Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft
File:                     w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft (raw, json)
Hash identifier:          kt+uayL+sMsMF3c8TKM4RtaKuCe74z/P4Ws77lfBfXM=
Subject key identifier:   87:6B:04:BE:7E:46:FA:DC:F6:0B:C5:8E:E2:DA:93:50:EF:E9:BC:C4
Authority key identifier: C3:D7:CB:33:3C:50:FF:21:26:E2:6F:22:EC:B7:91:CF:6F:D9:5C:21
Certificate issuer:       /CN=c3d7cb333c50ff2126e26f22ecb791cf6fd95c21
Certificate serial:       019363D676A746DD84F5485A79889FA770D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft
Manifest number:          0E7C
Signing time:             Mon 25 Nov 2024 15:00:19 +0000
Manifest this update:     Mon 25 Nov 2024 15:00:19 +0000
Manifest next update:     Tue 26 Nov 2024 15:00:19 +0000
Files and hashes:         1: 9KuTUwuYY8EW7s3-S2mLG4TE9LU.roa (hash: chsECT7Pns91FQ7cIeyINwZMYtxmSgRPck7DCz2HjTA=)
                          2: KAHUhwuOgy0Pt2NoBITLl1tm_Rc.roa (hash: 9gfeq8gYHAsOLFTVtfZDHsh7XdlOwWRuuvynl2qCiSg=)
                          3: w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.crl (hash: xDBEBsJQIIbfrU1gI+HO1VKyraWrRCjY/rsoj5DilcI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:d6:76:a7:46:dd:84:f5:48:5a:79:88:9f:a7:70:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3d7cb333c50ff2126e26f22ecb791cf6fd95c21
        Validity
            Not Before: Nov 25 15:00:19 2024 GMT
            Not After : Nov 26 15:00:19 2024 GMT
        Subject: CN=876b04be7e46fadcf60bc58ee2da9350efe9bcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:73:3e:d1:a3:0f:41:05:31:71:38:79:88:
                    72:2b:3e:09:49:69:7a:2d:2d:b8:26:b4:93:45:80:
                    71:14:c1:47:f5:14:df:6a:ad:28:06:58:7c:3a:3a:
                    40:cd:3b:07:55:38:80:56:3e:01:a9:9d:61:a5:d8:
                    92:49:4b:39:09:a6:9b:27:3f:9e:e0:c0:37:37:ce:
                    8d:f3:f1:b7:5b:d1:3b:15:44:3d:dc:ed:32:bc:65:
                    66:5f:03:4a:4d:19:41:a8:e8:4e:77:bb:74:19:15:
                    4c:9c:1d:a5:8b:a9:2c:3f:02:1f:2a:c8:ea:4c:c1:
                    9b:e7:20:f3:24:5c:83:19:34:c4:ff:0e:a4:28:21:
                    d9:c2:4b:87:45:0f:8e:66:ef:0d:ef:a9:d6:af:08:
                    35:47:8e:44:07:37:ad:d6:ce:50:bd:d5:60:10:68:
                    b8:99:61:00:dd:13:a0:36:ca:72:93:ba:b7:1e:b5:
                    e1:76:a8:2f:d0:77:e8:d7:42:ac:da:f3:92:e4:14:
                    7b:c4:f3:72:03:e0:1a:2f:00:6a:1f:e0:1f:af:82:
                    7b:c5:1c:97:71:b1:88:9e:e7:e1:7f:b7:65:e2:8a:
                    4e:4a:05:94:45:f7:78:13:c1:ec:b0:88:ba:6c:80:
                    e8:c2:d5:fc:9b:53:90:53:ea:2e:8f:b9:f7:fb:a8:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:04:BE:7E:46:FA:DC:F6:0B:C5:8E:E2:DA:93:50:EF:E9:BC:C4
            X509v3 Authority Key Identifier:
