Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File:                     10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier:          K7cO16i1fNjwKnepJvkKQxN9NgykQj4PswrTLQF0/bY=
Subject key identifier:   E2:3A:5A:29:AB:AC:12:E8:F5:D7:3D:AA:5E:6B:91:B4:C9:58:23:0A
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       018F8543CFE7B14ABE7F8F78B5A0E5E70DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number:          1210
Signing time:             Fri 17 May 2024 06:36:04 +0000
Manifest this update:     Fri 17 May 2024 06:36:04 +0000
Manifest next update:     Sat 18 May 2024 06:36:04 +0000
Files and hashes:         1: 0oTvf333sv_LJiMuhSSS45fLU2I.roa (hash: h6G+O1nfxnawslafBSBmfXp7aVJV6w1EZs11yVyFgQI=)
                          2: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: m21+WGuwo0K+o3hgQ75PRqdKKrRhhVeaIiaaB84XMzs=)
                          3: 5hRvKcpJwRYwvIbrj1EUIkpwLrI.roa (hash: 1PEeYcjbA3a+GP9ZNTgJqccf4eFnzqrXaScoUHhH990=)
                          4: Dg9dK1I2teGN9NeVFT1rbi3xUfY.roa (hash: oeObaLiJaprR4g3jwWges975EtujsNIw7eoDmeSEDIw=)
                          5: EGpaHkSeLhg62EjtnXsOAK2sAbQ.roa (hash: Qt2x0tfxbCf8Jx4rx8VsEFRHJLW7m9KA3LiNGtKW3m8=)
                          6: N7XiCQIa7Pl98LF2adYPhTGJLUA.roa (hash: CHT6Xa8e0L6/MiHUcIupWBIgjBfs8Y33nslWb0B761U=)
                          7: NHW2TGAfPMdJBjA2RcGdkuMKK34.roa (hash: 7W1qeHVvEcJJkiNvB1YND1vLIbRmnQdcvSZbhYfJU2U=)
                          8: NofCREMjdJlWGvnKPIohA3mKdAw.roa (hash: H5A3s5oR0Io8p0REnzaOgDm7DIFuzei5Cl5y03WaYgE=)
                          9: O1y9aDZsbl1PgNepz71WGtksSyI.roa (hash: HPqlf66cQdFKSuUmJ+U6+YDOP6jjNpAjLsB8GoesdGo=)
                          10: QhUBJ9DU2EmnOcO2z5FiHs70pFM.roa (hash: rD7JHu8zI2QRMow6yoRVpk6NmnrrqPgh2r6Ot78mVDg=)
                          11: RiQUqM36UQZBxPSwmp1dY6y8Qms.roa (hash: y81tIEeJLPZ8Sgi2jFSuaeVIi9lJ+xwqjl2BJWf+hOY=)
                          12: Y_3j8OgacaFwnC6DuH3gwHHY5g8.roa (hash: tiiG3POmoLrZZ73tle3X4Q0dskrsw9G+0c2ZIZAi7EU=)
                          13: cec0uXo8e4jo3UxCCfGWNyPyU_I.roa (hash: BeCwKvCHZHcbwPVClNoCQM1LiO/38iK5SBp3PngDSGc=)
                          14: dKyALph2FnmPNlp3SIirFMmQ9xs.roa (hash: mw5I8aFpRbCsYXqzUxmf2QDrrw+Vq5NaQwMWVftpKII=)
                          15: hMjqsaY7YI-PTS1hszIX34Cy1QM.roa (hash: qaQihvuGqh9csZ+9XFTy2gFkUFapg2aZ++Zl/bNHc/4=)
                          16: n3TmmWETd6610xi_yPmZrVn_u10.roa (hash: vFqnx/wE/fOT9dcc1195MakzcC3IWX2PMXrTHwg2qSA=)
                          17: ndUCogck7XEZaKLa4nwekrv257E.roa (hash: VIHU2bkuRvy7/tekqI3O64+XkxxIweCvEbUe16etUjg=)
                          18: qM6uCNsucSCB33ZQSQpT8OHxAiA.roa (hash: ssEoevGHPFk0B4ZbrriUDtDkaes7h6sl6p+lRYT6SGU=)
                          19: s-CvqNrabh3hh0-ycVQCRq80IVw.roa (hash: 1huhsro+kPLSVEOQN8q7R3qbFiXLNEpImHEWq1xRjB0=)
