Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File:                     x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier:          XB0ut2QBevevUs82rsNqRVDzlwCgS3ccST1b2x7dd4o=
Subject key identifier:   86:D0:CC:48:D1:20:5A:A2:4C:DA:37:D0:06:DA:50:93:40:EE:4F:3D
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer:       /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial:       01936A7DE9B1D4090A7CB0664E0BF6DE8714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number:          0E8F
Signing time:             Tue 26 Nov 2024 22:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:56 +0000
Files and hashes:         1: 2Q_tuRozWUEx38TBwM0ew5JHsFo.roa (hash: /vyitMCrKbko3A5jrIJtYK2MLhuewIE1qPiATnlKrMw=)
                          2: GqvVrTS1D1gVg90jZTPehWtQLRQ.roa (hash: LxVTM1klAU4F47R5N8ESdhoMkw/tOTpHAKU8mCez65o=)
                          3: Yt1un448e_2Nqd2IaYkiSHKZ-8g.roa (hash: fRsLG7Ui9/BFu34e0BnTU7BwRr9lXCPLuYl+6ONI1ZU=)
                          4: od_jYIKCz6QOYYoXsoOtVwQ1Qc0.roa (hash: H9O929sFbIly2ms5v+GCLJbpsp8tXUDoBg4O6oIYzEk=)
                          5: txB_3VuwneTlxsCsW4mbMKcmCS8.roa (hash: Fuy1Cbr1CulAra6nt/b/3mNRL7cZQXdjCID7/OfsaAg=)
                          6: uRZzWrdzvVwK7CXw9hWsfuttkwo.roa (hash: uhulexUSdiSKNwUApSDXwwhoPVWzJNJyB4sGjQQ8+8Y=)
                          7: wJQFxsy59gS6UwBjlAHF3cZMZrw.roa (hash: 2TdoP4dQbAdvKCcTwBPpDqqW+oY9mGfU5dl1jy/9suU=)
                          8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: Gd45iwvhZkg8un1T7q/pX2L4YY6H9h0cy5fukBpP1rM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:e9:b1:d4:09:0a:7c:b0:66:4e:0b:f6:de:87:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
        Validity
            Not Before: Nov 26 22:00:56 2024 GMT
            Not After : Nov 27 22:00:56 2024 GMT
        Subject: CN=86d0cc48d1205aa24cda37d006da509340ee4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:bf:be:0f:27:3b:b3:65:ea:8c:df:76:4f:
                    b1:72:70:0f:e6:5f:b7:c7:ba:3b:aa:ae:67:0c:96:
                    ff:02:ed:16:a2:8d:0a:01:2c:8b:eb:15:6a:96:92:
                    e3:da:04:7a:bd:ab:be:e5:5c:25:a7:0d:08:7b:9b:
                    80:18:b6:4c:7f:2b:b7:d6:6f:8b:81:f3:85:54:e6:
                    ee:6f:d7:43:c0:54:e5:f2:a9:12:f6:96:57:cb:13:
                    08:d7:a5:bc:07:bb:91:02:59:67:c2:92:f3:91:13:
                    c3:fe:77:ae:bf:66:8d:45:6d:77:f1:65:f9:40:be:
                    d2:bc:a6:eb:19:94:c2:45:78:2a:55:4a:e0:55:dc:
                    73:ce:d8:56:c7:fc:76:ab:ce:e9:00:c0:2d:f6:4c:
                    e1:c8:c8:16:45:56:a7:c2:5d:eb:20:e1:d8:22:a7:
                    bf:6e:e3:a9:87:2c:b0:1a:f3:d8:4c:a3:3b:44:15:
