Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          q87MjRCo9+it2p2RPv/ZzAeM+qZyRF7smdHzzWvjyFA=
Subject key identifier:   68:93:0C:51:78:B2:A6:78:E8:77:BC:AE:6E:D8:2C:C7:F5:57:C8:D0
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       018F663D7D533D4B511AE8744E86319FE871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          1172
Signing time:             Sat 11 May 2024 06:00:56 +0000
Manifest this update:     Sat 11 May 2024 06:00:56 +0000
Manifest next update:     Sun 12 May 2024 06:00:56 +0000
Files and hashes:         1: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: T0CgBj1UuyNKZjW+30B9EKuMSSQk/Ga+FA85vvHEP9I=)
                          2: 1nQcaAEXR1uGpqMa80L0YA_1Zhs.roa (hash: 8MLUHzdqAIyhrtRowyQwZSr0Dw3eH2QJ80w/WyeDiRA=)
                          3: ARlX_i6VnjVDXfhdFtz1CciS0BM.roa (hash: bLtp68uOJ0G6n6NT2qrr98/X0fn+zCUIRtPOhEZXUsc=)
                          4: B4UUf-S_pU6PL9UBCqy02mxXf48.roa (hash: MPAbIHaQiyFYihtFpZzfGcNS/BNceORGyloB/TDIqZo=)
                          5: EVUD8nQLu-rj3XeWW5n32uBOS9s.roa (hash: LCHz7sZrwfqDqhSfWhUWtfkxuH5GNeCQQEW5bxvmV6M=)
                          6: GbDz948rsZKnik_LlTJ0TAGVAq8.roa (hash: uTa0079vvE19h6j8ArDFfaKLsOJfxl03kVqhNr6DTis=)
                          7: HqPhCXVCmW7_23WEi_PHB70XRCg.roa (hash: pgADXgyqUKGosNgPld4xZXrt0PmaCynouZF/2k+SxUY=)
                          8: NXMqDPVx2sYm6nhcIsmPH8Mr-SM.roa (hash: Zr0+0TzrO+Y6lFf/yZfWpuME+pFZwDF5EdryVZV0E6g=)
                          9: O06wmTlJ5iRdQMOMsxiShky2g8o.roa (hash: fIsSbA0eT8KYkHdYiy0IgYJWAqjeP2ChF1XHvZpWUp0=)
                          10: PQr8huSGKB0evBKB-eF6Y4_vAoY.roa (hash: 7uJNcNr/c+hZ+Vn+NTEJI0JHZ/2jhrkxvXAeaUQNqgc=)
                          11: VUK_f0elDZdoSIZHnD9HhrYTHA8.roa (hash: lpa52rCEucL0lMNmSaUZnzAowBcR8hv1p80UvuyqRFU=)
                          12: WCxX9B9hsRg9iDQLqobwIJFI3aQ.roa (hash: aqiFK1z9sh34iEKm+H3kxm6G6G3i/8oN1xjlFSXUh+U=)
                          13: X2q9U_e6J65en6p1Nj0b08ctrWo.roa (hash: Kp+hZgAx6+Vey/LPZXpYvKb6X+K85gGvpE5trg6VLjk=)
                          14: a8aH5EHui-2aqhaEgJq_RtfrhII.roa (hash: ulRy2fUFeg0u+r2F46yQMden45+npTyggAJGnSkuiFk=)
                          15: hAORLTjYIaAZCA1MDAzbn20KJBk.roa (hash: mRX5JIBHs9mxOpDd2kq5jmm77hTIjBUrsJwOl/Hak4Y=)
                          16: k9wDSQwDhbTNX2cybdKmGH3iCTQ.roa (hash: fa/0WmuBnulsd/5Rn3Ptluamdu0PHBCdEWCwZ+9Ez7A=)
                          17: k_dtqLzf1SqUZ4uY2tu67gdta9I.roa (hash: 7FcCWD2AZv7USc/7W8jHcTea+NPBfPRgMw4w1Zh+iww=)
                          18: wd7rWD8zD76euZ_kg78oGyLdlvI.roa (hash: a+KdM2KHv23/nsO4SJIcCiSLmDdo4GCQHcMFjfHo1zE=)
