Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File:                     NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier:          UEqtgd6H8edbaeReb/rOuJvBayzJxllg9VVTVuaCbRI=
Subject key identifier:   55:6B:34:78:AC:41:8B:06:A2:55:88:F3:2E:62:FE:15:AD:EB:10:AD
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer:       /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial:       019357D257C679477C97594F79649BF12026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number:          01CC
Signing time:             Sat 23 Nov 2024 07:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:22 +0000
Files and hashes:         1: L-hkImLrqb5bdqTtYF-f4VEyToM.roa (hash: YLucN2cSfqLVaHoGEnn8+9vRpNF1QNn5lO4nk7SXkBY=)
                          2: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: 3eHJOonPMwcIlYsZDFcGQJZFm/5t5Iz9JifPx9h1zPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:57:c6:79:47:7c:97:59:4f:79:64:9b:f1:20:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
        Validity
            Not Before: Nov 23 07:00:22 2024 GMT
            Not After : Nov 24 07:00:22 2024 GMT
        Subject: CN=556b3478ac418b06a25588f32e62fe15adeb10ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:22:30:ff:45:cb:de:a9:bc:1f:02:a5:d4:
                    ff:ec:a5:b7:68:fc:4b:37:1e:cf:bd:69:bc:ca:f6:
                    31:e2:b5:ba:ce:b8:36:63:97:21:4c:56:9a:e5:b4:
                    7f:95:da:c0:35:4d:bd:6e:85:17:0b:30:23:85:c7:
                    e5:0f:53:1d:7b:d1:47:a4:2d:7a:ef:62:fd:36:88:
                    d1:8b:59:0e:c4:b8:5c:05:59:1b:92:7b:08:3b:29:
                    7b:71:f8:8f:38:35:6a:b7:ed:14:67:ac:bf:c0:8f:
                    cf:77:34:f7:bb:fe:b9:96:99:2e:ad:6c:71:34:31:
                    47:ef:c4:6b:ba:ac:56:fc:0e:7f:c7:8a:9a:6e:57:
                    0b:01:d6:db:dc:7a:14:d2:f4:a9:7f:bc:68:b5:e5:
                    53:1b:0a:ef:2e:62:a8:08:23:eb:74:9d:b8:a7:bf:
                    de:95:d6:ae:62:78:26:1d:d5:77:02:1d:9f:bb:59:
                    39:1c:5e:a8:18:6e:13:99:ce:90:12:9c:44:7a:9c:
                    c3:31:b7:92:f3:74:25:c2:fd:21:c9:48:20:93:e8:
                    18:06:62:02:01:c1:86:fc:ce:40:33:35:f0:8e:a5:
                    8c:c7:5c:fc:85:a0:66:a7:be:6e:42:30:8b:9b:a6:
                    48:d0:7c:a0:25:9c:12:29:5d:fb:1f:34:7a:cb:50:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6B:34:78:AC:41:8B:06:A2:55:88:F3:2E:62:FE:15:AD:EB:10:AD
            X509v3 Authority Key Identifier:
                keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ff:c7:17:c6:6f:62:f1:3b:c8:e3:8c:d8:0d:71:fc:0e:dd:
         62:e6:13:4c:70:15:3a:5a:4e:3e:13:da:48:ed:79:f0:3f:55:
         70:63:c1:3c:c4:7d:73:e3:b3:e9:18:41:4e:d3:30:47:0c:ce:
         63:51:b8:25:6b:51:aa:a3:be:44:32:6b:8d:15:34:5f:c6:98:
         8f:07:72:2c:64:1b:f7:1e:6f:d6:2d:8a:7c:cb:4d:9c:0c:4b:
         0b:c1:5b:b2:03:cf:b5:92:d5:f7:4d:ea:8d:70:92:40:4e:0e:
         c7:63:9f:e4:28:90:a1:07:1f:73:e4:87:a1:f4:c2:b6:7b:be:
         0b:55:21:47:28:d7:00:26:d7:fe:0c:70:fd:8e:04:5a:bf:81:
         50:96:3d:27:d5:05:88:d9:22:63:5c:98:6b:f3:d6:a4:b4:7e:
         cd:e2:6c:b8:93:72:7a:4e:bc:d5:4d:b3:b1:d1:c3:e9:59:c3:
         59:db:28:59:0f:c5:e7:91:35:68:1c:42:13:25:45:c3:21:0a:
         55:e4:5f:18:89:bf:e9:9d:be:1a:5c:b5:d7:f2:a6:21:57:92:
         19:94:6f:82:c9:07:15:a8:8c:a1:2c:8f:1f:c6:52:ac:1d:7b:
         33:09:96:a4:f2:25:92:1f:6c:58:92:ba:15:21:3f:87:66:be:
         0e:07:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:11 2024 by rpki-client on console-fra.rpki-client.org