Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          zH4xoCnEyE+FvbOO3E6trEHQ0GMaOyNsUpoSWJv6nEM=
Subject key identifier:   E1:88:59:33:F1:C3:8C:CB:B7:F1:D7:25:6E:E0:88:38:F7:0B:2C:6A
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       0193519985ECBD37FD3E691ACAF721959EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          053D
Signing time:             Fri 22 Nov 2024 02:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:35 +0000
Files and hashes:         1: GHWgTmJB4ox0z-AGKc5u2VSFUJA.roa (hash: 0ggJQzV+uHfKEqYKS30amJXOLyHsX+qCa0pzPfRoEn0=)
                          2: JvC2JdG3hfGkVUXNDNobvLTMzuQ.roa (hash: 2hlprpvYwqwIpcyRe97Fy9yGjH4FCEn/iX3+4+BHBLE=)
                          3: NqPglleMUwtYjtPPgWKBhGv0J0A.roa (hash: bc96Aln0ufgPi+6ht9qWlWj0k+707bA2jx+0QAcDr+0=)
                          4: Veed7dXpGrwofh0EisgTMSFLiJA.roa (hash: NRWS36ZC81+Ibj9b5rXheOabzS9qCiKttzBn9fhTFI8=)
                          5: ZYBYmnx-zL7Urj21PqdVUMoCJkc.roa (hash: dXNfzOe6WH3EtHIBjmHXPqT2idloUXYUKTZizZFC+BY=)
                          6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: GVAJAc/li31SxhG4UzJBOJMLnw0IVeSUWUosCUOvG7w=)
                          7: xPq4nT5mCky-O6nW4jIbLS2uXU8.roa (hash: f5Vnjb4y+984XKiHNaEkMZr4A0l9r731kc/WCmYDVdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:85:ec:bd:37:fd:3e:69:1a:ca:f7:21:95:9e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Nov 22 02:00:35 2024 GMT
            Not After : Nov 23 02:00:35 2024 GMT
        Subject: CN=e1885933f1c38ccbb7f1d7256ee08838f70b2c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:d9:c6:63:da:c1:84:73:a8:8b:19:de:3e:
                    60:04:ef:0d:cf:1d:03:14:72:48:ca:b1:77:59:8e:
                    2b:ca:d0:bf:18:9d:5d:7e:34:40:da:ff:43:ff:5b:
                    99:bc:56:5b:72:59:c6:b5:a5:57:aa:16:c9:c6:7f:
                    ef:f7:a5:ea:2d:4f:0e:70:12:80:47:93:34:7c:e5:
                    1e:ee:ad:a6:70:b1:ec:3c:b0:20:ba:b8:10:75:ca:
                    b4:1e:ea:c3:e5:a6:52:1e:63:2d:27:49:4e:aa:a7:
                    90:63:89:48:d5:e8:74:55:13:ad:fd:11:9f:a7:82:
                    6b:44:e6:36:d4:fa:d7:b7:2d:0c:d9:cd:4b:00:0e:
                    e7:94:c7:37:79:14:e8:f9:00:27:cd:50:f6:87:6c:
                    82:1b:4b:aa:fa:f7:df:e6:b1:00:a4:aa:1d:67:a0:
                    29:06:75:20:a9:85:a5:c4:01:31:74:11:8e:e9:ad:
                    82:5c:a2:d9:70:98:70:cc:41:6a:a0:db:67:61:d3:
                    ef:a5:1d:eb:5b:35:c2:75:c5:94:cc:6c:4b:b3:bc:
                    99:93:35:cc:0c:64:f4:89:ab:38:df:ff:a5:19:b7:
                    e2:fe:21:4c:a6:48:6c:57:4b:10:ff:2c:e9:62:56:
                    4d:d9:96:82:42:79:bd:aa:13:d1:da:a6:f9:79:28:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:88:59:33:F1:C3:8C:CB:B7:F1:D7:25:6E:E0:88:38:F7:0B:2C:6A
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:44:15:f7:27:df:bb:cd:70:33:2d:d6:0b:f2:a0:cf:05:4a:
         82:6c:5b:c1:7f:43:32:c1:76:a5:36:cc:cf:d4:a9:8f:f4:63:
         0e:ac:d8:28:78:14:fa:7e:8d:2c:7e:ec:2b:d6:59:ef:ab:40:
         0e:86:15:ef:65:79:5a:e0:16:de:7a:b8:11:a9:09:74:8b:19:
         60:76:b7:44:22:ee:e3:aa:3d:a4:bf:47:90:8c:cd:67:8e:fa:
         55:e5:a4:2e:86:3a:ad:3a:9a:e2:3e:7f:0d:93:03:5c:e3:5b:
         b7:55:72:3f:c9:49:d7:1b:97:c8:ba:72:3e:e9:f6:ae:93:69:
         36:6a:58:5b:0e:9f:f7:cc:1e:a0:00:5f:04:9c:f7:fe:a3:e0:
         a3:f0:f4:63:fe:3b:07:d2:cd:e6:07:a8:48:a8:15:2d:6d:fc:
         c6:cf:31:c2:ea:42:59:3b:75:ce:7b:ec:50:e5:ae:d8:08:fe:
         ef:d0:80:59:a3:d5:14:97:5b:42:08:05:42:e6:75:50:2a:8d:
         14:0a:4f:23:50:48:64:e1:f1:43:82:8d:4b:0f:1b:d0:19:23:
         60:21:94:85:59:0c:64:3d:bd:99:14:a2:4d:77:83:57:e3:cd:
         22:e9:d2:9a:08:53:2f:31:d9:34:08:94:0a:99:a1:23:54:34:
         38:d3:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:35 2024 by rpki-client on console-ams.rpki-client.org