Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          VombwD5g+MhsqJpAJiRqU/pY+jvcwpDMjTgGrhsIxm0=
Subject key identifier:   82:96:5F:1E:F4:C1:0A:A5:A1:C0:68:0D:6B:2A:53:CF:64:E5:55:88
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       019044C16BD6137CE62BC479F49B84B0ABCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          05EB
Signing time:             Sun 23 Jun 2024 11:00:45 +0000
Manifest this update:     Sun 23 Jun 2024 11:00:45 +0000
Manifest next update:     Mon 24 Jun 2024 11:00:45 +0000
Files and hashes:         1: 4BwCUuKMNHA8_c11opY1y5DHRms.roa (hash: ORxZ2V8wJnqnpNLrKaXtL4EZ44tJFOaDGenY+FNx7SA=)
                          2: 4VC1NHlhgHd5DpZ2mSCEN3qz_1M.roa (hash: odXzX8/rxsLm7SAqPx9ucfP+pMsvnN8sWTNTjlCoS+o=)
                          3: 9FM8Dxsu-DAs5PrINAaJpT3aHoU.roa (hash: EyDSZdPRe/uzwW1Ie5PyH1NdsnHRJJ/Mc7yBre9PDOc=)
                          4: DuzRugEDu3E00qO1Eu_kNtxi2sc.roa (hash: uBAiNyJXAYX3E4e0e51jDT7WX2rc5PVnjZu8i4ddhmY=)
                          5: PfGqNJR3Ud1M4uoZ-gbjCTC5TK4.roa (hash: 7MyJpqcLGsgvpRCFSwkFxQnVe/GCql+YMbdaUPvZxGk=)
                          6: TQ9IKdKglp7c6npPHqXVI3mwNUw.roa (hash: ExBw/OPrqngAXptHcokOTqQG2hMWHuh/c3vbL8cp5Sw=)
                          7: VyhrDVR9Mg0l1Sz6pfUFF04fyHc.roa (hash: LJreRFoW5ALThA3JrUkFpTZ1084ijqen8wivpdNCFU8=)
                          8: Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa (hash: w/wPinp8Kvv7g5wlrw0ISmup7PyxK6QypVHK8dQ3JcU=)
                          9: bwLcB4QMwEb0Ra37b6n8hFIn1Ss.roa (hash: kKDz11tcuGZCiEbaZCx8KbnMj/9yntCddovOspalB8w=)
                          10: e-jj--13dQl2SKWjp6jMvg6moxc.roa (hash: 7T2+zdjkNcdArb+A3nugWQyraqdC/hbwLAqhkCLtG6M=)
                          11: fPMOD50p7f8VOuNLZG-FDXHThec.roa (hash: 8z3cuA7EtBLaTAhgxoKw2t2+AAHUPP6yvVAECUTimeE=)
                          12: jrvYIgePqRYuppLQY17_MEDgICQ.roa (hash: 4adPV6KNbAgofQQpNqb8oI5UkSieXcON5O56zj+hbjY=)
                          13: lvMeUxwjBWNwdWb6qADIHGHulGM.roa (hash: +bJT2RUUm/RKHucZk1Lk/oUQu6PlCQCIBC36z8qezgs=)
                          14: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: +rjvhcNI3jA74CSdN4cDmpCAnarCA6kqbe8wJak+s48=)
                          15: niSmBpfdzlepBpmmctXjBmJnGKA.roa (hash: cLCqb0+4/FgUSLPIL/nnP+rtn+oP+AY9TZDYKDHOxuE=)
                          16: nlRNapCXU-uiiGyi5VN4b74s2Bc.roa (hash: 4JCXFlthYhp5yFOvcYg+IIjx+EX5pryW30R4qEzjdmU=)
                          17: yxWxoZ9MX8ZoUyhLS8fsmCsStv0.roa (hash: bD98P+c7QHCtWnLECPPs5qhRhAWvpIV1VQNdW0PTazA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:c1:6b:d6:13:7c:e6:2b:c4:79:f4:9b:84:b0:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Jun 23 11:00:45 2024 GMT
