Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
File:                     D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json)
Hash identifier:          sLUYHMYEVJhWvutINfyV4t1oN491BAAJN5a8CURGWF8=
Subject key identifier:   EB:FE:E8:CC:37:FE:56:EA:40:6C:97:05:5D:5B:AF:B3:75:E5:BC:E1
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       0193628D60F0E670BA234FA9D06D92B63716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
Manifest number:          0E74
Signing time:             Mon 25 Nov 2024 09:00:52 +0000
Manifest this update:     Mon 25 Nov 2024 09:00:52 +0000
Manifest next update:     Tue 26 Nov 2024 09:00:52 +0000
Files and hashes:         1: 1-zvMy5CU7hPXdBDADw1Tijl2-J8.roa (hash: hCClAJtk8EbzHurXnf7U1i7tvCN10v6dhkW4Hk/crbg=)
                          2: 40NuI6QYlSS3W3jyJLQL1DRnk2M.roa (hash: mebfsv/pv0D0uJxN4JocPFrANv18WL42RPEwBgLgA5U=)
                          3: 94CGOZ5dIbGQx3lzfMYQoUZ2z9k.roa (hash: v99wFl/XGNitu4xpdfoZwfDpUTeuSDHfvCLVjjYCVyc=)
                          4: BLAo9iIckcgpEldM5wrAhaDlagE.roa (hash: jX3HC3BueXwlZ5w4mzS9qgDfmmdKBFEcP/15PuGUmMw=)
                          5: D6hlypF6P5fg54JONwMAra5Kooc.roa (hash: nFzwJkr7tyzIiFQQpEwuP+3F8nhJcDgw/uNMBB0coMA=)
                          6: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: xuwK+LoLlqrCd5w9jM0kmTobQSfzsN53QDYq6ArAPHA=)
                          7: EsQqF2We-JlmZuzNMnJ3pLb5R1w.roa (hash: ZSJbBV934zARHOOqyzZYhZPEkOqCUVBGZGlp3dlyFEg=)
                          8: J4sXrnc9xvhDej_3MWUqZ5A6mf4.roa (hash: mVS533kQ/u7kqShRaIQHUJifBfq4VqJ0XHVZYIX9ZRU=)
                          9: L4jYRnpRtJcm5mRiDBT3ITP8HQE.roa (hash: 1bI1+53dspEvzHKY6fmGSQSgBbY9oWsPwmFd2QHchIk=)
                          10: U6EwQTja832Ghgbf4C-YONA5u3I.roa (hash: SZC1cIcEzrofXItnVA4ILPCChrrVnJmiPwg68LYDIqM=)
                          11: UldAo54quMPtb7Jk4whucxO17j8.roa (hash: KFvqBAZ54mmaDru7RxS30A0kTI6zR9unRS7Dm6E5YWk=)
                          12: V1ufluIXihr0QEz_KE-m__Rclfw.roa (hash: 1m7zv7mPFNtkrSCjPxxqRcZW0YlYy153eLy7FTeaVlY=)
                          13: VIRx2RZraZhN0wLCh4HNpBQc_x0.roa (hash: RIz5g4dDNZ6yPswFJbLj7hb6zWv68NsEwyw7u12NSi0=)
                          14: doSMAB-bfku3VZ0a3Ij3OTo6H8U.roa (hash: LrzYz8vH+KDAviOpoR29WRaxIniwerIIKyD9CCSIwJQ=)
                          15: fyJpjVHwxslDAhrT-c1VgERQ8ts.roa (hash: 8/puWur2BCVKhPjwEXmkdqc2XweeAM2JatZb9RQkNvg=)
                          16: meG7D8NzHU_JU7Sb656v9lnuQ4s.roa (hash: 2PQT3JOVTRc/ULQkygMce8TiVM57CuW2MBxpB6xt99s=)
                          17: rzLhMhqIVMi1H0fNLVQSh-ho6jY.roa (hash: AZUtASmzk8+HuBxNjvu0Sk4MmxpUnQbWcNweaEO+bpo=)
                          18: tjYKp35GXFoWAYyAhqIbWawK9KA.roa (hash: XrYY8Y6s/lVa6ZbbTPsBNczqKri7hqQ/79tu0p7GscU=)
