Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
File:                     1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json)
Hash identifier:          uzFQzJ3Cld426fbIDgQUODo1XZJiZjOrb6Dxceb81So=
Subject key identifier:   CC:2F:6B:F7:7E:F0:25:A7:B0:51:87:AA:05:8D:39:40:76:37:7E:99
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       018F69ACE20465AB56BE6816BB4929E52B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
Manifest number:          0C00
Signing time:             Sat 11 May 2024 22:01:28 +0000
Manifest this update:     Sat 11 May 2024 22:01:28 +0000
Manifest next update:     Sun 12 May 2024 22:01:28 +0000
Files and hashes:         1: 0A9MVlYb1tjsrNsORKk3PC9tiJE.roa (hash: GczOky5lxmMlgd4wphbCnIUyt3FlaB7iH1T9vJmH8cI=)
                          2: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: CqBS3opXIl/M7/s5J4LPKt0WQ+vfe6TmiS+a4j/FLYw=)
                          3: 7wsQ8xTdEM0xmwIVM67-x1eExDM.roa (hash: JXW7HcjIuDaBl12Gi5XEOfxaiwoKEdc4DpQk+Vcxw7k=)
                          4: KaQbilE19oqJAZLaqPDdMMYurrI.roa (hash: /UFAbi5stq1T4O5uj7DjnI34M075liWEefkVH9aVZHA=)
                          5: M6UOqfJXqFcYTfchRFGdDbaGY5s.roa (hash: KRDo3+ThehRITJy11OX6jEFrlkauVGJU5o5zvy1cmVo=)
                          6: SOYUPrd_MyZ0G56cn5j8gr9prWs.roa (hash: 9CJ9bZ/pmhxeME8BVw47FGsRIRm0kguXhUoioMfaD1s=)
                          7: T6BVVCnXnBmnZcfwPeOOWMaGabI.roa (hash: H9VZZQ8ps96HFjVUc2c6kVdIUbYO5xyVy79rMb4KfJs=)
                          8: T8ivG5tjgJ81gCVaL5hHtrmfHUg.roa (hash: gR9WIpBAdEuNpjdxgoQQY83OS3sLGb/M7N8SJKqoki8=)
                          9: Ube-e0j4EPbyuwgrAHhm7N2a4gQ.roa (hash: WAykVKoWfAR0ceEd1FUZOoRLtK+HqIUUI3ghI3xaafs=)
                          10: VSH0MxUB9hpd5jTleyQgB7gasp4.roa (hash: NuwcJtOhFquv8DMV/LKpniRYEy0vWEv8hIuQPYXkMY4=)
                          11: WROlWVfrC6TIB_xRPJ_E-F6rMJQ.roa (hash: 7iFPXqK3UR2q1Ay4f2fMHp0snC9bh38fb4x/9lXiQJ8=)
                          12: iliJ_nG0T8uwGGUPlGMrH0Xcj20.roa (hash: SbFzRhmI+okvarbNZkgRpsxQvYz7QJFsmUAAIVyYeQE=)
                          13: kh0s0CIDLRKrxAkVDtjYE50Bpsc.roa (hash: h3UFiNAvDRD9QwHV9jv5CP8JVrp9MyCgy9MnnhaLtls=)
                          14: lInXuLkCOrUHlXD9UQfmT3i-_nU.roa (hash: I6F2vqiYCBsNMCiQWnT6wUkKO0eYOm4OjLC+Oa5xHgs=)
                          15: muR9XgvNafJgHFXFlLHv_Hy24Io.roa (hash: JObvKsM99hqa7Y5jhixJq+AoEDKUI+zs7HVrdatqOL8=)
                          16: twKC23FCJdpiEDvBQOfHoxL8tDU.roa (hash: sttuc67Dl/0X3+hhYdWSH2y66iHEcLJ+wtO5wTEWLSg=)
                          17: vP271nqs3TdY1QBeRpPbKlakKj4.roa (hash: fSWAV/B4A9nsV8oVDrqA6fOrxwD9yWDXjEP1rLKvsDs=)
                          18: x8Z4gjR9tXKTNc5MgeaPXr48V0k.roa (hash: VObmZ695iL3PXfUBAO0s6yrzx1AFSI3iJ81GaYlQEkA=)