            Not After : Jun 24 11:00:45 2024 GMT
        Subject: CN=82965f1ef4c10aa5a1c0680d6b2a53cf64e55588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:ea:7d:9a:24:89:12:52:df:57:52:79:ea:
                    57:8f:3a:ad:7f:89:70:7f:cf:b2:d9:d7:91:cd:57:
                    69:98:5b:9d:5c:ac:d2:6a:30:cf:f2:cc:a6:01:71:
                    b2:76:bf:12:5b:31:a9:e6:b1:84:b5:fa:f1:55:72:
                    e1:ef:2d:a8:b0:f5:ec:e6:1f:0a:91:5f:cd:21:9b:
                    d3:8b:71:34:b9:24:7c:41:5c:99:7f:96:5d:fd:33:
                    d1:1c:bf:98:51:f0:15:0b:be:5b:65:3b:db:eb:ce:
                    09:f7:14:66:00:46:c6:29:52:18:41:12:18:46:a3:
                    7b:d0:7d:8d:62:dc:af:5a:83:70:3c:14:88:00:41:
                    69:85:e7:ab:4a:8e:cc:9c:6f:92:a8:48:00:71:86:
                    6d:51:26:d5:fd:07:61:fe:da:f1:3a:38:35:ca:08:
                    9a:3a:50:b2:02:71:f0:96:f9:69:7b:c4:c6:ec:d3:
                    95:62:95:78:25:85:08:40:e9:21:82:8f:e3:84:7f:
                    a5:89:e6:77:04:b2:87:64:11:4d:56:72:e3:ce:2c:
                    bf:31:63:87:4f:90:da:c1:ba:61:00:84:7a:af:aa:
                    4e:88:d4:d3:29:92:49:1a:57:97:2e:56:42:ff:bf:
                    6d:b7:22:bc:bd:98:7f:e0:05:8c:b3:4b:8e:23:45:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:96:5F:1E:F4:C1:0A:A5:A1:C0:68:0D:6B:2A:53:CF:64:E5:55:88
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:67:d2:24:50:65:7a:24:8c:db:fb:03:21:4b:fd:8b:96:
         e3:7f:22:37:cd:05:07:8f:2c:94:0b:99:b1:60:30:f7:ba:60:
         65:9f:3f:c9:c0:19:a4:10:ac:fc:ab:26:08:2c:ce:b9:54:29:
         81:f8:06:e8:b5:b1:09:64:41:8e:d3:11:6b:b8:82:79:59:e0:
         30:8d:43:62:4a:61:22:e0:b9:1b:1d:0d:0e:5c:7e:5e:40:ab:
         30:5c:43:70:49:8a:99:ae:47:18:0f:3e:09:18:34:13:c9:48:
         66:6c:31:54:5c:85:ed:09:42:a6:e5:1f:48:ed:c4:e4:d9:57:
         5f:2d:7c:d8:36:13:f0:7d:3f:72:65:6c:ce:5b:eb:10:a3:0b:
         66:4c:c9:2c:73:7b:05:2a:78:89:77:79:ad:9d:ed:48:28:54:
         e8:bc:f7:67:a4:f0:82:52:e1:76:47:11:9e:12:10:7e:8a:8c:
         44:16:5f:43:26:17:0e:33:75:96:19:e4:35:87:19:97:d6:67:
         d5:56:03:8e:2f:a8:a1:0e:78:d7:94:1f:1a:4e:4e:4e:b3:bf:
         2a:7e:28:2b:b0:b4:19:68:e6:a3:f0:ea:43:9c:f3:9e:73:80:
         94:62:a0:b4:52:21:b4:a7:6d:99:87:cf:b1:f1:14:80:cb:ae:
         79:cc:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:30:19 2024 by rpki-client on console-fra.rpki-client.org