Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
File:                     zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json)
Hash identifier:          qlwLcf+7ylm8zWV2MrEGYcBaJG0IWTNzu1B9fOAyibs=
Subject key identifier:   4D:1D:F0:1C:18:9C:02:58:46:32:2A:8D:CD:3E:DA:56:89:11:C7:61
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Certificate issuer:       /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial:       019355E4318AC3CED1EC3C6BB63F4E35B93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
Manifest number:          137C
Signing time:             Fri 22 Nov 2024 22:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:38 +0000
Files and hashes:         1: 0Qt7OjpNfidPxOFab75US5Ul9lo.roa (hash: MwqeILAD2qwWz1AsQSrEMj4S/YMFt+SrZ4G8bzFN9/k=)
                          2: 1XQZ3-ijHPJbcFYb--EtKkAbJSA.roa (hash: G9GzSNAxQjI5rj86Wf7LAMFiVDRRZAsFRlOd4kHiEVI=)
                          3: 26tFgjgcf7yAw77EBfDadbJDTis.roa (hash: RWCxBk3vhvnVCfxrSw1EgBBrAKb5m4lXs72Y9UKfpuo=)
                          4: 2MAeCz_jXQzzf-GDunct4df8rNk.roa (hash: xZgN2VB4k/95iScKJlIkEsDmdbOysGxdo9fT6KXDSYw=)
                          5: 3OmNIoiiapFg1p4ooZN28WxH3kY.roa (hash: waSU7aHw+6khCb7BGI/FjrEVHVnh5FHwSfYCJxXx+RY=)
                          6: 5PCYIBk2_Vkq-R7esvMGrrnVGVM.roa (hash: nMMCamMFIKOP6kiSUlE4m0B6nzz91tK1jjwpPp5W81Q=)
                          7: CHxUr5bzDPnludnyZXt9LDKix84.roa (hash: R7zXfoAIdU0bB+/s7HefYCw1+s5OAmxGD3nObS5LaIo=)
                          8: Dc_BQ7aeiWscTMNJfQAJkXsGC4U.roa (hash: PCQrE53BM44WFQy86ZLdbOn5ruLIXa6tZvAVxJHZTe0=)
                          9: E98USYnzkxVwGeLloyZbJ_L1hiQ.roa (hash: ViUSOr5PdpPu8eMPSICctwpBRqKMB+h66Hew1JW3AZE=)
                          10: HGy0O8L6pfR3V_nIqmRvXJxHX8E.roa (hash: Tf2g1csDzGnewHxvn4K4QdWNDJZS//J9vFO/a+Y6ark=)
                          11: HVK8Qfn4ncFgeifMWGxTzXIxzbY.roa (hash: OnNRj4ii+cmjqcLcRxmg3JEEL+InVhAIOGHvqtTxCpY=)
                          12: IGFZdi20AQt5RH_u_uAm_q4OCOo.roa (hash: dYGq1gqy7BQxbsKVh3Lhvu51bImBIpANaPXpd9JBvRQ=)
                          13: ISi4c69gGa5kEQWMbTeyx3zJGwQ.roa (hash: IShMX+6l8wVICyZf+fK/dBTRgqv9BJuD9/gGwJbcKD8=)
                          14: R1vBdG8FX0LI5_5OPJKVmh2smJk.roa (hash: Nto4i/nJW1GJWb9GY5JjdvPa8pnBbRHFX0QyMvf2ask=)
                          15: T2otlntzY_papWMahPpRtq3xiPo.roa (hash: DSdohlnpfBcACKU95jhR1vlmcHRsiDuzlPJJk9mWte4=)
                          16: eIwRkROJWFdm7eGlSe0zbNujs68.roa (hash: 6ReHo4HR+TzilKFLOtgF4fG0e2xtop5UbJjvocOG1tI=)
                          17: hhI6jqIi9OqIA2OmfFmwwGSMec4.roa (hash: NdSKUwlGopzIj9mDEV6mGaTBZ7JV2mlPQUT7a7nLwKE=)
                          18: iWeUWPVoe6n4PWQDW0PBOab_zt4.roa (hash: 878iwm8fKQ7mw0T0cyU/bWo6BYwH8z/3BItEo1BvS2w=)
                          19: md2Wgn6r7Ad8XFusuP--bYnLgwA.roa (hash: TzKbMGokTLer2FlKwERLxH3TEAAEHT/rRZ+TGIx+1p8=)
                          20: umAwX38iyAwLDFsraAwyfUH0uVo.roa (hash: C1lKA8XAnuuE/vz4GiW+RMO90DZqjwRzClNvxqfHLbo=)
