Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File:                     3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier:          CdxbY+muQ8A77SXzSrwLNM/+K+Zn9IXNcEF8jHs6VKA=
Subject key identifier:   88:FB:AF:72:97:1E:D1:97:B0:B8:E5:D2:61:B2:44:19:9E:5E:20:76
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer:       /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial:       01936A46B5B1A35D4C95A0695A9D74AFBC6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number:          03EE
Signing time:             Tue 26 Nov 2024 21:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:39 +0000
Files and hashes:         1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: pkY17zdONUjFagtbbV+Ne8ISkqt2u8Bud7lv0v0ECLA=)
                          2: ZF1NBVygwczrv-VrbnsMrwKxoPE.roa (hash: /o12xb9vdZSayHPZ8WzqR3hjycfpesp9WuNC4Et2XGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b5:b1:a3:5d:4c:95:a0:69:5a:9d:74:af:bc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
        Validity
            Not Before: Nov 26 21:00:39 2024 GMT
            Not After : Nov 27 21:00:39 2024 GMT
        Subject: CN=88fbaf72971ed197b0b8e5d261b244199e5e2076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:18:d3:b4:99:6c:7b:f6:19:fe:ac:2c:d4:
                    6e:d6:72:82:43:a5:dd:db:c9:14:36:a3:f1:86:fd:
                    da:9f:47:43:0f:8b:9b:d3:c7:aa:5e:43:53:86:78:
                    c3:03:ae:2e:be:8f:41:b3:c4:c7:cb:6d:d6:50:b4:
                    31:70:19:c7:5d:43:71:a3:99:a7:25:89:41:67:93:
                    ab:73:ec:97:2c:02:76:1b:a7:78:7a:f1:5d:05:86:
                    a3:32:ad:e5:b0:b8:9a:56:a6:7c:4c:64:44:00:eb:
                    cc:78:8c:e2:5a:02:f3:8a:93:be:36:ee:4c:be:6e:
                    17:68:69:5b:aa:cf:a6:60:b6:00:0e:2d:88:92:ce:
                    ab:8a:b5:95:78:5a:fa:16:9e:58:96:29:0d:35:dc:
                    f6:92:f6:9b:a1:52:bd:59:0e:17:bc:73:fe:ee:f8:
                    f4:5f:6c:2d:2d:cd:62:ab:05:14:2b:74:db:45:83:
                    1d:4d:16:0b:19:03:ed:8c:31:50:c1:cc:a9:8c:b3:
                    3d:f2:fb:68:86:30:5d:3f:7b:48:b7:cf:c1:e9:55:
                    d0:bf:d9:3d:55:3d:8e:7d:84:73:03:f6:aa:6f:d3:
                    96:6d:98:3a:83:96:88:c9:f4:64:f3:a1:12:71:a2:
                    af:77:93:b8:31:83:1d:51:b3:8f:c2:92:38:f8:ee:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:AF:72:97:1E:D1:97:B0:B8:E5:D2:61:B2:44:19:9E:5E:20:76
            X509v3 Authority Key Identifier:
                keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:53:e4:fd:8a:55:89:26:eb:79:ab:3c:83:34:68:b2:e6:
         9f:65:65:3c:45:3f:3e:d6:c1:4c:04:d2:8b:43:c3:b9:b2:67:
         d6:0f:7a:63:d3:d3:e0:b4:03:b4:58:f1:d4:bf:7a:ab:0e:14:
         e9:0a:d2:1f:a3:12:e4:71:d0:4e:43:5a:cc:ba:81:f1:59:fd:
         cd:f5:0d:f1:7b:ea:45:45:66:87:f9:bc:97:64:62:9a:96:3a:
         40:bc:6a:c5:35:d8:dd:bc:92:e5:25:90:d7:9c:a2:b3:ee:2f:
         41:f4:8a:13:50:37:c2:76:b1:c4:c4:9a:fa:86:bb:f2:01:66:
         20:ee:de:78:fd:d2:94:8f:7f:e9:27:54:8d:14:fc:ab:e8:16:
         6f:b8:33:a2:01:21:05:f0:4d:67:45:d7:e4:81:57:f9:6e:0a:
         cf:d3:a1:60:6a:2a:64:e1:91:1b:08:c2:62:01:1e:73:28:6e:
         5c:88:e3:2b:74:96:3e:9e:c2:45:89:6e:f0:09:1f:b7:f0:5c:
         01:df:fd:e4:55:6d:34:70:f8:70:2c:78:cc:d2:88:ab:31:15:
         8f:1a:08:ab:05:c7:3e:99:18:53:ea:7e:9c:8c:36:14:fd:8d:
         96:b3:d5:90:46:3f:0f:0e:44:15:6d:d1:83:22:2b:76:2a:41:
         e8:9f:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:03 2024 by rpki-client on console-fra.rpki-client.org