Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
File:                     w3i8O9NQ7txPN3wiRVayUNpt3m8.mft (raw, json)
Hash identifier:          LGgzlYIUVumJQ7xYXI+TgFQtiftrRimpR5ImEITvqB4=
Subject key identifier:   4A:53:05:43:08:9D:0E:FE:FA:EF:85:EA:64:72:53:A3:B5:B8:FB:4B
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       019350F483A810219E2E0FBD6A537A9DD2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
Manifest number:          03CB
Signing time:             Thu 21 Nov 2024 23:00:21 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:21 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:21 +0000
Files and hashes:         1: 0nUa-hs-k7EYdoDhgKMjb0p_dCQ.roa (hash: B9yXrZhizgNnwE4CNyb2QK9LPSoKnZI9bBj47+Og7TY=)
                          2: 1-tCnuTKx3QD_6wCBK2aEDMGEFSU.roa (hash: hVhn4wpPPrwogAqf0r5ufIfXA/KLA61EKizCUem196M=)
                          3: 1-vkwx3yW3crLL4ge4aEgcyVVCMY.roa (hash: rk7eLrflqzTa87r0jAOeT/CVA+SwAHRvhbN2KpmFicg=)
                          4: 3uFWR0vVPRl8D2lPM7roQ9WJz0Y.roa (hash: LSmzWgn/hYIHi4NUmlM6GKYm3LBmcQmORRPkif4dGKQ=)
                          5: 9wyPoXbYBRydhs9Ff4ii_7M7cSo.roa (hash: zHcpd4rQY3sfRjfO0FxaAycXVICh6hMBl/gup5ZmJlM=)
                          6: AtiPNY5M1k-GpfrvThD3Z2bg0Lg.roa (hash: 04omoSUm8bZAaqa4LNpSJzgm0bIlqO6UIy4hXR7/6cI=)
                          7: DRlUupqZIr7fiDvqcxzWjbVqcWo.roa (hash: 78sjLx2n021XJaNz77IhBMm+ussq+bbvnLGIiZQ4r/0=)
                          8: Ek2nKV6i477agFHd8oLS1C5gzvI.roa (hash: HOv5tvNK5MAeoZtpkXC+Ve3ru/vChqxPS+mQTYYSNd0=)
                          9: EpncmF5RzI343YLnzj0Rfuv-kmA.roa (hash: OemKUTItMRIHlnukBI2nPH40zDycw06/x9leeda4fKI=)
                          10: G7DNbwPzoOy4JfscFp4jLMLF7BM.roa (hash: kevnd0TfsocPdVk0mc1cMR1ThxQIsMphjd+KSYQNtFA=)
                          11: Gnj3xDrauBXnzKinJ_fUxVmP-z0.roa (hash: tkybPFKvU79zJLakJwPGQrY7hPx9/Dg24bp+LlcFKSk=)
                          12: Q85VqPH6P3bvYsFKOqrT7-JSfyc.roa (hash: 27lqNP8xopzwrtH92IXL8RGaeg3Jfjor1qfrImrmFR8=)
                          13: QUfR4QzQVBMEFqQeGNEHQvtsaLc.roa (hash: xT0IGFzcdHr5yptsj7RDwBqOKFivYXYv/EjiOvQA2lM=)
                          14: S3V0kI8z0_STnUJBd_NUnisQsyU.roa (hash: 2RHJYSsXWjmE9sZ1UKaH18UKAV8G72jj3v1C3E46nrM=)
                          15: UsqH1KVqXJ6Fv6qTxxNRsU5xXq4.roa (hash: Ze+ltFBhEZi90vIale8iaPOqDcFsPkdSLyB+9x4HnmE=)
                          16: bSZ9HQmlmDl-2g06PNPWjdv1x28.roa (hash: 7MDP/F+MIUuob8iJHdT8kFHgTHSA+3AeBaz277LJ9dA=)
                          17: bSmtq7espHhTsEGGi_C78pdLan0.roa (hash: SrkZZfZNiV0q9W22vcj1JtjqHn/8E+qtkFM+G/pVIlQ=)
                          18: ge0rL519YV6DIO7OHQtZFiU_Amo.roa (hash: UC2eOvxqJOZkK8IFqpLf76mLm61NMExYNyf3Wtb7/3w=)
                          19: jvvIL990XaTYxw-VeLqzvIrXD3A.roa (hash: PY+/8bk3/EQePvx/TRYxHScZnj5sFMK+3gBhhjytTLo=)
                          20: qjkHS-s3nU4ZN0sKuKL6ZestKY4.roa (hash: lL2Vi4lhIR2rozQy7htpWiU1bABM0H4oqXpNY8JAna8=)
                          21: v-ExW6h9s90EhSLlWAEPOZJgQfU.roa (hash: drMD9dymUKsiv+aQe4jWgg2gb5qlZZGuymkQnX0q53s=)
