Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File:                     UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier:          IGe5sPMK0xKmCS+6qkwG2608IHg98V78APde77nI5fQ=
Subject key identifier:   31:21:75:6B:9A:FF:8F:C9:85:B6:72:C7:0D:79:F2:E1:22:EA:A4:A3
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer:       /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial:       019364E98148C9CB01CC02B94607C4BB7C10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number:          073F
Signing time:             Mon 25 Nov 2024 20:00:44 +0000
Manifest this update:     Mon 25 Nov 2024 20:00:44 +0000
Manifest next update:     Tue 26 Nov 2024 20:00:44 +0000
Files and hashes:         1: 8gAXPk6OPwsdzuzPkFH-cPOoN-M.roa (hash: k8CKKJhEQDRa32tw9E3a0TA6WjTO9yR6DUeWsgRV5eY=)
                          2: EpswE5tyLi1VlIDgGnHvz_y8Up4.roa (hash: oGevmpVRKYwtzOZgSfaIVr7lQe9aTv50JB4lho4vq0Y=)
                          3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: 8cLGrvqWoWEHLLF8kawRL4+ZTMuLNEDJj1lA//6MU5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:e9:81:48:c9:cb:01:cc:02:b9:46:07:c4:bb:7c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
        Validity
            Not Before: Nov 25 20:00:44 2024 GMT
            Not After : Nov 26 20:00:44 2024 GMT
        Subject: CN=3121756b9aff8fc985b672c70d79f2e122eaa4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:8a:46:61:ce:3d:68:e5:6d:25:55:ff:7e:
                    31:91:66:b6:61:0c:18:34:53:74:02:b8:fd:61:35:
                    e3:47:6e:4d:5f:52:df:cc:4b:7b:5e:fd:bb:8d:c9:
                    73:e6:f9:1f:bf:79:2a:60:21:fa:c5:9d:2b:1f:00:
                    b1:e5:66:69:8e:fb:4a:c4:88:fe:8c:68:52:ef:0c:
                    34:1c:46:66:da:cc:77:48:1d:06:04:d0:fd:62:be:
                    e9:92:6e:29:39:85:21:8f:65:9b:e7:a9:5b:95:d0:
                    2e:fb:9f:42:a5:ae:dc:06:1f:31:2d:96:9b:b1:eb:
                    01:03:f8:bd:13:e0:3d:66:fe:c2:ae:16:69:a8:47:
                    2a:d6:77:1f:f6:6b:02:64:b5:f1:4b:55:56:ca:20:
                    1d:a7:a5:e3:a5:c4:dd:f9:55:27:96:69:df:93:b1:
                    03:eb:d3:0f:42:17:67:97:02:e8:28:1b:f1:69:d7:
                    cd:63:b6:26:70:d6:b6:b5:9c:24:ae:70:41:8a:e0:
                    22:38:8a:b9:7b:0c:63:14:de:7f:7d:9b:97:34:7a:
                    e9:40:5a:82:d6:cc:42:20:2f:ed:4f:32:22:25:35:
                    82:73:41:16:36:91:41:1b:25:ef:34:85:9a:2c:8a:
                    d4:84:29:c0:9b:43:be:d6:95:41:a5:93:96:20:35:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:21:75:6B:9A:FF:8F:C9:85:B6:72:C7:0D:79:F2:E1:22:EA:A4:A3
            X509v3 Authority Key Identifier:
                keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6f:32:f6:13:92:8f:1e:27:1d:e3:d3:4b:eb:22:9c:b8:dc:
         b3:52:a1:62:8d:9c:f0:7e:aa:4c:22:bb:84:06:6a:c0:ee:0a:
         64:81:83:e0:f6:ef:38:d6:11:e6:70:2e:be:53:a4:cf:63:ca:
         97:87:9b:95:ae:ae:a0:e6:c0:b1:09:b6:8f:e3:85:75:78:af:
         f3:d1:7e:04:47:2b:f9:6e:94:db:b3:7e:7b:b9:d2:1e:0c:c6:
         de:dd:20:b1:7d:bf:38:61:42:d7:69:2e:29:9c:65:ec:96:80:
         cc:a7:3b:8c:61:1e:df:9f:18:f7:4e:2e:c3:0e:22:67:5d:7c:
         fb:87:e1:2b:ed:66:86:ac:89:9c:6f:7b:a9:db:bf:10:ae:d1:
         86:9f:1f:6b:4e:10:d8:5d:75:80:51:ae:b6:2f:6e:c8:79:bd:
         58:0c:42:bb:c5:dd:db:76:64:cc:bf:fd:ab:d7:2a:9c:f0:ca:
         df:6c:77:b1:f4:97:94:c6:6d:23:75:e6:90:37:e5:e1:af:7d:
         57:c3:a2:af:a1:e2:6f:51:4b:70:03:68:2a:59:95:7c:85:8a:
         9f:88:f4:f8:40:7d:ab:86:9f:c1:73:d7:7e:02:ff:3a:85:b8:
         d1:1c:ec:41:c1:4c:34:46:93:41:03:43:3e:17:68:77:b9:90:
         17:5b:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:53:04 2024 by rpki-client on console-ams.rpki-client.org