Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
File:                     Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft (raw, json)
Hash identifier:          n0T80kerwcfbelRB2GubzK8J6fmqUMNYH6m/+lHPXjE=
Subject key identifier:   EC:3B:92:66:4F:BA:F1:5F:B1:7C:C1:76:0D:77:B7:20:03:A9:D0:8A
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Certificate issuer:       /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial:       01935275111D8A08A1D146B8B8222B871F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
Manifest number:          12B7
Signing time:             Fri 22 Nov 2024 06:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:23 +0000
Files and hashes:         1: 2elKa6i_RzTZnRpnaJ2TYLp-Onk.roa (hash: aXu/tbE7ariGqykoQU8l7ZDuI5iPdhk9F9mNAz8jC2c=)
                          2: 3BNCC6G8UKlPfD-EcgCOqjK8dfw.roa (hash: FnYucASH0faDas5zVmszZ9oYD2dtWt4x1IpKf5VnjYM=)
                          3: 3o8myZ_Y-fkyy2X8wzy1b01ZMug.roa (hash: bjkiR2W8stJRMyuDlbA8BBZDd9gMYSRmsHzyRF+xqms=)
                          4: 8UX-9eWqADWEjQTLgZmDGo0sfi4.roa (hash: wTS+NltJCmB9LrIbyD40fkMkIbpxp2uUCUOjxXpI9sY=)
                          5: DI44sVDvO7RuAU8dwuLDCHlnU-Y.roa (hash: PNwnNJOq5te0xdiJ9tiO5PK7hyVQ4Z2sa8Ycr/PBEYU=)
                          6: Jcoh4y6gYB3YE7Y0W-brVFJBSoU.roa (hash: fkWLTJqKlG+vf1YdQdMNhDbxH0Oij7cOWSvmHKJ9vj4=)
                          7: LCqjqzImYtF3LfKSarayZ28FQZw.roa (hash: aM7YmAujA6RDorSyjELX7/oGKDM41qLvTiUFQB10RRw=)
                          8: NkQHnXfBpUc3DMuW29R-qLBKwGQ.roa (hash: WukUTE+nKWHprtk5cf1YfbwbziTk9i1jdIuZyqBuYVI=)
                          9: UgdYxJZ4kSIL7GqlE3O86lqWSnY.roa (hash: AZ86jCS/H/Vk4Auz884p3PVaLkrZIsAj1dOzZhCAs6U=)
                          10: Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl (hash: 7/Xac6dOtccHXx+pEEGZbOgv/d5gdpHt8PaSk5UHLm4=)
                          11: mOwLFZD8cQhJeAk93TUwR_fZSiM.roa (hash: UJFOgWKFnmWUoFEZnNWxjdqcF++8ojzKAPNNBvHmyB0=)
                          12: oGE-1j_0GnxqNwbw9oIc2C1iNnM.roa (hash: qHSS3V10m5YUcktzm6QW8yFah9NvI4XfA8vyqvEvzOU=)
                          13: sit7Wse_7Jmn-eEohy-uhj7dy44.roa (hash: 1wjcrLrH2/tVv/dJ/8OYNIJeJWY4rsYTa4S6L8U72t4=)
                          14: sm8eGXlmnjlhHrGFcOyNPni8N0c.roa (hash: JhuFsnTEFbU/SgfA48jCKMpQ621qFl0fRg2xA8cFGa4=)
                          15: u9iaDA0fDpCE9DMMpsuC-iH2cUw.roa (hash: qIEFKKj+M9X3slA8bmPPO6aOw9fDtX/idz/geyVyrJg=)
                          16: uNEwSESXchQDBwMR2BT3BRCtkGM.roa (hash: 4V8uX59vr66ou0i42HfX9VvwrfhCnScGVEmBUYmHc9M=)
                          17: vYc2URA4GqV-dqL39TsmbzXnkuw.roa (hash: jg5YJLnqbhYiwle0h8wHZ7rG5yIPzNomTG3tGx4Euxg=)
