Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          N5wXlrs+lAScd+RIkcCOVdYuG4WwWCrHbcfIdsRwBT0=
Subject key identifier:   1B:7A:C3:88:C8:FE:67:51:21:51:85:E7:5A:C5:0C:0E:97:86:38:47
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       018F896D947C2A0727F89D862C7436CE41A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          0B18
Signing time:             Sat 18 May 2024 02:00:11 +0000
Manifest this update:     Sat 18 May 2024 02:00:11 +0000
Manifest next update:     Sun 19 May 2024 02:00:11 +0000
Files and hashes:         1: 1-sfwA4U4h3lTo5KucSq-ZE5Tp2E.roa (hash: ptQu0fd2HlWOt2nEcfjWaFm5qfAMnW412u7uq7g2OwY=)
                          2: 7g63JuL9uHmXcL4qOG1F3EqOMxw.roa (hash: CgqnxpznS3GTrXtyLzgoMUjTwKd7awAtMPLPSWi60Cs=)
                          3: 8_dsS8Stz6tn9y-M5SKMoQp0-Zg.roa (hash: 0kuMt/1qGwmmbLC/G2DNAlWjSeKiZeNH2M8/yNWNW9U=)
                          4: Dv35v0OXG9-I7d3zjJmj90hw9v4.roa (hash: wo1j5uSxpgfhG8VhaoUo9TrIKoFJXddkw5IJ2RMsRa4=)
                          5: HqFJzFf-i-JwqGcjUnOUj8hama4.roa (hash: c9Xvunej8yOrdNHfsroII2LRD0Ceg0sveul/GPHBwCo=)
                          6: SXWCnabocpdIDsu3QypmtrSOtJs.roa (hash: etynZy/LD7DZduvuVZ/o9jzl31NJ450OoYB10W57bHQ=)
                          7: VRdwGAsX7h2y_EedMDm6DdVtR3Y.roa (hash: 4Szyq4YhG07qxv7Qjck1L103LD2wYdZV6mWUKdgIIoc=)
                          8: VeKC6pKrzOdNAMHzi6N5KgqGHFc.roa (hash: ilCt7CJetrrQsb3NNHDWl7najJbd432UHkpFHIgP1Q4=)
                          9: Xl_gQ2mvj-OK0hTC6bCHCz0omxM.roa (hash: SHr41zUFbYFDH/gKZaJyVoUeJ0W7ObUs5WPRsQn9w0E=)
                          10: aktxosgal4QJyxHc9O_25p1jtvQ.roa (hash: 9vh8YSTb8YSMTAg9DS0UqbRhaduqGRGUub+JZGBzKA8=)
                          11: bA15-9Jfu26bNaXLmUXBr9lHnss.roa (hash: hEkqhHF5nNImb+sIoajIYh9OHF4fAwG1cpwQfOOxIuA=)
                          12: bAe6HmBc8Hy2C6CCKxnCvNGEHek.roa (hash: KCrqW2Y9DO7cmWhpF2Ep36tW7jbmFKd5CaGpdXTzcQ4=)
                          13: bL5UyFk_hl26v04FvkSGpkXKH10.roa (hash: jEg7jlrAHfssOVr0aHZUX4q/YM9FPAY9rJlQlX1N8UM=)
                          14: bLXdN6bbCn_Cur7QGqpqsA2YunU.roa (hash: PYo3xfxjHEWKQpmIkgchQppi68dGWboW7h/udyEnR5o=)
                          15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: ThXh8RMD/2CqJedzjAMDoCultpUmtMm1TOECiCtLtos=)
                          16: k0dvZtgq6V-dLBS5au4CuRr6-i8.roa (hash: Yf5qi0MN5qS0EcMcYTLHComeduZxyRDgtMzpRVl7Cv0=)
                          17: mK_UmUYHojd2x0Vs9eu_BlHppFU.roa (hash: uKa602vqMIDqHSSc/ds8sw0D+BA21c5WBVLz62R3o7I=)
                          18: ph4tWqoG-OgguSgXJ6z7F58XWYQ.roa (hash: HshvwfrGybgqBlI2RrbclyB8wA2QXYZVfPH0hWOueZI=)
                          19: pqIs1Da65u_EucMPfwnMR4aPMY8.roa (hash: gVcAuVYmyuS1JvHUQ7GhO4uuZdvMoEbrfJtLIZLIrdc=)
                          20: t5R1-ZkJ4C59QSdf1_Sv19SGBNU.roa (hash: FKbUay8c7MIkjkvFlLAVX/n9ii9E/emMfurJHAXOyvc=)
