Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
File:                     7MhALy-qswSHn_cSz8v1rlK2aZw.mft (raw, json)
Hash identifier:          OaHVyEBsxegj2GPv+f5Ck3YbDfT5wBm3HpR3G7Yegmo=
Subject key identifier:   9C:E6:C5:FC:66:E7:62:41:7A:7D:6E:46:B9:86:D7:3F:4E:4F:69:EE
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Certificate issuer:       /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial:       01936A7DAE77ACBB92834D941FD49910977D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 22:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:41 +0000
Files and hashes:         1: 7MhALy-qswSHn_cSz8v1rlK2aZw.crl (hash: z7z/SkZ6BAiFB7OW+hEOjXrA21p/da9ft0aFiOxcyBQ=)
                          2: w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa (hash: 8KQZb7GYsVixIwNbDFxseW3bdy0fX82eHSBnZCQDuV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:ae:77:ac:bb:92:83:4d:94:1f:d4:99:10:97:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
        Validity
            Not Before: Nov 26 22:00:41 2024 GMT
            Not After : Nov 27 22:00:41 2024 GMT
        Subject: CN=9ce6c5fc66e762417a7d6e46b986d73f4e4f69ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:25:86:40:cf:f6:04:7b:d5:b4:e0:19:99:
                    9a:eb:12:00:34:c2:59:40:ee:8d:32:d2:4a:42:6b:
                    28:b0:28:52:7f:aa:35:96:e9:1a:6c:eb:29:14:df:
                    e1:f9:dd:bd:36:d3:39:a5:5e:08:22:d5:0b:47:ad:
                    7a:9f:c9:3d:e3:fe:a6:3a:a0:9f:c3:48:19:3d:6b:
                    c6:2f:28:01:57:96:8c:69:9a:06:63:61:ce:c5:22:
                    34:d5:54:4d:f4:fd:47:56:d3:77:5a:16:9f:96:d0:
                    b4:28:be:f1:d0:12:95:53:f0:0a:3d:a0:93:c9:c0:
                    78:b0:fa:6e:5a:81:30:1a:41:c7:a8:91:83:c4:ac:
                    f9:d7:49:a0:1e:12:23:fa:bc:cf:ae:c9:d6:59:bd:
                    c8:49:86:53:91:d0:7a:ba:48:ea:be:b2:a1:c1:4a:
                    36:ee:8d:df:cd:43:8f:13:99:05:c5:75:32:87:6f:
                    e7:1d:fa:79:95:95:3f:10:f6:9a:af:cc:0f:0f:b1:
                    86:92:d8:1c:44:91:04:c6:40:50:17:18:a1:ed:9f:
                    b2:10:fe:ce:3f:45:ec:cd:df:eb:f4:d5:9d:ab:7b:
                    3e:30:25:13:41:0b:cb:a3:2f:7f:f5:8d:3c:49:3f:
                    02:0e:9d:7e:69:92:db:b4:4b:4f:95:c4:ad:89:f2:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E6:C5:FC:66:E7:62:41:7A:7D:6E:46:B9:86:D7:3F:4E:4F:69:EE
            X509v3 Authority Key Identifier:
                keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:74:8a:13:4c:a5:cd:27:d0:c5:7e:0b:00:4f:6e:48:72:
         ac:18:86:5c:1d:80:00:ec:b1:89:c4:39:ac:14:c2:16:39:e6:
         09:7f:4e:81:85:c6:ba:e3:20:35:dc:0b:6f:e1:26:30:44:14:
         fb:45:a5:48:86:25:f8:65:44:e4:3c:96:ac:da:cf:1b:c6:e0:
         58:79:f5:3d:41:d2:72:1d:8e:83:4c:2f:93:3e:69:94:85:5e:
         5c:c2:eb:50:7b:d1:19:17:5d:ad:d3:72:1a:e3:80:92:7b:8e:
         27:9a:8b:70:be:28:f0:ca:10:8f:d0:59:35:ab:54:90:01:a2:
         57:59:f6:a5:e3:fd:0f:5b:b4:c2:fa:b8:61:05:86:b1:55:20:
         1a:00:b2:a7:bd:e8:aa:ae:5f:e4:ca:6a:bf:1c:ba:b7:01:08:
         56:fa:6a:b5:58:aa:c1:49:d0:eb:a2:14:0f:46:61:0b:3f:03:
         47:d5:4e:23:bc:ba:60:3c:fe:60:e3:49:60:fa:4d:43:87:36:
         46:1e:13:f6:f4:2e:12:9b:65:5b:7e:ec:e1:a1:e6:69:f6:a5:
         d1:a3:90:53:f0:0b:26:db:75:86:6b:6c:13:43:6b:ad:fd:a7:
         58:60:01:5f:f9:1b:48:f0:9a:b5:0d:6d:b2:cf:01:94:5f:92:
         7b:dd:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:04:04 2024 by rpki-client on console-fra.rpki-client.org