Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
File:                     6LPu0cespjbWJFhSuALg5zdU32M.mft (raw, json)
Hash identifier:          AUZ7e0xV/wzXswle9TtX/C/LqJnZuNK9/ri6+q4Q3PY=
Subject key identifier:   07:DA:87:F1:E7:D8:A2:51:D3:A5:70:30:EE:EB:46:D5:5D:65:F3:5A
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Certificate issuer:       /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial:       018F983BE47ADF3DE616F3872019E9B94D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
Manifest number:          11BD
Signing time:             Mon 20 May 2024 23:00:12 +0000
Manifest this update:     Mon 20 May 2024 23:00:12 +0000
Manifest next update:     Tue 21 May 2024 23:00:12 +0000
Files and hashes:         1: 6LPu0cespjbWJFhSuALg5zdU32M.crl (hash: WQuXPGaSOsvRTDq3BTJyPs1jmKPAzN7m2J4pHHBZpEY=)
                          2: 8mmBdykCzEIM52JXiTdiPJWkHxY.roa (hash: dS4BaSDiV6A+GV85ywhzaQUSuZT1bO8aU7zBP0tmuGk=)
                          3: AOrjExiwLfzj1mFRT1dia8p2r94.roa (hash: IAVwHi+ohENMWLgoQSIVPsMoIwSsdIooD6gtqff9Q44=)
                          4: EBqvvJDk7JR4tFCwKvawsoTa1Sw.roa (hash: 1K8UJQNdmO06+zflMgoGEadPPOIqBcbxKM1YQjasVzM=)
                          5: PyGlY5U-eJ5Giw4iuiFahpe2kJM.roa (hash: m6vLBgNRgab2d5JPTqsj7IaONJ8dPANlVB3p1RvCDS8=)
                          6: QzJvEqwqOIC9zKVliV0R_H7jCj0.roa (hash: OldalhI3ec/d5CDfu9RKtnMw53qlEaVxIgw+A8rWo1g=)
                          7: hvo5_2FoKUXY_IENyiMS7ul5Hac.roa (hash: 5px8H2fkM0rNr0omRDExcTE37/mGlCQUblFEVZ5lrig=)
                          8: jnireA9zHaSPsYqlucfg5xYkgWs.roa (hash: 62A1OXlTmUSuixvcxPZ4xyWr1/13yxfD2sCIylZLPDQ=)
                          9: tLPsqXPyZTy3HLnWkqJM0Cydc9E.roa (hash: ovpgDhBDikxLCaZBA/ONLkOKIJ4DcI/ptS9C/p/PwqE=)
                          10: vpFo466X_Oj9WCoj-W-etS_BHCs.roa (hash: m4+gdGYPhrGhuIcIeSj8k3QPNBdUvguJHY9HkrvzYq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:3b:e4:7a:df:3d:e6:16:f3:87:20:19:e9:b9:4d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
        Validity
            Not Before: May 20 23:00:12 2024 GMT
            Not After : May 21 23:00:12 2024 GMT
        Subject: CN=07da87f1e7d8a251d3a57030eeeb46d55d65f35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:45:07:2c:80:a9:44:8f:9a:a0:e3:e6:d1:cf:
                    b7:a7:84:0c:da:33:9a:04:84:b5:1d:63:f9:9e:5c:
                    ed:92:ad:5a:ae:c3:a8:38:50:fb:b8:ac:8c:9a:6b:
                    16:5c:78:25:23:6f:e4:4a:ac:91:1d:e4:82:c5:c4:
                    e8:3b:06:b4:c9:9b:5b:ce:ea:21:12:67:44:2a:a9:
                    5b:e9:3a:2a:5f:3a:c1:fc:45:51:57:2a:54:8d:1b:
                    7c:72:c6:f6:69:cf:71:60:8e:be:28:73:ee:a8:14:
                    66:e1:37:00:f8:cf:28:58:ff:63:d1:ee:66:af:4e:
                    26:2f:a9:22:8f:6b:be:de:43:9c:ea:cb:ea:34:83:
                    b5:a4:63:20:a7:b9:33:92:63:9d:bd:0f:4e:3b:66:
                    18:cd:ee:7c:f2:62:1b:bf:36:47:69:55:e9:34:20:
