Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File:                     Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier:          IXE21ZudToZC9w36rZTGGxlH7x19/ePORmNWBz4KtIc=
Subject key identifier:   2D:49:60:B6:B6:DC:5B:EB:74:5B:68:95:63:15:21:C4:B2:A8:CA:7B
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer:       /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial:       0191FA1042CEDC8251C1285AE990175716CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number:          100C
Signing time:             Mon 16 Sep 2024 09:00:55 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:55 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:55 +0000
Files and hashes:         1: 9fd26uJCuHxgzhFPcj0F_FgujSw.roa (hash: Iwfa5F3a2S5bI40kniQJyzqrHS4YRbjv19xOZ0Urt8E=)
                          2: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: GXAlMFi+QXKFsOJkZkIJ5wiVVpA2mdLR9wpcagDE87A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:42:ce:dc:82:51:c1:28:5a:e9:90:17:57:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
        Validity
            Not Before: Sep 16 09:00:55 2024 GMT
            Not After : Sep 17 09:00:55 2024 GMT
        Subject: CN=2d4960b6b6dc5beb745b6895631521c4b2a8ca7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:66:65:41:e6:ba:c1:91:29:f0:e9:0d:34:
                    98:5d:15:1a:1c:f4:57:22:ab:00:b0:8f:ea:0a:da:
                    0d:24:7b:a2:77:66:5e:f4:7d:63:0a:88:89:5f:25:
                    bd:80:5e:f9:e7:67:d0:78:04:4e:ba:d0:94:79:28:
                    a8:00:11:42:c5:e6:35:99:f9:95:14:03:a4:3e:e2:
                    5a:0f:f8:fd:a6:58:2d:5d:c3:f6:01:a1:6b:7b:60:
                    c2:0d:83:31:26:71:da:1f:f5:1b:ab:1a:50:4d:88:
                    9f:e2:20:e3:0a:c4:53:26:08:1f:1d:1e:d8:8f:7a:
                    65:3f:f5:9f:f4:70:f6:7b:e7:52:b8:6e:91:91:8a:
                    05:3f:4e:16:fe:d1:b8:d9:4c:48:cb:cf:88:7a:da:
                    73:5b:66:a5:7c:9d:99:e8:cd:d1:eb:67:fc:93:b3:
                    c8:06:a9:b4:b8:32:15:21:3b:6f:5c:d0:d9:ca:22:
                    3c:34:d4:f2:6b:d0:91:83:21:58:c3:7c:9e:2a:a0:
                    9f:a0:fd:08:96:b9:25:6e:c7:d0:55:0c:82:65:f5:
                    12:00:67:48:36:22:e4:43:ec:95:6f:1e:3c:6b:82:
                    b3:46:27:07:56:d7:e6:3b:aa:a7:9b:60:1a:02:ad:
                    a6:ae:07:bd:8a:dd:5a:eb:f5:a5:25:c8:7a:f3:fc:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:49:60:B6:B6:DC:5B:EB:74:5B:68:95:63:15:21:C4:B2:A8:CA:7B
            X509v3 Authority Key Identifier:
                keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bd:74:6a:3f:d9:36:78:3b:fa:29:90:8b:2d:a5:4a:93:38:
         b4:51:36:d6:da:1f:32:d9:47:ad:63:4b:62:0f:ec:ff:98:e6:
         99:d0:55:29:dc:4c:7a:58:79:2e:47:a9:b4:f5:17:dd:0f:fe:
         9a:2b:ca:bf:54:66:ed:b5:c4:bb:e5:64:c1:13:48:e2:2b:30:
         17:40:ac:bd:72:86:e9:8e:0b:d9:05:ef:fc:f4:58:0c:f0:de:
         4e:5b:e5:84:b9:49:93:f1:23:82:6b:a6:3d:25:97:d7:05:1d:
         91:f6:88:70:c0:af:06:57:cc:89:e1:2c:19:0a:78:99:e3:ae:
         0c:7c:4c:d8:5e:3b:79:14:de:f9:4b:ce:5f:3d:a0:39:28:7e:
         97:09:4d:37:29:b1:69:73:bb:74:c6:77:8e:bf:10:85:86:14:
         52:02:ea:80:05:71:f3:7d:7e:5e:8d:f2:be:93:ea:de:34:b0:
         00:2a:a5:84:01:6b:1c:a7:00:36:62:42:31:67:37:2c:76:7b:
         08:b9:49:08:e0:35:7e:bf:67:73:e9:b4:a2:1f:cc:02:c8:6c:
         51:6a:9f:ac:34:de:de:cc:0a:a4:d3:6b:c9:55:76:44:b7:1c:
         75:39:4d:6f:7f:f7:37:64:b3:87:66:22:d9:1d:14:fa:b0:ee:
         11:1c:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:35:30 2024 by rpki-client on console-ams.rpki-client.org