                          18: yySu_F27fY9R333IwDkAdjdsJxE.roa (hash: HgN30qZE8bgClwiryRIWKau+8YL0IxPBp+aXjpONRLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:11:1d:8a:08:a1:d1:46:b8:b8:22:2b:87:1f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
        Validity
            Not Before: Nov 22 06:00:23 2024 GMT
            Not After : Nov 23 06:00:23 2024 GMT
        Subject: CN=ec3b92664fbaf15fb17cc1760d77b72003a9d08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:6f:47:fc:fe:3b:65:00:94:56:6b:a3:83:
                    c3:47:e4:5b:46:d2:a6:b0:86:9e:02:40:61:e2:26:
                    be:5d:24:3a:3f:3f:8a:54:32:46:33:80:4b:e2:62:
                    79:36:38:e3:08:01:57:a4:d2:ca:af:9b:7a:df:0b:
                    58:6f:84:c0:48:97:92:23:51:63:e2:b2:7c:43:c7:
                    a2:f5:8d:85:55:18:ab:cc:bf:57:5d:e0:d9:66:02:
                    1c:cf:fb:4d:7f:91:a0:02:37:b3:e3:43:84:17:a9:
                    6e:6e:d8:a3:f9:3d:3d:0e:4e:cf:86:99:9f:99:da:
                    65:21:b8:bb:57:83:3b:cf:43:9c:fa:23:59:86:e5:
                    8f:de:72:35:11:18:1c:a4:37:c3:40:55:4b:8b:d8:
                    f4:f7:13:37:50:b7:df:66:62:8f:6f:9c:3f:5f:b5:
                    73:9c:ff:f8:ce:92:46:e7:9f:94:3e:91:6f:56:e3:
                    25:6b:39:71:b7:7e:ba:8b:bc:8a:d7:da:48:d9:76:
                    ad:65:1a:07:6a:0b:07:5e:b8:9a:75:53:a7:b1:71:
                    51:e7:c4:49:7b:8d:07:9e:74:5f:51:44:6c:5c:15:
                    1d:0d:08:bc:3a:fd:7a:d1:d6:6a:0e:74:ac:a6:a3:
                    a3:b1:b5:82:68:bf:a6:24:ab:d1:f6:e2:f9:c3:94:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:92:66:4F:BA:F1:5F:B1:7C:C1:76:0D:77:B7:20:03:A9:D0:8A
            X509v3 Authority Key Identifier:
                keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:32:77:c6:32:23:e8:df:5c:58:a4:bb:1a:df:23:be:62:7f:
         7e:47:eb:02:01:fb:62:66:ce:c0:84:af:c0:ed:75:a8:96:48:
         e6:3c:ee:76:fc:e5:73:99:ac:00:84:cd:90:fb:63:eb:63:bf:
         55:6d:4c:71:ed:cb:5e:6e:32:78:84:77:b3:8c:b0:ae:b0:15:
         12:2e:1e:95:cf:1f:ba:95:0f:6c:16:6f:92:8f:20:d9:63:d8:
         be:69:63:59:7d:59:0c:22:87:ef:c5:07:cf:2d:c9:e9:d7:cd:
         b4:56:76:6b:db:43:a8:8a:1e:2c:b6:02:93:52:55:30:73:a7:
         25:cc:35:52:90:d9:6f:bb:26:ca:03:67:d6:f2:2a:72:7a:96:
         97:9f:a6:98:b9:38:75:18:e0:3d:d3:2a:22:46:35:3e:fb:f8:
         ba:73:d8:e0:9c:a1:99:48:b8:5d:3c:f9:92:44:5a:1a:88:68:
         7f:2f:9d:41:52:cf:a5:63:0f:6a:cc:6f:ad:68:cd:79:99:89:
         7e:d5:d1:fc:b2:81:c9:2f:df:76:28:ab:e9:24:84:2c:32:56:
         02:5f:f6:df:0b:75:99:78:64:aa:f8:7c:4f:94:48:b3:fe:3e:
         d8:17:36:ee:1a:3a:19:ca:82:82:e7:78:68:3f:e3:2b:05:c6:
         73:52:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:15 2024 by rpki-client on console-fra.rpki-client.org