Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          CIRohFSEnUM2d2TzSWpHoUxf67oi31T1rF/v4rfP3E4=
Subject key identifier:   FF:8D:65:B3:66:C1:2D:7D:62:7D:B7:54:13:EF:57:11:D3:CE:6E:59
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       01901E21BBFBF2DB6FB6DD617D8169261F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          05D7
Signing time:             Sat 15 Jun 2024 23:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:45 +0000
Files and hashes:         1: 4BwCUuKMNHA8_c11opY1y5DHRms.roa (hash: ORxZ2V8wJnqnpNLrKaXtL4EZ44tJFOaDGenY+FNx7SA=)
                          2: 4VC1NHlhgHd5DpZ2mSCEN3qz_1M.roa (hash: odXzX8/rxsLm7SAqPx9ucfP+pMsvnN8sWTNTjlCoS+o=)
                          3: 9FM8Dxsu-DAs5PrINAaJpT3aHoU.roa (hash: EyDSZdPRe/uzwW1Ie5PyH1NdsnHRJJ/Mc7yBre9PDOc=)
                          4: DuzRugEDu3E00qO1Eu_kNtxi2sc.roa (hash: uBAiNyJXAYX3E4e0e51jDT7WX2rc5PVnjZu8i4ddhmY=)
                          5: PfGqNJR3Ud1M4uoZ-gbjCTC5TK4.roa (hash: 7MyJpqcLGsgvpRCFSwkFxQnVe/GCql+YMbdaUPvZxGk=)
                          6: TQ9IKdKglp7c6npPHqXVI3mwNUw.roa (hash: ExBw/OPrqngAXptHcokOTqQG2hMWHuh/c3vbL8cp5Sw=)
                          7: VyhrDVR9Mg0l1Sz6pfUFF04fyHc.roa (hash: LJreRFoW5ALThA3JrUkFpTZ1084ijqen8wivpdNCFU8=)
                          8: Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa (hash: w/wPinp8Kvv7g5wlrw0ISmup7PyxK6QypVHK8dQ3JcU=)
                          9: bwLcB4QMwEb0Ra37b6n8hFIn1Ss.roa (hash: kKDz11tcuGZCiEbaZCx8KbnMj/9yntCddovOspalB8w=)
                          10: e-jj--13dQl2SKWjp6jMvg6moxc.roa (hash: 7T2+zdjkNcdArb+A3nugWQyraqdC/hbwLAqhkCLtG6M=)
                          11: fPMOD50p7f8VOuNLZG-FDXHThec.roa (hash: 8z3cuA7EtBLaTAhgxoKw2t2+AAHUPP6yvVAECUTimeE=)
                          12: jrvYIgePqRYuppLQY17_MEDgICQ.roa (hash: 4adPV6KNbAgofQQpNqb8oI5UkSieXcON5O56zj+hbjY=)
                          13: lvMeUxwjBWNwdWb6qADIHGHulGM.roa (hash: +bJT2RUUm/RKHucZk1Lk/oUQu6PlCQCIBC36z8qezgs=)
                          14: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: Obs/elCa66FpWB4u6Q5+AgMo+zEk+E/6Oc22ax1hTIg=)
                          15: niSmBpfdzlepBpmmctXjBmJnGKA.roa (hash: cLCqb0+4/FgUSLPIL/nnP+rtn+oP+AY9TZDYKDHOxuE=)
                          16: nlRNapCXU-uiiGyi5VN4b74s2Bc.roa (hash: 4JCXFlthYhp5yFOvcYg+IIjx+EX5pryW30R4qEzjdmU=)
                          17: yxWxoZ9MX8ZoUyhLS8fsmCsStv0.roa (hash: bD98P+c7QHCtWnLECPPs5qhRhAWvpIV1VQNdW0PTazA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:bb:fb:f2:db:6f:b6:dd:61:7d:81:69:26:1f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Jun 15 23:00:45 2024 GMT
