Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
File:                     q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json)
Hash identifier:          U6eQELN+a8/qesDKvD1UYNnBM8psMr+ZvdpleathNeE=
Subject key identifier:   1E:3B:22:B4:48:98:D7:F9:C1:49:BC:D8:32:6B:4C:44:D1:A7:93:8C
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       01901E590722BC89DBDF9FE3A497E956C865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
Manifest number:          11EE
Signing time:             Sun 16 Jun 2024 00:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:09 +0000
Files and hashes:         1: 4WTR_sKm65nSX28ISX3qws06mP4.roa (hash: 8GNE7+y30MD5aM1Ec+H20qCtBOsHTruL2533Ue/4QEc=)
                          2: 5pK3xn3RCSbk28U7jV8jcGcESU4.roa (hash: h44wKcfskSFru8PL9R92s4SZAdR+vmjR3VnoWV+IDTQ=)
                          3: 6jSVWjzpYwtKwT5RER4P6GfXqIA.roa (hash: EDAw318H8efckzY5u3R17wkx92dNwwNk7XRygZcsJZg=)
                          4: CahWVKP_0bIEKAfTmMtB4qo7BDc.roa (hash: iNIpk6kDPIYfwV0h3DMiLTGPePxwscztM50ez7AXK2M=)
                          5: HYtlY-2j_vSeX_uq2SGHzBognak.roa (hash: 2HncDdj5ZCAS6DrPCX1fVuqXTSr2hGtL+sP3suTpTwg=)
                          6: ItAidq3sGRivBWnzKcWHv-cD7G8.roa (hash: 72z2D8OfvpJHzui7MX33dOz/z4gXRUgII6B4X4MWPeY=)
                          7: M0tZkzEB-l6x3EnB5p7mc2j91X8.roa (hash: SNi1TbU6dM9XMLc93mDEYrtbjMTIMhyhyeG5hAbx344=)
                          8: RSB-EpGcYmQqvCP-_BMVPLhK9Ks.roa (hash: MzdnDNmX9sqic4qV75otVvW5P1tM1d7/bzN2H6IaQR4=)
                          9: SdaG1RUEHlXcZNj5OsLUlcmslQM.roa (hash: fAyJgcwRz9/whIxsTCHa+XB94tUVRGhIK4b3BVgxI68=)
                          10: TDxmdUodxC01LUCz-tTkywx87Sg.roa (hash: CQGzfI1i1yJkz1Smpy/O7ZObykHZ/tzRPlR5Rg93DD8=)
                          11: XNlhcLkLDurD8O7vESTK-nzs2Yw.roa (hash: iOznDb8OFv5UyI15UM2/OaQUDebPbBS2HTjA6EN6A/Q=)
                          12: Ywh2-3KIoOsu5EdBQ5QNJs0HDqw.roa (hash: yY7zjKPTo3zmJ1WuCe9EEHgZ0/LrVMCUBOoAIdt35aM=)
                          13: ZIn96X5OvK-g4P0h-1dlUB5coaw.roa (hash: rI5UuZ0o2bUkkTyQ9sMOnKVDt6bMLQvz0fya4XOB7zA=)
                          14: ePe7G_jdSjKbB1Uz720fv_BYuMQ.roa (hash: WfA2uaIcb68XATM/Q/1gprXXV45s5CHzeZMPsBePt9I=)
                          15: nnfKzFjuayeWVX0R4afQKe02SNI.roa (hash: pz2QXz+J7Zh87iJT3LJvKHTJAF1aP919m7VYj0ndx2U=)
                          16: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: l5tNc9Nxz0tDtXO2NFZkWjZy0KUAOoiSSi7JRvn2Yic=)
                          17: vAW17GDaUkTUMZuOdGo8sHl_ETY.roa (hash: GrIhvYqH2pNqXS9qR0GcsVok7mJKdJvSyFUUcQBmyPc=)
                          18: vogq3NHUqKHUvj-hdw2XqWWT_uE.roa (hash: LqlqEik9pTeEz+KOg2q6xCeUZGhz+jlMBxP0LfH9dj4=)
