Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          uMV5j/JRqL3GhNO7JAdlTAOQLUeDQk9ToA5Ed2j32hk=
Subject key identifier:   B7:3D:99:59:FB:A9:AD:AE:F2:7E:63:E5:C9:DF:5A:41:06:A5:94:41
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019356BF7E8153B7928312D7AB882828E724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          1381
Signing time:             Sat 23 Nov 2024 02:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:10 +0000
Files and hashes:         1: 1-6pAoK30q_BK5QxLLYcZy-2mzF4.roa (hash: w+ElshojtUKaJ/W6zm0By8yThd8F7ilZlbYxyWsuzt0=)
                          2: LDTaeJbQpJUwuNZLODwg-VIF4S8.roa (hash: 2fPn+YeLLs5OBIHHpMfc7pk16u1qIVvznkkfqHdNzLA=)
                          3: PJ8LbQ1PfHqEJdghLKapc7eVjB8.roa (hash: JF2IoKgKvas+BaecaE3HeKNUDvzAdviT1Uv0x/N/TcI=)
                          4: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: +UR8eo6E00oHUBEpmvmKPuroSrT+yrMwXjjh3zqeTLM=)
                          5: _1cUObqL-gFeV5Arwb0Ph6YJagk.roa (hash: CuzthoXhHYNHNzQH5QRpziIbIaJIE3OcGH1X/Jd99Jw=)
                          6: fpNnp2ZtGkveXVBWn2iFJHXX5Ck.roa (hash: obKil96p4t1rjLTXNHXF3OHf5k3sJOpZnAW8BlUpgEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:7e:81:53:b7:92:83:12:d7:ab:88:28:28:e7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Nov 23 02:00:10 2024 GMT
            Not After : Nov 24 02:00:10 2024 GMT
        Subject: CN=b73d9959fba9adaef27e63e5c9df5a4106a59441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:06:86:61:94:a1:fb:fa:4d:a7:1d:f4:a2:
                    b9:24:1a:5f:02:53:b6:ac:99:d8:93:25:3d:24:6b:
                    1d:fd:a6:7c:a3:f5:e2:12:76:b0:8e:d7:05:81:ec:
                    28:6b:e4:d4:cf:2b:43:c2:4a:af:91:d8:8e:cc:99:
                    49:79:5e:28:0d:38:d9:23:7e:f6:a4:26:6b:5d:88:
                    8c:20:8e:90:46:a4:37:20:4a:92:98:d3:b7:9f:81:
                    5e:0a:2a:87:fe:55:97:73:8c:a5:fe:04:57:ff:19:
                    87:94:ce:2b:68:94:fc:17:1a:85:a5:dd:40:c6:22:
                    af:e9:d9:5b:72:6b:1c:51:94:1b:ad:89:85:35:39:
                    c6:3d:88:65:5d:61:44:cb:b3:bb:eb:a7:bf:cc:c1:
                    95:72:05:c7:7f:b7:19:12:b1:0f:de:ef:b5:28:72:
                    09:ec:a5:e9:a7:ed:89:3b:89:20:0b:9b:56:2e:94:
                    aa:41:7a:01:13:5a:f7:ea:bf:13:22:cb:cf:77:19:
                    90:52:a5:db:61:4b:1c:8c:63:b5:40:ef:be:d1:56:
                    c9:b6:f1:a4:06:e7:58:b3:61:5c:36:d8:cd:26:77:
                    c1:ee:6a:d3:0e:e6:43:57:23:a5:31:29:b0:86:f4:
                    e3:55:52:2a:76:30:08:1e:13:57:78:95:10:de:3b:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:99:59:FB:A9:AD:AE:F2:7E:63:E5:C9:DF:5A:41:06:A5:94:41
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:95:89:ca:45:56:7c:24:52:fe:c8:48:40:15:84:bc:90:
         7a:87:9d:9a:37:aa:c2:06:6c:15:c2:fe:ee:87:52:d4:ba:a6:
         33:42:9f:52:28:e1:56:80:2e:68:e4:7e:5b:18:ba:83:0e:f7:
         01:70:e2:68:f6:7b:ff:a2:0a:60:a0:a5:17:87:1a:12:91:53:
         4f:c8:1e:0b:15:f0:05:88:2f:45:89:26:ca:25:33:66:17:a5:
         51:4d:c3:1e:ae:e8:25:c9:ee:f5:d4:67:54:22:06:ca:a5:85:
         48:67:ce:54:c0:80:e5:66:0a:7e:4c:d4:02:4b:91:38:5d:db:
         79:4e:74:af:3c:a0:ff:4c:0f:4a:c6:2a:e5:46:7b:5a:ec:1b:
         47:20:39:7c:19:95:86:15:63:16:bb:ba:dd:1b:7f:fb:a4:b9:
         1d:e5:ad:3c:e9:06:e2:77:04:7e:a3:5f:c3:18:40:e8:f4:f8:
         f3:a6:05:54:b2:b3:3b:95:91:2f:3e:82:7d:32:60:ad:e1:de:
         97:8e:72:2c:ad:cd:1c:fa:b0:ae:8e:a4:ce:e3:10:00:22:67:
         dc:02:3c:15:d4:c6:4a:4b:61:a0:9b:72:42:52:f7:e1:31:0e:
         07:e2:fd:65:d2:88:6f:2b:b0:1d:e1:99:3a:b2:e0:61:86:30:
         6c:fc:d0:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv36BU7eSgxLXq4goKOckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi
MWE4NzcwHhcNMjQxMTIzMDIwMDEwWhcNMjQxMTI0MDIwMDEwWjAzMTEwLwYDVQQD
EyhiNzNkOTk1OWZiYTlhZGFlZjI3ZTYzZTVjOWRmNWE0MTA2YTU5NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOcGhmGUofv6Tacd9KK5JBpfAlO2
rJnYkyU9JGsd/aZ8o/XiEnawjtcFgewoa+TUzytDwkqvkdiOzJlJeV4oDTjZI372
pCZrXYiMII6QRqQ3IEqSmNO3n4FeCiqH/lWXc4yl/gRX/xmHlM4raJT8FxqFpd1A
xiKv6dlbcmscUZQbrYmFNTnGPYhlXWFEy7O766e/zMGVcgXHf7cZErEP3u+1KHIJ
7KXpp+2JO4kgC5tWLpSqQXoBE1r36r8TIsvPdxmQUqXbYUscjGO1QO++0VbJtvGk
BudYs2FcNtjNJnfB7mrTDuZDVyOlMSmwhvTjVVIqdjAIHhNXeJUQ3jt75QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc9mVn7qa2u8n5j5cnfWkEGpZRBMB8GA1UdIwQY
MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt
ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw
LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV6VicpF
VnwkUv7ISEAVhLyQeoedmjeqwgZsFcL+7odS1LqmM0KfUijhVoAuaOR+Wxi6gw73
AXDiaPZ7/6IKYKClF4caEpFTT8geCxXwBYgvRYkmyiUzZhelUU3DHq7oJcnu9dRn
VCIGyqWFSGfOVMCA5WYKfkzUAkuROF3beU50rzyg/0wPSsYq5UZ7WuwbRyA5fBmV
hhVjFru63Rt/+6S5HeWtPOkG4ncEfqNfwxhA6PT486YFVLKzO5WRLz6CfTJgreHe
l45yLK3NHPqwro6kzuMQACJn3AI8FdTGSkthoJtyQlL34TEOB+L9ZdKIbyuwHeGZ
OrLgYYYwbPzQIg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:58 2024 by rpki-client on console-fra.rpki-client.org