Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
File:                     uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json)
Hash identifier:          p556j9VLNFz2+TLaw5mCxcgesRX3NBxpKrN9B8TphN0=
Subject key identifier:   FD:FF:61:02:D3:C7:BC:F0:48:B6:CA:A3:02:2C:40:CF:FE:2B:94:73
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Certificate issuer:       /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial:       019351629D117A9D26E3B1C0C2F0AA6F9A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
Manifest number:          120B
Signing time:             Fri 22 Nov 2024 01:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:37 +0000
Files and hashes:         1: 2HtdbmzjI9O3JVt0NYTd5oo72H8.roa (hash: HzWJf2lzaHeUgRmgXySme3nA6TkvqSTFGZTBi5Edt18=)
                          2: A7EdYDm-kHBEaNuMCI8O9xF_VQE.roa (hash: gpez0mGEn0JhJZhUL18QQBGx450LduIEGx8V3oqjpwU=)
                          3: Cy7HbD_0jIzdd3GKzqHuvqrn3pc.roa (hash: JL/Dyk0LnMTXMaq5+KqjMyUDko2cuK45h3SvadAnvQU=)
                          4: GSv8v-8lGE6-Qe77_HOWhvTU6Eo.roa (hash: WSq38GmuyBXs1ZVtfWrjHjqBrDaJmwjFNIWsg41pVzs=)
                          5: LZssoXyEFVQz04EMyt_-z8FQyG8.roa (hash: y7l48hHRTdtW1WC5sw6KU7nUyLPtXcblotViHWtyXSs=)
                          6: QUVgSkrMFApwROOG0_IklN3qWOw.roa (hash: TBySb49udURdJdSL6TAF/uOZaimLM7ihba+5SqbWOzo=)
                          7: RpuM4cUms0ml1czhok1DZ6FcYm4.roa (hash: qlzNdJRm+UexdCp/EBmbeJEBVN1wAKUNnb0HiF4Zanw=)
                          8: lXwF_v5XfTuInaddEpbdvknbqJA.roa (hash: 8RXdgUoD+RvNL+nF8z57wRWHzmMrdDuSiDj0p5pFhXI=)
                          9: qb2UkRjkgoCvV0g1kvMjr0ll7rQ.roa (hash: FVkPJ6VbmC+tchIB2VyKOJBjW8iiq61Osa54IAAwRbE=)
                          10: tMtsWFNZXjcMRR8uw83t_r_icZE.roa (hash: L5gxL/WXrHNEhFV6K9a9UeaYyjsxQldO0ZcGqATNeWo=)
                          11: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: upCUs6uxrE7nAuDIarKiUcD4Q36qNqA9ojED+p21zPU=)
                          12: ztjH7U9ZVQmo-fOL8w83DikQ7-o.roa (hash: cYsskIAB66XVhfVIGffNwgWXBg/gbePv9Du1UOd/J2c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:9d:11:7a:9d:26:e3:b1:c0:c2:f0:aa:6f:9a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
        Validity
            Not Before: Nov 22 01:00:37 2024 GMT
            Not After : Nov 23 01:00:37 2024 GMT
        Subject: CN=fdff6102d3c7bcf048b6caa3022c40cffe2b9473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:62:28:28:f7:10:49:ad:9b:71:ef:69:a4:
                    b3:92:e8:b6:9d:cc:b1:16:4c:10:37:4e:6b:4d:8b:
                    bc:49:7d:8a:5e:62:94:f2:91:c0:ef:eb:05:97:37:
                    75:05:20:71:f3:b0:7a:89:d2:5c:1c:db:8b:14:62:
                    4d:40:69:02:46:c9:76:03:15:30:18:a4:ea:86:9f:
                    e2:1a:ab:50:f8:30:a2:49:ab:52:57:af:41:99:1c:
                    e0:fd:6d:1e:86:80:b1:da:0d:1d:03:7e:c7:ad:af:
                    eb:4d:d0:e1:f1:3a:8c:ef:26:19:c3:a4:1d:7f:c7:
                    de:e8:e7:83:90:e7:79:1c:58:72:67:ae:9e:a1:51:
                    28:42:cf:ec:73:b3:a7:67:62:53:a6:6d:2b:2f:68:
                    c6:5f:69:a1:2a:3f:c2:62:91:ce:1b:b8:71:08:da:
                    ff:b6:86:e3:ed:9f:72:5e:07:b2:7f:98:73:20:75:
                    a5:25:69:da:64:83:c5:8e:20:82:cd:3c:74:cb:89:
                    0c:57:bd:b6:0e:62:3c:97:a6:32:66:16:4f:74:df:
                    dd:17:2c:87:cc:f7:dd:5d:4e:bb:0d:30:a2:9f:26:
                    4d:01:9f:91:a5:98:b2:a3:b3:3a:c9:d2:9c:ec:43:
                    e7:d9:32:8c:ad:a7:ad:fc:27:9f:f0:26:e9:04:0b:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FF:61:02:D3:C7:BC:F0:48:B6:CA:A3:02:2C:40:CF:FE:2B:94:73
            X509v3 Authority Key Identifier:
                keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ff:54:7f:33:39:00:c8:43:68:a1:3a:37:e9:61:a7:8a:12:
         40:8e:25:f5:11:43:37:ce:af:2a:8e:97:a4:e5:0e:39:f7:46:
         89:7f:6b:d8:bb:19:0b:20:ee:1b:2e:cc:7f:d6:16:36:07:81:
         ed:98:6a:72:bb:8d:87:76:76:7b:3c:de:b8:0d:13:bf:1b:b8:
         09:77:5c:12:4c:93:2f:4b:f9:b8:b5:7f:3e:94:e6:67:ac:91:
         b5:b2:e2:7e:8a:e0:ba:83:be:21:e1:a3:08:5c:89:12:89:b3:
         67:86:31:32:df:96:c9:b6:7f:40:b5:8f:f8:c2:71:56:ce:dd:
         94:1d:eb:c9:e4:1e:4c:5a:a3:56:72:ce:d0:f7:6a:9d:9c:fc:
         fa:4c:82:6c:af:fc:80:80:a6:5a:1f:6d:20:85:e4:5a:12:c7:
         e6:1d:e3:69:c7:29:8d:84:92:72:7f:cf:0a:17:c1:d0:c9:34:
         c8:38:c2:34:f8:01:3e:bb:b8:72:51:0d:d3:f6:26:54:28:ea:
         a8:59:73:1d:6b:75:67:1a:c4:60:b7:b0:49:52:5d:5f:f9:4f:
         60:3d:8e:b1:e1:09:f3:a8:65:7f:94:80:86:2c:54:79:3f:46:
         ad:3a:49:dd:fa:45:93:ea:ac:3f:b7:ab:5f:21:8f:31:22:7e:
         9d:8d:d5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYp0Rep0m47HAwvCqb5pbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQxMTIyMDEwMDM3WhcNMjQxMTIzMDEwMDM3WjAzMTEwLwYDVQQD
EyhmZGZmNjEwMmQzYzdiY2YwNDhiNmNhYTMwMjJjNDBjZmZlMmI5NDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriNiKCj3EEmtm3HvaaSzkui2ncyx
FkwQN05rTYu8SX2KXmKU8pHA7+sFlzd1BSBx87B6idJcHNuLFGJNQGkCRsl2AxUw
GKTqhp/iGqtQ+DCiSatSV69BmRzg/W0ehoCx2g0dA37Hra/rTdDh8TqM7yYZw6Qd
f8fe6OeDkOd5HFhyZ66eoVEoQs/sc7OnZ2JTpm0rL2jGX2mhKj/CYpHOG7hxCNr/
tobj7Z9yXgeyf5hzIHWlJWnaZIPFjiCCzTx0y4kMV722DmI8l6YyZhZPdN/dFyyH
zPfdXU67DTCinyZNAZ+RpZiyo7M6ydKc7EPn2TKMraet/Cef8CbpBAvyXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3/YQLTx7zwSLbKowIsQM/+K5RzMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf9UfzM5
AMhDaKE6N+lhp4oSQI4l9RFDN86vKo6XpOUOOfdGiX9r2LsZCyDuGy7Mf9YWNgeB
7ZhqcruNh3Z2ezzeuA0Tvxu4CXdcEkyTL0v5uLV/PpTmZ6yRtbLiforguoO+IeGj
CFyJEomzZ4YxMt+WybZ/QLWP+MJxVs7dlB3ryeQeTFqjVnLO0PdqnZz8+kyCbK/8
gICmWh9tIIXkWhLH5h3jaccpjYSScn/PChfB0Mk0yDjCNPgBPru4clEN0/YmVCjq
qFlzHWt1ZxrEYLewSVJdX/lPYD2OseEJ86hlf5SAhixUeT9GrTpJ3fpFk+qsP7er
XyGPMSJ+nY3VLQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:37 2024 by rpki-client on console-ams.rpki-client.org