            Not After : Jun 16 23:00:45 2024 GMT
        Subject: CN=ff8d65b366c12d7d627db75413ef5711d3ce6e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:5a:47:fc:f2:70:f3:cb:e7:5a:3f:24:6f:
                    82:5c:0b:2d:28:23:c1:6a:95:43:6d:45:68:8c:d2:
                    b2:2a:ac:ee:04:f0:36:b6:bf:b7:a2:99:c5:b3:85:
                    6f:87:59:86:64:7e:f9:67:d1:18:41:6c:e0:17:eb:
                    d5:ec:9d:7c:58:3e:1e:e0:c0:d5:ef:95:7e:b9:6f:
                    e8:88:6a:42:3b:d7:e8:73:b7:4f:dd:94:fb:30:14:
                    4c:94:0b:45:2e:26:b2:77:1d:c2:04:fb:a8:25:7d:
                    7d:df:a3:cb:c8:19:cf:ab:00:5b:7f:b9:34:aa:7c:
                    bc:a1:d3:41:a1:6e:64:c2:fb:c6:dc:03:ab:d5:b6:
                    06:6b:70:67:9c:09:7e:aa:fc:ce:43:0c:74:25:8f:
                    43:66:f4:6a:09:28:a4:c6:db:89:20:07:66:60:1f:
                    57:1b:79:8c:48:49:ac:09:0f:bb:2e:6d:8f:2b:b9:
                    15:d6:b1:58:1b:ac:66:71:ea:9c:f9:24:5f:29:2b:
                    6d:e1:db:6c:fa:74:41:74:06:30:ff:e1:38:1d:38:
                    05:f4:63:29:1d:dc:3d:a0:52:bb:9d:d1:fb:e1:ee:
                    99:b9:e1:08:4d:9f:c2:9c:d2:0b:44:39:09:6d:f6:
                    9f:0d:70:cf:cd:a5:f1:b5:bc:70:05:70:f1:71:9b:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8D:65:B3:66:C1:2D:7D:62:7D:B7:54:13:EF:57:11:D3:CE:6E:59
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:79:ca:bd:8b:96:4c:53:69:af:54:74:14:d7:85:dc:70:
         af:ee:b1:04:c7:6a:dc:94:59:4f:e1:44:4c:a8:42:b6:6e:2c:
         71:61:a1:6f:32:00:1b:24:15:7e:65:00:db:cf:24:38:71:c5:
         ad:85:65:b3:e3:fa:6c:54:78:a4:e3:21:38:15:6f:2a:0d:1b:
         19:dd:6b:27:2d:00:9a:ab:e3:1c:b0:41:54:c1:04:6d:a6:19:
         20:ae:5f:c5:e9:fe:e0:44:70:bc:b8:89:c9:20:70:23:9d:c5:
         9c:53:7d:9d:4e:cd:89:d4:b0:f5:a7:df:07:6b:31:bd:a5:be:
         8a:85:4b:4d:67:fb:df:69:d9:05:04:7b:f9:55:1e:9c:15:b7:
         e3:0e:28:d1:76:c6:cd:9f:a4:2b:17:22:de:95:57:4b:1b:83:
         b2:e0:68:d1:41:bf:fc:51:eb:30:ec:24:b2:6e:02:a0:37:99:
         36:a2:a4:1f:c8:bc:76:db:6b:6c:ab:2e:19:75:a3:5f:f1:7d:
         37:fb:61:a1:0d:2f:87:ff:e1:e7:98:93:7d:f6:51:67:e5:b5:
         45:35:e7:d7:ef:29:3a:e9:5e:68:3f:8f:cf:ce:99:9b:de:b4:
         57:e7:a1:36:4e:5d:25:11:28:95:9b:ef:b0:94:7f:40:b8:d4:
         48:06:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:14:15 2024 by rpki-client on console-fra.rpki-client.org