Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          alQMpTnpdFMnIESuHk9pYyFWa6aZAdOwo8bWS80IjOw=
Subject key identifier:   9D:D6:06:2B:38:17:7B:D4:2D:ED:BD:3D:06:CF:17:E3:94:10:1B:65
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       018FA0D1FB21239EFC7FF68D9533A75086D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          1191
Signing time:             Wed 22 May 2024 15:01:06 +0000
Manifest this update:     Wed 22 May 2024 15:01:06 +0000
Manifest next update:     Thu 23 May 2024 15:01:06 +0000
Files and hashes:         1: 1IKKl5D129PR13tfH9EnAc5gTB8.roa (hash: iA0vJ5ZLHSEXsbjJNTdpZXCajP0Jec7WUNXBiOI06g8=)
                          2: 69YcMBP-uNr-sKiCDn2ZzRP17Go.roa (hash: 2xLxHtFSIiBSI30gDaJLdZ7j3H6ZNX6Sre5Ts5OoFeQ=)
                          3: CPsPbTT5USZTRdc9U_lIcSUnlDs.roa (hash: VC9oX8BshooZh2yJzwH5bySY1utm4+lAEJdD7u0wx94=)
                          4: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: s9Byt6WjjoAfQ1OjwSXd9PDEmwG3G+X4z+FrYHMgbH8=)
                          5: IRa40ysF7KSPb_0UZdvb1B7E4EE.roa (hash: AspfkgsJxuMvNsJ5mIVdNXG5W1QeQhUomyPgstQmCt8=)
                          6: Ioq8dEgWEGw17FFBHlp8Ijb1B0I.roa (hash: 5MRrmrVGkCCoEwU7Wt2uTHAZDxvvw11ihIOBqlM2zTo=)
                          7: PAiCNnAV6u6mkf1J0HF8F8NI5iY.roa (hash: ERaCKtBJ93GmlLidz6FpGTZn5SzSEX/hj2FcCEGNfyk=)
                          8: SUaToqcvrmjEPSgNDse5b-mysgM.roa (hash: 7uwtyo94RqUomwn4a9LhPwlOkrLTZywffvEA1PuKt+c=)
                          9: aBUo7thPCXwNTIZQqvHtYcEESlQ.roa (hash: aFhBSP/ByAz04uTBtewAfuX5IK3hFxExYxh6Ts6Elgc=)
                          10: bL5J4CTVCqQOMnxuxbSYy2JrE-Q.roa (hash: 7M5YkqUoPzo8TBbSU5e+uV1uf2ojs6rpJT2aANMLdKU=)
                          11: b_KA0pe_3SV4b4OIrpWiYpPfqCQ.roa (hash: 9qaURqUCpqCLxfGkQ5oErMtxlZU5r6GR8dAUbTuWkUg=)
                          12: jIi_Ru3IefpbXGryBWgXZbGXk20.roa (hash: nV1gn4fzr2q8Gp2YD3x2gKPIxa4piRup1xjqPBYefDM=)
                          13: lAboOltir4cKStiHjiiqZbX3Yeg.roa (hash: 8QxFJr3V2Gs0/xI6VIe22Sv49IgfTXbESvU3odW6QIk=)
                          14: lI8uYeiI_H3c6Bsri08e0XX9IC4.roa (hash: anszSoDPPDch+YkSCt6ZfmNqaRlniIiDpiLv/baYmr0=)
                          15: lxESx365vJ_KpGfPw5vEvF19eHQ.roa (hash: bBgJqf9CbvF2T4+dpktIZXqmJ8kE/vDFoongBVgLSwg=)
                          16: n0CvIl2b7UvfyIc1gxoJi-Oz2eI.roa (hash: fg0PunZ6PRKyz+ZV/xf3hq1m9oiossSZ2ksPqTT3k4U=)
                          17: nGo4H51rOsitJmcNirgmciVehA8.roa (hash: qVRKoLl4pUkupVXlRxOrXacHtu3B5FhuftDzW97PDdg=)
                          18: qGrQAccuQhzBsMvH4rqiLv03ldQ.roa (hash: EpMU/v+u+8wfjnOchgwBhsnCfmM7qpUQlbsHXubI1rM=)
                          19: tcttpY6GEyQfNjf80Js2svKOx-4.roa (hash: C0hOHmf3E4D8brtMeRf2tpTgu1SNEK65QQr+Igbeglw=)
