Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          IFeNthAwVchjwonho0m5np6aw4InBF+AOqPs+cZPt/w=
Subject key identifier:   BD:F1:C6:4F:60:23:8B:92:0C:E2:CF:AD:BA:3E:96:63:6C:61:38:96
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019350869CB614A00436D5C5BBAA22ED8771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0224
Signing time:             Thu 21 Nov 2024 21:00:19 +0000
Manifest this update:     Thu 21 Nov 2024 21:00:19 +0000
Manifest next update:     Fri 22 Nov 2024 21:00:19 +0000
Files and hashes:         1: 3gp7nMzYneV4J4XLNcs7T31Oa-k.roa (hash: CY19uw/pGm3PJ5SAAUnc6Z67HmnXxmeAhGjy2KClrV0=)
                          2: 8L-s256CoqP7935QRr6m6IIIGAo.roa (hash: eSXho7qOQ472VAeuCxNiHMxPDN6EGzJOm3l57JWdN0w=)
                          3: 9rW8AeFGveUb6VKy-l6IXFfIYX0.roa (hash: NwCOAwZLFUrH2aZPGkEDhrym+8cf0fv1a/ibL/yaf+8=)
                          4: BiT2ML9jC1-ri_IEZHewLJIvxtY.roa (hash: fbl6vz14PorkcVnCgFq1Xc2ZKTUpONeQB5VhVqOuFKU=)
                          5: F8I75rGinamNdvaRwDL0e8RafgA.roa (hash: 7esXJSpX0pKURNV7WXXRzQjrGyZpInbqF2QrGLirTPQ=)
                          6: HttRt05v3SN48vJz9HnxkL7s-Nc.roa (hash: 9iKI2FabiSVwY10dPI5bmefYU4nyF9L35EH3xcLkQWw=)
                          7: JRC40P1juvXDgDX-b2kclxRaxW4.roa (hash: ku8dMpXJ3nAgvnpwECn479JPxNNmVLQ9wWg0P2uEd70=)
                          8: Mhdx8dcl1SlwhdvE_WMWlS4P1yk.roa (hash: 3UrzjiWKXJ25V4TsEBLBh9sa39/C23LN4/awy7lVoKA=)
                          9: MieyOq0dfiT2m0DuS4jee16l8uc.roa (hash: hrwuGOUhQ4PRV6sEeaf0Td4bkMsJoYLEWocxT/2hnkk=)
                          10: SUnq5HUwGAMfUP96q-FdcBpMge8.roa (hash: Oxe51vExhk2k8VrNwMXXqG0Ps8bbL9w1kJjagS6nxUw=)
                          11: U1JP2MuzfSFugPsjFlFL6_kxsc0.roa (hash: IBz/FrnOV9KUQqfWB+26tXBEvOp6cEjxReGFO0wzXaY=)
                          12: XNQWJ6ie76AlnkVsZGmSU_sCqXo.roa (hash: KGZ/zMYD9XsZdgsfsac/p9PAwDGnoV5AcLflIOojliI=)
                          13: bhnaTdYU4R6ZBi9dT6J5MkS2smk.roa (hash: z+DURpkPZi1+KNfwgwM9iAGLoB0HAYgtntTX0kBagU0=)
                          14: dCBzYuOMeJtZl0r3WmVQir9QD5U.roa (hash: Y/PQ5jZELnlIbAfugQHFqGhx/USckhiyCA0LyVwKNH0=)
                          15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: M7NlKfSj9Lq0IbNxIPRN80puP9Y6A6z9kwai54IeRgQ=)
                          16: m0NjkebGlF9axQug2i04JCTsvds.roa (hash: Wo6Ispc+xOSYcE/OVG9jB2uvDmykVfpN+2KNJHltpeg=)
                          17: pFSML8UpDQZYC5GWogVZ_0cHGWE.roa (hash: A4Ke3Y8YMuiHc8br6ON1LdUlnmQ5C9GcnxZPOrusHuI=)
                          18: qEFvKzZJCypm7NC5Vo_LAy8mx2c.roa (hash: 9dstzrm78Ae8lqi1Mcu/meG+MXzKmephC2JxMMYAhMk=)
                          19: rVrzSetOljTklClpJYBrQGjNJQg.roa (hash: Dughaa3KjHToiFYrxb2OTCwRCVFT8JLD8iq7w3NtDMk=)
