Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          xjpSIZfhYkkKBsbQgKzVVFZf2NuY9rErEMhREnL0g+M=
Subject key identifier:   7F:D6:57:14:5C:5C:66:35:EF:16:26:6C:D6:D7:45:30:9A:A1:12:4F
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       0193587948A7D1AE07ABCB59264DFE342A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          035A
Signing time:             Sat 23 Nov 2024 10:02:43 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:43 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:43 +0000
Files and hashes:         1: UquJpNCdLx0GmnhMbPdY5myj8P0.roa (hash: JhG9wL9e21cOW0HybEESnALfKbmcIVu29V8kAUrLyh4=)
                          2: fvaDl5bbqEZbWZiySoFyiInhoqY.roa (hash: uy+12qqZ9myrYYpZKV5/eOn5y/P4/PoSxZ1izCTbKew=)
                          3: ubrpNyOqfpStT4lX95km-4Fa0bM.roa (hash: dNH8pPKS+KuTvkeaglhgCryCrTgexBRRLzoLJOVL+Jc=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: 5N36la1USeB1I+BBLSPUKmYKX2g354f+F3A7OREATCg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:48:a7:d1:ae:07:ab:cb:59:26:4d:fe:34:2a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Nov 23 10:02:43 2024 GMT
            Not After : Nov 24 10:02:43 2024 GMT
        Subject: CN=7fd657145c5c6635ef16266cd6d745309aa1124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:dd:19:5d:1b:58:e7:d2:f3:34:12:5e:70:
                    ac:1b:5c:29:09:f8:28:3b:1f:79:24:f5:e0:a4:5e:
                    b6:0b:52:d7:d1:42:69:82:e8:78:16:50:e0:e5:da:
                    8f:c5:84:91:e7:cc:f1:bf:eb:45:b7:15:02:dc:06:
                    57:06:4f:79:77:a7:69:5e:23:1d:0e:75:6b:a7:4f:
                    fa:74:9f:04:cd:ab:ae:0a:0d:69:45:75:8e:37:5c:
                    0b:1e:bb:93:b6:8b:bc:21:5b:b1:50:d3:c3:9c:10:
                    87:0d:2e:d0:e0:68:59:18:a4:56:b3:98:37:9a:bc:
                    06:20:34:5a:54:fa:3e:7e:48:28:46:01:08:55:a6:
                    bd:96:ef:a6:c0:ee:d8:e6:80:4c:0e:29:6b:1a:34:
                    bd:42:7d:87:8e:c0:dd:34:53:3c:ed:a6:4e:68:09:
                    8b:c5:85:b6:de:c5:09:01:91:01:34:16:49:95:0f:
                    4a:7d:43:b1:e7:6c:1e:ee:94:c1:1d:c6:ef:fd:34:
                    39:ba:72:2d:88:c9:b9:6f:a7:62:f6:5b:43:5f:22:
                    07:cb:1c:20:80:b1:d6:67:7a:04:95:20:38:c8:82:
                    5f:e1:ab:62:b5:38:9c:f6:aa:26:90:16:50:ad:e3:
                    5a:72:7a:d2:7e:71:4f:23:71:a5:b2:8b:c7:b6:71:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D6:57:14:5C:5C:66:35:EF:16:26:6C:D6:D7:45:30:9A:A1:12:4F
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:64:b9:5d:d3:2c:d9:1e:0f:41:bc:1a:14:ae:fb:1c:63:
         05:de:8c:04:4e:6a:95:e4:3a:3d:cd:c6:ac:76:b5:13:e3:23:
         82:bb:85:b8:45:f3:e8:cd:72:74:80:6c:9d:db:09:28:e9:65:
         42:be:37:63:82:4a:23:f3:cf:77:85:0d:ad:ed:48:ad:13:85:
         8e:10:3d:58:0b:e2:a5:ac:e3:f3:15:63:06:a4:05:20:34:63:
         67:fa:41:21:cd:54:ab:62:3f:f5:a5:fd:ff:cf:01:fb:7f:78:
         3f:9a:c1:c3:63:23:bd:52:34:cd:94:c4:f7:92:87:68:e3:94:
         f5:77:60:d9:bb:57:6a:d6:0c:51:43:d7:75:a0:8c:f9:e6:0a:
         b7:34:e9:a7:a0:fa:51:f5:e4:67:14:97:af:22:df:c9:69:a1:
         7b:95:74:6a:34:de:2c:98:bb:ef:e8:31:8e:15:2b:04:59:90:
         0d:ff:ef:85:24:cb:67:a9:c4:ec:97:53:8f:0f:b1:d6:8f:01:
         0a:9b:ef:5d:d8:2c:84:db:05:9b:8a:41:da:19:59:2b:4b:cc:
         b6:6b:e4:c8:98:d7:71:32:17:07:df:30:d7:42:81:db:78:c2:
         4c:c6:a9:83:26:fb:f5:04:69:5e:53:30:59:c4:1e:87:9b:ff:
         88:ff:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:24 2024 by rpki-client on console-ams.rpki-client.org