Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          wPtVIs0BbpfgOER8Zfm/w5H7XdrH2ryvKrYQD0bmbfM=
Subject key identifier:   A3:AF:0D:6A:7A:C8:FF:84:46:CA:E2:74:EA:48:88:6E:61:99:7B:2D
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       018F90B92CB548AD2D6DEF87CD3061A8859B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          11BA
Signing time:             Sun 19 May 2024 12:00:05 +0000
Manifest this update:     Sun 19 May 2024 12:00:05 +0000
Manifest next update:     Mon 20 May 2024 12:00:05 +0000
Files and hashes:         1: 1pifBgAI9K4y1isrFQGusq0kpi8.roa (hash: +5BFO38ldTKc0my5rUtjTluFp4yr8blPCBCxl3FbLFY=)
                          2: 6WmXeuQKrPGkhDE4qPfCvkGonek.roa (hash: hPS82uf2lOQYKYL365Uk1hgjktO8iLw3s5pYOUy9kgA=)
                          3: 9ut8u_rYJ-GVgefvLk_VPyEcamQ.roa (hash: L4Y3x1kKHZSYwqR/BtbLrseHt/9bQEU2CI5XE1PoJrg=)
                          4: DJ_ZdAnHeIni61AbSNmxggxLFyk.roa (hash: EWE0aOsFD+vC/VkFxp+GV6RtJ3OBtzrIBWmAfMw5dM8=)
                          5: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: qejU2jTBYC4lo4KbveDmeqbfKNx7NwmSmG8rLYIjpUU=)
                          6: EgjAv4-0d5sYVyLqoZrqY9fONOg.roa (hash: yy+gocPuw8u9GXNZoKzuuB1G1/9BQaOenGkFeljtdFk=)
                          7: EhX1hPDzJYnH9DoG2wmKa06SULU.roa (hash: /rdvF4NzWW9XJvcM7kiH8OMJ8+UDbzP2g52qpC5yIJg=)
                          8: GVbai7hP0Vkd3cK0y4gQMrWAMjc.roa (hash: gnQu2hm/lBN1iMRRP/oHXFXpT3CdfPULu/YBQBJgHio=)
                          9: Jtjp9Pjw9bDhqx_KXCVPgzzvz-w.roa (hash: bFbB/AAE7jp+6XxtVtvcQnpK68zgeHRquWJuVRovXQU=)
                          10: VNt3XbpCqd2PzdJAS7T-_RLuypY.roa (hash: zL0RXX724mjJJROiHsVbJbw43kd35eRlMOUEoohTF3Q=)
                          11: dEfV0_nSIVUQyPjfENcybYSbIOY.roa (hash: 5ucnEzlLrG2/lSr9RF6fnexNLq3EQRoeCF43LnRjmT0=)
                          12: pRvq7iEPHp2hD3RaQhWtFhnp-RE.roa (hash: PO2xvfNt0TJxYLhwQBnRB5Lku2hUOFe5vmXW1gdNIIE=)
                          13: qEXGY-jaqd3dTzf4pyyiJ2LXY-o.roa (hash: BUhu3JLgUPjG7TVVQe6yZDe/h6+134hEuARe1OWQ6q0=)
                          14: qJ6WysllYVLPnrlfLVZ01u8n2BY.roa (hash: bvDs+Su0TF6vByOWKz1ztpBJ/3teRzsXLI4qT/0OcOA=)
                          15: tHVUApeqKwSn2ZYG3gd2WBK2C_Y.roa (hash: 7CH6eRlHBpSIhsNTO/nD+NmzwnuywYJjpuOfHSSMXVU=)
                          16: y78aXxmWAjVwZU66dZwKeK5p8fA.roa (hash: pzN7ebygW+8/Ppklp6WoTmcinhYqYxNsH+e5w8fd0xs=)
                          17: z1oyfJ-FfqA9-g9GdLXjhgBnRbM.roa (hash: 2LuBMOLGdtab6FPhJbtpfR2uzoEXTmQTfGRS8FBHa9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:b9:2c:b5:48:ad:2d:6d:ef:87:cd:30:61:a8:85:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: May 19 12:00:05 2024 GMT
