Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File:                     vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier:          STkNG8BZaaPriWEEt4x5tFA/wwGVsNC8Ow98rzHIu60=
Subject key identifier:   83:54:A6:A5:CB:05:0C:28:F7:68:1A:F5:08:91:FF:41:4B:3B:01:0F
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer:       /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial:       01901E8F8B3F43638F3D1C2AC0398730A90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number:          0EE2
Signing time:             Sun 16 Jun 2024 01:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:42 +0000
Files and hashes:         1: eEskLAXxa5lqo7Le0dIhJVhjW4E.roa (hash: 8O5TGGgkLmIZxA+U7DvWep1WBkZlID6lUYSNbpUMzGE=)
                          2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: +hCOcSem2gPPjbQvZlHkjV5D+I0WSELDGme9c4VzR2c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8b:3f:43:63:8f:3d:1c:2a:c0:39:87:30:a9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
        Validity
            Not Before: Jun 16 01:00:42 2024 GMT
            Not After : Jun 17 01:00:42 2024 GMT
        Subject: CN=8354a6a5cb050c28f7681af50891ff414b3b010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:e0:83:75:5d:91:56:0b:d3:75:77:4a:6a:
                    e3:7b:d6:cf:c4:1e:f6:fa:3f:1a:5b:91:6e:78:fb:
                    b9:fa:50:9c:ac:05:91:6a:06:36:e1:89:66:fd:31:
                    1e:39:f6:1d:46:3a:8b:6c:bb:61:e6:5e:d0:24:39:
                    60:80:cc:c1:b7:ec:15:54:16:b8:34:82:c1:f4:90:
                    da:cc:82:22:6a:77:52:17:be:45:57:be:35:76:b9:
                    74:63:06:4a:bb:ab:ba:7c:8f:85:1e:f5:67:12:67:
                    cd:e9:bb:f5:e1:a1:09:6a:0c:64:39:56:6f:d6:07:
                    53:72:61:a6:60:df:25:7a:47:76:27:6a:cc:a1:7b:
                    80:88:81:63:de:9c:b4:10:c8:11:0f:37:73:cd:4c:
                    f6:3d:46:05:d4:c4:f3:58:27:04:82:c6:4f:a5:37:
                    ba:45:72:13:13:50:89:b7:45:6a:14:18:fe:c4:06:
                    db:5e:12:cb:f0:fe:3d:3e:96:81:65:eb:45:77:25:
                    47:84:4d:21:ee:73:95:fc:4c:87:90:6b:c8:fd:e7:
                    54:39:29:04:99:44:cd:2f:fc:61:6a:33:3f:ea:2d:
                    b8:b2:70:94:22:6e:80:48:a2:25:fc:6d:db:6f:35:
                    27:a7:d7:c6:e8:bf:67:f1:5a:3d:15:fd:05:48:e1:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:54:A6:A5:CB:05:0C:28:F7:68:1A:F5:08:91:FF:41:4B:3B:01:0F
            X509v3 Authority Key Identifier:
                keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:16:1d:cb:cc:cf:57:c0:f3:6c:5b:9e:a8:d5:e9:f7:39:
         b1:4a:d4:33:ea:42:61:fa:50:25:41:fa:89:4b:73:18:63:4d:
         4d:b1:d7:9b:fb:a2:4f:fb:f7:79:16:ab:2e:a1:bf:59:1b:e6:
         0d:9d:cc:d5:c3:ac:04:b4:35:bd:a3:94:13:2e:78:78:e3:2f:
         3b:6e:b9:b0:d9:bf:2f:51:96:ca:56:26:0b:58:db:46:86:8d:
         1e:20:4a:a3:15:cf:b6:ce:ba:ed:8e:31:88:be:bd:61:06:f0:
         d5:37:f7:70:91:0f:0e:0a:b5:51:7b:88:b1:c7:e8:17:52:ac:
         d8:02:0a:59:91:4e:ea:a9:34:ce:4a:ed:97:f7:65:b4:11:d4:
         71:30:80:c0:a6:95:26:9a:e1:b6:23:17:43:07:20:a6:6a:01:
         54:35:f7:51:5c:ad:ad:98:b5:2e:14:0e:00:5e:a1:f0:87:bd:
         69:fb:08:7a:00:6e:a6:3b:0b:b3:58:7e:3c:38:79:b5:1b:e7:
         1e:7c:da:f0:e3:4c:f1:ab:5c:5f:8c:15:92:0f:cb:b4:87:01:
         1e:54:bb:63:8c:fe:7d:0d:cc:e0:29:b6:b7:35:e9:00:10:42:
         f7:73:6e:e5:35:42:00:fb:fe:f7:62:8b:4b:ed:9d:a9:83:87:
         fd:9d:7b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej4s/Q2OPPRwqwDmHMKkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTc0ZGM4YzY0NWVkMjM1MTQ1Y2FhYTEzNTViYTg1ZjUy
NTc2MzQwHhcNMjQwNjE2MDEwMDQyWhcNMjQwNjE3MDEwMDQyWjAzMTEwLwYDVQQD
Eyg4MzU0YTZhNWNiMDUwYzI4Zjc2ODFhZjUwODkxZmY0MTRiM2IwMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogbgg3VdkVYL03V3Smrje9bPxB72
+j8aW5FuePu5+lCcrAWRagY24Ylm/TEeOfYdRjqLbLth5l7QJDlggMzBt+wVVBa4
NILB9JDazIIiandSF75FV741drl0YwZKu6u6fI+FHvVnEmfN6bv14aEJagxkOVZv
1gdTcmGmYN8lekd2J2rMoXuAiIFj3py0EMgRDzdzzUz2PUYF1MTzWCcEgsZPpTe6
RXITE1CJt0VqFBj+xAbbXhLL8P49PpaBZetFdyVHhE0h7nOV/EyHkGvI/edUOSkE
mUTNL/xhajM/6i24snCUIm6ASKIl/G3bbzUnp9fG6L9n8Vo9Ff0FSOHNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINUpqXLBQwo92ga9QiR/0FLOwEPMB8GA1UdIwQY
MBaAFL2XTcjGRe0jUUXKqhNVuoX1JXY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OGM1YjctYjEyNi00ZWQzLTlkN2Et
ZTViYTRiZmExNzFhLzEvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OGM1YjctYjEyNi00ZWQzLTlkN2EtZTViYTRiZmExNzFh
LzEvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAam8WHcvM
z1fA82xbnqjV6fc5sUrUM+pCYfpQJUH6iUtzGGNNTbHXm/uiT/v3eRarLqG/WRvm
DZ3M1cOsBLQ1vaOUEy54eOMvO265sNm/L1GWylYmC1jbRoaNHiBKoxXPts667Y4x
iL69YQbw1Tf3cJEPDgq1UXuIscfoF1Ks2AIKWZFO6qk0zkrtl/dltBHUcTCAwKaV
JprhtiMXQwcgpmoBVDX3UVytrZi1LhQOAF6h8Ie9afsIegBupjsLs1h+PDh5tRvn
Hnza8ONM8atcX4wVkg/LtIcBHlS7Y4z+fQ3M4Cm2tzXpABBC93Nu5TVCAPv+92KL
S+2dqYOH/Z17hA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:02 2024 by rpki-client on console-fra.rpki-client.org