Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          Fo8Xsr4/PEO11KmCjBJsMb6gyNKb2noH4E99TSQKyco=
Subject key identifier:   E5:7A:CD:E4:59:D2:84:3E:6C:89:BE:1D:1C:8F:1F:99:07:FD:F7:9C
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019352751349155D0C71BD64AA24F9BB1C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          13BF
Signing time:             Fri 22 Nov 2024 06:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:24 +0000
Files and hashes:         1: 0M8dHOR3N6Yqs8c7D9SXQVKoeuo.roa (hash: 7PI6J6p+AI140d65/Vv8UoW9lS1OX2GTolBAhKPWS8I=)
                          2: 0THHlFhvudsWJA3WEX0HVTrJJ94.roa (hash: nkKdFOeUVfOn1DZqVKoq0bIZBl3qp8Q1Ceh3aCvm+aY=)
                          3: 1-5Or1skQaOMZiKEq5SJSLGOpVqQ.roa (hash: Doqm/GzZcC8e464VUOHTG92LAb80U7tiAlp8evsRpYE=)
                          4: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: WXChdE6mCepgJP0DtWHv229GiUDPyql6QciFUvD9Aso=)
                          5: 43M6XtH0N9krXh_JN3jZOWOBd1s.roa (hash: ZDfvI4PPOnsbJp/YQ7aPXAVjkSnVLk2nXpjbceLvXAI=)
                          6: 49Za3blXOjp8GCnz8bABQyC7_dA.roa (hash: k8/bbPZAqw5dk6tmtvy67B3qtKPZxLl+fxBLZbUpPeM=)
                          7: 7gFne-1PqUcABtA1v1Pb2dm69Wg.roa (hash: aqfZ4/kRxjZJBnnIGcEnCycjg+IhGiINXChoDLU5oD4=)
                          8: C5ef8rW2_73O_BUyMDsBz1j3dKw.roa (hash: LIKwHQ5iuEKbKwIeGhU7KNUmHIKpFBoAMTrm5uuPxfg=)
                          9: DR-HuXEICOc7JGgtKLOnnWgFkyI.roa (hash: z62iSeKbYQECpTNixoU8sU83ED/EDF4AIfgDNk0fryc=)
                          10: Ec9reM2nUGASOFcJnvgSSYfpHdU.roa (hash: E+fzwblQi9lt/nfsRh06Nk/N5PbL02/A3YmlOwy0DtM=)
                          11: GMb1FTJUsyEhvCMLVNqgU0Jabjo.roa (hash: /r4OdjndLWOXXQEIOfDEz+oGq467Gr3uh+KnWjJKcjw=)
                          12: GR9JIYL-GwHYKwF_F3fI5cVYHIw.roa (hash: HCucHems+RldWH46hS7ILhnK+ZZ509STqsRHwqhwOvM=)
                          13: QRVhwubhTibIe73r-9jKpkQoPVs.roa (hash: Mmf5lF/NMDS3mDElX6bkZc7sEYFTrSjbET/BLIhIxSE=)
                          14: R2wgyTd7ibQ1MGlwUyY261WjTdk.roa (hash: Az+5cbV50c0dQ3ghd0d3XId3jctmopubRikbfkat8Gc=)
                          15: TDJGIu5IJsBzwPORP3bWEKQt0xg.roa (hash: FFgbKX5mMXH/8E5HLXzK3kaVMNhBYqdgDvPbVm350G4=)
                          16: WRURZ90iORUowsL9eiGN4bsYrJ8.roa (hash: 9I7u9k/Qo8C6EsT62C9LgA+v9MOHPI8TB1jm7hcIfHU=)
                          17: bCySHOdChuhPGPbj9pU3K2CrVFs.roa (hash: 7vh7kCBZ/fwbD0QWDSHqo+QjwefnW0fS1wMEzVRvSvw=)
                          18: ctgoqT_Y1tUMH4mKIOLBliE8kKM.roa (hash: QVDxyBAhZvc6avwPRODzMq6pIUzD1LVHTmyl5zbU6vs=)
                          19: ddiWfPNCeXdfgl5dwPDag1NmkHE.roa (hash: qUNNF6kTLXeVlWpMfyPieSTUv6Zida4rHy4r5EpD7MQ=)
                          20: gngOYDeihWoZ9_i87i_K2TzuLv8.roa (hash: aZMTNPynVs4XsOmtSt173kPg9jJEKkQYVwyFGaMUVh0=)
                          21: iUbxsceCmjTiCPz5tfZxcCG-8Ns.roa (hash: yU8lXGJCLTB9K3+97zOL7j/6oevs6suWud2yUV91lCU=)
