Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          IFWzHYC3oM6JHnUUgj7jgDfLGuQA8QQnniuGMgAOZeA=
Subject key identifier:   47:EE:DE:A6:9C:49:AF:28:4A:98:45:2F:68:99:6C:F1:07:80:FF:07
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       01935162B9CDFD5635385B76B2345E9FEDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          1064
Signing time:             Fri 22 Nov 2024 01:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:44 +0000
Files and hashes:         1: 1KKBYWBMUS5MCh1BQzYclwLdV7I.roa (hash: 5E2Z9YXiGti0tHxMXQmIi/Qzfh9GU1Aants/ynqE4mY=)
                          2: 4C71yDOwhhcYrxHr8_rQRIm0mkg.roa (hash: 8rNeBoqXDmev+kSUAbc1iHvMIF1xALOa3RWZy0st5pk=)
                          3: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: ktzYgHMo1XfjmWNcKWZhaVVECqs645hQ8S1sr0AjH80=)
                          4: 5cpg3KcXdV1WevzdEWlLTIHOcho.roa (hash: Hp/mQBQ8QFFQ/HcqW5Bj+SOKAsy1z8wLrb5CMjYIT5Q=)
                          5: 8Fd1pZMWC8DrlIdOm8IcRvKU22g.roa (hash: CzFgb6CGBr8ui7CCG+h9nJtSmxylWGFSiiMse5nXS9Q=)
                          6: 9l7-fZYz97wf4Q-0cQHSh3BqrlQ.roa (hash: qkZyRkt12ynyHjwKsR/UbbXIwnO8srjJaFCMtgR2cko=)
                          7: HK66luxECFUAhH51KTByt0ANxzA.roa (hash: w2SFudKDQO4wdfJeY6ttPGb5URO53m6Rtt81dsss+vM=)
                          8: I1UtTKdBH2HAxszqJU2L6SgMBqk.roa (hash: rgi5RjvynIRdVPHA9w1DugTgyBqgl3uk7/Z8g+9yrFU=)
                          9: L_GtMC90gubdtmoHvGckZT3RmPo.roa (hash: S9njVMxN+40fc/sV+WwHgScxZr1+CZGkr5PjXZLi70Y=)
                          10: M6qCO7d1QDGdMyNm9FwFOXyvFnc.roa (hash: W3Nhl2X6s1kgswWmAGuGsxP/7r0VIhy2glvTSrSAMDQ=)
                          11: P7RJoaRIWKf_bMbITBqWxB7_98A.roa (hash: 96c6JUc4S3gEtVv0u9h0OF+A/AH93f/xqLeQtfdbyjs=)
                          12: U2IKRDdEj4poFCXSltKSdfesDtc.roa (hash: 3WW2GYyc07zbzLSVatsOSewUIy63iTvwvmd0upQ+SeA=)
                          13: YuJaPWHHQ3xs5ZlDqcF_0fc4Rl0.roa (hash: gVvpzcD8Nr4EBN5CUQ+imfAMd9JGF2jUVVoWNZFaOEI=)
                          14: fnbrHeqp5gw5QHsm-xisqyLc6Ug.roa (hash: I9AIRp8XvMGHteS/yjMfTMS1vh8yZFChUZHiWGN6iAg=)
                          15: hE_eqix1NaaKP8n1Ks6NaJ5P1gY.roa (hash: WY2HM8F4Mjm2cUgO52dRW3BpYKrM3OZ6aY0S95X5IrA=)
                          16: r3aVxLTMgy5v0rGi7hxs0w-zfp0.roa (hash: y+YCt9z7vCpmN8yKc8oNRHuqKD8RCeG37zDjfysOocE=)
                          17: rJl1ysKRUsk87pyYIdz0obOzEEs.roa (hash: d70nQewH4XHNQQ9uMpQZ088NXWDDIU6wA7BRfhr6ZwQ=)
                          18: sWS58xWP-enxzt6gzoY8xRrBA68.roa (hash: RGp9qpFsEP0gOvyzC7eskK0R7nDB/tUPiAdLLKorOXg=)
                          19: wmTe1cr0GzmgeM0jP0NSCR7TCl8.roa (hash: 4R/e61y0hJo46LLbC/7egCyzRCBqPsZ2V94YjDf5mqU=)
