Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          Aigq4upuppj2+VloLlZWV+IOpfOObHv8pcbq7pRY0ZM=
Subject key identifier:   7F:C0:D5:C0:9E:93:01:6C:96:9F:FE:2B:9F:66:17:42:E7:C5:B9:ED
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       0193512B83534647FFFA378A59B35A3BC29F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 00:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:26 +0000
Files and hashes:         1: 5KdBR_CaVnhEKhwVCZvRsDOq1so.roa (hash: l+HvT1mL786+eaMQlYeYswVrr2E0ILLQNf/B35VwWCU=)
                          2: E6zuhrpCYKVYMWTteuxN9AJ1bZs.roa (hash: TuyaMi0EOszTj4vpV3vN1tNVMYUmue/CJgf0Ir9GjsE=)
                          3: UZEvZkitdRsk1WnrUsg0VBCN7oM.roa (hash: QqPjaSiMFtjIi1Se/GAalY2DdwpJWmVOl4mn9SXxEF4=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: aFJs4Z0mUleK/96DPD6H8DUIysXSVF4ArXoVJ246shw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:83:53:46:47:ff:fa:37:8a:59:b3:5a:3b:c2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Nov 22 00:00:26 2024 GMT
            Not After : Nov 23 00:00:26 2024 GMT
        Subject: CN=7fc0d5c09e93016c969ffe2b9f661742e7c5b9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ee:31:ec:d4:68:4d:77:11:83:d4:28:6d:12:
                    3f:ea:7a:7a:5f:ea:9f:8a:59:73:9f:0b:71:50:b6:
                    02:bc:a0:4f:d7:a4:6a:56:20:c9:46:7b:66:c0:fa:
                    6c:81:13:af:47:aa:b7:82:38:7a:a9:d2:03:b1:8a:
                    28:38:50:3b:cc:26:f0:72:4e:f6:08:b2:ac:24:0b:
                    72:0f:70:2e:d5:84:f2:00:de:c9:b9:b1:df:01:39:
                    58:0e:09:fb:9f:c8:82:14:d7:65:86:12:1e:1c:3b:
                    1e:f8:60:af:59:47:76:80:b8:1e:ab:ca:a0:89:c0:
                    21:6b:9b:b7:e2:cc:6d:14:88:b5:c2:d7:b2:c4:54:
                    33:9d:5d:bd:cb:68:75:b0:d7:45:ab:fd:bb:e1:7b:
                    2b:eb:f5:50:38:03:41:48:6f:88:9b:b7:c5:b4:71:
                    9b:d5:ab:01:52:23:97:05:20:ae:8e:e1:b6:a8:05:
                    6e:c7:6c:ac:46:b5:f2:e5:46:8c:ef:57:22:52:3c:
                    52:66:81:f2:45:71:c7:6e:ed:0b:ac:1f:d7:89:33:
                    fb:dc:22:d7:cc:36:1d:d8:dc:24:b2:c0:99:41:46:
                    a5:c8:e2:4a:e6:00:1f:e1:74:77:f6:5f:cf:d3:b3:
                    01:97:25:72:93:24:a2:c7:da:c6:3c:ec:33:df:4b:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C0:D5:C0:9E:93:01:6C:96:9F:FE:2B:9F:66:17:42:E7:C5:B9:ED
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:29:85:52:2c:4c:50:89:7f:da:8f:9c:71:66:83:51:73:98:
         e1:b8:f9:17:e5:21:83:b3:07:85:9b:87:9b:76:7c:91:42:2c:
         b1:97:62:16:0e:1e:7d:72:b3:47:c9:54:93:de:86:83:42:9e:
         17:9f:aa:a5:81:b5:f9:f4:8c:89:de:4e:8c:d8:96:3e:5f:c7:
         94:2f:39:e8:ae:f6:3c:16:a3:f8:4f:da:08:fd:85:4f:5a:ee:
         3e:3d:9b:c5:82:29:5a:dd:06:63:c0:d2:c4:f1:c5:eb:6c:a3:
         08:1b:a5:08:75:af:7f:57:7e:38:fe:75:8d:b6:df:22:fb:9c:
         fc:35:9c:64:80:d8:dc:52:95:76:31:fc:f9:29:75:14:ad:ba:
         0d:9d:db:7b:ef:bb:ca:cc:65:ea:16:62:43:16:2a:6a:ff:ac:
         82:35:80:54:a8:93:3c:97:c7:dd:dd:d5:c0:22:ea:39:5b:69:
         37:f9:52:60:95:8b:54:ba:ba:51:2a:49:cb:99:a4:56:b3:f3:
         68:60:ee:61:f7:4d:4f:45:0b:fb:b1:4e:df:3c:98:1a:5e:aa:
         85:65:74:a0:ae:cd:2a:25:9e:76:22:4d:3b:9a:92:2f:6a:2a:
         d9:d1:5c:13:26:c7:c8:33:48:81:00:3d:19:51:46:8a:41:cb:
         c9:ed:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:57:41 2024 by rpki-client on console-fra.rpki-client.org