                          20: xzV5QzNg67zlCtWVOU-CdicjYT4.roa (hash: WgxchXpn9jN9lV9ZkKlabxzibG/aLmIyTsDTURGNfk8=)
                          21: zHaA5qiiv3GOVc8aio8MBZUwseM.roa (hash: 3c3SZzG5p606Eu0lSOcp8icKzogOv24gbha2bSCmlOI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 06:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:43:cf:e7:b1:4a:be:7f:8f:78:b5:a0:e5:e7:0d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: May 17 06:36:04 2024 GMT
            Not After : May 18 06:36:04 2024 GMT
        Subject: CN=e23a5a29abac12e8f5d73daa5e6b91b4c958230a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:aa:41:c1:f9:9d:6d:45:e6:fd:d1:24:5a:
                    de:65:7c:25:80:2e:91:93:03:81:8a:4e:cb:94:9a:
                    28:7a:06:2e:69:01:97:e1:32:f3:29:f2:fc:71:03:
                    55:1f:6f:03:e8:20:f2:b5:1e:f2:de:5c:5f:ce:c4:
                    0b:0b:60:6e:0d:74:4a:b9:55:92:9d:38:13:52:a5:
                    ec:e0:45:6f:73:6f:5d:80:f4:03:48:f5:0b:5a:d4:
                    28:7c:8d:18:a2:f2:15:77:ed:bb:3a:21:93:66:d7:
                    ad:50:8c:ef:14:81:d3:45:25:97:e8:57:34:d9:d4:
                    b2:c7:1b:8f:a5:e8:62:7b:ed:45:4d:68:8d:ab:60:
                    77:ea:59:53:19:73:da:32:ee:a2:e3:8f:62:89:3b:
                    34:65:01:2b:a2:89:e3:4f:0c:86:5a:42:51:81:a5:
                    5f:b8:f8:ed:3b:a5:f5:7f:67:d4:cb:81:e3:38:41:
                    9a:4e:d8:d6:c9:1f:a9:b1:89:03:b5:64:6b:74:97:
                    84:e0:37:7f:5d:bd:bf:a1:5f:ba:c0:19:08:5b:b7:
                    1f:49:0f:58:c7:cb:ee:07:db:c3:d6:83:ff:2d:e6:
                    a3:ef:88:d5:d1:80:40:0c:71:b1:86:40:3b:c3:76:
                    00:53:dd:f6:61:84:6d:75:09:de:52:e3:c6:61:27:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3A:5A:29:AB:AC:12:E8:F5:D7:3D:AA:5E:6B:91:B4:C9:58:23:0A
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:0c:a3:7d:8f:bf:9d:c0:ef:f9:b8:e9:dc:3c:9a:62:f0:
         41:a0:56:12:e8:4f:16:75:af:56:37:d0:df:de:7f:8c:0f:fa:
         fd:1d:8d:89:79:c0:b8:e5:a8:48:7d:21:5c:a4:67:52:1f:cf:
         49:3c:a0:50:d2:45:9e:54:27:5c:24:f9:4b:e9:15:c9:94:4d:
         3e:9d:78:88:fb:36:c3:37:76:3a:95:8a:45:47:05:42:7b:1d:
         e0:3f:88:07:1e:f9:c2:28:76:11:2a:2f:ea:59:ca:24:06:91:
         48:bd:e5:7f:8d:87:eb:da:85:04:07:ac:b9:22:46:59:a8:76:
         61:fc:cb:b8:29:88:23:71:82:bc:10:24:44:20:d0:fb:76:34:
         75:75:f5:11:4d:7a:e5:38:df:c1:d3:a1:20:13:fe:42:94:15:
         2a:f3:68:17:49:ca:fd:bc:f3:99:a4:32:61:91:13:da:bf:01:
         c2:b4:88:e9:c7:d2:8f:f8:9e:e6:c9:f2:48:f1:4d:c4:85:fd:
         83:80:af:df:51:3b:23:43:a5:60:a1:d3:e4:c1:d8:06:c4:c0:
         0d:d2:51:cb:94:be:e4:73:c3:94:b0:47:46:da:cc:0e:40:f8:
         1c:0d:ea:19:71:90:63:6b:03:06:75:5a:d3:27:70:c3:45:5d:
         4a:ed:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:13:52 2024 by rpki-client on console-ams.rpki-client.org