Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File:                     ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier:          1kAn5X3nyl8YMGNFpd0nNgctEVyxrkYD0JL8Qmp8LII=
Subject key identifier:   7A:5B:11:B0:E2:2C:1A:75:EF:8A:E7:33:F2:A3:85:28:CE:9D:C4:1F
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer:       /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial:       0192F09BEA73B9609CE09C74F52B96A6A816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number:          0192
Signing time:             Sun 03 Nov 2024 06:00:02 +0000
Manifest this update:     Sun 03 Nov 2024 06:00:02 +0000
Manifest next update:     Mon 04 Nov 2024 06:00:02 +0000
Files and hashes:         1: jnEtgyNX95yEFDnGCPTYMXhwC1o.roa (hash: Yx7w72i0R8yg9OUI0sx0KMLYG3Wb6+sdhp3bFk5qk3M=)
                          2: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: qVegWLgL7IVd06ij0I32BxFnx3E3wp1CdLl4aY+HM5o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f0:9b:ea:73:b9:60:9c:e0:9c:74:f5:2b:96:a6:a8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
        Validity
            Not Before: Nov  3 06:00:02 2024 GMT
            Not After : Nov  4 06:00:02 2024 GMT
        Subject: CN=7a5b11b0e22c1a75ef8ae733f2a38528ce9dc41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:e6:99:1d:c6:28:7b:6e:52:5b:4a:fb:45:
                    f7:9b:ad:35:14:ba:89:a9:26:99:5d:c5:a7:52:61:
                    3d:14:93:2c:4b:a3:7a:a7:ee:6c:e8:a1:2a:12:f5:
                    df:db:74:7c:ba:6f:64:6a:1d:c9:4b:32:ac:15:9d:
                    64:dd:2e:90:b4:f3:f6:ba:b8:9c:ca:56:24:c2:5a:
                    aa:4b:fd:32:c2:3f:f6:04:c3:bf:db:5b:5a:2e:25:
                    4b:d4:f4:bf:f7:60:44:fd:0a:7d:6f:a1:4a:15:77:
                    f9:39:5b:84:20:b4:01:82:0c:b1:29:f8:81:aa:cb:
                    31:6e:bd:9e:83:a4:fc:d1:80:03:c8:9d:08:4b:8d:
                    0b:08:b1:4c:3e:e8:cc:25:f9:f3:7e:0c:c2:88:2f:
                    6c:ca:42:44:e1:c8:53:0e:e8:7e:0a:16:0c:ec:4c:
                    c2:82:53:ba:cf:9f:00:04:be:20:3d:3e:b2:d0:c8:
                    bc:36:27:fa:cf:d2:af:ed:ea:22:95:15:92:ad:1b:
                    4c:e5:54:f4:e3:27:d5:61:fe:e5:a7:0b:07:cb:66:
                    dc:60:6a:e4:c5:11:a4:41:10:36:d6:6f:22:92:b7:
                    dc:70:73:3a:7e:10:47:0b:db:fd:a4:5c:bf:a4:9c:
                    f1:d1:55:81:d1:d0:ba:10:ab:32:74:d2:5d:b7:1b:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5B:11:B0:E2:2C:1A:75:EF:8A:E7:33:F2:A3:85:28:CE:9D:C4:1F
            X509v3 Authority Key Identifier:
                keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:79:c2:25:16:b5:d4:51:8e:c5:49:cf:27:82:fc:d5:20:d8:
         e3:71:79:28:fe:a1:3f:e9:6d:45:fe:a6:91:70:75:23:ba:02:
         34:d3:04:ae:76:6e:e4:dc:4b:c7:9f:32:16:0a:bf:b1:42:d1:
         5b:9b:e3:71:ee:d9:28:30:96:dc:4d:17:3a:6e:77:1f:51:c5:
         05:59:01:f2:2e:d2:af:d2:47:b8:e1:04:2b:43:8e:7d:7d:0b:
         84:7f:ec:5f:10:08:dd:05:38:6e:51:05:d3:8d:95:c7:f5:27:
         70:92:21:f9:76:81:11:b6:d6:b7:56:e3:d6:f5:a2:d1:62:6e:
         49:0b:63:e4:ae:9d:4e:e7:86:cb:5b:81:80:ae:7e:71:77:f9:
         81:bb:37:e4:4b:2f:2f:a5:30:8d:fd:c3:99:14:3c:41:63:0e:
         53:9f:a9:66:11:87:5a:15:12:7e:2a:5f:12:f0:33:3d:7b:33:
         d7:38:4d:32:52:1c:d9:5f:10:64:d6:d5:80:9b:2a:ac:5c:25:
         c5:4a:a0:d9:37:42:70:b4:d8:aa:41:a2:62:ab:90:ef:6e:ed:
         bb:34:f2:79:e3:dc:91:5a:06:4b:10:c0:04:a7:2d:b9:8d:85:
         fd:37:73:2c:1d:73:a9:08:46:eb:e5:02:a8:a9:07:0a:9f:ea:
         1c:7b:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:39:57 2024 by rpki-client on console-fra.rpki-client.org