                          21: zNX-Ae2isnWa7soBl8S7pb8AgKw.roa (hash: Adzbes2p8lJHJhW00rztOUjXLdlw77fjrJskXALz3uQ=)
                          22: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: qVhzOpf4IUPESD2gPw9574rqxQJTm77j3bHF3C1VgcU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:31:8a:c3:ce:d1:ec:3c:6b:b6:3f:4e:35:b9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
        Validity
            Not Before: Nov 22 22:00:38 2024 GMT
            Not After : Nov 23 22:00:38 2024 GMT
        Subject: CN=4d1df01c189c025846322a8dcd3eda568911c761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:5c:c8:fa:15:89:be:15:6a:84:02:10:86:
                    80:fa:8e:12:f9:e4:50:53:ed:0d:80:34:cb:ed:15:
                    b0:80:df:2c:9f:fe:a5:9b:a3:db:a6:10:d6:15:f7:
                    00:54:27:b5:53:74:78:08:5e:0d:0c:13:c4:2e:08:
                    60:53:7a:3a:4b:b9:07:ca:bb:0f:07:06:7e:19:36:
                    71:6c:09:b8:7c:9d:f3:91:b5:2e:15:db:6c:7e:90:
                    77:23:0a:61:64:60:e1:a5:e0:d1:9b:fe:39:af:0d:
                    45:ab:f9:27:9b:87:2b:74:3b:24:9a:62:f0:f2:9a:
                    b6:3e:99:5a:de:96:4a:4c:e2:2b:77:b2:77:86:f5:
                    08:87:9d:d4:94:78:80:07:84:a1:06:98:de:f5:b6:
                    68:d7:58:13:68:94:3c:74:ae:4f:14:15:c2:dd:44:
                    5f:92:39:30:af:ef:42:10:9d:68:34:19:be:77:ac:
                    26:7b:01:94:9e:b9:90:42:7f:d8:96:ed:78:82:a1:
                    41:36:b6:4d:e9:17:6b:c2:31:8c:59:ee:c5:40:08:
                    01:c2:47:74:52:18:2b:0a:13:ef:1d:67:9b:85:8a:
                    30:1d:0a:83:50:d9:e3:e5:c3:f3:b3:b4:26:a6:40:
                    08:fd:52:ed:8f:ac:31:1a:fc:02:72:ce:92:3d:1c:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1D:F0:1C:18:9C:02:58:46:32:2A:8D:CD:3E:DA:56:89:11:C7:61
            X509v3 Authority Key Identifier:
                keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5a:57:e5:60:69:f8:d8:24:d6:bb:5b:88:54:7f:8f:cf:41:
         33:9a:f5:81:28:0d:c5:05:08:48:b8:79:6a:94:37:a5:dd:a2:
         77:c3:a1:b5:5c:5b:06:68:cb:a1:46:d7:d0:de:b3:39:ff:22:
         c9:50:c9:c5:33:88:db:c6:13:19:5f:d2:f1:d6:23:1e:7a:92:
         c6:b9:17:fc:e7:c9:f4:19:58:9f:dc:8b:66:2f:9b:20:c9:17:
         1e:96:fe:a8:7a:46:64:92:b4:6d:bd:fb:86:35:20:27:06:c6:
         94:bc:25:5f:15:cb:0b:3c:d5:74:bf:10:95:b1:3f:59:9c:f7:
         2a:fd:59:2f:cc:fe:d4:32:34:2f:e2:56:11:c3:00:28:d2:7c:
         4b:c8:4a:cc:39:08:53:3d:fa:2a:49:54:b1:da:1f:a0:2b:2c:
         39:1a:8b:93:85:00:d6:f5:3f:fb:25:80:cd:aa:90:41:22:07:
         5e:2e:0a:eb:57:4a:e4:8b:80:41:0c:bf:8c:7a:67:aa:68:74:
         0e:9c:16:a4:7d:d8:1e:f6:a0:07:a3:b1:82:11:83:1a:d9:90:
         60:57:6a:eb:48:37:7b:39:0a:d3:7f:45:8c:0d:b1:f5:10:17:
         d8:25:27:15:5d:41:83:b7:c1:9f:1f:f9:e8:b3:31:6e:05:09:
         d7:0c:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:17 2024 by rpki-client on console-fra.rpki-client.org