Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File:                     EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier:          7hU5Li8V36B8nZhOzfDWRcpfNMg3TkAGaLmDub7ay+s=
Subject key identifier:   27:F4:96:57:33:72:42:38:07:B6:FF:55:C7:DA:32:24:33:FA:82:8B
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer:       /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial:       018F855BBC36741D96C391C0AC5E20F196D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 07:02:12 +0000
Manifest this update:     Fri 17 May 2024 07:02:12 +0000
Manifest next update:     Sat 18 May 2024 07:02:12 +0000
Files and hashes:         1: 7bPKhXsGBS37j0edM7zhsP2uf5Y.roa (hash: a8JhEnBpC8dFzPGjHqRtJfMHDon2SxFOxBndl8iBZwQ=)
                          2: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: r4T4RkZbchFBGZxnHlmlk26sAgCtWgWq0LPxXyn99zo=)
                          3: F8Blo1BoR0QEdmujZT-0DhQ9xSk.roa (hash: INcuge+1sOoqqdwbqHomou7klQ3L7q5/f4kYx8zOqGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5b:bc:36:74:1d:96:c3:91:c0:ac:5e:20:f1:96:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
        Validity
            Not Before: May 17 07:02:12 2024 GMT
            Not After : May 18 07:02:12 2024 GMT
        Subject: CN=27f496573372423807b6ff55c7da322433fa828b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:79:5b:42:c4:25:68:87:fa:9a:81:40:6a:
                    9c:21:41:08:73:66:ea:3e:c8:77:64:28:a3:33:57:
                    23:8a:7e:0b:ef:f6:66:23:5f:84:c8:00:ec:95:74:
                    f7:54:37:7b:e2:c7:0a:2d:14:a5:6b:45:a4:b3:42:
                    ed:49:9b:ae:24:03:ac:09:92:a9:5c:1c:60:a7:d5:
                    32:9e:1c:29:0f:37:c8:be:37:d7:ca:aa:80:17:c7:
                    8c:8a:93:ee:64:19:fd:63:92:81:1d:4f:c6:2d:07:
                    1d:95:41:a0:7e:0a:c1:54:20:82:db:15:ef:a5:0e:
                    c8:48:79:69:33:7c:d1:69:54:af:35:02:a5:d3:fa:
                    62:02:f3:e5:29:d1:00:bf:28:f0:a1:c7:53:c9:31:
                    2d:f5:5b:cd:c9:ea:dc:90:8e:57:78:11:47:5f:41:
                    6f:6a:a0:d2:40:ad:b6:57:71:50:aa:7c:54:91:5e:
                    90:d5:88:07:4b:2b:ae:f7:e9:94:ba:1d:bf:28:1d:
                    f9:a0:48:cc:c0:e2:7d:82:6c:55:b6:b4:c7:15:62:
                    83:e9:d9:6c:9f:22:69:72:52:fd:f7:ab:cd:b0:ce:
                    db:9d:cf:4e:0f:a7:b3:38:31:1b:e7:52:ae:79:fb:
                    bc:2e:70:03:cc:34:52:4c:66:57:c2:51:a9:73:da:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:96:57:33:72:42:38:07:B6:FF:55:C7:DA:32:24:33:FA:82:8B
            X509v3 Authority Key Identifier:
                keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:73:23:60:78:84:3a:a7:84:00:8c:a6:75:cf:4a:b0:f0:39:
         1f:fa:9f:46:9f:3c:de:0f:62:e1:3f:44:0e:96:a2:87:4b:99:
         ab:65:ad:20:1c:dc:6c:21:c0:32:4a:b7:d7:97:3e:1a:5a:d9:
         e0:a9:d9:82:f2:55:46:df:f7:35:f9:ef:db:d5:1c:1c:c5:6c:
         6a:90:b3:79:a7:32:6a:01:be:c0:65:30:f7:e5:e1:c7:0f:6e:
         84:32:c9:97:84:c0:db:37:ac:d3:d0:5c:31:8d:75:df:ef:6a:
         cd:70:f3:ef:82:e0:2a:39:5f:fe:37:36:7d:51:c6:c6:fe:53:
         53:ec:87:27:0e:9d:e5:d1:ca:d0:15:44:6a:0c:d5:7f:fa:f3:
         62:36:10:ff:01:26:a9:f2:3c:35:8a:1f:b0:e1:b8:1f:5c:85:
         14:ce:44:91:41:2a:ab:34:7c:9c:d1:7e:cd:5d:f5:03:d5:52:
         3a:e1:cf:34:fe:c3:43:5b:11:f9:20:11:b6:b5:8b:47:2f:42:
         dd:59:b4:56:2b:e3:dd:e2:1f:c5:f7:86:15:51:eb:f7:e4:7e:
         d1:dd:e6:6e:a8:3e:c1:73:c9:04:18:da:14:20:6f:c5:cb:13:
         ad:c1:15:21:6f:3a:6d:c7:56:96:fe:a2:42:0d:1e:56:66:d9:
         b3:f5:b7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:23:59 2024 by rpki-client on console-fra.rpki-client.org