Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          C90NIF1S4LYL0Bdo9BtyQvmSBLLzU7h5GmQ+IBFshas=
Subject key identifier:   3F:91:06:6E:EE:6E:59:27:0B:DD:28:B8:48:2F:1C:2F:E9:5D:B1:3D
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       019355E4504226C36A5FA7BEB9D5751AE077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          088F
Signing time:             Fri 22 Nov 2024 22:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:46 +0000
Files and hashes:         1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: QLqwtSH5m6VLbcabrrICQbpTr05SRvMo4UuLr1EWPRc=)
                          2: YNPic3s2pVDlFBWnXblgxpBU61E.roa (hash: W+bd+sxPPgs8B6dwSfgRkORd4vKs+JQbeygacrLE+ms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:50:42:26:c3:6a:5f:a7:be:b9:d5:75:1a:e0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Nov 22 22:00:46 2024 GMT
            Not After : Nov 23 22:00:46 2024 GMT
        Subject: CN=3f91066eee6e59270bdd28b8482f1c2fe95db13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:0b:d7:3f:aa:fd:21:d4:9b:e3:36:bf:4f:
                    ec:7a:1d:28:95:cc:8b:ac:05:d1:da:1a:db:28:f1:
                    ef:11:e8:18:e8:2b:f4:12:3d:68:cf:a9:fb:a6:25:
                    6e:88:98:49:13:a2:aa:6b:6b:44:0a:c2:fd:36:e3:
                    fa:8f:69:5e:6b:21:5c:26:cf:2b:06:3e:40:22:89:
                    16:ac:c9:1a:19:e0:4c:ec:bd:7d:93:d2:16:be:d7:
                    15:ab:86:d7:a3:ca:4f:a4:6d:f5:c9:ed:28:18:1e:
                    f3:de:3d:7e:d0:2f:c8:76:55:ee:a0:0e:ec:33:5f:
                    46:00:7a:95:a8:c4:8a:07:d4:f4:0a:4f:01:25:b6:
                    39:03:e1:15:45:a6:f4:55:7b:87:d5:92:ce:ee:39:
                    22:84:8f:73:23:cb:6e:b8:13:ec:41:75:1d:79:c2:
                    cd:d8:42:02:45:a0:03:0d:9c:d9:fc:c9:8f:f7:9f:
                    96:42:e0:e7:e4:42:40:65:8f:b5:95:a9:57:93:f0:
                    28:92:56:80:1b:6b:d3:63:59:3a:e6:52:51:9c:eb:
                    62:ef:86:b4:d5:e5:0d:dc:fc:32:dd:d5:d2:37:94:
                    18:3e:31:e4:bf:d4:25:cb:55:39:8a:d2:06:88:83:
                    c3:cc:d6:9f:aa:ed:13:4d:85:03:7c:d2:8b:f4:d3:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:91:06:6E:EE:6E:59:27:0B:DD:28:B8:48:2F:1C:2F:E9:5D:B1:3D
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:9d:bf:15:29:3c:fc:7b:27:9b:78:c3:ad:82:e6:59:cc:
         4a:d9:50:40:5e:84:ac:ff:42:94:e0:de:e9:6d:5a:cb:ae:35:
         9c:aa:85:25:7f:00:5a:d9:22:67:91:42:6e:be:7f:f9:9d:f2:
         8c:e1:8e:a0:d5:28:dd:8b:18:28:b5:42:d4:7f:0f:0c:34:8e:
         66:bb:b6:1f:d5:d3:6a:49:82:65:51:c9:d8:0c:04:04:21:09:
         e8:42:09:cc:62:c6:92:83:27:b2:d9:4b:91:ef:94:82:6e:d1:
         59:57:9c:04:ae:86:e6:f6:cf:3a:ba:78:1b:f4:42:7b:db:ad:
         b2:6d:e0:ea:92:1d:02:c7:19:5b:61:4e:fa:78:45:65:7f:e2:
         44:33:2a:e7:52:9a:af:e6:12:6f:79:e2:80:d5:53:e7:65:d3:
         ac:92:e5:cb:c4:2b:58:6c:51:89:76:08:20:fd:a8:5f:29:22:
         b6:21:3c:df:e0:87:de:de:16:df:e5:e7:e6:c5:0b:6e:03:ca:
         a6:fb:67:1a:df:e7:8d:03:a5:f4:a9:39:e3:07:04:c4:c2:87:
         cf:da:2c:47:e7:a5:50:df:24:92:b0:43:b2:fc:cb:7e:08:5a:
         b5:39:a7:d9:d7:70:83:50:3c:8f:5a:3f:ca:ca:99:80:ba:ec:
         b9:7e:48:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5FBCJsNqX6e+udV1GuB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGI5ZjgwOTNkZDg4OWU0NzdjZWZhN2E3NTU2MzkyYTY2
YjM4NzAwHhcNMjQxMTIyMjIwMDQ2WhcNMjQxMTIzMjIwMDQ2WjAzMTEwLwYDVQQD
EygzZjkxMDY2ZWVlNmU1OTI3MGJkZDI4Yjg0ODJmMWMyZmU5NWRiMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xgL1z+q/SHUm+M2v0/seh0olcyL
rAXR2hrbKPHvEegY6Cv0Ej1oz6n7piVuiJhJE6Kqa2tECsL9NuP6j2leayFcJs8r
Bj5AIokWrMkaGeBM7L19k9IWvtcVq4bXo8pPpG31ye0oGB7z3j1+0C/IdlXuoA7s
M19GAHqVqMSKB9T0Ck8BJbY5A+EVRab0VXuH1ZLO7jkihI9zI8tuuBPsQXUdecLN
2EICRaADDZzZ/MmP95+WQuDn5EJAZY+1lalXk/AoklaAG2vTY1k65lJRnOti74a0
1eUN3Pwy3dXSN5QYPjHkv9Qly1U5itIGiIPDzNafqu0TTYUDfNKL9NOTOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+RBm7ublknC90ouEgvHC/pXbE9MB8GA1UdIwQY
MBaAFPRLn4CT3YieR3zvp6dVY5KmazhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgt
MTAzYjA0ODUyMDNiLzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgtMTAzYjA0ODUyMDNi
LzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtadvxUp
PPx7J5t4w62C5lnMStlQQF6ErP9ClODe6W1ay641nKqFJX8AWtkiZ5FCbr5/+Z3y
jOGOoNUo3YsYKLVC1H8PDDSOZru2H9XTakmCZVHJ2AwEBCEJ6EIJzGLGkoMnstlL
ke+Ugm7RWVecBK6G5vbPOrp4G/RCe9utsm3g6pIdAscZW2FO+nhFZX/iRDMq51Ka
r+YSb3nigNVT52XTrJLly8QrWGxRiXYIIP2oXykitiE83+CH3t4W3+Xn5sULbgPK
pvtnGt/njQOl9Kk54wcExMKHz9osR+elUN8kkrBDsvzLfghatTmn2ddwg1A8j1o/
ysqZgLrsuX5I7g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:15 2024 by rpki-client on console-fra.rpki-client.org