Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File:                     rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier:          +CJfqZyaxPivXgAIfwX8BTIs6OwYzUcvWKV5SY6Eszo=
Subject key identifier:   E7:FB:BD:5B:C1:5C:FA:E3:65:EA:10:01:57:08:0E:D5:94:B8:47:CE
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer:       /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial:       019356BFA05D5C641C3B487A8988CB88D0D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number:          137A
Signing time:             Sat 23 Nov 2024 02:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:19 +0000
Files and hashes:         1: dYUD4RM3nL7jATL2XiC_Fpl8yPI.roa (hash: eBI/PCG4ZAgWspfLHa5EjPgMwxtJvzAlNZyAMs5sd+s=)
                          2: eveyaYfpev-wrwfLjCF66NRZOP8.roa (hash: y5ooxx7ogCIXqBsUF+VpY3b7PzuKHMCKQthwG1L8WTY=)
                          3: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: dQ8ufNX1O7hqSIcTtapYxGvhw9mh1ASMFDqjsHzII0w=)
                          4: z9nLEap4qDplCv4-cFwvbr75HAM.roa (hash: UsAcUbMnck9wd6mg2X+ATY2NG/SwMJUuVVLgwSN86cQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a0:5d:5c:64:1c:3b:48:7a:89:88:cb:88:d0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
        Validity
            Not Before: Nov 23 02:00:19 2024 GMT
            Not After : Nov 24 02:00:19 2024 GMT
        Subject: CN=e7fbbd5bc15cfae365ea100157080ed594b847ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:17:ff:70:8c:99:92:a9:ae:11:9b:20:2c:
                    82:8d:44:45:8c:45:4a:e7:c5:8e:ac:29:75:6d:bb:
                    d3:62:f4:d4:b4:fa:01:b8:93:fd:cc:31:cc:39:28:
                    4a:8a:34:62:a1:74:99:ee:79:eb:eb:46:50:43:65:
                    3a:16:85:cb:ff:66:02:f9:ab:36:e1:44:24:1b:ca:
                    1f:7f:b2:d5:b6:3f:b5:57:c1:a5:78:78:9f:23:c2:
                    e5:9c:5b:fd:b2:de:e1:21:99:93:35:b7:62:2b:eb:
                    53:a5:9b:77:9b:35:59:e2:97:eb:c6:76:0a:d5:ae:
                    37:6a:46:58:57:1a:97:40:95:dc:15:00:8d:24:47:
                    17:3c:94:10:16:b5:65:c3:ba:bb:83:98:9b:cb:c8:
                    62:20:91:ef:42:78:77:ff:4d:d7:e6:27:bc:1b:d5:
                    0d:a2:04:80:c3:df:8e:1c:88:7b:0b:9e:d5:62:37:
                    30:8f:7c:78:4a:af:17:fe:aa:b2:27:a9:f9:06:ba:
                    88:fd:84:a6:9e:46:71:39:bb:2b:48:15:c2:2b:59:
                    98:ac:09:aa:c7:67:92:41:c2:83:d2:10:fe:a2:40:
                    e1:39:c6:d8:0e:af:88:75:0e:88:4a:52:c8:12:c1:
                    86:92:23:dd:88:04:4c:90:21:00:72:15:0f:d6:e3:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:BD:5B:C1:5C:FA:E3:65:EA:10:01:57:08:0E:D5:94:B8:47:CE
            X509v3 Authority Key Identifier:
                keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:09:5c:1f:87:90:6d:44:41:15:9f:5c:76:3d:74:60:22:31:
         34:c5:75:6e:fc:53:59:bd:a5:c6:9d:a3:4c:9a:f5:8b:9d:dc:
         c1:49:52:4f:da:95:c8:1b:96:e2:8b:07:c9:44:66:68:c8:2d:
         2d:c1:f3:e2:5f:16:43:74:ca:06:55:84:48:2f:fa:3f:6c:bd:
         7a:4b:aa:46:b5:76:c0:a3:16:97:b8:32:72:57:48:2c:dd:cc:
         a9:7f:e8:52:6b:d9:62:8b:5b:5a:6b:af:17:8e:8d:f0:78:06:
         be:6b:78:9b:23:b2:6d:20:ed:4f:19:0e:ec:9f:56:2d:50:96:
         f0:e9:f7:9e:e7:ea:54:3f:53:01:f4:69:06:31:62:56:63:d3:
         54:8f:8c:f3:e9:dc:bf:2f:f2:22:5a:eb:f3:b9:8e:a1:aa:b5:
         ab:cf:a0:07:bc:6e:57:3e:05:b3:de:e3:28:22:46:a1:86:82:
         84:f4:f1:2b:f7:7e:b9:36:b0:44:a0:8e:c2:8a:c8:82:55:9f:
         ab:c7:fc:60:01:be:71:a4:15:38:2b:e1:47:1c:09:d7:b8:69:
         58:77:4e:0c:a3:7a:35:81:d3:85:56:e5:30:de:88:b2:55:eb:
         83:58:d8:17:63:b8:23:66:a9:3a:93:2e:81:a9:fa:b7:55:bf:
         61:e8:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:42 2024 by rpki-client on console-ams.rpki-client.org