Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
File:                     KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft (raw, json)
Hash identifier:          HyqaxQST4kSKQcUJa+IftASqL1czKNDwDVenRYGgtO0=
Subject key identifier:   16:5E:A1:C7:3F:C5:44:63:8E:CE:08:B0:C4:E7:DE:BC:FC:07:48:0C
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       018F749DA4F3EB0D656B182B620605944566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
Manifest number:          0A3C
Signing time:             Tue 14 May 2024 01:00:39 +0000
Manifest this update:     Tue 14 May 2024 01:00:39 +0000
Manifest next update:     Wed 15 May 2024 01:00:39 +0000
Files and hashes:         1: 3LJI2FDmVfdwGoDGBwKrTAsp7Pc.roa (hash: LeqT1fF7zMBCRHVESMRL8Gon1R2oOgyVQR2oI+kqH0Q=)
                          2: 4e09IfPxGiD8OaD0Bi-JimO9Vmw.roa (hash: nhWtqAbfTzL5ITb4Kq2rOcpzeklXuQ+lOoBZPRUbNxw=)
                          3: 7vDLRqRLvfwmJCEEzYe999RSvP4.roa (hash: eLQUhVDWYWHpX87CoXHi/UaRow+9tvZBDLbNlwX1HBM=)
                          4: BglJepmkLUiiQ0LheXbXjPiCvLg.roa (hash: xXcB+y9OHnftpL2fSRIkHTOlm6FZAMcau0ffKR5N1D4=)
                          5: HBLcsyu0jJir52V3Mrk2qgpXI_c.roa (hash: l2wV2l4200L73DVOplI/oUf2wh0Ewmc0mCnfbR2VpCI=)
                          6: HkTGLoevfP9PICaEDJJqeGBJxus.roa (hash: wMNQVOF/4pgZ0mYhIVRe116E3LhVQZjCuQjLiRz3Af4=)
                          7: KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl (hash: pAbVjwH2kVP6WYkOnLHLkuGBxj8X2pzNYj93Fo8Uadw=)
                          8: Odli5zTC_KuE1rTLoF8ARl3tReg.roa (hash: 3R1/Z+Pgi440YvwOC9FZMd3yFerfbl6vV92zeV4+6Dg=)
                          9: PAnuTo-tVI7z2PoXjso0YIt2vYs.roa (hash: ekTqrfV5l1LgMHDykFepdp0SHZGe49qvjft5DNsDQsw=)
                          10: QCIHUGVE3kTIFoEuC8v1m31sM9g.roa (hash: ppSGxtp9pbTOMMKdgb4eaIvDsRApADBFLQT39xhSeDw=)
                          11: UCbZ2BRTaJpnOiuRzEAijC6ArKw.roa (hash: DoxisFAhfywqa8ql9wqOcvy5fus7KRr/nFedHDEZjwk=)
                          12: ZuMlAOVSBDR2Uu8z8KE1yEZVJBU.roa (hash: wrTxHWNx3Xe9oW5fAkd41u9LJypmDbzbc9lI+VOOzGs=)
                          13: _xU_jJPEg-bf6TNf59-mLO8MJOM.roa (hash: YBvGgwzMR8rVP4+OiZtDGfT3Ce1gs5ObB5o8wDvUqJY=)
                          14: acbohE8I0I4NcDGX0xBlpKt6Hwk.roa (hash: SpcEPz9wK/HRn2Y8rsgw6sbcW9wRs5G7qXN3dITXVn8=)
                          15: e5abxwjYB0yzGX0Op3lz8AWUIGc.roa (hash: dmSTeuNMit7YOjcVWRQEX8xLp5NkRS3dCIoxsLTtewc=)
                          16: iiIkNIjU4qEAPELIlnWuy8Deuho.roa (hash: ai3VDK4npOcRyVXWPJCkImr7733pUNdC3Ukucz6Rsp8=)
                          17: mIO_svSyQadhNStbS0iGLMsUXic.roa (hash: DUKcGqbf9gPLgGDJQf2nrcg8cjvddRZWYb8hvErhcMk=)
                          18: nAeaDlbX-l2wZY9J377oSgCc2IE.roa (hash: Q7iMGAeSVidKzbHV0uLRJayl/NIXOjCzaQrios2VufA=)
                          19: rEpFn3YgOLMiBLhKRoid9MMSRhw.roa (hash: E7RAuqkf/HIcdLYFuXonJ7CCG7rkJvbbc3aWJ3PvFw4=)