                    87:c3:8a:40:35:73:3b:07:dd:0a:ec:5d:06:92:3a:
                    ad:e3:da:c9:fc:5e:7a:37:c1:8c:03:1f:28:38:47:
                    2a:99:5b:59:aa:94:78:04:ef:f4:43:97:34:c6:73:
                    92:92:1d:7b:d4:b3:67:44:cc:97:6e:2b:c3:9f:e2:
                    66:0b:74:21:b1:13:00:57:9b:dd:b3:98:52:5a:67:
                    e7:9d:2a:9d:98:14:36:c0:04:4e:e4:e4:40:67:46:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DA:87:F1:E7:D8:A2:51:D3:A5:70:30:EE:EB:46:D5:5D:65:F3:5A
            X509v3 Authority Key Identifier:
                keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:df:75:93:b7:91:d9:d3:5f:ea:03:e5:54:b3:20:49:fb:
         b2:36:cd:61:12:1d:ac:c1:d3:17:7c:f7:69:ea:31:08:45:57:
         63:2b:09:d4:7d:a0:a7:7b:37:d7:23:1f:7e:78:69:69:8a:52:
         ad:43:cd:f4:f6:8d:63:41:68:51:03:5a:c7:2f:60:7b:c6:50:
         72:43:3d:33:cd:6a:6b:17:fd:99:1f:2f:e4:f2:f4:99:6f:9c:
         ec:ba:4c:ad:4f:0c:0a:97:03:ff:e2:00:af:b9:35:04:ff:4d:
         37:96:dc:56:90:95:15:f4:a8:5e:6e:ed:d4:28:41:53:da:dc:
         46:07:48:ea:30:b9:8e:f6:c3:aa:8b:f9:ac:84:a2:24:05:36:
         5e:16:49:bd:b9:07:5f:1a:07:21:36:e6:61:27:d5:8b:c5:88:
         e4:86:0e:24:90:58:37:a2:8b:d7:d5:0c:1f:b5:e7:1f:67:66:
         7f:16:ac:56:e8:ef:72:61:2e:38:aa:84:af:9c:26:54:34:e7:
         83:5c:bd:06:16:ef:81:7c:c5:aa:52:c0:98:34:76:84:4e:8b:
         0e:9f:38:66:77:41:be:bc:5d:d6:de:a2:b6:24:b7:bc:a5:7f:
         99:61:68:af:a5:2b:14:bc:63:17:31:db:29:d5:05:b0:83:ad:
         d4:ca:77:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+YO+R63z3mFvOHIBnpuU1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1
NGRmNjMwHhcNMjQwNTIwMjMwMDEyWhcNMjQwNTIxMjMwMDEyWjAzMTEwLwYDVQQD
EygwN2RhODdmMWU3ZDhhMjUxZDNhNTcwMzBlZWViNDZkNTVkNjVmMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EUHLICpRI+aoOPm0c+3p4QM2jOa
BIS1HWP5nlztkq1arsOoOFD7uKyMmmsWXHglI2/kSqyRHeSCxcToOwa0yZtbzuoh
EmdEKqlb6ToqXzrB/EVRVypUjRt8csb2ac9xYI6+KHPuqBRm4TcA+M8oWP9j0e5m
r04mL6kij2u+3kOc6svqNIO1pGMgp7kzkmOdvQ9OO2YYze588mIbvzZHaVXpNCCH
w4pANXM7B90K7F0Gkjqt49rJ/F56N8GMAx8oOEcqmVtZqpR4BO/0Q5c0xnOSkh17
1LNnRMyXbivDn+JmC3QhsRMAV5vds5hSWmfnnSqdmBQ2wARO5ORAZ0YwfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfah/Hn2KJR06VwMO7rRtVdZfNaMB8GA1UdIwQY
MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt
OTQ2NDA0ZWMxYWE0LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0
LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVbfdZO3
kdnTX+oD5VSzIEn7sjbNYRIdrMHTF3z3aeoxCEVXYysJ1H2gp3s31yMffnhpaYpS
rUPN9PaNY0FoUQNaxy9ge8ZQckM9M81qaxf9mR8v5PL0mW+c7LpMrU8MCpcD/+IA
r7k1BP9NN5bcVpCVFfSoXm7t1ChBU9rcRgdI6jC5jvbDqov5rISiJAU2XhZJvbkH
XxoHITbmYSfVi8WI5IYOJJBYN6KL19UMH7XnH2dmfxasVujvcmEuOKqEr5wmVDTn
g1y9BhbvgXzFqlLAmDR2hE6LDp84ZndBvrxd1t6itiS3vKV/mWFor6UrFLxjFzHb
KdUFsIOt1Mp3pA==
-----END CERTIFICATE-----
Generated at Tue May 21 00:22:45 2024 by rpki-client on console-fra.rpki-client.org