Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File:                     tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier:          R8k9Xwd7IK+zVSGkc+UEnIqQB2tz87u0iQ0gkA99XV8=
Subject key identifier:   C8:FD:63:63:08:61:22:F9:78:32:5B:F5:0F:DE:AD:26:69:ED:58:ED
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer:       /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial:       01901D45E8FDE0EE58A7EDCCA9690360AD0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number:          11D2
Signing time:             Sat 15 Jun 2024 19:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:39 +0000
Files and hashes:         1: 1-D2mUY7h8ICxcsseIf0f2Z_oO4k.roa (hash: 8kDULxw9z3gXp/AD8a9Ag0dsti3Un/ZQcx/ea3XVp2o=)
                          2: 4ESnHDkMiH3VXGRcMNV45lvdzjg.roa (hash: rDXZb2CTO6v2yflTTZ1nHz2ARvrDpwcC2SH66LgceiE=)
                          3: 4vSY7pcoyniRcE3BWoDJLaST4-U.roa (hash: HCZT/bqiAdnxIIXJTkL3KadJYBbBM96tekJW+BuWlk0=)
                          4: JRto1SpfOuQj6CKvlY4uvGJlmII.roa (hash: hdeALEo8DdHiI5yTOpRIUivE+ZNA7VdIwMV1gQZxJP0=)
                          5: N2ZEPJT9roVbmu0wo-PPZa9Xuyc.roa (hash: qZQrpyn6aWSV4kQaR+O5PVRIYSKD899TM8gSvZMHSU4=)
                          6: QF5knuQFZ1MzmZtVJ1bogqbMSj8.roa (hash: E7j2A0fb63PUius9/NjwAnAHElJQjbTAwKyb/Xyqlb4=)
                          7: WyZgsc0Tc0CbMTj7VEelJJT0OzE.roa (hash: +8CECyDU8Lf2wiEDcrbQGLaT/eNSQMro+xNLHS4ZA6g=)
                          8: YvRh5nVaU7K5TXANQLzq2dzn0x4.roa (hash: /v2GM26UAgEo26LyzBlzUgLlrq+4Jdy/et1rP8m/Sl4=)
                          9: k9sacxqE5VMeV0DyL19Mgpzo8G4.roa (hash: VmEoBQ/fM26DB2eO+rQhBj5j8Dsb6aDwvg/4uQL5aYs=)
                          10: lEPdcc3TVtidvWs5KTQ69HbSR2A.roa (hash: /dFMBz17yqrJ0twDw6zw0iBof5mviWTvPR+JOuTK7yU=)
                          11: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: Jb8BuVn70QVygKpacP2Kr5GtzdtFUXMgoi65qhvjkWs=)
                          12: zDY6ASBaTsdg_bKTDY-K4nup-Ms.roa (hash: FrmnmQQ9K1mJbMIqaBLQrzFnV+W7WlUbG9WECYp7PJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:e8:fd:e0:ee:58:a7:ed:cc:a9:69:03:60:ad:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
        Validity
            Not Before: Jun 15 19:00:39 2024 GMT
            Not After : Jun 16 19:00:39 2024 GMT
        Subject: CN=c8fd6363086122f978325bf50fdead2669ed58ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:a7:a8:b8:95:18:77:22:29:a4:8e:11:71:
                    c9:0c:fb:1c:71:be:1d:5c:fb:a7:20:7d:90:5e:2d:
                    51:bd:ef:92:ee:6d:89:c3:42:30:d4:e5:7f:c7:89:
                    97:aa:83:29:6f:5c:d0:42:31:69:2b:8c:c3:8f:57:
                    c7:bc:b9:90:28:ec:a2:f9:19:85:3f:c2:b7:5e:20:
                    f2:b0:a1:b7:2e:a4:7c:06:ee:97:6a:92:c1:50:c1:
                    9b:b3:31:7f:22:4b:48:c2:a8:46:68:80:b9:39:84:
                    0c:f5:0f:eb:59:89:ad:d9:c0:06:62:69:50:c7:3d:
                    29:0c:32:64:4b:7c:19:af:c9:c4:2c:bd:82:b8:29:
                    2e:1a:19:ca:43:ce:ad:3f:d7:04:25:84:50:48:f1:
                    29:e7:47:a1:b9:06:1d:5d:87:bc:96:fc:d1:ce:a9:
                    33:d3:81:62:f8:54:42:07:1a:d7:56:64:c7:08:8c:
                    0b:c8:fe:02:74:22:c6:b6:ec:76:c3:79:77:9d:ee:
                    96:37:53:a9:a0:6b:00:e3:3a:cb:10:d6:1d:6e:15:
                    65:55:22:10:45:d0:11:19:81:5e:aa:a4:ab:a3:dd:
                    94:7b:21:ca:b5:84:c5:a2:03:2a:f0:86:9d:0b:7f:
                    6f:80:89:0e:24:5b:30:06:6c:b6:39:b7:b8:86:23:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:63:63:08:61:22:F9:78:32:5B:F5:0F:DE:AD:26:69:ED:58:ED
            X509v3 Authority Key Identifier:
                keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:5e:9a:21:f1:9e:1c:d1:73:3d:49:94:64:de:df:df:64:
         ec:5d:3d:6c:46:6e:5e:c5:12:a7:8c:6d:aa:78:31:30:d5:7c:
         fc:7c:52:80:f5:4c:40:71:04:03:4b:ab:6f:8f:2d:12:f2:0f:
         28:a2:47:00:ae:45:07:3d:a8:19:90:2d:4e:c7:c9:3b:17:95:
         aa:74:3d:46:ce:b6:79:48:fb:ef:ae:91:20:34:75:df:ca:cd:
         5c:0b:ef:27:7e:df:57:b5:d0:47:a9:47:6a:e4:d6:92:7f:dc:
         3a:42:81:3e:6a:fd:2b:d9:e1:8d:ba:12:9b:aa:2c:de:cf:db:
         63:e4:bd:42:7e:20:af:e1:ca:d1:60:f1:a9:b1:76:e0:f9:d8:
         3e:7f:80:c4:e7:e4:a1:14:d9:aa:1f:2b:1b:3b:fc:1b:18:42:
         46:16:3a:a6:e9:a8:18:98:4f:7b:83:f9:55:46:d9:2d:9f:af:
         9a:d0:ca:31:37:63:f3:5b:5f:c3:44:ed:5b:f8:62:5c:a8:0b:
         8f:11:96:69:c1:0d:fa:9c:4c:03:d9:cf:e6:13:db:71:79:2c:
         32:0e:9c:65:97:ca:c3:de:c0:9a:c4:af:7b:fb:9c:28:7a:01:
         0c:2f:d8:fa:16:56:35:90:da:3c:48:95:8d:07:d3:1b:92:7e:
         06:56:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:00:00 2024 by rpki-client on console-ams.rpki-client.org