                          20: y4Brw4Fm-iYe79YtOEOWsL_I48E.roa (hash: SFd3pqBKOOS0OrCqb6zS+VqynxEahbGTprHyceuUYrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:b9:cd:fd:56:35:38:5b:76:b2:34:5e:9f:ed:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Nov 22 01:00:44 2024 GMT
            Not After : Nov 23 01:00:44 2024 GMT
        Subject: CN=47eedea69c49af284a98452f68996cf10780ff07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:0d:da:bd:e6:38:92:a1:f7:2a:48:f3:e1:
                    cb:4c:91:d0:40:00:81:01:aa:c0:85:40:89:07:77:
                    e9:61:08:39:62:10:b0:65:97:a9:99:fc:da:d1:be:
                    81:10:ff:f3:54:0b:cb:43:df:df:a2:56:86:65:9a:
                    3c:7c:48:99:1b:32:2f:21:20:f5:e5:db:39:69:cd:
                    f7:d3:2f:20:40:cd:a7:c1:e1:f3:7e:4c:d3:b7:59:
                    cb:37:68:73:24:c4:b3:3e:86:d3:54:87:5d:af:45:
                    a4:7d:08:c6:60:db:ac:8e:55:71:f0:a8:d9:fd:d7:
                    04:c1:77:dd:bb:19:64:50:60:59:c0:12:34:7d:cf:
                    11:91:cd:7a:01:7d:c8:b7:5c:f8:5e:97:c8:00:c7:
                    95:bc:7b:72:da:a5:f3:a2:2d:60:a1:b7:6b:06:ff:
                    1b:ba:0f:df:2a:11:2d:21:14:9c:2a:0b:4c:66:9b:
                    4d:38:30:7d:d9:79:c9:c1:91:98:f6:17:5f:e1:a5:
                    f1:41:6b:c5:b2:65:6e:47:f1:e3:2d:74:27:58:c0:
                    2b:b7:2c:f0:37:17:f8:df:57:a8:53:ab:57:a4:c3:
                    07:9d:12:c0:47:24:66:ab:0f:d1:5f:a4:e2:22:36:
                    40:ca:47:6e:13:5d:55:ab:39:57:a7:02:fe:6f:93:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EE:DE:A6:9C:49:AF:28:4A:98:45:2F:68:99:6C:F1:07:80:FF:07
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7f:e0:b1:71:be:d4:0b:27:0f:56:2d:13:da:05:35:20:25:
         ad:8d:46:01:9a:51:ea:60:17:4e:1f:ea:19:b2:45:8b:48:ff:
         45:31:a5:41:ff:37:bf:0f:d3:4b:3d:c7:2e:50:cd:ac:b2:ff:
         26:b7:1c:0f:dc:d6:cd:b9:a6:8a:7b:d7:ef:b7:ab:9d:8e:60:
         8d:54:18:63:8e:4e:68:d1:92:8c:55:12:09:da:bf:0c:35:2e:
         cf:b8:dd:e2:f2:ad:ee:1d:39:58:3f:99:7b:65:ac:23:53:d7:
         3a:c3:82:2c:50:39:60:0c:5e:c3:c6:59:f1:ff:bb:48:c7:29:
         7d:bc:ed:2a:7a:da:84:2c:e5:e9:d8:6c:a0:a5:40:34:58:de:
         08:88:49:94:49:1b:24:42:fa:9b:13:fa:dc:5d:3d:ca:ed:3c:
         7a:2b:4c:77:70:2d:ca:d0:01:a7:bc:70:73:5d:b0:1d:99:66:
         d1:e9:ea:5f:b5:95:86:f0:fb:13:06:f8:f3:26:cd:ea:a8:49:
         64:30:dd:29:87:bc:58:1a:0d:53:ef:96:d6:82:57:98:5d:08:
         c2:55:fb:50:dd:70:64:6c:76:dc:20:f9:ec:49:4f:49:f7:e9:
         b1:c5:31:1a:3a:2c:4b:0d:c3:ff:06:e0:77:ed:eb:dd:72:e5:
         fb:62:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:39 2024 by rpki-client on console-fra.rpki-client.org