                          19: x4XyscLak4rg-yXicfTaZj4HIqA.roa (hash: +HpxWGnASJviEJDiL1LdLaCfUHzgTJ9nn+vzCY0s9R0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:8d:60:f0:e6:70:ba:23:4f:a9:d0:6d:92:b6:37:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Nov 25 09:00:52 2024 GMT
            Not After : Nov 26 09:00:52 2024 GMT
        Subject: CN=ebfee8cc37fe56ea406c97055d5bafb375e5bce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:db:a8:bf:2b:50:24:b7:ab:d6:75:09:9c:
                    fc:73:6b:a8:3b:1f:df:0b:3b:14:4a:7c:02:ee:01:
                    81:1f:b9:31:de:29:f8:be:16:37:e5:7d:8d:46:c5:
                    28:6f:12:4b:ac:9d:f1:99:06:45:04:8b:24:4f:b0:
                    40:7f:7e:b7:78:01:36:30:1e:f0:d3:1c:3b:41:19:
                    5b:65:4c:51:e4:c9:79:fc:d6:a5:07:6f:12:18:a5:
                    76:0c:72:bf:63:65:2e:e8:e5:07:7e:af:0e:2c:fd:
                    39:1d:ce:24:9d:c3:74:fc:5d:09:27:8a:6c:52:05:
                    1f:bc:93:42:c2:e8:6a:c6:48:3a:e6:84:0c:8a:55:
                    e0:6f:bf:f6:ff:cc:80:73:a6:ea:43:90:c8:a2:14:
                    02:58:90:fb:b1:d6:51:ca:47:ac:cd:77:4f:0c:bd:
                    53:06:9c:c7:a7:07:be:62:03:f6:85:37:b6:fe:20:
                    f2:dd:cb:db:3a:95:58:8e:23:fa:15:01:be:2f:6e:
                    8e:e1:fe:30:0e:a2:a2:da:78:7c:2c:4c:1f:ce:f9:
                    0b:41:71:20:04:a9:c5:17:b9:a5:9e:18:36:f6:ad:
                    f7:ad:95:ec:2e:07:e7:78:a6:bf:b3:1e:d9:03:c1:
                    5b:40:76:f7:91:e6:c3:71:44:6e:92:a6:d2:c6:72:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:E8:CC:37:FE:56:EA:40:6C:97:05:5D:5B:AF:B3:75:E5:BC:E1
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:86:15:77:a0:e3:d3:34:8c:f3:91:96:10:f8:c7:00:bd:05:
         10:45:0c:66:18:83:43:a3:a9:d9:6b:97:b0:ea:70:e4:ad:9d:
         c3:d0:c3:b6:2b:be:04:9e:fd:0f:dd:83:1f:68:c5:89:a6:2e:
         46:ad:58:63:2a:e1:55:25:25:9d:40:cf:90:04:f5:09:de:ab:
         bf:34:a0:23:85:0d:a4:85:1c:5e:f3:c4:91:f0:a9:5d:67:41:
         bb:31:b7:7e:4b:a8:34:2a:c6:f3:e1:57:d3:10:e9:c1:d7:69:
         4f:e7:77:2c:ce:46:01:b0:f7:b9:b1:e0:ce:b6:de:fa:66:d9:
         4b:2e:a2:dd:84:3a:00:60:d2:27:94:86:00:d9:c0:95:e7:93:
         c6:fc:c7:5a:f3:45:5b:03:26:00:5e:c0:94:ce:0f:a1:39:93:
         c8:2e:89:b4:9b:58:3a:82:32:ca:d2:96:c2:33:ca:13:3a:a7:
         ac:b6:2d:0f:f3:ad:34:08:cc:3f:14:fd:b6:4c:55:bc:77:e4:
         5d:00:12:4e:8b:ec:26:9e:54:1f:90:32:48:ab:e7:c4:8c:06:
         a3:eb:8e:a1:36:48:57:dd:c4:5b:a3:cb:90:37:d9:88:80:e2:
         46:0f:a8:b5:dc:c4:9d:9b:b0:4d:85:49:45:a1:47:c1:bb:93:
         51:b0:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:53:14 2024 by rpki-client on console-ams.rpki-client.org