Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File:                     XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier:          Lg5cbfDdLqNCriEFxZXZ2G+ZsDp3nwNcs+bhx8fCZnk=
Subject key identifier:   A9:42:CF:7D:05:CA:28:11:63:4F:CF:3E:C5:1E:95:B3:80:8C:0B:75
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer:       /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial:       0193568A2F1E38EB87D1BCAF2FC243D32B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number:          0759
Signing time:             Sat 23 Nov 2024 01:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:56 +0000
Files and hashes:         1: SovXy98GLh6Q5VVfLYJBB7W7zgw.roa (hash: AAvbCkhBhxqKvDMz2aVyCslFO0ilsu/7PSEJAxZirSQ=)
                          2: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: Rm0ejy2cbjXJPOw6V8D6BHVWOhnPjqEEGQ2mUv/3xvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2f:1e:38:eb:87:d1:bc:af:2f:c2:43:d3:2b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
        Validity
            Not Before: Nov 23 01:01:56 2024 GMT
            Not After : Nov 24 01:01:56 2024 GMT
        Subject: CN=a942cf7d05ca2811634fcf3ec51e95b3808c0b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:cf:34:30:81:d6:b9:a4:ca:32:c2:3b:64:
                    57:40:e2:33:3a:74:31:86:fd:75:8d:fa:88:eb:5c:
                    8a:0d:ae:22:cb:cf:28:4f:57:9f:eb:15:e3:82:ff:
                    ec:c5:43:d2:86:64:d4:45:ce:cd:c8:eb:e1:0b:d5:
                    0f:2d:e7:3d:80:94:73:22:b2:f4:f2:a1:5e:62:e2:
                    3e:e9:fa:9c:c6:8f:e1:2a:05:9b:c4:58:d0:f5:ad:
                    ce:e1:7a:e0:ab:49:c6:70:63:8a:f1:c4:33:7a:58:
                    c8:ea:8e:fd:38:b1:1b:6d:73:7b:0f:04:01:38:39:
                    5c:48:77:55:91:1f:07:54:61:03:0d:e9:65:b3:fe:
                    e1:5c:de:86:fa:24:4d:80:fb:5e:e8:9f:41:18:61:
                    8e:b3:76:83:07:07:e8:09:4c:d0:74:91:1d:27:8e:
                    b4:d7:c5:78:fd:18:25:f2:44:24:e8:b5:a7:b7:92:
                    19:2e:41:3b:f4:ea:79:f1:c1:f3:6a:3e:94:b0:a8:
                    59:2f:19:07:89:80:d7:8d:9c:75:fa:5a:b7:48:2b:
                    f4:aa:c1:8f:d1:90:ef:42:9f:a0:6d:bf:65:b2:18:
                    0b:88:ff:3c:ed:60:c4:15:88:ae:a7:22:45:1b:aa:
                    ce:2c:e3:10:80:d5:84:2b:dd:8e:bf:e2:39:41:cb:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:CF:7D:05:CA:28:11:63:4F:CF:3E:C5:1E:95:B3:80:8C:0B:75
            X509v3 Authority Key Identifier:
                keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:27:5d:b3:77:b2:86:12:4f:73:d4:b5:96:35:e7:39:fd:78:
         a6:d6:ef:bb:dc:7a:8f:b8:44:95:3d:aa:44:c2:e4:56:1f:8e:
         1d:4e:67:1c:1e:ef:18:81:5b:92:92:60:41:ae:1d:c5:9d:6a:
         a5:2d:d1:ab:0e:5f:ee:86:d9:ba:cc:f8:0b:24:85:5a:4b:aa:
         58:79:42:d5:7f:b3:58:7d:42:1d:35:e6:93:2b:b5:f1:28:5d:
         a9:fd:e6:4d:4b:81:9c:72:12:31:0d:d2:82:0f:a4:d8:67:e7:
         f7:7f:4e:4b:d9:45:3c:d4:3a:77:b3:4a:7d:2c:08:0c:51:6e:
         3e:71:42:b9:d7:5a:f3:cd:3a:38:08:a2:9a:a3:c6:67:f2:cc:
         b4:d0:cf:f9:87:b9:77:4f:cc:64:18:a3:00:c5:e7:9a:27:18:
         af:63:6d:0a:d0:4e:e9:de:91:46:f3:16:12:dc:fc:9b:62:61:
         cb:da:7e:39:13:1b:7e:0a:80:49:a1:cc:5b:b5:26:fd:45:39:
         b8:bc:60:e7:25:18:6d:8f:60:13:7a:56:ed:e5:8e:e4:4c:9e:
         3c:f7:49:12:09:54:79:2f:e8:fe:e7:85:5b:9a:0a:9a:f3:07:
         aa:f6:ed:33:4c:d8:6d:bb:cb:a1:31:c5:b5:c4:85:ba:22:53:
         cd:7d:b3:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWii8eOOuH0byvL8JD0yt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1
MGQ2YTEwHhcNMjQxMTIzMDEwMTU2WhcNMjQxMTI0MDEwMTU2WjAzMTEwLwYDVQQD
EyhhOTQyY2Y3ZDA1Y2EyODExNjM0ZmNmM2VjNTFlOTViMzgwOGMwYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7PNDCB1rmkyjLCO2RXQOIzOnQx
hv11jfqI61yKDa4iy88oT1ef6xXjgv/sxUPShmTURc7NyOvhC9UPLec9gJRzIrL0
8qFeYuI+6fqcxo/hKgWbxFjQ9a3O4Xrgq0nGcGOK8cQzeljI6o79OLEbbXN7DwQB
ODlcSHdVkR8HVGEDDells/7hXN6G+iRNgPte6J9BGGGOs3aDBwfoCUzQdJEdJ460
18V4/Rgl8kQk6LWnt5IZLkE79Op58cHzaj6UsKhZLxkHiYDXjZx1+lq3SCv0qsGP
0ZDvQp+gbb9lshgLiP887WDEFYiupyJFG6rOLOMQgNWEK92Ov+I5QctBZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlCz30FyigRY0/PPsUelbOAjAt1MB8GA1UdIwQY
MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt
OWU1OWMxMTFhYTM4LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4
LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ydds3ey
hhJPc9S1ljXnOf14ptbvu9x6j7hElT2qRMLkVh+OHU5nHB7vGIFbkpJgQa4dxZ1q
pS3Rqw5f7obZusz4CySFWkuqWHlC1X+zWH1CHTXmkyu18Shdqf3mTUuBnHISMQ3S
gg+k2Gfn939OS9lFPNQ6d7NKfSwIDFFuPnFCudda8806OAiimqPGZ/LMtNDP+Ye5
d0/MZBijAMXnmicYr2NtCtBO6d6RRvMWEtz8m2Jhy9p+ORMbfgqASaHMW7Um/UU5
uLxg5yUYbY9gE3pW7eWO5EyePPdJEglUeS/o/ueFW5oKmvMHqvbtM0zYbbvLoTHF
tcSFuiJTzX2zoA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:40 2024 by rpki-client on console-fra.rpki-client.org