Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File:                     IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier:          zIu/5hbXXFe+s4rRVk2SN5oUC1vA1LM1l0PpNPiwsKA=
Subject key identifier:   FF:19:CE:E8:2B:F1:52:B5:E9:FF:F7:8D:D0:64:27:32:AD:9E:FC:61
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer:       /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial:       018F8C37A334B1DF7639E870A5C69A1767B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number:          022D
Signing time:             Sat 18 May 2024 15:00:07 +0000
Manifest this update:     Sat 18 May 2024 15:00:07 +0000
Manifest next update:     Sun 19 May 2024 15:00:07 +0000
Files and hashes:         1: 9IMJ2fe9C69Vxmu6QCrqyUvQZ9Q.roa (hash: 7phUsk2BIW0ZHHBnUPMHFFxHXb878juhNAA3cgN6CqY=)
                          2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: FeHZnizkSkagEW/TXNjdG8eOhy0eLcauyGbsYkzhZIE=)
                          3: V4pYpCQHCCvTWlN38fj1bcu6M-4.roa (hash: VRQKBm8WQBGigDkWRKbwtcIKQ6UVG2ZoBdf+7fFlfI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:37:a3:34:b1:df:76:39:e8:70:a5:c6:9a:17:67:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
        Validity
            Not Before: May 18 15:00:07 2024 GMT
            Not After : May 19 15:00:07 2024 GMT
        Subject: CN=ff19cee82bf152b5e9fff78dd0642732ad9efc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:82:24:7f:e7:02:93:54:db:71:86:4f:19:
                    3b:85:bc:9e:f7:51:ac:10:c0:69:0b:bb:99:eb:3b:
                    fc:16:a8:d5:19:11:51:ec:97:43:82:21:21:7a:13:
                    0e:a9:64:e1:7c:b1:b3:32:4f:e5:7e:a4:1e:43:76:
                    d7:91:de:b2:c0:a1:e1:28:36:af:6c:35:ac:c4:e3:
                    61:10:f8:ac:c2:85:ac:a7:a8:16:23:d2:a8:ab:60:
                    28:e3:23:82:67:81:2d:45:02:0f:ca:b3:70:e4:e1:
                    e6:25:ee:df:0f:08:cc:5d:79:f0:bd:37:67:99:3a:
                    b1:e4:16:3f:8e:b6:c5:c8:4b:8f:5d:eb:65:21:9e:
                    a7:1b:a5:ea:af:37:ec:60:cb:d5:83:48:34:53:52:
                    8e:4a:88:f4:4b:82:f4:5e:55:54:cb:0e:76:bf:6c:
                    bb:ab:58:85:34:db:06:ff:c9:55:5c:3b:a4:f1:53:
                    29:53:2f:de:a1:25:ee:c6:fc:f3:15:e7:37:13:2f:
                    60:68:4f:85:ca:81:58:8c:2a:23:31:73:da:be:de:
                    33:99:51:05:d6:be:b2:0d:4f:91:45:3d:e4:cf:09:
                    40:82:bb:39:79:08:20:15:98:04:42:ec:51:b0:1f:
                    0b:85:6e:b0:0a:00:2c:38:74:df:5c:fa:4f:3b:e4:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:CE:E8:2B:F1:52:B5:E9:FF:F7:8D:D0:64:27:32:AD:9E:FC:61
            X509v3 Authority Key Identifier:
                keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:a4:7c:cc:c9:36:ba:c8:cb:02:b1:49:5c:3a:f4:6e:11:
         c5:4f:c7:1e:88:9e:ea:99:74:14:65:f0:db:ba:4d:91:0d:c8:
         ae:c3:c4:ea:79:1a:68:c4:8e:16:91:2c:db:d1:db:61:8b:7f:
         90:8b:99:ab:32:ef:cb:90:b3:00:44:03:09:39:b1:1c:68:a6:
         39:42:31:5f:08:8b:61:f1:bf:e7:12:22:58:b3:79:d2:51:18:
         e2:05:33:6b:b8:0a:27:f1:ef:84:5f:d3:64:14:db:f3:66:93:
         9b:38:f7:83:08:33:e5:8a:ff:83:34:a4:cb:95:1d:d9:da:ba:
         f7:b4:ba:82:99:44:b2:d7:70:68:5a:c6:d5:7b:7b:41:28:5b:
         eb:0f:f3:e5:c7:1a:69:1c:59:5c:11:49:7a:5c:68:e0:fb:e5:
         63:1e:d2:ce:02:ef:08:d9:3f:42:c2:77:4b:5f:f4:79:67:3b:
         52:76:aa:17:c3:5e:77:6d:53:41:18:10:22:1f:27:28:ff:d5:
         07:db:3f:d6:8c:f6:03:2d:f2:56:bb:c3:f1:84:e3:15:bc:7d:
         90:6e:bb:63:77:6e:89:b0:f4:2c:58:56:b7:bc:0a:13:8b:c7:
         ba:cd:f2:ba:7b:1e:26:b8:f8:7a:df:6e:9f:66:9b:a0:dd:27:
         ac:f2:ba:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:21:04 2024 by rpki-client on console-ams.rpki-client.org