBAAF2E6A3AB1AF9BE36FBC7DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number:          12E0
Signing time:             Tue 26 Nov 2024 17:00:10 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:10 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:10 +0000
Files and hashes:         1: h83fMyLqa-Fj8ANc75R81HhQH1k.roa (hash: hiyVIG8EQV4S5fPME96wG98c6KO6hcL95kU/7nsiWuU=)
                          2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: jAEsh2M3vUnxK3rAFyPPa2HPkobMfD9tEqvlDTak7vg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:8d:ba:af:2e:6a:3a:b1:af:9b:e3:6f:bc:7d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
        Validity
            Not Before: Nov 26 17:00:10 2024 GMT
            Not After : Nov 27 17:00:10 2024 GMT
        Subject: CN=a41e1d3de5f083798ba9a008c05b8949f7f4760b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:04:d8:3a:17:34:24:7d:91:50:02:0d:22:
                    cd:a6:0f:41:b2:33:c3:67:c5:78:fd:61:f9:ce:fe:
                    c9:55:d4:19:63:a5:ea:be:e1:ed:8c:76:a3:a6:da:
                    d4:77:2c:9f:25:f7:7d:14:6a:9e:a0:76:fb:37:3d:
                    b1:d3:0d:fe:ef:30:34:b6:4c:fe:e3:5f:19:ec:80:
                    c7:f8:67:b5:bb:53:4b:c1:13:a3:90:ae:11:c9:a4:
                    52:c2:95:cc:dd:5d:0d:7f:ab:49:61:aa:3c:0f:de:
                    cb:c1:05:2b:35:14:b8:24:52:60:d8:63:e3:d4:20:
                    65:17:0c:ce:85:ab:11:60:1d:8d:74:15:e9:61:1a:
                    63:eb:c9:42:e8:35:b2:36:84:a8:7b:8f:04:fc:97:
                    41:52:61:70:4d:54:83:e6:64:20:d0:62:b4:be:19:
                    6b:3f:22:93:00:f5:19:a2:71:e8:72:87:23:76:6b:
                    34:f8:0e:48:07:56:81:b8:a6:5f:2e:20:a4:d8:1b:
                    a8:83:b9:f4:b8:0b:52:2d:c3:46:46:c6:09:f7:b9:
                    e9:22:01:7c:26:57:1c:95:ae:6e:ed:9b:46:b3:ad:
                    e5:57:b4:c7:7a:44:9d:4c:ef:84:e9:b2:38:50:33:
                    d9:f5:41:b2:11:25:bd:c6:3e:6a:bf:4e:26:88:ec:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1E:1D:3D:E5:F0:83:79:8B:A9:A0:08:C0:5B:89:49:F7:F4:76:0B
            X509v3 Authority Key Identifier:
                keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:2c:fa:12:19:b5:2a:69:2d:f2:47:b1:98:6a:77:70:a0:af:
         c8:02:dd:ab:8b:4c:7a:5c:1d:46:de:f4:3c:99:2d:02:0b:58:
         8f:f3:85:fd:d6:c0:6a:49:24:8a:72:f2:96:ef:d8:9c:f9:7c:
         b1:ea:01:ca:81:31:83:1a:74:ca:81:69:04:e1:66:d8:af:6e:
         f1:e5:3c:11:78:4a:bb:73:af:5c:54:2d:4f:2d:b7:1b:9e:65:
         55:89:8c:ac:a4:54:5f:a1:4f:ba:7d:4c:de:13:57:e7:04:a1:
         3f:88:21:cd:0a:be:d3:fe:cd:ff:53:02:53:ae:70:cb:03:df:
         1d:3f:dd:38:41:b8:da:f0:0a:57:9b:c3:4b:b1:a0:c8:e1:c5:
         92:66:5f:ab:15:4f:41:f1:e8:d8:4f:92:5d:0c:ef:8e:bd:a7:
         92:c9:7b:11:83:1d:46:52:4a:a3:a8:bb:b1:ae:67:26:f5:bc:
         ea:e8:bf:38:d8:0c:4d:dc:42:b4:a8:71:43:48:93:3f:d4:04:
         30:7f:51:f9:20:f2:aa:16:2c:78:ee:ad:42:da:1b:d0:50:73:
         d6:1a:c5:40:cf:7d:fb:78:72:bd:be:89:34:59:70:45:43:f2:
         c8:27:1a:a7:ce:06:93:60:69:b5:f6:64:29:73:bb:f9:1a:b4:
         29:a3:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:25 2024 by rpki-client on console-ams.rpki-client.org