Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File:                     M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier:          ZiY3Ig9kDhny39gtExoVtmrfzmy4fj345q2rPu2fVUE=
Subject key identifier:   61:83:4E:DB:AE:D7:12:67:29:8E:86:C9:B9:36:B0:0A:EF:77:F0:57
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer:       /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial:       01901DEC106D63AF1712CA0D488E0038385D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:02:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:08 +0000
Files and hashes:         1: AkXyemQFUs4kIL20nGqP90O-wHc.roa (hash: sfIKx/C2Ac4HOkrWF/VoHIp/MSsnQozA5PGHgyk5lBk=)
                          2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: DqMXc9IV+924unh5Rb2JNkFeqqfnVBIePMkI5E/Xaac=)
                          3: YhRzSYyb-uF-PYPWbOQ6DSfXjjs.roa (hash: Zq7J8qLnXXHih/GQVt4F+Gs0lFMd/XrEJAT7dW3pNzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:10:6d:63:af:17:12:ca:0d:48:8e:00:38:38:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
        Validity
            Not Before: Jun 15 22:02:08 2024 GMT
            Not After : Jun 16 22:02:08 2024 GMT
        Subject: CN=61834edbaed71267298e86c9b936b00aef77f057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:35:dc:e8:68:94:90:e8:25:a5:9b:df:51:
                    96:18:89:53:81:b3:2a:ac:ef:7d:60:7b:bb:a1:5a:
                    d5:e8:78:de:e8:5f:2f:d5:d1:9f:a7:e5:01:e9:e8:
                    ce:32:6f:c5:05:39:ec:c3:6b:62:e2:7a:81:5c:04:
                    2f:0f:c1:62:b3:5a:9b:f0:b6:f8:1b:55:dd:d0:d5:
                    d3:f0:f9:67:db:7c:10:84:ee:f8:c7:2c:3b:f6:22:
                    72:7a:96:79:af:1f:14:fc:b7:b9:7e:69:eb:ed:2c:
                    af:fb:26:2e:23:b6:f2:fe:15:fe:a4:03:30:c0:14:
                    a1:55:da:d6:f1:b3:b8:28:59:3f:32:0c:8e:93:10:
                    74:7d:39:61:e6:26:53:6f:93:7b:fc:31:15:d7:f6:
                    79:76:b6:af:35:f3:15:5d:e7:b9:b0:2a:57:c2:28:
                    4e:23:11:dd:0b:72:4b:5b:c9:42:34:99:53:eb:1c:
                    80:de:ae:3c:60:31:db:d6:53:8d:c1:aa:72:82:f2:
                    7b:70:df:67:e6:23:58:c5:05:57:52:d4:b6:b8:13:
                    ce:4d:a2:ac:ab:bc:ab:92:7d:7b:42:27:a2:a9:27:
                    44:71:d9:b8:ba:c4:6b:1f:9d:b2:90:a5:00:72:3a:
                    37:96:1c:85:c9:d3:25:65:9c:6e:46:2b:d6:65:d2:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:83:4E:DB:AE:D7:12:67:29:8E:86:C9:B9:36:B0:0A:EF:77:F0:57
            X509v3 Authority Key Identifier:
                keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:42:80:45:32:6d:e6:e0:ce:2c:f9:64:9e:4c:0a:fa:d4:
         c2:95:50:d7:03:a2:70:68:ca:82:1e:8a:ae:94:76:ed:74:d8:
         a5:3b:b6:99:3e:d2:a7:55:7f:dc:87:ad:16:e4:be:a5:9c:bf:
         cf:29:47:de:ac:97:81:85:d8:3d:df:51:a3:5d:26:af:3e:f8:
         b0:41:b7:d9:b4:7a:81:49:22:30:ce:cc:e1:59:f3:69:3e:18:
         eb:09:5a:d4:ed:6c:a7:cd:91:32:14:a1:51:ab:cf:4c:18:c5:
         6e:3c:50:ab:c5:b3:0e:da:44:27:8d:30:68:71:da:21:c3:e9:
         9c:0f:cf:5f:dc:02:e6:be:49:05:19:21:de:65:97:0f:1c:5f:
         1f:53:41:17:5a:16:48:c1:8e:0b:d0:47:aa:de:4b:ee:72:ce:
         71:2c:98:33:9d:20:60:9f:0b:92:f1:94:96:aa:29:8a:0f:5f:
         04:8b:b7:1d:d3:84:c6:c5:9f:19:c1:b9:a3:e2:eb:8e:a3:d6:
         d3:bc:7b:95:ee:d1:73:da:13:8b:90:9d:c5:72:10:00:f6:3d:
         5e:67:d7:35:38:a5:d4:de:07:05:8d:8a:b6:19:7c:09:d5:35:
         db:ee:9b:5c:30:47:2e:b1:99:46:8b:fd:c5:7d:b6:72:f1:d5:
         39:ee:fe:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7BBtY68XEsoNSI4AODhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWNiYjFlNDM5YTNhNzFlYjg3OTY2OTJmNjIyYmY4Mzhm
ODQ4OGMwHhcNMjQwNjE1MjIwMjA4WhcNMjQwNjE2MjIwMjA4WjAzMTEwLwYDVQQD
Eyg2MTgzNGVkYmFlZDcxMjY3Mjk4ZTg2YzliOTM2YjAwYWVmNzdmMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4M13OholJDoJaWb31GWGIlTgbMq
rO99YHu7oVrV6Hje6F8v1dGfp+UB6ejOMm/FBTnsw2ti4nqBXAQvD8Fis1qb8Lb4
G1Xd0NXT8Pln23wQhO74xyw79iJyepZ5rx8U/Le5fmnr7Syv+yYuI7by/hX+pAMw
wBShVdrW8bO4KFk/MgyOkxB0fTlh5iZTb5N7/DEV1/Z5dravNfMVXee5sCpXwihO
IxHdC3JLW8lCNJlT6xyA3q48YDHb1lONwapygvJ7cN9n5iNYxQVXUtS2uBPOTaKs
q7yrkn17QieiqSdEcdm4usRrH52ykKUAcjo3lhyFydMlZZxuRivWZdLPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGDTtuu1xJnKY6Gybk2sArvd/BXMB8GA1UdIwQY
MBaAFDOcux5Dmjpx64eWaS9iK/g4+EiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQt
YWEwMDcxYjdiZjg0LzEvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQtYWEwMDcxYjdiZjg0
LzEvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPZCgEUy
bebgziz5ZJ5MCvrUwpVQ1wOicGjKgh6KrpR27XTYpTu2mT7Sp1V/3IetFuS+pZy/
zylH3qyXgYXYPd9Ro10mrz74sEG32bR6gUkiMM7M4VnzaT4Y6wla1O1sp82RMhSh
UavPTBjFbjxQq8WzDtpEJ40waHHaIcPpnA/PX9wC5r5JBRkh3mWXDxxfH1NBF1oW
SMGOC9BHqt5L7nLOcSyYM50gYJ8LkvGUlqopig9fBIu3HdOExsWfGcG5o+LrjqPW
07x7le7Rc9oTi5CdxXIQAPY9XmfXNTil1N4HBY2Kthl8CdU12+6bXDBHLrGZRov9
xX22cvHVOe7+1w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:45 2024 by rpki-client on console-fra.rpki-client.org