Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          PPcwNK9f2U5uLCqJRIEiwJwapqSkR5q4Q3/pbhBeXlc=
Subject key identifier:   BE:49:9A:40:4F:44:D2:BE:3E:68:93:0F:A0:76:9B:45:92:F3:E4:C2
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       01901DECA1A73D49B9AFD77DD9445B25DD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:45 +0000
Files and hashes:         1: GhAaP9Hz0wEnatGQlwUhidBvfq8.roa (hash: bGNqMy/DdU/zJm0fjcmUHvc0A1hVrAPEVCXM9INVlBw=)
                          2: ZvFN6M4GM3rHcke7EyhP7oYyxX0.roa (hash: 2RjbLY8LhSQ3Evm/8VOdlMtGPZj54uoPjsV9kvsRDfs=)
                          3: vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa (hash: hAYdwCz621Msz/2JvhfTl8iiiwllmkHBofYph+W+rHQ=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: GijOnm+KUhWiuU6Dn7clXtykOYnvrVdK0iPG68i1JLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:a1:a7:3d:49:b9:af:d7:7d:d9:44:5b:25:dd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Jun 15 22:02:45 2024 GMT
            Not After : Jun 16 22:02:45 2024 GMT
        Subject: CN=be499a404f44d2be3e68930fa0769b4592f3e4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:16:68:ce:a6:6d:cd:ed:4b:3b:04:56:63:96:
                    47:80:2a:a2:8e:13:d0:dc:76:7d:f2:02:a8:1e:a9:
                    e4:d4:0b:91:4d:ef:92:77:9e:90:15:f9:9b:55:b2:
                    74:c3:d9:d5:27:e8:ab:b7:34:ab:75:d6:68:ca:a6:
                    28:b3:99:22:65:ce:f7:fc:62:05:75:e4:a0:d7:07:
                    c9:06:72:99:e4:64:9f:8a:ca:ef:9a:13:af:cc:99:
                    e1:46:d9:f9:cd:29:0c:44:66:20:72:a2:2b:1d:55:
                    ed:7f:cc:13:93:fc:b7:40:c7:9e:f5:27:55:ca:17:
                    1a:04:56:74:7c:85:5e:fd:e2:5b:37:a4:8a:16:04:
                    a0:84:38:35:ed:ad:a1:f9:03:10:fb:f0:95:6e:b4:
                    0b:6c:39:10:3d:a3:08:38:6c:4b:6c:8d:5b:a0:ac:
                    55:16:f3:e4:fb:67:6e:a0:16:e9:26:14:88:4d:73:
                    26:67:3c:bc:a2:41:e1:8f:29:d8:56:2d:0f:5e:96:
                    45:20:59:ed:4e:d0:67:84:88:38:82:20:32:53:26:
                    26:91:71:fc:c3:41:fe:ab:d0:92:05:f3:51:f0:20:
                    9f:96:4d:6d:73:6a:04:1c:c4:c6:89:ee:fe:02:e3:
                    1d:0a:7b:d4:73:09:4f:4e:95:8c:39:88:cd:f7:99:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:49:9A:40:4F:44:D2:BE:3E:68:93:0F:A0:76:9B:45:92:F3:E4:C2
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b9:1b:da:e1:24:5c:8f:ba:0b:e8:71:91:65:67:ae:0b:53:
         b0:1c:51:2f:44:ac:e5:cd:0c:8b:ce:34:d6:1c:28:bc:9d:15:
         b3:4c:c4:79:9c:8f:54:d7:4d:e1:70:a4:68:a0:d5:43:d3:59:
         15:38:3e:32:1b:8d:96:0a:fd:06:0f:fb:79:96:cb:da:02:c3:
         65:f8:6b:58:2a:f9:f1:c5:7d:cd:d6:60:98:39:c3:51:75:64:
         6a:db:86:97:d9:86:ad:cd:0f:92:ed:2f:83:61:92:3b:7f:51:
         18:1c:40:e7:06:d8:3e:16:55:de:be:37:60:48:b5:cf:f1:67:
         67:a6:73:8e:50:ef:30:f2:fc:94:98:cc:4e:33:c8:b4:c3:24:
         b8:a9:6d:53:9b:90:e9:73:00:75:ce:8e:42:29:2b:92:89:55:
         b7:10:11:94:24:21:58:a5:a3:dc:6f:7f:ed:ca:65:c1:2a:21:
         ce:0c:96:fa:c0:3b:b0:cf:0f:f8:a6:7b:87:43:7f:50:a3:9c:
         f7:06:0d:88:5c:36:4f:b3:18:a5:f1:3c:0f:fd:e6:96:e7:fe:
         75:75:9c:37:47:3e:cd:3b:31:0c:44:f4:41:26:b7:3d:d4:09:
         90:a2:36:65:02:1c:58:83:81:88:29:69:50:fd:b4:77:fd:c7:
         b1:a9:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:54 2024 by rpki-client on console-ams.rpki-client.org