                          19: yz0WJeZSwSNEReHFxbKILy2guec.roa (hash: VbDBSADcc/m7m3eGUJys9MzJTM598l22kLKkOt7R3DY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:66:3d:7d:53:3d:4b:51:1a:e8:74:4e:86:31:9f:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: May 11 06:00:56 2024 GMT
            Not After : May 12 06:00:56 2024 GMT
        Subject: CN=68930c5178b2a678e877bcae6ed82cc7f557c8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:7c:97:8b:9c:b4:13:ab:05:63:d7:f5:d1:
                    96:7b:28:4f:9a:81:fc:d9:70:ea:81:1b:4b:22:66:
                    6c:1b:e6:eb:83:69:76:40:c2:11:4f:44:32:da:9f:
                    5b:25:de:d5:a2:24:31:32:8d:93:6c:15:cb:3e:8f:
                    e8:f7:6e:a8:19:3b:85:80:d0:71:d2:68:08:76:68:
                    64:4f:75:8c:93:22:50:d7:49:90:14:df:d6:c6:92:
                    c2:3b:6a:c8:18:fb:d8:ed:79:03:96:9e:3a:77:67:
                    29:ce:b8:ad:2f:b5:99:eb:07:70:93:e4:38:9a:05:
                    42:8d:f2:52:e4:73:1f:68:81:01:fe:d3:fa:0a:9c:
                    0e:9e:2e:c4:fb:f7:6b:e8:aa:57:c5:c9:7a:e7:79:
                    f1:88:e6:14:b9:49:6b:2f:02:2c:fe:81:3e:8b:e6:
                    fc:58:75:db:d5:e7:f5:42:3d:d0:d6:08:29:d3:b4:
                    a4:1d:f9:ec:ed:a4:1c:94:4e:83:d1:d3:56:0b:2d:
                    81:41:f4:b1:f0:70:9a:d7:dd:99:1e:bf:0d:17:67:
                    82:b5:63:79:b4:47:9f:c4:f4:39:ff:79:a4:50:88:
                    b6:8f:1c:d4:bc:f9:9a:a4:a5:03:75:41:0a:2d:f7:
                    78:72:ae:87:30:76:75:0c:60:ca:69:c3:ed:43:22:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:0C:51:78:B2:A6:78:E8:77:BC:AE:6E:D8:2C:C7:F5:57:C8:D0
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:ac:38:48:f1:1b:c6:e1:7e:28:75:bd:10:39:9e:83:89:
         e8:db:51:3b:d8:1e:15:67:c5:89:c3:51:5c:68:36:d4:26:67:
         8d:6c:16:ce:c9:a2:84:72:d0:6d:71:ed:71:b9:c3:6d:7f:62:
         f3:83:24:18:c9:5d:63:0d:35:3f:18:69:d3:e3:dc:dc:3d:96:
         15:24:10:ce:7d:c0:68:07:86:83:8f:b2:17:89:4f:c5:e7:bc:
         4c:a4:47:ff:df:28:4a:79:d6:c3:1b:9f:87:d6:10:9f:f4:24:
         2e:1a:cd:41:64:a8:bc:19:ef:88:b6:ec:06:e1:4f:ee:d5:ac:
         43:18:c1:23:fa:e6:4f:2b:9f:cb:81:c3:ce:5b:cf:b4:de:53:
         68:17:eb:ea:24:f0:6e:bc:6d:71:8f:82:41:6a:9b:69:b6:e5:
         bc:38:bd:eb:3b:db:7e:09:72:6b:26:79:1e:59:3d:3c:c8:4c:
         0b:f9:29:dd:a8:24:37:a1:c2:11:01:46:07:9a:b1:9b:9f:d0:
         07:03:79:3b:dc:44:ff:3a:b0:be:8b:d4:bd:77:94:a4:fb:70:
         14:06:53:3b:c2:fd:6f:11:6a:be:43:ab:af:6d:20:ab:5d:7c:
         77:e0:1a:47:a4:f8:d0:e2:d5:ed:90:b8:94:cb:06:6a:a8:1a:
         ee:12:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:14:17 2024 by rpki-client on console-fra.rpki-client.org