Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File:                     Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier:          x8yFduJOiQZgQRaQaE6O7MXjkQzGYpQZ3kMJHvs4a6s=
Subject key identifier:   00:59:A8:AC:F6:CA:E8:38:83:A7:E1:B1:CB:39:6A:75:5F:90:DC:AF
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer:       /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial:       01901BFD204F672A281D8415DCDED0682127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 13:01:31 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:31 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:31 +0000
Files and hashes:         1: 1HTEdtOFPw7bsXtcUH8Xpc851zs.roa (hash: 5+ZjqOy2VeKmcUbvSCFq8e49i1ar147IH/LE+9bJ3YM=)
                          2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: YxHhxxk4xIQ3hzbmA7Y+FFNdrruj5xGTzcuXgbAM+y4=)
                          3: FJDqlBgg1AmD-RraWkyw2rwZtl0.roa (hash: c8E442B7w7LIzEutkMjYq0AcGXknCsUs1HMQT42MFtI=)
                          4: T_HIir9u0e1JvPmwgJPiR2AyVbU.roa (hash: XAanoUcmy+Cytt7KUKMYXw5N2N3oC/sHWoBb3wJ4WJQ=)
                          5: VXnF9k4-3nLgIX5QYEYuj_ADafM.roa (hash: G2ZTM5wLaokamBfV6cSXixzpH4RRzwWq1ZQGslOzQDs=)
                          6: ZJ50OdULynP8okLYzyfDXRkM6O8.roa (hash: tflcZ3rzw7zJsP8zgcaaoIOZRan4zRkhesjnJNdOV6c=)
                          7: _KNyKSAp9L-4GYdO2YAaSrWfw10.roa (hash: HKhWMkN4eIx9XbqZVe/j/ehlw3gQF8OpHoLbzxzOufQ=)
                          8: cb-Dhm2S7yuwCNWsNScfaBo6oXw.roa (hash: J+KyWBF8H7wOSns7EevIqdAKoxcTuVx5xXIDZNTfJqM=)
                          9: jA9ALsipx8RNb9zh1NHQ_IzVJuY.roa (hash: TAuYSqH4o9Bxz1eLDSpjnBtTFqZtrfEgSKRgqxx+cfo=)
                          10: yyvELcORfofkP-WeGpZwKuaBw_Q.roa (hash: 4+8pYhEeFWOgedy0C+0IR+tgnEJ+zl9mtWO3Ad1HhNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:20:4f:67:2a:28:1d:84:15:dc:de:d0:68:21:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
        Validity
            Not Before: Jun 15 13:01:31 2024 GMT
            Not After : Jun 16 13:01:31 2024 GMT
        Subject: CN=0059a8acf6cae83883a7e1b1cb396a755f90dcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:51:4e:35:c7:dc:b0:ae:3b:ae:4b:fd:45:
                    8b:fc:18:22:4e:7a:2d:cb:7f:14:0a:b2:07:48:a3:
                    70:ba:ce:1e:8b:44:82:54:e1:33:7f:96:bd:ca:cd:
                    83:c6:00:35:4c:f0:c7:89:6e:69:1c:6f:ce:80:ca:
                    6d:27:18:58:16:65:ef:b6:bd:b1:d1:89:b9:ab:01:
                    21:2e:15:6e:a0:4d:74:da:fe:4a:1f:ac:db:8c:66:
                    32:23:15:31:8c:8c:99:42:9b:2e:b9:0e:01:e0:79:
                    31:df:02:c8:02:0b:65:32:0c:2d:c4:49:1d:24:9a:
                    6e:d0:92:c8:a5:70:47:df:b9:77:04:12:11:7a:f6:
                    91:cf:dc:aa:76:a1:d0:7d:ff:31:ec:2c:a0:6a:06:
                    49:8d:a8:62:5a:d5:5b:33:5a:dd:9a:9e:33:bb:a2:
                    b0:a2:26:b0:92:cf:8b:91:17:2c:1d:36:2a:a8:99:
                    10:c1:37:b7:8c:03:81:0b:45:a1:9d:07:7a:ba:72:
                    a6:f2:7d:00:09:e7:8f:48:9e:18:f9:83:ce:6d:c4:
                    1b:f8:14:9f:26:96:66:a9:82:83:bf:27:f0:f3:05:
                    8d:6a:17:e3:9a:f3:ec:2d:e9:ae:13:12:64:e5:d6:
                    c5:87:6c:2b:3a:19:c2:4d:f8:84:15:70:be:11:fc:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:59:A8:AC:F6:CA:E8:38:83:A7:E1:B1:CB:39:6A:75:5F:90:DC:AF
            X509v3 Authority Key Identifier:
                keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:bc:dc:2c:82:34:a1:3c:ba:a9:4b:43:6b:3a:18:c4:72:
         6f:37:fc:3c:f6:f1:3d:57:b2:4b:32:4d:e7:9e:0e:1d:b4:ca:
         7d:1e:86:07:fd:ac:81:00:40:65:1c:79:66:03:75:b4:eb:ea:
         c2:1d:4e:cf:e6:53:79:5c:89:a3:fb:03:75:19:d9:c7:48:b1:
         fb:fb:85:a3:f1:ac:93:eb:6e:af:62:59:b2:6c:19:54:88:e3:
         65:dd:d4:f5:90:b2:c6:3a:36:26:80:6d:0d:5c:cf:23:9a:90:
         7c:f7:67:d7:7b:27:09:ed:d0:aa:f5:c4:fc:2f:07:9c:ad:2d:
         2e:8b:3d:74:a0:61:b2:1e:85:8c:7f:43:d9:a0:81:bc:d9:a7:
         ea:85:6b:1a:21:e6:ca:1f:52:eb:b2:5c:f6:79:6a:7a:6e:97:
         25:4f:0a:77:93:ab:bb:42:7b:a8:05:76:88:7b:65:ec:fc:bf:
         3c:ec:50:73:4b:4a:09:54:ce:77:27:27:04:40:f0:18:e4:c0:
         06:5c:2e:9f:1d:27:45:5e:96:bf:f1:ac:ee:3a:5d:41:68:32:
         02:fb:ef:00:e2:d5:ca:97:b0:11:2e:30:b7:15:82:c8:e9:1a:
         99:d9:83:7e:23:ba:c6:38:ee:0d:75:47:35:c6:b8:1c:fa:0d:
         45:61:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:46:43 2024 by rpki-client on console-fra.rpki-client.org