Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File:                     zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier:          CWsv3h9KJULm13r6rsjg+J3bmgAWloYMNKLsdrTP42Q=
Subject key identifier:   AC:FC:83:80:44:B8:3B:03:4A:49:02:9F:8F:00:FA:18:34:E0:D7:22
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer:       /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial:       01936CA2B0FDBF68E3EDA779844880E96B88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number:          1091
Signing time:             Wed 27 Nov 2024 08:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 08:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 08:00:21 +0000
Files and hashes:         1: dx5G68QhApAj4mBapVxJN2GIou0.roa (hash: /v/XeUYn730iCqzSvSulcpPpAS4xOj8h6XThidjzF5s=)
                          2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: 0i2nU2hjwmDPNmbHRoYE4S2QAhXV/focdyaXg1NSPgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:a2:b0:fd:bf:68:e3:ed:a7:79:84:48:80:e9:6b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
        Validity
            Not Before: Nov 27 08:00:21 2024 GMT
            Not After : Nov 28 08:00:21 2024 GMT
        Subject: CN=acfc838044b83b034a49029f8f00fa1834e0d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:59:61:ed:ef:0d:96:c2:6a:a3:c0:53:d6:
                    47:c9:26:01:6f:3c:6b:8a:28:72:22:c5:03:22:d7:
                    72:a4:16:61:94:f3:68:13:12:c6:08:46:d8:94:82:
                    ce:38:5e:7b:ba:d4:bd:8f:db:d5:e3:86:39:45:29:
                    93:86:7b:a7:af:ab:65:26:0f:6e:f7:2d:83:42:28:
                    f5:cf:34:9e:f2:47:d5:4c:89:42:64:c4:d4:58:32:
                    77:b2:e5:0d:64:47:41:e9:f5:dc:f1:28:7c:d1:0d:
                    14:7a:06:5e:43:96:9a:4c:9a:95:3e:23:7f:98:de:
                    0a:a0:12:0c:37:b0:98:1a:a2:c2:95:bc:da:1c:ba:
                    a4:0c:d8:a7:ed:68:53:04:26:a2:45:56:06:b8:d0:
                    0d:27:fd:17:59:e7:fe:f5:ae:47:3e:63:e3:ff:53:
                    9e:be:56:71:3d:be:0a:87:09:58:63:2a:d8:20:0a:
                    10:07:d8:3f:aa:67:15:c1:14:d6:9d:e7:75:87:19:
                    52:d3:66:a3:0a:1e:5e:17:26:a5:44:47:9e:54:a9:
                    b3:ed:c0:cc:64:53:8e:ee:b8:4b:54:d0:2e:b0:f0:
                    d5:50:b2:10:09:39:26:a5:75:69:2f:14:74:3b:fa:
                    45:c0:4c:10:07:01:63:18:7d:b2:5b:82:7f:72:48:
                    85:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:83:80:44:B8:3B:03:4A:49:02:9F:8F:00:FA:18:34:E0:D7:22
            X509v3 Authority Key Identifier:
                keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:f8:46:e9:d2:38:9e:70:6e:2c:6d:92:67:d0:4d:90:da:
         0f:06:b1:04:82:e2:26:94:33:33:f0:ef:9a:64:43:ae:a6:91:
         59:48:4b:e3:f1:ea:25:e8:3d:42:13:9e:6f:fa:1c:5a:26:bf:
         5e:1e:47:c2:25:2f:ba:cf:81:ee:c6:73:d0:ec:f0:3d:df:fa:
         4a:06:7d:35:30:1f:e8:48:84:32:33:cf:d5:9a:04:56:66:98:
         08:8e:68:ba:69:67:eb:6f:7a:d4:3b:9a:8c:d3:c2:5d:37:31:
         cf:1f:50:09:fe:d6:5f:21:e7:6a:aa:2e:35:a8:d4:6f:74:27:
         3b:bb:c7:34:cd:81:3e:ed:f1:31:79:7e:8f:45:cd:dd:9c:31:
         cd:0b:7a:93:00:26:e5:c8:c7:32:1b:d2:f4:3e:b9:b2:ad:2e:
         e7:55:e9:14:10:bb:86:d3:5d:54:a1:9d:96:d4:2c:c5:7c:50:
         6d:88:a7:1f:29:c2:98:87:00:1c:83:4c:b5:81:60:e0:75:b4:
         2f:7e:68:e1:34:f8:bf:5c:04:c5:ce:78:04:5c:16:4a:17:cc:
         94:d3:3c:b9:1f:76:67:f4:c2:c6:05:76:91:1b:7f:b7:40:81:
         7d:70:16:a1:ff:aa:a1:9b:6f:54:97:cf:c4:39:b7:aa:5f:c5:
         68:c1:fa:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNsorD9v2jj7ad5hEiA6WuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzlkNWY1ZGI4NWFmNGMyNjA4ZmMwYzMzY2NjNGYyNzIw
MTcxODcwHhcNMjQxMTI3MDgwMDIxWhcNMjQxMTI4MDgwMDIxWjAzMTEwLwYDVQQD
EyhhY2ZjODM4MDQ0YjgzYjAzNGE0OTAyOWY4ZjAwZmExODM0ZTBkNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnhZYe3vDZbCaqPAU9ZHySYBbzxr
iihyIsUDItdypBZhlPNoExLGCEbYlILOOF57utS9j9vV44Y5RSmThnunr6tlJg9u
9y2DQij1zzSe8kfVTIlCZMTUWDJ3suUNZEdB6fXc8Sh80Q0UegZeQ5aaTJqVPiN/
mN4KoBIMN7CYGqLClbzaHLqkDNin7WhTBCaiRVYGuNANJ/0XWef+9a5HPmPj/1Oe
vlZxPb4KhwlYYyrYIAoQB9g/qmcVwRTWned1hxlS02ajCh5eFyalREeeVKmz7cDM
ZFOO7rhLVNAusPDVULIQCTkmpXVpLxR0O/pFwEwQBwFjGH2yW4J/ckiFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz8g4BEuDsDSkkCn48A+hg04NciMB8GA1UdIwQY
MBaAFM851fXbha9MJgj8DDPMxPJyAXGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjkt
YTFjYzIzMTYwYTQ4LzEvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjktYTFjYzIzMTYwYTQ4
LzEvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWl/4RunS
OJ5wbixtkmfQTZDaDwaxBILiJpQzM/DvmmRDrqaRWUhL4/HqJeg9QhOeb/ocWia/
Xh5HwiUvus+B7sZz0OzwPd/6SgZ9NTAf6EiEMjPP1ZoEVmaYCI5oumln62961Dua
jNPCXTcxzx9QCf7WXyHnaqouNajUb3QnO7vHNM2BPu3xMXl+j0XN3ZwxzQt6kwAm
5cjHMhvS9D65sq0u51XpFBC7htNdVKGdltQsxXxQbYinHynCmIcAHINMtYFg4HW0
L35o4TT4v1wExc54BFwWShfMlNM8uR92Z/TCxgV2kRt/t0CBfXAWof+qoZtvVJfP
xDm3ql/FaMH69A==
-----END CERTIFICATE-----
Generated at Wed Nov 27 16:54:46 2024 by rpki-client on console-ams.rpki-client.org