            Not After : May 20 12:00:05 2024 GMT
        Subject: CN=a3af0d6a7ac8ff8446cae274ea48886e61997b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:f9:15:f1:5f:d4:f4:a3:ab:80:23:3e:46:
                    3a:bc:ec:87:02:07:9d:8c:ae:f8:61:ce:43:5a:19:
                    b8:59:4d:c8:c7:bf:7b:33:4a:8b:42:3f:87:8d:b6:
                    5b:f8:ae:a8:d0:c6:fb:66:e3:14:8e:5b:67:fe:a2:
                    7a:de:54:7d:7c:00:1a:a7:31:61:68:0e:61:e6:3e:
                    1d:13:bb:f2:b1:17:19:8a:5d:4c:35:45:5e:08:a6:
                    33:1c:e2:46:17:83:60:c0:8e:9a:37:f6:1f:74:7b:
                    41:de:d8:96:7c:87:01:eb:e4:05:63:5e:48:b6:d2:
                    48:d2:cc:46:6d:4c:81:c9:db:c6:3c:51:de:1e:5a:
                    1d:91:60:2b:39:f0:72:2f:d7:5f:ef:26:b5:c8:ae:
                    5a:96:75:78:28:0c:26:41:7f:39:e2:3b:98:54:cb:
                    e4:c3:59:34:41:09:34:eb:e7:ad:6c:0d:59:2b:c8:
                    ee:0b:fb:13:5f:ff:e2:29:4f:26:cf:e7:b6:7a:31:
                    a8:57:85:04:88:ed:ed:1e:54:fa:80:8a:83:42:eb:
                    5a:db:a7:e1:91:71:82:d3:da:b1:76:83:a1:5d:fc:
                    82:64:16:b7:af:54:29:82:4f:7f:b5:36:fa:07:44:
                    fa:4d:b2:33:21:52:c8:24:e3:21:e9:19:5f:71:3d:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:0D:6A:7A:C8:FF:84:46:CA:E2:74:EA:48:88:6E:61:99:7B:2D
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:95:84:5c:52:01:97:39:77:e4:87:9f:dd:d4:81:42:24:
         b8:00:5d:d6:3e:63:52:70:ac:c8:e2:a2:dc:70:5a:c5:8b:09:
         ab:1e:73:6a:b5:76:b4:28:a8:8b:99:e5:cb:fd:8c:2e:72:71:
         9a:68:af:70:33:7d:29:b1:8f:3a:5a:50:54:29:39:36:ae:9f:
         dc:d5:25:f7:a4:f3:90:10:56:8d:13:4c:78:a0:32:12:ec:b1:
         6d:2d:a5:7f:e2:e3:78:26:73:e7:e0:7e:83:59:0a:cf:57:d8:
         70:02:d6:54:55:4f:ae:ff:3a:fd:75:4c:36:cb:6d:69:5a:82:
         cf:83:5e:da:20:25:98:3d:17:ec:5f:01:0b:e0:86:8c:43:a3:
         50:62:c4:7c:aa:fb:ed:cb:81:9e:d0:01:7e:4a:cc:b3:56:da:
         48:fd:16:58:e8:e4:da:42:b0:59:a9:af:8c:55:a4:4d:00:ba:
         a6:4b:66:f6:8d:ae:f7:76:b4:34:98:e3:72:25:0a:f2:e6:e9:
         6f:cc:e3:9b:95:27:62:44:8b:6e:72:7f:15:3f:0d:b6:b4:80:
         6f:fc:57:11:68:a7:18:c1:4a:38:f4:b7:ce:e6:9f:e7:52:9f:
         4d:42:2a:37:7f:82:cb:12:86:2c:d4:6a:cc:a1:29:b7:07:55:
         55:90:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:43:28 2024 by rpki-client on console-ams.rpki-client.org