Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          dDidNm41sOjYmuK0GxB484sx9AQXDrwTkAE7+mfaglw=
Subject key identifier:   9B:87:17:94:90:77:FC:7F:FD:98:57:9F:2C:16:F0:CD:BC:16:F3:50
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       01903D76258F52BD11A68B067A99DE63FB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          0103
Signing time:             Sat 22 Jun 2024 01:01:11 +0000
Manifest this update:     Sat 22 Jun 2024 01:01:11 +0000
Manifest next update:     Sun 23 Jun 2024 01:01:11 +0000
Files and hashes:         1: 1-7s8yRsWdpcNYRcC6pNWouKZo_s.roa (hash: cKxPXK76vSWT8kc54pFn0Xp8YyVkwsVFfQi9TChBGyc=)
                          2: 1vtsNBXxjHxuFB986u-a-Qai2xk.roa (hash: VhS2AmG5HNy9rj6U9NWORkZQc7plpX64k1TFzVsyBX0=)
                          3: R76eFsK5xszjjxNUqOuPKz-X9vA.roa (hash: +imVCBnw6hAptaztnb4qSKXM66j8aFgpKX/o5vCBbO4=)
                          4: TqZcftukadCZ12qs19wmP03-xes.crl (hash: +jLClQ6E7mRm7swKBZh3y4HD8rNLrCz01USNGo+lHbQ=)
                          5: sevC8do58Ak7ZpfSev00ohlQsCw.roa (hash: RIP/Kn2Nw+4bCLSCat6k83lkJst1obL4IJb40l8npXg=)
                          6: ybluWzRNWJWVkM4LdMhN2qbYNiA.roa (hash: 5VhivqUvJ4H/Xx3dusqAO6SABn9AUoBB/dmwOD8WIII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:76:25:8f:52:bd:11:a6:8b:06:7a:99:de:63:fb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Jun 22 01:01:11 2024 GMT
            Not After : Jun 23 01:01:11 2024 GMT
        Subject: CN=9b8717949077fc7ffd98579f2c16f0cdbc16f350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:6d:66:a2:3e:56:3d:c3:09:71:bf:b5:f9:
                    f4:7a:e4:2b:c9:af:83:b2:6b:d5:a5:49:4d:e9:61:
                    e3:de:3a:b2:26:fd:69:74:d5:f7:72:35:f7:fd:43:
                    46:ef:d9:88:f0:28:1c:10:4a:16:72:0a:df:20:b8:
                    01:d6:02:c8:30:3d:e4:b1:60:9c:67:46:64:19:26:
                    f8:27:eb:08:d8:97:04:96:8e:cd:88:23:01:19:39:
                    fa:9b:84:39:a2:cf:58:19:25:fb:a6:69:8e:25:4b:
                    fd:b7:c2:2b:86:35:b0:d2:cf:d6:85:3a:2f:f2:17:
                    50:cc:55:52:96:1e:a8:66:63:62:18:94:f6:d7:e5:
                    4c:28:fb:03:a6:42:cd:c4:94:84:76:f0:3e:eb:02:
                    8e:11:55:57:74:19:ba:1a:48:45:d0:83:4f:8c:8e:
                    c9:c3:e6:28:d6:f8:78:9d:8f:ea:3c:4b:25:ab:1e:
                    6d:72:d6:2f:3a:3f:c3:90:a9:12:96:ed:7d:76:58:
                    f1:a5:a3:4d:a4:80:42:1a:e3:0a:76:52:e3:b4:eb:
                    b4:bd:a8:9f:a2:e8:20:34:c7:42:7d:ac:32:60:8d:
                    4e:0a:22:fd:3f:5d:ba:eb:c1:15:3c:6e:d4:2f:35:
                    d2:80:35:e3:73:6d:a7:79:7d:a3:f9:c6:ca:c6:95:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:87:17:94:90:77:FC:7F:FD:98:57:9F:2C:16:F0:CD:BC:16:F3:50
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:35:50:27:0e:e1:d2:d3:bd:c7:d4:95:78:9b:f5:84:56:78:
         99:5f:80:32:6a:05:d0:2e:a6:d1:56:ff:e2:50:91:13:01:7e:
         c1:51:28:84:91:ba:cb:92:e3:87:b8:4c:00:db:5e:e6:50:f2:
         73:f6:a5:bc:f8:c6:2c:4f:96:bd:1b:b1:36:1b:e9:2d:a7:eb:
         49:d9:78:e3:ed:f2:6b:a6:b3:ad:02:c5:d8:d7:5d:f3:b1:d8:
         f5:43:14:c3:70:0e:2f:20:1c:69:17:2a:2f:4b:06:6d:f8:93:
         de:f3:1d:eb:1e:25:50:c6:27:b7:9b:5f:5c:d5:15:70:9b:a5:
         12:50:74:b0:02:24:2b:4f:5b:b2:bf:5f:c4:a7:d3:16:a5:7f:
         c8:53:6b:74:e2:a1:a3:1e:0a:d5:ce:bd:13:01:23:76:12:a7:
         2e:49:f8:56:82:ab:64:f2:9a:5a:ea:0c:b6:c6:6c:47:f2:04:
         3c:0e:89:38:e1:e6:ba:42:59:58:05:c4:b1:23:a2:49:cc:fe:
         bf:fd:a1:bc:ce:3f:2d:0b:66:bc:cc:5a:32:63:02:f7:72:39:
         92:5e:80:09:d5:c1:aa:79:34:e8:59:be:e0:11:62:b1:7b:a4:
         e3:b7:5f:cc:22:c8:9f:d5:18:b0:b9:34:7a:90:27:29:cd:0c:
         97:93:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:32:48 2024 by rpki-client on console-ams.rpki-client.org