                          20: tuDBQSoMKmnwhB4uovh83x4jyxs.roa (hash: Whhchh8JYYLHpdAnHtF58DIiLkGlphZAVAHr3iVzLQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:86:9c:b6:14:a0:04:36:d5:c5:bb:aa:22:ed:87:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Nov 21 21:00:19 2024 GMT
            Not After : Nov 22 21:00:19 2024 GMT
        Subject: CN=bdf1c64f60238b920ce2cfadba3e96636c613896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:15:4d:9c:a4:ad:ed:5a:51:3d:b6:df:69:
                    0f:f4:c2:d9:0f:57:93:1d:4f:f6:25:61:a5:38:25:
                    92:cf:cf:4d:71:6c:e8:c8:02:cb:f3:c7:e8:ed:24:
                    49:2e:b7:c8:de:3e:2f:48:e4:b6:ad:f5:17:fc:ac:
                    6d:c5:1e:0d:a5:eb:35:6b:79:2d:ad:35:82:78:3e:
                    08:aa:d0:0b:eb:72:8b:07:95:f0:dd:fa:af:5a:80:
                    71:f4:6d:49:17:ce:5f:be:50:74:84:34:44:f6:91:
                    07:b5:c7:f6:f9:bf:ec:3e:d9:0d:c6:14:c2:18:99:
                    ec:2f:13:ed:1f:94:ee:10:0a:c5:9b:02:42:32:f9:
                    fc:c1:5e:3f:e3:93:6f:73:c7:67:57:7f:2e:ad:b4:
                    88:6d:f6:13:6e:cd:0a:89:63:da:bb:ab:0e:26:0c:
                    15:24:67:02:98:31:84:52:69:8e:da:7a:44:f7:fd:
                    b0:cb:1d:d0:ca:7a:d3:3d:ff:2e:a5:59:21:91:5b:
                    78:98:fb:9b:1f:37:9d:44:bf:dc:e6:b1:f5:ba:28:
                    7e:05:66:95:4f:6e:b3:ae:8e:5d:2c:da:0e:80:8d:
                    fc:6e:c9:f8:53:d2:2e:c0:6f:04:29:ea:84:c6:99:
                    b0:5e:d5:8a:21:df:7c:17:b1:7c:40:9b:1a:7f:79:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F1:C6:4F:60:23:8B:92:0C:E2:CF:AD:BA:3E:96:63:6C:61:38:96
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:53:ab:87:e8:af:b8:bc:bd:2c:1a:92:f5:ce:2d:cd:e2:d5:
         e5:d9:8c:53:f1:84:1c:eb:8e:3b:71:4c:8e:fc:b5:16:c7:e7:
         93:ff:64:8a:c5:7e:22:bf:10:76:16:bc:8b:93:41:ee:72:ab:
         2f:3f:3d:17:15:c2:d2:df:2c:05:1a:f8:96:c7:8f:67:e5:04:
         5e:f9:b1:4d:0e:e9:a7:fc:81:af:fd:aa:c8:be:cd:88:d5:e9:
         fd:a4:53:77:ad:af:fb:95:90:5c:d7:87:53:63:be:8f:c2:26:
         23:0a:37:79:ad:e0:79:0c:c6:7f:9f:9c:52:ce:38:e1:dd:52:
         5a:3d:37:7f:af:c9:7e:18:6e:b5:79:c2:1e:e6:7e:c7:8f:b5:
         f6:68:ca:de:7a:66:94:6f:69:21:41:49:ed:65:2a:6c:e1:10:
         c8:e7:b3:9f:4b:a6:7f:aa:d5:34:5e:51:77:ff:20:71:32:2f:
         5f:91:75:fc:1c:d1:a3:10:3a:b3:90:10:63:4e:c2:4a:ca:d6:
         a6:89:04:fd:46:4d:9b:25:22:82:27:70:0b:4c:15:e5:da:43:
         50:68:aa:85:b6:2f:0f:5e:66:a0:c3:1a:d9:36:0b:0c:5f:8f:
         22:06:56:9d:b5:dc:ac:f1:b8:98:aa:86:fc:14:34:f8:8c:11:
         9e:72:81:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:11 2024 by rpki-client on console-ams.rpki-client.org