Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File:                     j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier:          hpy8utBSWFlOBLcIPTETC7l6iI6KGgVcPTkZJw4OhbY=
Subject key identifier:   5D:75:39:92:83:F9:3B:4F:D0:62:43:6D:1E:E1:F7:F4:84:25:55:B2
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       019362FB058CDF65B8963C18E270A5FFBAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number:          0198
Signing time:             Mon 25 Nov 2024 11:00:38 +0000
Manifest this update:     Mon 25 Nov 2024 11:00:38 +0000
Manifest next update:     Tue 26 Nov 2024 11:00:38 +0000
Files and hashes:         1: 6ycCWqYjYlNcZ7IAZsb5Arirg4I.roa (hash: ovqjj/lSONWUYpXYkYZfxLCv9rY4f5kLp7f+3mAfupk=)
                          2: atVp66hGLJPTLu6YIrgDA5C98zM.roa (hash: I0K5f64WgZj5Y9/RBxT9qBl44VUqVjbBGXq9mYWWb/k=)
                          3: fdxYL63AEvQAdIwfzbtSa-HhPKY.roa (hash: ov94SQrO08WCMBks7nwoT2ghwOrT9eBLAzlbqe0OoHY=)
                          4: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: TeAkReuOc3RD4bNjfyP+LRUx3errvGjItwcCx4DnD9E=)
                          5: kN2N6bA6xKnw00IQy23tz2BGTM4.roa (hash: LxPXvYNNuo7p3z/RWRVB0inHJEIt4GaWCDvZiw8datU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:fb:05:8c:df:65:b8:96:3c:18:e2:70:a5:ff:ba:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Nov 25 11:00:38 2024 GMT
            Not After : Nov 26 11:00:38 2024 GMT
        Subject: CN=5d75399283f93b4fd062436d1ee1f7f4842555b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5d:48:77:18:b2:f6:1b:e9:20:c4:5f:9d:7d:
                    7f:08:a6:dd:f8:c4:ae:e4:db:c4:63:04:ed:17:7a:
                    4a:78:97:c3:59:e9:df:bf:10:33:c5:da:4b:ef:91:
                    d3:34:ab:94:8e:db:5d:90:0f:20:8d:8d:b9:57:73:
                    83:70:34:a7:4e:60:91:38:cb:db:d4:28:68:3d:36:
                    5f:2b:8f:4c:bb:07:a3:39:6a:47:c8:1e:79:81:8a:
                    e6:f1:de:a6:d8:46:03:49:1d:35:32:09:00:3d:2b:
                    ab:b1:7a:dc:e1:6b:11:01:4b:3d:92:ef:4e:95:7d:
                    d5:24:b6:99:13:af:58:9f:3d:97:be:49:31:d5:72:
                    f7:dc:24:e1:a2:96:1e:47:ad:9f:74:50:2b:2d:d6:
                    e6:6a:0a:84:bb:f5:02:bd:40:9c:da:52:2e:54:18:
                    4b:9b:f7:4d:3d:07:b5:d3:c2:60:80:08:9d:1d:c9:
                    d0:81:81:ca:21:b2:3b:ce:a3:40:e2:32:53:12:6f:
                    be:20:a1:62:79:7c:39:24:68:9b:9b:e6:75:84:3f:
                    6d:ef:4f:da:41:1b:ee:a7:5e:36:0f:80:74:59:52:
                    af:27:a1:1c:70:ab:48:79:da:a2:29:b0:72:b3:03:
                    af:7a:5b:3c:5b:73:57:39:43:b0:3d:23:4a:0b:81:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:39:92:83:F9:3B:4F:D0:62:43:6D:1E:E1:F7:F4:84:25:55:B2
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:da:3e:af:79:f5:82:67:bc:7c:3e:90:9e:9e:18:93:f0:
         d9:70:6f:24:90:78:33:25:44:32:46:48:b3:f7:a8:a7:3b:6f:
         ba:5d:d4:7f:d9:a8:5c:de:bd:39:87:7a:62:cf:3c:56:9d:92:
         66:4a:00:74:60:dd:2a:08:6c:ad:51:07:22:1d:9f:65:cf:21:
         50:52:7f:28:14:d9:fc:11:c4:92:20:6b:6c:8b:86:04:b9:95:
         36:52:6e:d6:2a:4c:5c:f7:8f:c2:ca:b0:26:62:8c:e5:34:f0:
         70:72:f2:21:8e:44:e4:de:e0:b7:20:96:8b:f5:40:f8:09:f6:
         ca:23:fc:25:3f:36:b8:5a:26:bd:63:56:28:a5:85:ae:2d:59:
         a1:19:68:33:ac:b8:3f:aa:04:72:80:d0:46:a6:0a:73:12:ad:
         25:63:ec:75:99:ce:c6:67:7c:89:17:dd:d1:a2:d8:f5:88:25:
         34:c2:5d:46:d3:99:2e:53:85:2e:09:82:43:1e:09:bf:53:e5:
         b5:5d:85:b3:35:00:e9:1c:4c:0c:4f:90:c1:6c:a4:56:99:8b:
         85:30:91:1c:ba:a5:e1:71:f4:6e:8d:32:6b:35:ed:34:ac:d2:
         5e:4e:ff:f8:63:5a:c2:26:68:19:04:78:ce:b3:59:a5:9e:86:
         82:e0:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:31:00 2024 by rpki-client on console-fra.rpki-client.org