                          19: zLY-AfgdrHPAam1xZCPfGVge0NM.roa (hash: i0AW06DQFdhcwngoWj7OToR6gOmyHhKbqlSSnVzo41w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:69:ac:e2:04:65:ab:56:be:68:16:bb:49:29:e5:2b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: May 11 22:01:28 2024 GMT
            Not After : May 12 22:01:28 2024 GMT
        Subject: CN=cc2f6bf77ef025a7b05187aa058d394076377e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:2b:ad:cc:1d:24:23:f4:d7:7e:b9:fc:bd:
                    9f:e0:f8:df:f9:b9:01:48:0a:d3:a6:4a:8b:7d:cf:
                    32:c2:8e:07:72:e9:06:f9:98:b9:26:3c:a5:f4:54:
                    32:54:9e:76:b8:16:86:f8:27:f8:80:3f:ac:e7:c4:
                    05:30:cf:f9:7f:5c:1a:fb:be:fc:db:a3:18:45:37:
                    25:33:26:c5:75:fd:69:55:e9:c0:11:17:c3:70:3a:
                    2a:7c:be:ea:cf:22:19:34:0d:23:eb:03:27:d1:64:
                    75:74:c1:5c:1e:63:4d:10:ca:88:23:69:25:7f:6d:
                    b4:77:8b:05:42:5b:d5:88:c0:e1:c7:a0:a5:75:ad:
                    ce:3e:bd:68:ab:cb:06:fb:95:42:ab:e3:63:9e:3b:
                    db:5c:f4:39:4c:6f:c8:f1:f5:ac:be:7b:ae:86:7e:
                    9c:9d:2b:42:0e:44:8b:e1:42:97:8e:25:7d:26:8e:
                    7e:fa:d5:47:8a:ff:26:8c:54:fb:59:dd:74:94:2c:
                    48:8a:3c:c6:1e:5c:8a:81:fe:e7:f1:78:1d:39:ea:
                    f0:58:20:c6:36:50:70:64:e1:f2:8f:24:33:bf:1d:
                    23:67:10:2f:cd:12:8c:79:ce:ae:34:53:51:c6:e2:
                    e1:3c:94:d9:ca:2f:9a:bd:31:57:16:10:03:f1:b4:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2F:6B:F7:7E:F0:25:A7:B0:51:87:AA:05:8D:39:40:76:37:7E:99
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7b:fb:32:1e:bf:c3:02:d4:db:c4:91:26:6c:f1:b3:0e:a8:
         91:e8:d1:41:c4:d1:68:94:5a:f9:57:eb:7a:4d:d1:96:1c:90:
         c7:fc:91:1f:16:59:73:67:16:cd:0c:58:c5:40:cf:0a:e3:75:
         b3:72:87:7d:00:d8:7c:02:de:db:d1:79:9f:bb:5e:58:da:51:
         2c:81:4e:9e:43:aa:bd:3a:a5:28:9b:0a:d7:6e:3a:f7:75:69:
         7d:69:09:e7:37:6d:c8:97:01:60:50:d4:4c:77:28:1b:64:79:
         ae:5b:a5:b0:c6:22:04:af:5c:90:da:64:75:1b:6d:0e:8f:a9:
         94:1a:f9:00:ae:ed:7e:70:9f:43:30:dd:a1:37:e7:c1:0b:ba:
         b9:4c:e6:ed:a8:33:7a:62:45:12:31:b7:fb:21:55:23:6f:0e:
         e8:88:17:b3:3f:f9:94:63:76:6b:cf:67:30:29:af:d4:74:84:
         76:83:70:50:71:a6:ef:5b:45:5d:62:0c:1d:34:29:e9:f8:58:
         65:a3:34:94:cc:ae:96:da:a5:c6:f8:af:3c:e9:9d:53:ab:e4:
         12:d2:20:15:75:80:ce:73:67:ad:7f:31:9b:32:a5:f1:d0:59:
         05:69:64:b1:d6:4d:e3:bb:28:15:47:b1:e9:cf:52:ae:cf:e3:
         25:29:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 04:09:50 2024 by rpki-client on console-fra.rpki-client.org