Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          6D53k11mr7M1grz17ZisuVk3S8J959L8G9kBMbDsY5M=
Subject key identifier:   7E:19:C3:18:E4:F3:74:60:AA:99:24:32:72:00:1F:9B:04:F8:3B:7E
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       0190411C2DC6D92943FB93C3CD6B98890882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          09C8
Signing time:             Sat 22 Jun 2024 18:01:24 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:24 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:24 +0000
Files and hashes:         1: 36DNFidq4QKds8boYhaEJHVKa6I.roa (hash: /iFXDpWKAqmTw3nNVieAW77OvIaF41sD9J8zNrHUjVM=)
                          2: BDBRhWFBlK9vcfr0QKXqP994RGM.roa (hash: 0Pybw8NS06uSqnwmcCLpDDhdeVKM+abA07WObm8VMqo=)
                          3: IBMTKga3vIUOvsY8HAQpuyucivc.roa (hash: N7Y2tUplFoJWf+i2Ye6i8a2Fj3yzy3ptfgZ/q9h8JIg=)
                          4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: akJhraJlE2KudrEyJq73sGXOcKTJWaSFOidYdmyc78M=)
                          5: taf8aJVUMV6mac07U8_6aKp1U8U.roa (hash: 4FT8jf6HBdyCQmEMSDx72ph3gFr+/vQwRw8yLiChx6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1c:2d:c6:d9:29:43:fb:93:c3:cd:6b:98:89:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Jun 22 18:01:24 2024 GMT
            Not After : Jun 23 18:01:24 2024 GMT
        Subject: CN=7e19c318e4f37460aa99243272001f9b04f83b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:97:04:e7:d4:73:7f:49:a7:e5:66:64:2e:
                    0f:7b:28:93:47:eb:c7:2d:fe:72:53:62:ce:5a:6e:
                    e8:db:32:49:ab:65:09:b9:cd:f1:99:fc:53:9c:7f:
                    d9:f8:98:4f:09:92:ea:c1:26:c1:7a:4c:89:68:77:
                    80:12:3a:7f:29:01:29:ba:f6:64:11:b2:e8:d0:a9:
                    41:2b:50:d1:4b:b1:74:00:33:30:ed:68:4d:be:a9:
                    8b:db:64:71:98:5a:39:75:8c:c7:aa:c2:ce:65:79:
                    f5:27:cf:f9:8c:f2:60:00:e0:bf:1d:28:42:59:04:
                    a4:11:d9:ff:9b:7f:fb:bf:1a:37:de:3b:37:9b:73:
                    63:85:39:ef:0e:07:85:df:e3:8f:9f:4a:eb:e9:7b:
                    31:03:01:72:86:19:3f:4f:41:a1:7f:c5:ba:b5:30:
                    c7:af:a9:f1:07:a4:e5:9e:c0:7c:a8:95:d4:0f:0c:
                    10:48:f3:ad:f9:07:f8:b9:20:49:1a:4f:a6:66:9d:
                    20:71:ae:23:24:9e:ce:4b:34:c1:40:44:8b:73:80:
                    f0:d4:53:59:a4:90:6b:c7:2b:da:39:21:ec:06:64:
                    62:0d:d9:4b:7e:0e:76:99:eb:f9:4c:68:94:83:3b:
                    26:98:96:66:7c:7f:4b:e7:5b:97:b3:af:f9:a9:fb:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:19:C3:18:E4:F3:74:60:AA:99:24:32:72:00:1F:9B:04:F8:3B:7E
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:99:98:30:3b:33:9c:8e:91:cc:b2:a2:e9:fc:55:5a:66:59:
         a1:ce:19:36:7b:98:a6:83:47:e6:7e:b6:38:1a:32:ac:3d:10:
         96:04:76:0f:44:b3:ff:16:e0:ab:68:32:36:d9:5c:89:17:fa:
         23:32:14:9e:61:1f:f1:c2:17:77:2a:88:e3:0b:d4:62:47:2a:
         d2:87:19:9b:44:f7:ec:06:37:e0:40:25:16:31:f9:62:09:dc:
         db:e4:91:fd:26:d4:aa:85:68:81:a5:0e:7c:bc:14:7d:60:4a:
         c4:84:d9:db:e7:1e:92:47:bd:51:00:75:b6:fc:62:bf:4c:ef:
         ac:46:7b:25:d2:af:bc:d0:fa:d3:dd:5b:24:05:b5:06:8e:65:
         38:52:da:98:9c:50:b0:75:97:2f:29:e3:f5:ca:a1:a4:34:46:
         92:ab:d5:51:10:28:f4:34:cd:39:99:c9:78:66:c7:b5:1e:21:
         54:d7:96:55:98:15:9a:df:f3:6c:43:c7:86:25:18:fd:d8:b6:
         f8:1d:05:39:8b:66:79:31:27:88:4a:af:d1:67:51:88:48:96:
         6b:88:f4:6c:f6:7d:f2:23:4a:62:63:54:0e:73:bf:6c:e8:41:
         5d:6a:2d:d2:bf:1c:3c:2e:5f:0d:e1:b8:bd:24:31:24:83:0d:
         0e:9b:1c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBHC3G2SlD+5PDzWuYiQiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjQwNjIyMTgwMTI0WhcNMjQwNjIzMTgwMTI0WjAzMTEwLwYDVQQD
Eyg3ZTE5YzMxOGU0ZjM3NDYwYWE5OTI0MzI3MjAwMWY5YjA0ZjgzYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswKXBOfUc39Jp+VmZC4PeyiTR+vH
Lf5yU2LOWm7o2zJJq2UJuc3xmfxTnH/Z+JhPCZLqwSbBekyJaHeAEjp/KQEpuvZk
EbLo0KlBK1DRS7F0ADMw7WhNvqmL22RxmFo5dYzHqsLOZXn1J8/5jPJgAOC/HShC
WQSkEdn/m3/7vxo33js3m3NjhTnvDgeF3+OPn0rr6XsxAwFyhhk/T0Ghf8W6tTDH
r6nxB6TlnsB8qJXUDwwQSPOt+Qf4uSBJGk+mZp0gca4jJJ7OSzTBQESLc4Dw1FNZ
pJBrxyvaOSHsBmRiDdlLfg52mev5TGiUgzsmmJZmfH9L51uXs6/5qfuQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4Zwxjk83RgqpkkMnIAH5sE+Dt+MB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZmYMDsz
nI6RzLKi6fxVWmZZoc4ZNnuYpoNH5n62OBoyrD0QlgR2D0Sz/xbgq2gyNtlciRf6
IzIUnmEf8cIXdyqI4wvUYkcq0ocZm0T37AY34EAlFjH5Ygnc2+SR/SbUqoVogaUO
fLwUfWBKxITZ2+cekke9UQB1tvxiv0zvrEZ7JdKvvND6091bJAW1Bo5lOFLamJxQ
sHWXLynj9cqhpDRGkqvVURAo9DTNOZnJeGbHtR4hVNeWVZgVmt/zbEPHhiUY/di2
+B0FOYtmeTEniEqv0WdRiEiWa4j0bPZ98iNKYmNUDnO/bOhBXWot0r8cPC5fDeG4
vSQxJIMNDpscVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:18 2024 by rpki-client on console-ams.rpki-client.org