Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File:                     8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier:          pn1sHbd7f6GLa450X5zBm0ZeJPkKd7NbpWXpRYlUgs8=
Subject key identifier:   D6:96:6B:25:FB:14:43:65:D9:70:E1:19:B5:0B:61:99:FC:18:C5:75
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer:       /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial:       019356BFAFBD8B0E701FB86A72C84D0AFD00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number:          07F5
Signing time:             Sat 23 Nov 2024 02:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:23 +0000
Files and hashes:         1: 6fnXH5hlPamd-M1qLtVZJCnlKgQ.roa (hash: wbsGEGRSKyB50eO2U94WuA3IwxsHE4fM6BH+GN65s9Q=)
                          2: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: fxIJoKEtQNU5hM3aZSAbYgyx1ZuRODW0oz3dETZF9Lk=)
                          3: h6WzY4bP3cZC79weVVfVr3RsG2E.roa (hash: iFnlZkbXqjrKVdH8LeutUTzdJgltfpJSmf1q2rcYPBQ=)
                          4: ulG9s1p4E1-WG4qfVMMqLFT2A-E.roa (hash: UHpEzInt0Tizr4zgUdJ1hDrj3nw6V2iPyq2nFxJFp54=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:af:bd:8b:0e:70:1f:b8:6a:72:c8:4d:0a:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
        Validity
            Not Before: Nov 23 02:00:23 2024 GMT
            Not After : Nov 24 02:00:23 2024 GMT
        Subject: CN=d6966b25fb144365d970e119b50b6199fc18c575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:a1:eb:d6:6f:ac:82:6a:a6:cb:74:ac:94:
                    3e:ac:e8:f1:c1:31:19:18:1d:b5:1b:23:99:4e:64:
                    81:2e:36:49:9c:09:89:6f:77:57:98:fe:78:24:78:
                    8b:90:ab:06:2f:b2:e3:32:ed:85:2a:7f:81:4e:dd:
                    ab:64:46:a3:d2:e9:0f:e6:d5:49:28:a0:72:a7:40:
                    84:7d:2c:b5:94:41:d8:32:81:ef:98:d8:e5:38:8c:
                    bf:8d:d5:ee:7d:a4:3a:74:8b:91:09:98:cd:6e:87:
                    33:44:26:b2:c3:bd:93:4e:9a:53:53:82:70:13:24:
                    c2:92:1c:29:13:72:1d:72:ce:b3:92:4c:c8:8e:3b:
                    bd:05:a7:54:dc:88:d4:a7:22:bb:44:ad:7b:4d:a6:
                    bf:cd:09:25:57:d4:9c:48:f1:58:62:43:f6:c7:82:
                    45:b3:7f:1f:96:c6:2e:5c:75:9f:eb:cc:63:29:5e:
                    a2:39:de:43:f1:26:2f:44:d8:a0:27:d9:27:aa:bc:
                    34:b4:bc:a3:ee:e9:78:48:a1:35:ba:d7:3f:60:a9:
                    3b:7c:47:65:ff:2f:1b:f0:b8:50:d3:6c:7e:e9:9d:
                    93:aa:99:34:7c:be:2d:a6:fb:fb:94:b4:a9:04:43:
                    70:0e:d7:11:72:a1:0f:ab:88:2c:bc:c9:bf:10:29:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:6B:25:FB:14:43:65:D9:70:E1:19:B5:0B:61:99:FC:18:C5:75
            X509v3 Authority Key Identifier:
                keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:53:1e:99:9f:94:61:e3:04:1f:3a:80:07:ae:34:36:6b:72:
         61:8c:3c:7a:c9:d1:47:b6:d3:79:0c:f4:fe:c9:94:db:69:37:
         d6:56:b0:c8:ba:73:a4:a2:96:b3:66:64:ac:df:1f:24:bd:63:
         21:df:72:10:c7:63:e7:16:2a:6f:36:98:b2:4e:48:54:da:af:
         ee:db:d9:c8:01:ea:9f:9c:34:ce:d9:3b:e5:1c:aa:8c:11:dc:
         d4:a2:d3:9a:c1:9a:f6:b7:67:9f:34:10:e9:b4:5e:0a:bf:c0:
         49:fa:33:b0:64:aa:3e:46:6f:59:0e:14:f2:a1:9d:0f:5d:34:
         1b:e8:c1:c6:99:6a:7b:e9:99:8a:92:a8:df:96:61:42:ac:8e:
         3d:1d:3f:6d:1d:6e:d8:98:f8:af:9f:d0:d3:3c:1c:e4:30:c8:
         17:d7:e4:33:9c:c1:ae:57:01:d6:55:94:44:5b:9a:15:21:4e:
         f3:ff:3c:e2:42:9d:0b:e2:94:8b:d7:74:df:7d:c7:de:53:b5:
         c4:d4:c1:12:33:38:62:62:72:c6:b1:01:87:2d:1d:68:ef:1a:
         bf:1c:7c:81:e2:a7:bb:a1:90:9f:bb:02:73:47:a4:bd:bc:68:
         eb:79:fc:b0:9f:29:f5:8f:fc:4d:40:95:2f:d7:8d:41:e2:c5:
         9c:a8:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:56 2024 by rpki-client on console-fra.rpki-client.org