                          19: zhwqWaOe_xsyv2EvMb848WZXIos.roa (hash: 3QRSYPX4Owb4GOR/4NIUBkUeugP7SpSKH0ov8V2bEe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:07:22:bc:89:db:df:9f:e3:a4:97:e9:56:c8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Jun 16 00:01:09 2024 GMT
            Not After : Jun 17 00:01:09 2024 GMT
        Subject: CN=1e3b22b44898d7f9c149bcd8326b4c44d1a7938c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:62:5c:12:40:ca:4d:5b:75:65:b0:a6:bb:
                    da:a6:18:9c:6f:17:0a:dd:9a:74:b3:8b:31:54:46:
                    8a:ae:8f:d7:59:05:01:da:9f:9a:86:43:b8:aa:2a:
                    0f:f0:8d:20:07:11:ac:b8:0d:08:49:c8:00:76:98:
                    36:30:66:dc:f5:7d:19:57:bc:7b:92:d6:08:c3:a7:
                    a7:c3:03:8d:d2:d4:e8:16:62:e6:9b:a2:f9:51:3f:
                    83:92:46:f0:d7:14:37:2e:6f:4f:cf:ab:06:b4:40:
                    42:af:fe:36:7f:d5:f1:13:6a:72:bc:2e:e2:24:dd:
                    76:bc:0a:d2:4a:7f:fb:43:f1:ba:7f:ba:11:05:8f:
                    4e:3c:03:cf:bd:dd:c3:03:25:fa:b0:b2:f3:71:f5:
                    7e:dd:b6:7a:72:d3:b2:55:4b:1c:0f:c5:66:01:a7:
                    35:01:97:31:b8:70:07:15:94:14:e2:9d:5b:9f:8b:
                    d7:27:c8:2d:b9:3f:b5:fd:7b:20:28:9d:f6:a6:17:
                    3e:80:ec:f5:df:d5:a8:99:60:d4:4c:74:bb:52:e3:
                    85:73:4b:ba:fe:f5:39:52:97:bc:cd:b9:9b:1b:97:
                    bd:10:11:bd:96:c7:01:df:3e:a7:4c:c0:c5:89:cc:
                    09:de:8c:78:a4:d7:69:65:cc:54:ee:08:f9:b6:92:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:22:B4:48:98:D7:F9:C1:49:BC:D8:32:6B:4C:44:D1:A7:93:8C
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:a2:d9:38:5b:42:68:a4:d0:dd:d3:d8:2b:a5:80:24:5d:
         8b:ba:ad:5e:76:09:03:1c:c3:15:d0:72:3a:a8:b1:22:61:12:
         2e:ea:c5:93:e5:6a:ef:4e:d0:27:13:b0:b1:ca:d8:1f:17:4e:
         0c:02:58:f8:58:81:87:e9:c3:42:49:af:c1:0c:ee:a0:a3:d9:
         af:b1:4e:6e:b1:8e:af:a0:de:59:fd:2a:b9:e5:8c:89:bb:d7:
         f1:22:b9:86:e2:63:04:2a:79:b3:1c:de:07:be:38:01:2a:f1:
         f6:d4:5e:7a:3a:ac:c4:72:9c:14:92:96:9a:2b:b9:12:94:30:
         c6:96:c6:d5:4f:29:2c:b2:2a:2c:c7:d5:ff:1e:88:e2:22:1c:
         d3:86:e6:16:bc:63:cf:47:3b:1f:8a:85:42:7c:c2:d1:e2:7f:
         9e:83:cd:d2:dd:2f:5f:78:2c:6e:41:77:df:c8:22:ca:c3:f1:
         5f:36:af:af:38:2c:d0:b5:98:e2:ed:d6:26:72:f1:e8:cb:9c:
         2a:b4:4b:b9:f8:17:a4:b1:66:82:5b:43:6e:61:d3:a0:aa:18:
         cc:63:82:ab:80:3f:2d:e9:6e:70:dc:08:32:08:d7:7f:12:4e:
         af:0c:8d:9a:10:57:f4:02:d9:b3:b3:f7:67:5e:5a:58:1f:ac:
         6a:6f:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:46 2024 by rpki-client on console-fra.rpki-client.org