Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File:                     t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier:          uEtJXLmofoX3b82XZgy/hwu7PlQyUq9JMCJ7ISc+01c=
Subject key identifier:   7E:95:64:7D:21:DB:C3:5B:91:92:34:6C:12:12:87:C0:FF:41:84:86
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer:       /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial:       0193640F4CA7BF2C5BEA1253BED69AA35583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number:          07DB
Signing time:             Mon 25 Nov 2024 16:02:24 +0000
Manifest this update:     Mon 25 Nov 2024 16:02:24 +0000
Manifest next update:     Tue 26 Nov 2024 16:02:24 +0000
Files and hashes:         1: bUZJCM-6nzH1DvWWHD5e2xmdH5M.roa (hash: s0Aq5BrjWlLZZSeKyD05pXyMVee0dySAmUBlY5zxnQ0=)
                          2: m3yhQQiXOMd59lWI2xRAjzCjLpA.roa (hash: XiOBRlEYNxocaEeZL3chFgsV47dAlYUf3GoJcIg3EvI=)
                          3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: w+yhyldmcwxlie7CBod4a58/FmD2Y+bLklIRVIO5ypA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0f:4c:a7:bf:2c:5b:ea:12:53:be:d6:9a:a3:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
        Validity
            Not Before: Nov 25 16:02:24 2024 GMT
            Not After : Nov 26 16:02:24 2024 GMT
        Subject: CN=7e95647d21dbc35b9192346c121287c0ff418486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:07:0d:9b:64:8c:e2:34:dc:b3:80:33:9a:
                    ae:8c:f5:51:3f:fc:3a:74:63:f7:e2:10:9d:8f:9f:
                    50:9d:64:78:f3:1b:e1:03:71:df:68:0c:6d:28:f9:
                    ab:4f:6f:e8:f7:42:35:66:83:9f:cb:d3:1a:33:80:
                    88:05:7c:ce:20:b8:c0:ab:10:2c:bb:82:19:37:73:
                    75:6a:d5:5e:40:83:48:47:64:7e:58:7e:22:41:18:
                    9b:e5:dd:35:2b:c6:ce:7a:d8:54:43:ae:41:ed:50:
                    dc:10:08:f4:ec:f1:04:09:cd:7d:5a:c9:c6:92:36:
                    88:ab:24:e2:47:f1:55:16:f2:24:14:d9:af:ca:ef:
                    3d:4f:04:46:8f:15:57:fb:69:b0:f3:7f:b7:d5:d1:
                    e0:9d:86:2a:20:64:4d:3d:ba:b0:2a:cf:18:83:1b:
                    d7:37:42:0d:8f:fc:51:2c:94:40:81:be:01:54:59:
                    74:ec:8d:14:04:3b:8b:c4:9e:5f:96:6a:f7:55:51:
                    53:20:ce:c7:ea:50:1e:e4:66:72:0f:f4:ec:a7:1d:
                    25:a1:a9:f0:e9:1d:70:00:60:95:0f:b2:7c:c2:3c:
                    e8:15:e7:29:08:8d:50:d7:ca:41:64:32:68:70:ec:
                    b1:e3:2b:ba:fb:c2:49:e3:9e:2b:6a:63:13:0f:c9:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:95:64:7D:21:DB:C3:5B:91:92:34:6C:12:12:87:C0:FF:41:84:86
            X509v3 Authority Key Identifier:
                keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c9:6a:bd:c7:51:5d:3e:58:9b:de:82:82:8e:5d:fb:66:b5:
         6b:7a:81:44:04:1b:bd:29:8c:f3:87:16:b5:cd:96:03:52:4b:
         85:9a:f4:25:c0:6a:4e:86:3b:d7:81:4d:00:93:b5:e7:a8:e0:
         0e:e7:d0:52:f7:80:4f:eb:4f:d9:f7:4f:1f:df:fd:30:95:f6:
         88:d1:22:15:5d:4b:d4:a0:5e:37:c5:ba:34:af:25:43:ff:63:
         e1:09:cc:b2:11:e0:6e:63:32:f0:45:49:30:64:12:7c:65:a6:
         67:bf:c2:9c:7f:ce:42:ee:6a:86:9b:de:3c:ea:0a:ed:68:fe:
         93:d8:ba:3a:fa:fa:ed:40:ec:7b:a2:d4:d8:a7:d2:cb:70:76:
         bc:62:a0:94:1c:9d:6b:c9:b8:4e:67:7f:77:fb:71:7c:74:84:
         1f:39:6b:ef:e4:28:84:62:02:1a:f2:bb:a9:5d:f0:d4:36:1e:
         ee:6a:d4:4d:26:0f:82:90:e3:2b:c0:2b:95:0c:3d:3e:56:72:
         b5:f8:c0:0a:0f:8a:15:df:e8:61:78:44:4f:3b:59:8b:19:69:
         01:fa:8e:1a:3e:17:c5:a8:eb:40:09:17:32:41:15:9c:7d:1a:
         f3:b4:85:09:fe:a1:94:ef:70:4d:3a:60:0e:ea:fd:05:d8:da:
         3f:6f:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:51:07 2024 by rpki-client on console-ams.rpki-client.org