                          20: zA3I63Idda3lePMw--61fwIc4oA.roa (hash: AuDqxdejDmMsNJT0/OQc251ls4w/z3lr7g+wKjTokMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a0:d1:fb:21:23:9e:fc:7f:f6:8d:95:33:a7:50:86:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: May 22 15:01:06 2024 GMT
            Not After : May 23 15:01:06 2024 GMT
        Subject: CN=9dd6062b38177bd42dedbd3d06cf17e394101b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:f3:3b:b9:30:c3:2e:79:e5:6e:a9:0a:69:
                    f0:6a:67:4c:23:bc:d3:79:67:e5:e7:22:d0:12:33:
                    52:48:0a:48:3e:3c:ee:54:84:15:b7:83:10:8e:80:
                    69:68:b3:14:03:70:fa:79:b9:fb:42:99:87:2a:c2:
                    ea:c9:56:d6:97:4c:07:4a:bf:e3:e5:30:05:a4:4f:
                    79:8d:c1:2c:58:e3:66:29:68:86:39:71:88:fe:17:
                    aa:82:0a:6a:23:77:ea:2c:4b:18:94:96:b2:d8:63:
                    03:e3:1c:16:2a:bf:b4:95:1a:fd:26:55:36:ab:d7:
                    f9:d1:74:01:b4:c3:6a:06:52:0c:d8:77:07:f5:80:
                    77:7e:ef:00:a2:9b:44:0f:03:c8:97:08:ee:70:77:
                    3d:05:4c:5d:93:68:06:31:c6:4b:e7:ef:dd:ca:be:
                    af:e1:9b:5a:85:5c:a6:69:e3:00:62:71:b3:3f:2a:
                    a5:54:e6:3b:19:9e:00:c8:83:da:bb:b7:43:59:61:
                    0f:08:d1:3a:38:65:e3:ad:ba:3e:39:ca:02:b2:23:
                    f3:7c:cf:f2:0c:40:0e:9f:bf:84:36:35:05:b1:95:
                    59:4b:bf:d6:14:44:ba:58:0b:cd:1d:b5:4e:0b:e9:
                    a3:40:e8:49:3e:cf:c2:2c:31:fa:51:bc:ab:c8:1e:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:06:2B:38:17:7B:D4:2D:ED:BD:3D:06:CF:17:E3:94:10:1B:65
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:8a:86:36:ba:b7:f6:55:d3:67:16:ab:65:8a:45:9c:98:
         a1:eb:e2:58:86:25:8e:76:1f:ce:3d:f2:fa:2a:4b:8e:7f:e0:
         24:c9:69:fd:50:8b:d8:90:e7:7b:57:f4:96:35:ee:9a:2b:2f:
         f1:6e:5c:f5:48:3c:df:53:4b:b4:4f:4f:05:d9:57:b9:d1:38:
         56:12:fe:e3:54:3b:d3:1a:a7:42:4e:a7:60:fd:4a:56:d2:bf:
         c1:cc:f1:29:35:8d:8c:62:5d:98:eb:fe:54:8c:2b:02:31:90:
         ee:55:b1:52:45:58:22:e5:cf:e7:54:91:dd:14:77:ae:6c:9a:
         8b:56:9d:c8:7a:f7:8c:23:db:a6:66:3f:72:e8:b3:ae:10:f3:
         a2:bf:09:f0:e1:de:90:61:8c:dc:53:27:05:91:87:4d:00:4f:
         f5:3b:8d:64:67:cf:cf:b0:62:69:0d:47:aa:9e:34:3d:7e:8b:
         e7:05:b4:48:fa:bb:b2:49:e4:bf:70:9d:c3:8c:7f:31:ba:bb:
         d9:87:1d:fb:b9:1e:2b:a0:18:93:69:0c:f3:e6:59:7c:eb:3d:
         2a:ed:ee:79:bd:fe:07:73:da:4f:8d:a1:61:12:d4:0e:91:9f:
         95:aa:8d:2e:bd:10:01:1b:05:26:53:6c:63:eb:dc:25:d8:7d:
         51:e8:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 17:09:38 2024 by rpki-client on console-ams.rpki-client.org