Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
File:                     8Mx6RHSC5XsGBLq7gqUkCc3js20.mft (raw, json)
Hash identifier:          oG4emV2xJpyJHfhsoFYCiA+zqaoPZpELKbzHg5RTXhI=
Subject key identifier:   92:9E:FF:DD:DD:49:8C:77:28:34:38:D7:84:63:17:DD:AB:B6:54:6A
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Certificate issuer:       /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial:       019361E82C182D69152032AF52E91B2AD945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
Manifest number:          0E39
Signing time:             Mon 25 Nov 2024 06:00:25 +0000
Manifest this update:     Mon 25 Nov 2024 06:00:25 +0000
Manifest next update:     Tue 26 Nov 2024 06:00:25 +0000
Files and hashes:         1: 8Mx6RHSC5XsGBLq7gqUkCc3js20.crl (hash: 6E1kbyw3dNM8yLl88/SHuqybM8l5WnweX1qTCQJWIkk=)
                          2: PZxqfF6L0Jml19R-2Y1jR5VfZpI.roa (hash: tSE61SvLJ/LnqoP5Hn6blqaLMq1cgcUaqi9eKfZ0vRM=)
                          3: QOSive1cmGDxbBJxoauVoYL9-7U.roa (hash: xDjjhb8PsqPKaE/+6ifT3xHzcDIZIFiuKaI3xcq9QGs=)
                          4: VzBnjogixDOt06PBJhHhhfslq6k.roa (hash: 0agzLXDcVsGJ8KUhaae5q79P5G0l1GXtZ2MD1c3qLCk=)
                          5: mU11R3tWxvKv6U2PxkeCr5kDKwI.roa (hash: ke7KaUCZCZnxluqIKxkmVxr4uhhyyAUXarim9ELLa04=)
                          6: opsw1u-zGXlSRX2Gz06a0NgPHcs.roa (hash: /PzpQLwiNL9VPaMBB/c96IrhEIVZ6oxNODITdJiPkB4=)
                          7: zQO3rkho9gr8dygDFBFMSvjIRB4.roa (hash: jiX4yYVPprMJEhDVWbcv7tCoWKcPoyvmfUWeZeVD9so=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:e8:2c:18:2d:69:15:20:32:af:52:e9:1b:2a:d9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
        Validity
            Not Before: Nov 25 06:00:25 2024 GMT
            Not After : Nov 26 06:00:25 2024 GMT
        Subject: CN=929effdddd498c77283438d7846317ddabb6546a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:52:30:6a:e8:51:66:7b:18:2a:da:46:60:
                    13:08:0c:0f:ef:de:a0:5c:64:65:aa:dc:07:6b:d1:
                    21:71:1c:07:62:df:2b:76:a1:d0:68:c1:8b:ea:11:
                    1d:e6:e9:9f:84:3b:cc:4a:7c:fd:91:7d:ec:6d:10:
                    c2:0e:b1:c3:68:9a:14:0a:84:f2:57:62:0c:c9:c9:
                    e8:ea:7e:7b:09:91:6e:cc:99:b7:1f:11:79:42:8f:
                    89:fa:bd:2a:7f:97:27:27:a2:b3:52:f3:2d:9f:a6:
                    f2:ab:fa:02:80:96:a0:98:02:34:67:42:f2:bd:01:
                    f8:c9:38:81:aa:f3:a4:cb:84:28:9b:3c:d2:b0:09:
                    40:b1:27:22:55:31:84:3c:03:62:d1:7d:d2:6a:33:
                    22:6b:7d:c3:98:1b:ac:e2:34:b9:fa:54:86:29:72:
                    85:4b:01:0d:27:dd:f1:1d:63:fa:4b:81:1c:9a:1f:
                    85:0f:ba:36:de:e5:a7:7c:95:94:db:cf:c4:2e:25:
                    b3:50:1a:a6:d4:c4:81:f8:54:61:c5:c6:c5:d0:53:
                    42:b1:70:b0:43:0d:08:b8:ba:35:52:0f:25:65:45:
                    75:4d:5d:80:ad:58:59:af:74:c4:ec:2e:e0:34:e1:
                    1a:8a:04:56:a8:59:ec:06:34:d2:ab:77:45:a9:55:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9E:FF:DD:DD:49:8C:77:28:34:38:D7:84:63:17:DD:AB:B6:54:6A
            X509v3 Authority Key Identifier:
                keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:73:a5:30:2e:7f:66:28:8d:be:50:b2:1d:a0:0c:74:1b:c7:
         0a:02:0a:5c:a7:90:c6:4c:66:61:6f:07:6a:63:f4:2c:a6:f4:
         73:52:e4:f2:3a:15:4c:b9:da:1b:f3:07:da:79:5a:c2:9d:f6:
         3c:72:b8:15:2c:c5:ed:dc:1d:3e:95:30:c7:d4:ff:c9:ca:e3:
         6f:9e:94:2d:4f:d9:9d:85:02:c7:1e:d1:10:b0:be:4a:ee:98:
         0c:33:e8:b2:e5:8f:65:9d:0b:b2:d9:a5:b2:80:5b:cf:06:ba:
         6c:9b:31:e3:55:d3:ff:3e:83:1d:b2:b6:23:9f:14:38:8c:9e:
         bf:86:0c:df:3a:68:c9:46:7a:b2:08:fa:28:9d:e2:2a:61:fc:
         46:72:8b:4d:41:a2:59:02:e3:cf:9a:5b:49:df:0a:da:4a:70:
         3b:a6:70:e1:9f:12:20:73:45:5d:da:3a:b1:b6:49:f9:24:e4:
         44:25:9f:76:2d:14:9e:87:1d:66:12:36:e2:1f:23:c9:f1:2e:
         00:2f:6c:40:96:96:af:01:05:83:a0:32:39:60:40:ce:26:c0:
         b9:3d:94:e8:c9:ac:da:e2:a5:f1:de:1f:f9:ef:33:c5:30:31:
         d8:09:dd:e6:68:16:9b:f1:0f:0d:30:db:5f:8c:81:3e:a4:6b:
         76:cb:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:46:45 2024 by rpki-client on console-fra.rpki-client.org