                    49:f1:bb:43:66:32:ec:4c:e1:35:34:bb:59:f1:b7:
                    c5:4e:6b:db:ea:c1:b3:88:b7:69:01:8a:34:70:40:
                    ab:d4:8e:00:66:4c:b2:87:b8:b1:da:e2:1c:6a:d6:
                    e5:9e:cb:bd:59:62:6a:41:21:22:2c:43:f4:a0:3d:
                    d1:0e:fb:af:e6:e1:59:4f:0e:8b:8b:b4:c1:f9:41:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D0:CC:48:D1:20:5A:A2:4C:DA:37:D0:06:DA:50:93:40:EE:4F:3D
            X509v3 Authority Key Identifier:
                keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:38:0e:c6:97:31:ae:a4:12:ad:a9:f0:a3:43:5f:b9:8c:
         51:e5:3c:69:f9:c5:ae:3e:64:cc:bd:75:0e:8a:a2:da:bd:49:
         e1:40:8a:20:05:a2:24:ea:ba:7e:c9:80:ea:8c:7f:2c:e8:81:
         89:7f:b1:26:a3:b2:09:fb:ce:c6:32:d7:e7:bc:cb:34:73:ba:
         e1:9d:fd:c9:e6:a7:58:08:b0:6e:88:77:83:c2:e7:ed:02:e0:
         a0:16:a3:02:fb:f4:1e:1e:b4:db:60:36:e1:25:86:79:b8:d2:
         67:7b:85:94:29:8a:69:de:0d:43:60:9e:ba:cc:e3:1f:77:85:
         52:67:5c:42:5e:89:e7:e2:8a:2f:d4:cd:2a:76:f0:47:76:f2:
         e5:75:b7:79:0f:25:a9:c0:53:eb:dd:3d:5c:12:1a:e8:a5:ca:
         68:6f:fd:36:d6:ff:a0:bf:5d:9f:c7:99:ad:d4:0c:0f:ac:6d:
         03:99:f1:5b:09:71:32:75:f9:7d:3c:04:b1:60:4f:c2:1a:3a:
         9a:bb:8f:ac:0a:93:4e:fe:f3:b0:d2:f5:6e:79:e9:eb:f8:8c:
         b7:55:da:0f:23:d1:44:89:98:fd:b3:66:fc:99:f6:d0:2f:de:
         c6:4e:0d:27:de:7c:78:7b:67:64:b9:da:98:21:5d:f9:69:cf:
         f0:83:6e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfemx1AkKfLBmTgv23ocUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjQxMTI2MjIwMDU2WhcNMjQxMTI3MjIwMDU2WjAzMTEwLwYDVQQD
Eyg4NmQwY2M0OGQxMjA1YWEyNGNkYTM3ZDAwNmRhNTA5MzQwZWU0ZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyai/vg8nO7Nl6ozfdk+xcnAP5l+3
x7o7qq5nDJb/Au0Woo0KASyL6xVqlpLj2gR6vau+5Vwlpw0Ie5uAGLZMfyu31m+L
gfOFVObub9dDwFTl8qkS9pZXyxMI16W8B7uRAllnwpLzkRPD/neuv2aNRW138WX5
QL7SvKbrGZTCRXgqVUrgVdxzzthWx/x2q87pAMAt9kzhyMgWRVanwl3rIOHYIqe/
buOphyywGvPYTKM7RBVJ8btDZjLsTOE1NLtZ8bfFTmvb6sGziLdpAYo0cECr1I4A
Zkyyh7ix2uIcatblnsu9WWJqQSEiLEP0oD3RDvuv5uFZTw6Li7TB+UHTwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbQzEjRIFqiTNo30AbaUJNA7k89MB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpA4DsaX
Ma6kEq2p8KNDX7mMUeU8afnFrj5kzL11Doqi2r1J4UCKIAWiJOq6fsmA6ox/LOiB
iX+xJqOyCfvOxjLX57zLNHO64Z39yeanWAiwboh3g8Ln7QLgoBajAvv0Hh6022A2
4SWGebjSZ3uFlCmKad4NQ2CeuszjH3eFUmdcQl6J5+KKL9TNKnbwR3by5XW3eQ8l
qcBT6909XBIa6KXKaG/9Ntb/oL9dn8eZrdQMD6xtA5nxWwlxMnX5fTwEsWBPwho6
mruPrAqTTv7zsNL1bnnp6/iMt1XaDyPRRImY/bNm/Jn20C/exk4NJ958eHtnZLna
mCFd+WnP8INuZA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:06 2024 by rpki-client on console-fra.rpki-client.org