                          22: s0O1F1_bWUBWhbNpo_MEBpj6zyc.roa (hash: CN3MNX+Ce+ejGr2Sy6EyOau3fX9NRGsrCCEU1n0PnNQ=)
                          23: xJUmd6mvV4bDtpVNWuuFNHzR07Y.roa (hash: 1dkOgR2PHb2WS5N0ufQq/K8ieSB8OJyMCh5GHeBA15Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:13:49:15:5d:0c:71:bd:64:aa:24:f9:bb:1c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Nov 22 06:00:24 2024 GMT
            Not After : Nov 23 06:00:24 2024 GMT
        Subject: CN=e57acde459d2843e6c89be1d1c8f1f9907fdf79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:f8:7c:a9:4d:35:0f:d2:9f:79:27:6b:d0:
                    89:65:df:3d:57:cf:8d:0f:a1:73:8f:d1:8a:00:68:
                    8a:e6:4c:cc:4c:1f:e2:6c:f0:85:21:ad:97:c5:26:
                    35:25:33:7a:e0:57:89:dd:25:1f:5f:ea:72:8d:03:
                    1a:74:e6:11:21:bb:2b:90:ac:02:99:c3:00:d5:b9:
                    38:9d:82:dc:2d:5e:b2:d8:21:b1:f1:c2:16:e5:d7:
                    70:c2:64:0e:98:3e:b7:18:15:45:60:a0:ac:33:0b:
                    9e:3b:df:6d:db:c7:47:77:8a:04:ff:90:7c:04:a8:
                    1d:79:df:2a:42:74:7c:a9:45:2f:8d:d4:7a:d4:73:
                    91:55:df:a6:59:81:7f:3d:3d:81:62:0c:14:d2:0c:
                    d6:cd:1c:4a:fc:85:ff:a9:35:0a:1b:9b:70:08:e6:
                    f8:a9:0f:4d:d4:07:25:b9:23:af:98:c4:a6:fa:b9:
                    ff:d1:f7:61:05:78:a0:5c:51:c7:77:2e:ce:71:44:
                    5b:df:a9:15:d3:5f:5a:1b:f0:1f:df:3d:98:cf:97:
                    f5:1b:f7:01:e2:ef:27:8f:27:95:a1:07:f8:12:10:
                    cc:8f:de:7e:ce:e1:88:3d:31:60:68:32:c3:58:48:
                    17:35:34:2a:15:21:37:ae:75:31:3d:16:b6:28:a4:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7A:CD:E4:59:D2:84:3E:6C:89:BE:1D:1C:8F:1F:99:07:FD:F7:9C
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:7d:77:de:10:f3:d8:28:80:30:c0:cb:be:19:e4:3c:66:
         50:a2:a3:3d:69:01:0a:a7:33:c1:1d:2d:ac:69:ac:3a:29:c3:
         db:d4:1b:4b:cb:37:d5:c4:d9:88:4b:81:91:3f:80:be:a3:ac:
         f1:30:13:f8:0c:2a:06:ab:df:ef:2a:55:71:96:e2:aa:cf:69:
         ff:42:f5:c4:4e:9b:c2:fe:8a:b6:23:94:6f:d4:67:4e:fe:d7:
         81:e2:49:f5:0b:e1:a0:cd:4f:f2:59:54:51:d5:ab:70:e7:b4:
         39:77:b0:ba:79:a7:7f:8f:9a:b0:30:1a:80:0d:e1:43:0e:db:
         37:14:d8:4e:2b:c3:d4:da:7a:83:89:db:dc:8b:8c:65:4d:a1:
         5c:f4:f9:84:89:9f:88:68:a9:bd:9b:cd:a5:ea:5b:25:0a:09:
         96:60:ef:f0:0e:70:6c:40:57:a9:91:38:17:a1:d5:20:eb:be:
         be:b5:f1:73:19:5c:78:fc:8a:d6:ba:17:4e:eb:d6:57:a4:2a:
         ed:3f:2a:18:77:30:ac:57:b9:e5:f1:be:10:4e:7c:c4:ea:b3:
         e0:7a:ad:1f:1b:34:7d:d5:13:ac:fb:8f:fc:ef:8e:fb:a1:d5:
         98:8b:8f:26:e8:56:a9:9b:13:3c:4c:d5:d7:00:d8:93:60:8c:
         78:31:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:03:17 2024 by rpki-client on console-ams.rpki-client.org