Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          JzueyJVJQ8fkH1VVwPK5+o+Cr6negQt4tQSi9O9aJzs=
Subject key identifier:   8E:56:DA:51:77:81:01:A5:68:C4:0C:67:49:8F:9B:27:2E:EA:57:E8
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       01936331F1C831164FE0C9FFD7677F5EE52F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          10BA
Signing time:             Mon 25 Nov 2024 12:00:37 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:37 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:37 +0000
Files and hashes:         1: D0LyboUtqcUGgqQCg6_0co2Ix68.roa (hash: JccX8/7MyophDJkzHa9F1oz6C7IS75Z6DUU6u9yPR1Y=)
                          2: bnipCpFYR8UPqOSEsSrVqsDZtFs.roa (hash: 2AJTMUg1WmRRQZiLHmWaay59arrrPUljH903gzj1Yoo=)
                          3: m9kQpR-isvjwLi4Jp2NeBqHgYYc.roa (hash: NDp02+nuL44mLZoVhuZglr6jGA3KsAyr8rdF7bWVLMA=)
                          4: sqGfon-Ee9RdY5ea45lQKfzmIXo.roa (hash: +SatKhX2DsYHaoBFdM2fHCFesnQRQB8VMvg5gnX1Q0U=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: 2kTuWd6BuofO9CB1O3IptLM1xEj5gKQ6AbjMCNKQDk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:31:f1:c8:31:16:4f:e0:c9:ff:d7:67:7f:5e:e5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Nov 25 12:00:37 2024 GMT
            Not After : Nov 26 12:00:37 2024 GMT
        Subject: CN=8e56da51778101a568c40c67498f9b272eea57e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:27:34:f8:71:0b:a2:c5:e4:fa:4a:db:7e:
                    ce:f3:f3:44:f8:4c:da:9c:ec:82:88:cc:37:7e:18:
                    1c:ca:a0:37:fc:e0:5a:c2:77:23:e3:e4:87:03:61:
                    99:eb:d3:ad:e4:af:bc:6d:6c:2c:9e:83:c2:1a:f9:
                    56:ef:5d:b8:77:d6:1d:da:9e:04:5b:6a:e6:11:5a:
                    42:39:db:80:67:86:ee:52:95:ca:6f:35:79:c7:25:
                    34:8b:ac:54:4d:4d:20:ec:7f:1d:bd:1e:bb:48:7d:
                    e0:24:91:cf:73:d5:99:07:57:89:b3:17:ae:2f:02:
                    25:c7:bc:10:2f:96:98:f7:56:f0:e0:e7:8d:be:77:
                    d8:b1:41:8c:3a:a8:38:64:8e:91:11:9b:ad:d4:93:
                    4d:ff:13:83:98:97:56:c4:f8:d8:ca:ab:83:5a:f8:
                    65:72:02:cc:4e:0a:d4:7d:21:b3:bb:03:b0:a7:43:
                    d2:4d:22:3c:1a:ac:0f:7c:ab:95:77:ab:c6:f4:a4:
                    d2:f1:af:c3:d3:8d:42:c5:0d:87:cc:ce:00:74:50:
                    e5:39:f2:74:26:6b:fc:16:ee:17:e0:6c:12:09:aa:
                    1d:d3:a1:13:59:85:35:59:83:30:ab:bd:dd:7b:d0:
                    da:f1:e6:20:91:32:3d:b1:2c:82:34:ae:99:66:1f:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:DA:51:77:81:01:A5:68:C4:0C:67:49:8F:9B:27:2E:EA:57:E8
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:93:e3:50:59:f8:bd:ca:ea:65:86:68:d1:10:f1:3e:9d:91:
         7f:70:00:45:e4:dd:e1:aa:5f:5a:d6:c1:a2:4f:f5:c0:2c:51:
         06:fb:ff:8e:0a:59:ce:f0:84:7a:d9:44:ec:86:d1:3a:84:90:
         27:86:da:25:40:b2:e3:19:ae:b3:36:69:2f:a8:9b:56:46:46:
         e9:07:02:dd:39:60:a3:aa:fb:ff:13:37:af:ac:c6:77:34:19:
         ed:4d:ae:a8:79:6f:b9:7e:f2:2e:52:9e:e7:2c:47:1a:97:ad:
         2e:60:af:e6:1d:a3:6e:e0:f5:15:49:16:51:12:63:a2:c2:75:
         a7:90:5d:4b:13:1d:b2:71:5a:51:60:71:f3:62:fa:26:e2:b9:
         57:08:36:c4:9f:43:db:49:b9:41:8a:06:de:a8:76:5f:56:a8:
         d6:17:98:a2:33:bb:30:69:6b:f1:a4:ff:29:1e:fe:53:12:40:
         9a:8f:aa:28:ab:78:26:e2:aa:9f:5e:38:dd:25:45:6e:60:9f:
         dc:10:30:e9:90:a4:a7:24:98:4e:01:b8:63:29:1e:96:eb:5a:
         7e:1f:7b:02:0f:3f:07:95:7f:40:18:d2:c3:a3:cf:dd:d0:fc:
         77:a3:81:91:c9:45:d2:a4:4d:17:5d:19:da:26:ec:f3:4c:1e:
         27:a0:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:30:22 2024 by rpki-client on console-fra.rpki-client.org