Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File:                     1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier:          g/6mnEA6y5HUU4OblTDaOMjhDDBEeTVE2/28hMOdLKk=
Subject key identifier:   9A:E7:02:E6:09:E1:A4:90:8F:93:C2:D0:49:79:D6:8E:2E:2E:6A:5D
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer:       /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial:       019356F6FAD76929262EFF710DB959445ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number:          F9
Signing time:             Sat 23 Nov 2024 03:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:46 +0000
Files and hashes:         1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: REaT4xqdX5W6LhYYDk8mnOI7Ll6MTZvU4OfWMyBgnsM=)
                          2: 9muM9LBcf9YN2ygueJD32pSkzLA.roa (hash: aJcDI+6VLInG3sjMeZTIPod2hcEBKwIWSjBToa5Ip4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:fa:d7:69:29:26:2e:ff:71:0d:b9:59:44:5a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
        Validity
            Not Before: Nov 23 03:00:46 2024 GMT
            Not After : Nov 24 03:00:46 2024 GMT
        Subject: CN=9ae702e609e1a4908f93c2d04979d68e2e2e6a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:52:cf:9a:35:07:4f:0c:52:91:31:91:6a:
                    98:d9:cc:73:df:25:6e:25:96:bd:9a:49:b4:7b:75:
                    f0:e0:47:c2:77:e6:4a:43:c8:37:21:91:a0:3c:70:
                    40:5f:ac:bd:65:fe:8e:29:a4:16:06:11:6c:75:c8:
                    30:89:7c:55:7a:d7:b9:ec:56:0d:fd:d1:1d:10:30:
                    08:06:90:9c:2b:c9:ab:8d:ad:35:e9:12:78:7e:d0:
                    ce:cc:47:c2:9c:3d:fd:22:de:07:a9:e7:0e:70:14:
                    a8:ce:44:95:ea:72:c8:6e:77:21:22:a1:30:95:bd:
                    aa:82:4a:c5:44:26:a4:8f:12:82:55:64:9d:0e:fe:
                    d0:c9:ef:ff:67:b4:4f:cf:a6:ec:02:86:f8:f4:aa:
                    df:e6:86:85:0d:6f:aa:87:33:a7:d7:c6:09:1c:f7:
                    f2:c8:0d:0c:49:a1:d1:15:24:e8:85:a5:d3:95:e9:
                    09:3b:7f:d3:e6:38:13:1f:1b:81:ff:b3:c7:af:2f:
                    33:f4:66:df:d1:fa:82:60:9f:a4:c7:4e:f0:37:e7:
                    7d:4f:28:fc:b1:b5:df:5d:f5:79:a1:be:ce:e3:d4:
                    af:0a:55:ce:d9:3c:e1:af:c0:1a:f2:c9:b1:a7:4f:
                    9e:76:3f:34:08:ab:84:67:a4:4d:85:8b:fe:38:fc:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E7:02:E6:09:E1:A4:90:8F:93:C2:D0:49:79:D6:8E:2E:2E:6A:5D
            X509v3 Authority Key Identifier:
                keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:c8:ad:79:7d:17:59:df:21:1f:06:66:27:a5:1d:fb:a0:
         31:f1:e3:2a:9c:bd:c8:2c:f3:06:ca:60:1e:5b:45:dc:b5:0b:
         75:85:75:b0:8c:5c:1d:15:96:6f:be:3b:cd:4b:90:b6:cd:31:
         43:22:32:d1:d4:13:66:b0:ed:2d:48:1e:58:5e:52:20:66:2f:
         69:7b:bd:08:40:6e:f7:e4:e7:5c:93:f3:cc:d5:6e:0a:01:bb:
         6d:4b:27:57:70:52:10:07:e8:23:ee:87:7d:e5:2a:96:9c:71:
         1e:46:2b:4f:d8:af:f7:09:40:42:69:ef:da:14:f9:62:7b:46:
         c3:85:22:dd:b8:fb:de:77:c7:b1:a3:d5:21:e1:14:dc:37:64:
         a5:67:97:f6:6f:b0:1b:86:b4:46:75:d1:c4:9c:d8:66:d6:4b:
         50:3d:d4:91:43:d7:b7:ea:b3:ab:e1:90:a0:47:a4:20:e6:22:
         b0:ec:4a:2a:dc:76:8b:64:ac:ef:1b:95:b0:e4:fd:e9:91:26:
         06:83:64:d5:e2:d2:25:2b:73:8c:64:5e:33:f9:3e:92:01:0b:
         c5:9e:38:ed:0a:3b:11:d3:d2:de:7e:76:a7:db:eb:16:a5:af:
         80:78:05:ca:fc:e7:a9:1e:69:c0:3c:b9:41:0b:75:22:be:2e:
         f9:97:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:30 2024 by rpki-client on console-ams.rpki-client.org