                          20: s9vn8VnHEFGsXUc8LyMP92tXBTo.roa (hash: sTxGU54F/6jV4K8mp1ItrmVWkwRENAIfJYvahoOHp2M=)
                          21: xPIGMiV2okLp1GMGo2CjJaK8aHE.roa (hash: pmf/hAJy/HOUC2rn2+666TF2/HDevcnUllLIluZ52Pc=)
                          22: xxtKhdFSQ7arXoaO6JrEtumcw8Q.roa (hash: TKJ+YH/c8LH+h/OuVUHf7TMyfZImL40fcZXQ7/8vqhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:74:9d:a4:f3:eb:0d:65:6b:18:2b:62:06:05:94:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: May 14 01:00:39 2024 GMT
            Not After : May 15 01:00:39 2024 GMT
        Subject: CN=165ea1c73fc544638ece08b0c4e7debcfc07480c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:40:7b:4a:7b:31:45:c1:3e:3b:1d:f2:94:
                    ea:b3:04:bc:0e:43:f0:4d:f0:d0:ce:82:d2:c9:f0:
                    41:8a:31:c1:d8:84:9f:f4:46:d3:cc:c9:2f:cd:55:
                    4b:5f:8d:84:e8:d2:8f:cc:ac:40:cf:25:01:33:6b:
                    54:5e:70:58:aa:2f:a8:7f:7b:4c:94:d1:55:54:7d:
                    90:2d:51:83:86:bf:2b:e1:e5:ad:1a:6c:e7:fe:0b:
                    ed:25:ec:e9:de:eb:6d:77:0f:d5:1c:64:f0:4d:77:
                    ae:3c:55:88:ae:b8:af:bd:28:ce:55:68:c2:51:e4:
                    85:14:9e:f1:82:e5:5b:0e:bc:42:14:14:3b:19:17:
                    22:a6:84:f2:79:a4:71:16:51:cf:89:b1:eb:e5:c6:
                    8b:23:9f:08:e0:a3:81:f5:f1:ee:ea:72:e2:57:28:
                    a3:00:a8:1c:48:15:14:20:60:12:22:21:37:0d:77:
                    43:a4:6d:a2:d5:2a:cd:26:63:b1:1f:24:c8:5a:98:
                    7c:1b:41:ee:d4:f3:89:ad:ad:38:be:0f:26:f3:52:
                    88:f5:ed:99:90:2c:d3:e4:15:93:2c:eb:9e:8d:e6:
                    ed:c4:6e:d4:6b:eb:a1:16:06:59:a8:45:74:1f:aa:
                    8e:b5:22:12:0a:31:f5:c6:6b:1f:f8:05:07:fc:2d:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5E:A1:C7:3F:C5:44:63:8E:CE:08:B0:C4:E7:DE:BC:FC:07:48:0C
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:ff:fe:8a:3a:19:d7:ac:24:a5:43:be:ba:23:1f:c9:7a:
         1c:28:b4:48:c8:94:67:15:81:30:ff:aa:81:7b:45:14:f4:53:
         59:06:fa:bc:22:16:f4:5f:85:d7:fa:a6:42:78:2e:41:3a:c6:
         57:e5:b6:af:7d:33:2c:51:89:f9:a2:47:c6:52:f7:b0:8b:b7:
         b0:78:9a:3e:43:4f:6a:3c:5b:00:c7:b4:40:9b:e6:f4:27:aa:
         ac:d7:f2:a8:02:5c:bd:8c:80:17:74:3f:a3:12:f9:22:10:84:
         1c:88:2c:11:2b:f7:e9:67:88:46:49:09:9c:2a:39:13:b3:59:
         d8:44:df:08:0c:3c:6f:7b:d7:06:1c:1b:e6:09:aa:82:4d:d7:
         00:85:28:ce:41:7e:48:26:f9:3e:f7:8b:17:98:cc:f7:78:43:
         40:23:68:7d:00:fb:79:66:34:2b:d6:c8:41:ee:ab:33:8d:30:
         39:3f:e3:b0:25:71:f2:a6:fc:8b:bc:33:8e:75:77:39:12:7a:
         a8:3e:50:e2:6e:12:e7:97:a4:46:3c:46:ea:bb:e2:85:62:2e:
         87:6d:b6:ce:67:da:7b:21:f2:f2:fd:1b:8c:c0:55:72:d0:f2:
         b2:b2:fb:fe:94:10:c0:64:91:86:96:dd:27:67:a4:0a:c7:13:
         07:f6:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 05:54:03 2024 by rpki-client on console-ams.rpki-client.org