                          21: vlHZQvk6cFXxkwouFUDYLfeEupo.roa (hash: wioMynLfOoSLxgrWZLgjn267r9Q/PkPQZ2IIZ+XSXPg=)
                          22: wcK7yLNeadGUHgZlSwqolo-ImJ0.roa (hash: CDa24p0uvKPJGCAJgQ7OkHbu8xKnyn/8t3te0O5vKzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:6d:94:7c:2a:07:27:f8:9d:86:2c:74:36:ce:41:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: May 18 02:00:11 2024 GMT
            Not After : May 19 02:00:11 2024 GMT
        Subject: CN=1b7ac388c8fe6751215185e75ac50c0e97863847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:9c:1f:f0:38:35:80:96:5b:3e:f8:8b:e3:
                    d9:34:7e:27:50:ef:3f:13:7f:13:20:f2:ef:37:83:
                    17:0b:0a:80:31:8d:92:8c:61:e8:d1:f7:ce:f8:02:
                    c6:4b:c0:40:46:30:4b:fd:25:ff:ef:bd:61:bf:1a:
                    3e:18:64:b2:82:f2:8f:72:71:6d:42:cb:c0:51:61:
                    09:aa:89:6d:a4:c7:59:bb:d9:91:60:ae:7c:c1:aa:
                    24:13:84:a1:b3:37:08:72:04:41:ab:5a:07:08:4a:
                    e6:c3:49:e3:4b:bf:2b:aa:de:ef:96:e0:65:f8:f5:
                    c4:29:b2:ae:c2:8d:d1:dd:0f:1b:20:2b:f0:ff:e0:
                    de:79:d2:fb:1a:18:53:8f:f9:72:74:72:5b:fc:a6:
                    10:f3:63:f8:77:20:5b:f6:4b:a6:c5:65:83:e3:2e:
                    64:9e:b9:bc:a9:9c:2e:e0:f5:46:fb:d9:33:c7:06:
                    44:d7:cf:75:b3:e2:74:55:b1:f3:ae:a8:2f:57:a7:
                    d7:29:af:ee:10:b8:29:36:78:39:7f:4e:1b:0b:98:
                    43:0f:c8:00:65:4e:89:14:80:f8:89:db:23:fd:7b:
                    8c:fa:f3:86:1c:4f:a2:14:5d:9c:3f:cd:f6:ab:bf:
                    bf:87:f7:fc:e4:b5:6c:4e:9e:75:5e:01:0b:13:9f:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7A:C3:88:C8:FE:67:51:21:51:85:E7:5A:C5:0C:0E:97:86:38:47
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:07:dc:ac:20:31:6c:17:61:c4:5d:3c:b5:a0:22:71:27:fd:
         a4:1c:ed:28:0d:9c:7a:7c:34:d2:d9:97:15:68:93:fb:92:dd:
         35:2a:87:1a:a1:b5:c8:fd:76:01:6a:e1:60:1f:db:5b:45:1e:
         b9:c6:67:83:a9:d6:27:81:a7:87:2d:0d:bf:a3:ab:8f:42:04:
         47:b6:51:c6:26:de:5f:68:42:6a:80:50:57:4d:e0:8f:5c:6d:
         10:47:e3:b7:25:4d:e5:17:72:4a:65:87:8f:a8:ea:71:26:54:
         86:30:f0:87:47:ed:70:6b:f1:0b:82:f7:52:4c:8a:32:3e:a5:
         b0:b3:32:82:61:fd:b5:a2:25:43:42:f3:1e:f2:27:bd:99:9a:
         ee:16:f2:82:ed:75:2a:3c:98:58:fd:95:17:b6:5b:e5:ea:db:
         cb:b4:ee:29:dd:f1:55:bc:b3:92:46:91:80:0f:19:9d:1e:bd:
         e7:51:1a:60:7c:e0:eb:a0:06:13:e9:6e:6d:d9:ad:e1:fc:7b:
         9c:09:b5:28:df:a9:b6:09:e6:bc:ad:31:c6:98:f2:67:17:12:
         9a:3a:9a:46:83:91:12:41:51:0e:9e:4c:6b:6d:6a:9e:d9:25:
         10:91:47:4a:fe:41:7b:b0:bb:92:b6:ef:75:78:f2:91:e2:69:
         c8:fe:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:40:00 2024 by rpki-client on console-fra.rpki-client.org