Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
File:                     3f3F4pPp59caluYcPb9oWF1PgwU.mft (raw, json)
Hash identifier:          W8GVLjHrw+9pIGkj1+ALkPwOCCvxKz0YuusSBXg+U0s=
Subject key identifier:   C0:6D:9C:DA:CE:F1:4C:73:4B:6B:BB:00:72:38:97:5F:B6:E9:3B:E3
Authority key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Certificate issuer:       /CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Certificate serial:       01901DEB4E2BA221C4DEBF5A6ACFD63164AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
Manifest number:          016E
Signing time:             Sat 15 Jun 2024 22:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:18 +0000
Files and hashes:         1: 3f3F4pPp59caluYcPb9oWF1PgwU.crl (hash: 98ZZBRWRuMAqkAEmwMM0ts0kawEM+NF7pjxui0jdzZ0=)
                          2: WEF3dHGWAn9og_hCPcmwAnwYytU.roa (hash: j8i+Fy+c1XJOd4cadNEH5z/X3oEtrVKbIFK4GNJ7ctY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:4e:2b:a2:21:c4:de:bf:5a:6a:cf:d6:31:64:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
        Validity
            Not Before: Jun 15 22:01:18 2024 GMT
            Not After : Jun 16 22:01:18 2024 GMT
        Subject: CN=c06d9cdacef14c734b6bbb007238975fb6e93be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:ff:7c:bf:aa:74:d5:a9:bb:0a:b2:a7:ce:
                    66:03:e5:40:63:9d:46:75:da:52:60:f9:3b:2f:16:
                    45:9c:a4:e3:d2:a2:79:e3:2f:09:0f:50:79:b0:54:
                    e1:24:7d:a0:b2:ab:84:04:65:7a:67:49:ab:f0:11:
                    01:1f:4c:12:35:8e:dd:72:36:fd:a9:b2:8f:13:fb:
                    f7:42:56:03:1c:e8:48:a7:1d:7b:03:8a:1f:38:b4:
                    7c:83:d6:32:5f:0c:55:58:fa:c8:08:cb:10:2d:31:
                    f1:38:d9:9f:d3:fb:f1:bc:10:ed:8f:0b:0e:64:b0:
                    38:0d:e9:11:06:f1:64:3e:d3:ca:e2:e2:19:a1:bd:
                    26:ea:28:66:b4:ca:58:95:49:f6:af:8c:1b:5d:f6:
                    61:98:10:35:20:84:5a:9f:97:e7:b0:25:aa:b4:33:
                    a5:c4:c7:61:9b:a3:09:85:a4:00:e2:fc:b2:34:8c:
                    51:e7:2e:55:2a:4a:7b:98:87:01:47:ff:9c:2a:ba:
                    75:d6:49:01:51:e3:7c:25:ee:e2:99:b2:ef:d9:32:
                    c2:76:ac:92:79:81:09:17:9d:82:cd:2f:55:cf:c3:
                    69:f5:5e:0d:c5:4d:cc:6b:11:d1:0c:40:90:6c:01:
                    85:a3:8a:87:fa:8f:58:46:b1:d0:8e:24:1c:c5:04:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6D:9C:DA:CE:F1:4C:73:4B:6B:BB:00:72:38:97:5F:B6:E9:3B:E3
            X509v3 Authority Key Identifier:
                keyid:DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:3e:1e:7c:97:98:ad:c6:ea:ee:36:97:b4:22:50:e5:d6:
         0f:72:bc:0d:5a:1d:54:43:55:d7:7d:80:01:03:0e:c6:b6:4e:
         a1:30:5d:a7:46:28:2e:07:4b:5c:4c:aa:33:8a:17:af:c4:e7:
         d2:7d:0a:11:5b:c1:6c:fa:29:56:3d:9f:bb:dd:c1:b9:4c:70:
         97:3e:48:c8:29:f7:4e:24:d8:b4:75:72:78:96:72:43:4a:67:
         6e:0b:f6:49:8d:71:4c:a8:fb:b7:35:28:8e:d0:e4:af:5c:4a:
         fd:a2:5a:13:9f:e1:83:4e:f3:8a:03:a5:a9:33:2c:41:f6:48:
         29:78:ba:8f:89:f9:41:ee:6a:11:0b:fc:10:98:2b:e6:02:a9:
         e6:c6:b3:c4:5c:a8:97:7b:07:78:85:a8:e3:dc:a8:60:b9:80:
         cf:24:08:d4:50:db:20:91:94:c0:43:0c:7b:86:62:a9:cc:0c:
         7c:c3:e5:76:f0:11:04:4c:d7:90:ea:60:08:7e:26:a6:71:46:
         d5:1b:08:01:42:99:3e:df:16:76:f0:b4:57:94:73:6e:80:ed:
         60:e1:b0:c8:5b:2c:52:84:78:0e:d3:87:54:44:31:77:c3:5c:
         fe:f7:c5:2d:d7:0d:c3:e5:7c:2d:37:46:8a:e5:0e:f0:49:99:
         ea:4d:2d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd604roiHE3r9aas/WMWSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmRjNWUyOTNlOWU3ZDcxYTk2ZTYxYzNkYmY2ODU4NWQ0
ZjgzMDUwHhcNMjQwNjE1MjIwMTE4WhcNMjQwNjE2MjIwMTE4WjAzMTEwLwYDVQQD
EyhjMDZkOWNkYWNlZjE0YzczNGI2YmJiMDA3MjM4OTc1ZmI2ZTkzYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qn/fL+qdNWpuwqyp85mA+VAY51G
ddpSYPk7LxZFnKTj0qJ54y8JD1B5sFThJH2gsquEBGV6Z0mr8BEBH0wSNY7dcjb9
qbKPE/v3QlYDHOhIpx17A4ofOLR8g9YyXwxVWPrICMsQLTHxONmf0/vxvBDtjwsO
ZLA4DekRBvFkPtPK4uIZob0m6ihmtMpYlUn2r4wbXfZhmBA1IIRan5fnsCWqtDOl
xMdhm6MJhaQA4vyyNIxR5y5VKkp7mIcBR/+cKrp11kkBUeN8Je7imbLv2TLCdqyS
eYEJF52CzS9Vz8Np9V4NxU3MaxHRDECQbAGFo4qH+o9YRrHQjiQcxQSvZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBtnNrO8UxzS2u7AHI4l1+26TvjMB8GA1UdIwQY
MBaAFN39xeKT6efXGpbmHD2/aFhdT4MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MWY3NWEtNWYyMS00ODk4LTk2M2Yt
YmRhOTlhYjEzZDk5LzEvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MWY3NWEtNWYyMS00ODk4LTk2M2YtYmRhOTlhYjEzZDk5
LzEvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNY+HnyX
mK3G6u42l7QiUOXWD3K8DVodVENV132AAQMOxrZOoTBdp0YoLgdLXEyqM4oXr8Tn
0n0KEVvBbPopVj2fu93BuUxwlz5IyCn3TiTYtHVyeJZyQ0pnbgv2SY1xTKj7tzUo
jtDkr1xK/aJaE5/hg07zigOlqTMsQfZIKXi6j4n5Qe5qEQv8EJgr5gKp5sazxFyo
l3sHeIWo49yoYLmAzyQI1FDbIJGUwEMMe4ZiqcwMfMPldvARBEzXkOpgCH4mpnFG
1RsIAUKZPt8WdvC0V5RzboDtYOGwyFssUoR4DtOHVEQxd8Nc/vfFLdcNw+V8LTdG
iuUO8EmZ6k0toA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:55:54 2024 by rpki-client on console-fra.rpki-client.org