                keyid:C3:D7:CB:33:3C:50:FF:21:26:E2:6F:22:EC:B7:91:CF:6F:D9:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/77f569-6a5d-4258-8de9-1f09c8b6a08d/1/w9fLMzxQ_yEm4m8i7LeRz2_ZXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:35:81:96:33:9a:da:93:27:f1:b4:f7:8e:92:4f:ac:d3:e3:
         72:0d:69:f3:81:52:cf:aa:dc:9b:a3:8b:fa:a6:fb:9b:1d:62:
         85:bb:64:98:c3:1f:a5:27:e9:1e:12:db:7c:30:16:a1:35:9d:
         a9:f3:5a:d7:4e:1e:ff:72:3e:f0:47:5f:b8:ba:bf:66:59:5d:
         84:0c:8d:2d:10:eb:50:93:fb:03:68:95:99:63:83:a6:d6:ea:
         47:0e:ce:05:ee:cc:ef:c6:22:58:44:9a:e2:5e:dd:83:a4:33:
         97:58:24:9a:94:aa:80:db:e3:78:b8:d8:86:a4:f4:49:db:31:
         55:ed:50:01:46:a9:1d:46:b9:5a:19:75:6f:53:e8:3e:9e:a4:
         88:b7:b1:60:54:d4:90:10:17:c9:45:d7:ae:0c:4d:34:8a:0f:
         10:cb:77:9a:eb:ff:1a:c5:2b:5d:9a:84:49:96:52:28:4d:2f:
         5e:e3:17:c4:31:75:ac:38:16:21:90:ef:8c:ea:6c:81:7e:68:
         e5:59:b3:4f:ba:62:c5:d6:45:12:5f:95:27:76:de:ab:94:82:
         77:b8:41:72:36:e8:63:fb:f5:1a:08:53:16:a3:da:ec:f7:31:
         45:83:58:f3:ac:76:e6:3c:71:6d:a3:69:6d:28:da:93:7b:ca:
         fb:fe:f4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNj1nanRt2E9UhaeYifp3DXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZDdjYjMzM2M1MGZmMjEyNmUyNmYyMmVjYjc5MWNmNmZk
OTVjMjEwHhcNMjQxMTI1MTUwMDE5WhcNMjQxMTI2MTUwMDE5WjAzMTEwLwYDVQQD
Eyg4NzZiMDRiZTdlNDZmYWRjZjYwYmM1OGVlMmRhOTM1MGVmZTliY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dZzPtGjD0EFMXE4eYhyKz4JSWl6
LS24JrSTRYBxFMFH9RTfaq0oBlh8OjpAzTsHVTiAVj4BqZ1hpdiSSUs5CaabJz+e
4MA3N86N8/G3W9E7FUQ93O0yvGVmXwNKTRlBqOhOd7t0GRVMnB2li6ksPwIfKsjq
TMGb5yDzJFyDGTTE/w6kKCHZwkuHRQ+OZu8N76nWrwg1R45EBzet1s5QvdVgEGi4
mWEA3ROgNspyk7q3HrXhdqgv0Hfo10Ks2vOS5BR7xPNyA+AaLwBqH+Afr4J7xRyX
cbGInufhf7dl4opOSgWURfd4E8HssIi6bIDowtX8m1OQU+ouj7n3+6i80wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdrBL5+Rvrc9gvFjuLak1Dv6bzEMB8GA1UdIwQY
MBaAFMPXyzM8UP8hJuJvIuy3kc9v2VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzlmTE16eFFfeUVtNG04aTdMZVJ6Ml9aWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83N2Y1NjktNmE1ZC00MjU4LThkZTkt
MWYwOWM4YjZhMDhkLzEvdzlmTE16eFFfeUVtNG04aTdMZVJ6Ml9aWENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83N2Y1NjktNmE1ZC00MjU4LThkZTktMWYwOWM4YjZhMDhk
LzEvdzlmTE16eFFfeUVtNG04aTdMZVJ6Ml9aWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDWBljOa
2pMn8bT3jpJPrNPjcg1p84FSz6rcm6OL+qb7mx1ihbtkmMMfpSfpHhLbfDAWoTWd
qfNa104e/3I+8EdfuLq/ZlldhAyNLRDrUJP7A2iVmWODptbqRw7OBe7M78YiWESa
4l7dg6Qzl1gkmpSqgNvjeLjYhqT0SdsxVe1QAUapHUa5Whl1b1PoPp6kiLexYFTU
kBAXyUXXrgxNNIoPEMt3muv/GsUrXZqESZZSKE0vXuMXxDF1rDgWIZDvjOpsgX5o
5VmzT7pixdZFEl+VJ3beq5SCd7hBcjboY/v1GghTFqPa7PcxRYNY86x25jxxbaNp
bSjak3vK+/70uw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:48:53 2024 by rpki-client on console-fra.rpki-client.org