Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File:                     EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier:          qgKQdxM1gTsblX3zxMgfTkdCau39Aa+Nw6EqsZ8lnEc=
Subject key identifier:   7E:6B:6C:86:77:99:48:2D:8E:88:B4:C4:D2:0F:43:88:89:58:2D:FB
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer:       /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial:       01935AD3E2B5EA85097647725CEC170AE521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number:          0E72
Signing time:             Sat 23 Nov 2024 21:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 21:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 21:00:55 +0000
Files and hashes:         1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: hSFT0XW/Xw6cQ5RgwsJ5Ym3MrNz1/USK7JxUzmMCDoY=)
                          2: Q0lHAN_UvKv8Fyg0crDNpyAKGh4.roa (hash: ySw3otilioM4jbiqXWgj6shF/iDgaK/+iwNbVHgtzrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:d3:e2:b5:ea:85:09:76:47:72:5c:ec:17:0a:e5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
        Validity
            Not Before: Nov 23 21:00:55 2024 GMT
            Not After : Nov 24 21:00:55 2024 GMT
        Subject: CN=7e6b6c867799482d8e88b4c4d20f438889582dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:3e:dc:b0:b5:b0:47:75:69:50:60:4c:49:
                    b4:76:63:76:76:96:48:df:d1:d4:57:a8:1e:7d:9d:
                    44:2f:5f:b8:84:87:4e:00:57:55:ae:3e:e4:76:8f:
                    d7:8e:2d:bb:6d:63:25:3f:5d:6e:3b:97:f6:b3:71:
                    b0:0d:0f:25:d1:3c:c8:10:49:53:b7:c0:78:59:fc:
                    1b:e9:84:ee:27:67:05:95:d1:18:bb:d3:4b:dd:e8:
                    3f:54:89:db:2f:5a:25:88:00:ef:4f:ef:72:49:c0:
                    27:97:9d:df:21:aa:f0:61:38:cc:f3:0e:25:08:d8:
                    d5:c0:87:ab:b3:c0:d9:10:43:9b:ec:3a:4d:f4:3d:
                    05:6f:c9:52:43:96:2e:08:cb:d7:d1:7f:00:7f:ae:
                    1b:ab:eb:1f:25:83:b9:c0:82:a9:bb:00:8e:97:7a:
                    29:30:1d:fb:bc:64:d2:95:da:77:fd:95:bd:2f:2c:
                    00:21:62:f2:05:0d:28:f3:5a:03:01:2a:d6:b9:cb:
                    be:d5:a0:82:f6:ce:94:08:10:f2:d0:49:17:b2:ef:
                    65:fb:7c:39:6a:a5:4c:3e:19:f6:b8:a4:71:f7:f7:
                    2b:1f:8b:b9:d5:2b:68:8a:ae:ff:ae:dc:67:a7:9e:
                    8c:7f:dd:27:3d:28:4c:03:c1:56:64:d2:50:00:e6:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:6C:86:77:99:48:2D:8E:88:B4:C4:D2:0F:43:88:89:58:2D:FB
            X509v3 Authority Key Identifier:
                keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:8a:cb:f4:37:24:75:9b:55:ef:d4:14:d8:c7:2c:90:dc:
         5d:e4:fb:d6:55:4a:25:bd:a4:0d:7a:1d:fa:c3:b8:c0:36:f9:
         fd:f2:68:fe:85:e4:c6:de:8a:5b:fd:51:42:83:ad:c1:81:e0:
         55:94:4e:a9:92:3c:ad:07:3f:07:10:71:8b:44:5e:00:3a:ac:
         10:ac:cc:8f:b2:d8:0f:48:3c:65:37:ea:93:a5:60:9e:66:62:
         8b:2b:a0:16:58:01:08:37:74:fb:a4:55:37:4c:16:b1:1d:4d:
         41:15:51:c0:56:7c:03:46:ba:8b:95:70:a8:15:1e:9c:e3:ba:
         42:6e:1b:48:c6:3c:31:3e:65:b2:7f:d5:74:a1:d1:d8:80:56:
         57:c0:01:62:91:6a:1f:28:c0:e8:df:05:41:f4:46:cb:9f:08:
         8c:bc:17:fe:9c:e0:d2:ae:50:a4:6c:8e:d3:97:4f:04:e7:41:
         48:4e:33:bb:87:15:96:e7:db:a9:12:97:37:9d:24:74:f5:75:
         a5:30:85:93:92:22:f4:d1:45:1e:4b:7e:05:42:36:d8:aa:24:
         0a:72:82:9f:cf:a7:29:9b:4b:78:a4:8e:22:e5:a2:1b:6c:d2:
         a6:29:24:ca:d0:a9:45:ab:80:0a:b6:f8:ab:df:8c:a8:7b:c1:
         a9:9c:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:01:01 2024 by rpki-client on console-fra.rpki-client.org