Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
File:                     AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json)
Hash identifier:          tTD2bIidFshAB1NxnvF+r1xZoGWzk2FcLkEkk5WXMdY=
Subject key identifier:   7E:A6:0D:5F:AE:AB:73:B0:D4:EB:BB:DC:C9:24:CC:61:A7:14:11:B9
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Certificate issuer:       /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial:       0193561AE245959CB59CF0A85133B5D8A8E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
Manifest number:          10AB
Signing time:             Fri 22 Nov 2024 23:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:22 +0000
Files and hashes:         1: 0v8NLHevbjUS320CRBF6MDLKZ1M.roa (hash: gS2QobexCN8mYaQB8g8mgWYsBXk/YdHG0oRZKrRdYJE=)
                          2: 1-Ov1JQtS4OWvRKyMwyCkrmuEfIc.roa (hash: iIEpdmJ3RlJnQhVb5VvcqeCcVFEgXQ7CMjRWEg0Rcpc=)
                          3: 8xAPMXk_TcRqM5UUhaGFY9bISmE.roa (hash: ihbGOdiuJiXenBYHVWBhjeIMlaBTLoLLfcDjeZ1OA+4=)
                          4: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: uNEb2E53liyHYKPOmZfeFkAT3js5P1pR7qS1WGWR49A=)
                          5: CnMwex29OsXOjgAIS47x7lHUIuk.roa (hash: L19y5kKx3SY7q1YnTE4ZlE0p32dIndpwnjka+O4rAEM=)
                          6: DjKwq8EY5SWfDAw-_zDzq2Prb4k.roa (hash: 1DTh0xvVyHoszST9BoCvCmoVIcBaJSZKQ7L2KWShG68=)
                          7: JZW9JwGAtMxHMaydxYSJgrJFiyA.roa (hash: cBe0JsVvLpnrRA6C3MAiAPov8g1hjq5Lz0Ln59Ne+/Q=)
                          8: arv70wXjIMlINNYDl2-4nyPlpTo.roa (hash: /g0Z+wzEq6avdobCFJnqSwvnOcp2awKtn8hJEizlWis=)
                          9: cBuIiffvPtz7Gd0rwgE-R5OTEzY.roa (hash: A8BRFLwZ/uVOOogBIiWPdGbQiBA9XxiSf2B0A9Jhf7M=)
                          10: itctnU6hiJNNmGb6bGykGTHe7E8.roa (hash: UZin/u9xZfl4zR4VDdTcbZ1iw+pkK2V1gzAfHb7NSec=)
                          11: nCd3Mb_QyPvB3BkOAgChjFRrKt8.roa (hash: riAHalDntvrsYtNdAXH2yVIUxZmTl/yYZG3AoHG47Zs=)
                          12: s4qpIu-FpruhYXRT5aYqLn8DSNA.roa (hash: DNzYY1zBDE0gaOXLnS5wYGZpfArK3R6mQlCvJnHcb8k=)
                          13: wcgTjhL42evWD4v3-k28BhQYiQ4.roa (hash: 6pf7yyrkSc2rN+1eTIPFJ2Cp8s5j9Ud0BQAks09Y9UQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:e2:45:95:9c:b5:9c:f0:a8:51:33:b5:d8:a8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
        Validity
            Not Before: Nov 22 23:00:22 2024 GMT
            Not After : Nov 23 23:00:22 2024 GMT
        Subject: CN=7ea60d5faeab73b0d4ebbbdcc924cc61a71411b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:f8:92:f3:f8:81:9e:86:53:34:25:04:f4:
                    ad:be:c3:55:0a:62:14:05:01:0a:e2:4c:b1:de:64:
                    2b:c9:b6:96:05:45:b3:cb:87:93:60:0a:ab:70:d7:
                    3b:0c:58:9b:f6:96:9e:e2:49:b8:3d:41:3a:2d:3c:
                    94:1c:e9:b5:1c:18:7e:db:79:bd:9c:0e:96:f4:d3:
                    0c:4a:79:c7:1e:2a:2c:d7:d5:48:5a:7d:eb:57:81:
                    fe:c2:eb:a9:59:42:ab:be:0d:e9:3f:be:03:34:05:
                    a1:9e:e1:20:78:e1:72:a6:65:5c:b2:5c:de:cd:04:
                    58:5b:0c:c9:e7:07:46:24:63:32:ec:ef:a6:e4:b6:
                    6c:e8:b0:05:fd:9d:c3:c9:f2:a3:c5:9f:39:9d:39:
                    a7:98:1d:21:6b:d7:87:69:51:68:cd:ef:5a:19:a2:
                    cd:ae:de:91:5a:f9:5a:ac:50:eb:7f:7f:d2:2a:c9:
                    f6:b2:3f:a3:75:7b:c9:db:c9:ff:50:5c:bd:34:d1:
                    6a:a6:cc:ea:3c:00:cc:2c:2e:56:a4:1c:4f:5e:72:
                    aa:33:7f:81:d1:d9:38:e5:c6:11:42:4d:47:eb:a7:
                    19:77:12:75:f0:0b:27:d4:a9:ff:48:5d:b4:9c:25:
                    ec:9a:8f:f6:07:53:51:73:06:d7:7c:05:42:0c:a4:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:0D:5F:AE:AB:73:B0:D4:EB:BB:DC:C9:24:CC:61:A7:14:11:B9
            X509v3 Authority Key Identifier:
                keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:20:76:ce:16:2a:2f:34:f6:76:a3:76:8c:05:62:7e:43:48:
         20:af:98:4a:b8:6f:13:a4:1a:6b:92:26:82:11:3c:6e:4d:2a:
         7c:bc:61:59:80:3e:b5:2f:44:10:42:53:3a:13:21:86:a1:8a:
         ef:56:60:0b:27:f6:82:51:45:25:e9:33:d0:4a:8c:ae:e3:f9:
         e0:28:fa:57:24:e1:da:8b:c3:7e:0a:c7:f1:1f:93:9d:76:9d:
         67:ee:3d:b1:86:63:a5:2d:02:a5:cd:dc:eb:44:6f:b1:ad:49:
         e0:48:56:6a:e9:b7:92:c6:de:17:93:cc:5f:e9:67:18:63:29:
         91:76:c6:47:eb:74:12:89:89:2f:c6:44:16:76:9b:2d:c8:22:
         55:54:77:96:80:1d:4f:5b:20:e9:75:6b:2b:34:42:34:cb:8f:
         ee:28:03:20:93:8b:09:22:9f:af:dd:c2:09:78:2e:53:5b:a1:
         61:aa:42:36:d0:28:df:4e:1d:7f:dc:47:25:73:ef:e3:ac:fd:
         98:f7:d7:06:a3:86:2b:4e:34:33:4f:82:fb:e5:b1:c2:d4:27:
         23:dd:e2:73:54:2b:83:6c:4a:42:99:71:80:07:12:d6:67:24:
         75:a9:55:56:d7:70:f4:0d:c8:20:ea:4d:56:7b:52:d1:ec:60:
         40:36:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:25:25 2024 by rpki-client on console-ams.rpki-client.org