                          22: w3i8O9NQ7txPN3wiRVayUNpt3m8.crl (hash: 58Y1nEU8vmli8qhiHn4hQ1XSHDhi1g2ZqJ4nrPt3C+k=)
                          23: x7wxtp3OkzewhtrSCu4-2oaqze8.roa (hash: IeCF4R5fRjQ4UxSFV88Da+nCCz34MxlQ5jxjwrQEACU=)
                          24: z6IgVo5jVeEMm3toFh7t_3Rtbsc.roa (hash: ATWijIObf0mXu80VOBwQcm83szkTD+Nptf8bEAtPC1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:83:a8:10:21:9e:2e:0f:bd:6a:53:7a:9d:d2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Nov 21 23:00:21 2024 GMT
            Not After : Nov 22 23:00:21 2024 GMT
        Subject: CN=4a530543089d0efefaef85ea647253a3b5b8fb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:3e:1f:33:ac:35:fb:ad:24:f7:2c:eb:ed:
                    ac:99:ef:a1:fd:dc:e3:f7:79:60:86:ff:26:91:5b:
                    3e:60:96:0d:ae:b6:ee:d5:f0:c5:91:26:18:64:fb:
                    59:21:f6:95:2d:42:c0:ee:a7:91:58:27:db:a4:76:
                    c9:8f:45:54:9c:3d:0c:5b:de:54:43:98:10:11:c5:
                    de:38:0f:c1:12:c1:6c:1b:cd:14:23:db:20:da:32:
                    16:11:aa:17:b6:2d:51:89:90:f7:5a:16:6e:34:36:
                    38:52:bb:54:c5:fa:32:fd:19:2d:e1:9c:38:f1:cb:
                    7d:bc:4a:c6:50:fe:80:ff:a2:af:a8:05:8a:08:a9:
                    ec:26:7a:0c:3a:4c:f6:a1:c4:ed:7c:b8:3a:bb:93:
                    2a:ad:9d:c8:a4:a8:0a:e5:d6:c2:31:f7:7b:11:fe:
                    08:3e:3a:28:bc:27:f8:86:03:a0:5c:10:10:0d:91:
                    87:cb:13:f6:9f:38:0b:2a:f0:fb:05:d7:48:f6:8f:
                    92:65:9d:46:6e:87:a8:1d:ba:0b:49:c3:33:eb:58:
                    a3:b2:31:ab:c1:da:bc:8a:a7:e8:45:d8:5c:44:a5:
                    4b:b8:92:66:63:d6:04:31:44:a2:38:44:8f:28:59:
                    18:52:31:0b:48:87:6a:94:96:30:33:33:41:5a:75:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:53:05:43:08:9D:0E:FE:FA:EF:85:EA:64:72:53:A3:B5:B8:FB:4B
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6a:59:2f:4f:45:64:22:86:67:85:d1:95:58:31:a5:8b:35:
         2c:1f:e1:79:2c:e6:ed:d7:6e:ed:82:1c:64:ae:ec:21:1b:84:
         2d:4d:fc:f9:ae:2a:1b:bd:e8:da:a3:94:8e:05:8c:63:85:95:
         68:a8:6f:26:db:30:dd:b3:34:a9:58:65:93:ff:2d:51:60:16:
         5e:e0:92:76:d8:c1:c1:52:bd:37:ab:38:67:ad:26:ed:59:fc:
         69:49:26:ea:03:ae:0e:e9:38:bb:f1:c1:58:3a:9b:2c:c1:de:
         1d:d3:46:88:c2:ee:3a:82:f9:d8:10:2e:09:2d:98:f5:db:62:
         1d:c8:49:06:91:39:81:79:e7:47:2e:f2:d6:78:bd:dc:9e:65:
         19:aa:9d:25:8e:9a:0a:8b:37:a4:5a:31:04:26:66:70:65:28:
         3e:9c:c6:db:fb:5b:f6:a2:57:e9:89:ca:38:cf:be:b6:f1:1e:
         58:74:1a:72:f2:fc:69:9a:6c:d8:98:4a:4a:01:3f:b9:2a:e8:
         34:d4:18:5f:ab:f3:5f:b3:4c:d6:61:83:bb:19:ed:82:af:11:
         f4:5d:b2:62:d4:cc:8d:6f:50:ed:6e:04:d6:e8:e9:52:1c:0d:
         f4:cd:c6:94:12:d5:bc:09:f3:da:b9:34:f5:86:32:e6:4d:1c:
         27:0d:de:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:40 2024 by rpki-client on console-ams.rpki-client.org