Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          SnoVlWGs4KiLUnAOxyJ5eEieBi4jMTEdVR8Hp70GZSA=
Subject key identifier:   3E:2D:E1:14:EB:22:72:E5:9C:66:94:99:F0:4B:F1:2E:1C:F3:77:98
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       018F89DB5FC5B4C76FB4767F34E034BEFEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          10D9
Signing time:             Sat 18 May 2024 04:00:06 +0000
Manifest this update:     Sat 18 May 2024 04:00:06 +0000
Manifest next update:     Sun 19 May 2024 04:00:06 +0000
Files and hashes:         1: 1-a9HCgtC8rwnGSQdSDzzUJ1SExk.roa (hash: VwHUlV0ZYJEWGnTj+5+h7kuAZnCdbJ8z9ls/DVYFoQ0=)
                          2: C_qSVLAdYkaTr9kXGmX-fAlxK_4.roa (hash: eIzYKGauYmrEQqxga1KehT2oRyMa6u7QXzxA8qufbhY=)
                          3: FF0BAb52t_eershlbZUR4juZHx0.roa (hash: QnoU5q6rWXbwsWIlRq+eKrrg8wZKEVngym0JAYxUVno=)
                          4: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: Vvw+CTJc2sYoV4a2O1h2Tuofr7jYIjfm1OmbyvUHWEs=)
                          5: N_dQkqVxBbicfLoPi5SqpyikUNU.roa (hash: XrW4KjhQW6JQfh4KdCkckoCjWvO0MhK2gV4J60DIw5s=)
                          6: OarbDUDhKItL63OO4A2RMjB4ius.roa (hash: lI+xRv2gMphdwp/HOh7yCYGTes1IjaaTU+L6uZAbmdE=)
                          7: stvqQUDIWwy8gwn-VASnX8Au3ys.roa (hash: iuFvtKc+dZVr7UwZE4PS+Cn3ywUFoD20mo3ZtrjoK+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 23:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:db:5f:c5:b4:c7:6f:b4:76:7f:34:e0:34:be:fe:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: May 18 04:00:06 2024 GMT
            Not After : May 19 04:00:06 2024 GMT
        Subject: CN=3e2de114eb2272e59c669499f04bf12e1cf37798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:bc:de:f5:eb:3a:ec:69:fe:e0:38:72:5c:
                    e3:4d:01:f0:e6:ca:91:e0:0b:cf:64:d0:69:86:be:
                    87:72:d1:98:8f:03:c3:71:25:d2:9b:bc:33:5f:59:
                    50:6a:e1:60:1b:32:a7:59:c6:5e:ba:bb:9f:b1:c7:
                    d4:96:22:8c:42:14:2e:fa:0d:86:36:80:9b:d9:c6:
                    c3:62:e9:36:c1:39:c7:ee:d1:9e:12:89:db:b7:b2:
                    83:3d:17:4e:46:71:d3:01:5b:57:82:1c:72:12:59:
                    4c:9e:27:8e:98:42:4b:92:27:34:ff:73:de:da:72:
                    af:4f:b4:3a:38:c2:96:37:38:64:eb:4d:0e:99:a4:
                    44:8f:ed:31:cf:85:85:41:48:47:de:df:a2:25:3d:
                    b7:ac:73:fa:be:8c:29:9e:68:ee:75:53:68:0a:19:
                    27:0f:d4:ed:42:79:b4:d0:f0:f0:3b:af:3f:dd:1d:
                    7b:e3:36:62:1a:4a:79:b1:39:84:c5:2e:62:45:b0:
                    d0:f7:57:c7:f3:76:ec:7f:32:9a:e5:f7:42:c1:5e:
                    b9:a6:3f:78:55:57:c0:82:22:c2:db:3a:c7:d7:e8:
                    6e:47:99:94:a8:f8:99:5e:31:1b:6b:d9:de:30:bd:
                    f4:2d:18:3c:e1:1c:07:9c:e7:1d:18:8e:fd:c4:c8:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2D:E1:14:EB:22:72:E5:9C:66:94:99:F0:4B:F1:2E:1C:F3:77:98
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:da:c1:c3:4e:c0:19:ca:47:0e:53:a7:3e:d7:13:74:06:cf:
         ed:60:e4:05:7a:36:12:28:97:32:44:89:0e:e8:2e:e4:67:f7:
         4c:31:bb:3d:9f:69:70:57:1c:63:82:be:c8:03:98:ca:7f:13:
         52:96:20:9d:4e:e0:8f:b6:48:46:f0:e1:c0:3b:cb:3f:83:3a:
         8b:e0:6a:f1:71:7a:db:c6:8e:1c:05:a6:21:9f:2c:78:fa:68:
         43:fe:44:38:22:07:6f:16:7f:ac:c5:fb:aa:c2:88:1b:9c:13:
         4e:e8:46:5c:63:8a:19:ce:ed:66:1a:42:bf:b2:98:fc:4c:8b:
         d5:53:61:97:77:53:0d:6e:bc:7c:5f:49:a3:b0:7e:bb:4c:40:
         23:ef:95:87:ae:dd:04:ef:78:2f:4f:8d:fb:5a:01:06:52:7c:
         6f:75:32:0f:7b:6b:9f:41:8c:12:e0:c9:5b:82:61:76:01:a4:
         98:45:d8:9d:87:79:5b:a0:19:55:83:dd:e2:ce:e5:e9:61:46:
         84:44:cd:19:64:53:a5:36:42:ba:50:5c:d1:86:4d:d3:f6:47:
         e2:f2:41:65:ad:10:aa:39:db:7c:04:01:ed:cc:78:22:2a:b9:
         dc:51:4f:08:70:24:30:d3:54:b5:af:c7:5f:64:c6:53:90:a6:
         c9:d3:01:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+J21/FtMdvtHZ/NOA0vv7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjJjZmQyNmVjY2YyODk3NTczOTljYzk5YzE3ZDFjYjQz
NTc1MzUwHhcNMjQwNTE4MDQwMDA2WhcNMjQwNTE5MDQwMDA2WjAzMTEwLwYDVQQD
EygzZTJkZTExNGViMjI3MmU1OWM2Njk0OTlmMDRiZjEyZTFjZjM3Nzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQG83vXrOuxp/uA4clzjTQHw5sqR
4AvPZNBphr6HctGYjwPDcSXSm7wzX1lQauFgGzKnWcZeurufscfUliKMQhQu+g2G
NoCb2cbDYuk2wTnH7tGeEonbt7KDPRdORnHTAVtXghxyEllMnieOmEJLkic0/3Pe
2nKvT7Q6OMKWNzhk600OmaREj+0xz4WFQUhH3t+iJT23rHP6vowpnmjudVNoChkn
D9TtQnm00PDwO68/3R174zZiGkp5sTmExS5iRbDQ91fH83bsfzKa5fdCwV65pj94
VVfAgiLC2zrH1+huR5mUqPiZXjEba9neML30LRg84RwHnOcdGI79xMieSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4t4RTrInLlnGaUmfBL8S4c83eYMB8GA1UdIwQY
MBaAFBZiz9JuzPKJdXOZzJnBfRy0NXU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTIt
YjcyMzE5NDFmYzNhLzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTItYjcyMzE5NDFmYzNh
LzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1NrBw07A
GcpHDlOnPtcTdAbP7WDkBXo2EiiXMkSJDugu5Gf3TDG7PZ9pcFccY4K+yAOYyn8T
UpYgnU7gj7ZIRvDhwDvLP4M6i+Bq8XF628aOHAWmIZ8sePpoQ/5EOCIHbxZ/rMX7
qsKIG5wTTuhGXGOKGc7tZhpCv7KY/EyL1VNhl3dTDW68fF9Jo7B+u0xAI++Vh67d
BO94L0+N+1oBBlJ8b3UyD3trn0GMEuDJW4JhdgGkmEXYnYd5W6AZVYPd4s7l6WFG
hETNGWRTpTZCulBc0YZN0/ZH4vJBZa0QqjnbfAQB7cx4Iiq53FFPCHAkMNNUta/H
X2TGU5CmydMBew==
-----END CERTIFICATE-----
Generated at Sat May 18 04:42:11 2024 by rpki-client on console-fra.rpki-client.org