Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File:                     xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier:          p32I1LXWY7jAZ1IuEjXW+6mKNFTHNjefnRahIPvDc3Y=
Subject key identifier:   9F:8A:D5:86:7A:2E:CE:E4:A2:90:71:0F:9E:83:F8:31:93:78:86:34
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer:       /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial:       018F915EA78A3E49E80DB3C56595B01216A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number:          0EE2
Signing time:             Sun 19 May 2024 15:00:50 +0000
Manifest this update:     Sun 19 May 2024 15:00:50 +0000
Manifest next update:     Mon 20 May 2024 15:00:50 +0000
Files and hashes:         1: 5TZ4yVQYujWe3SO9F2D8oY_YL_o.roa (hash: o38Rl6b70I161OQyBceNmoSl4NYw8zZ88ksTJ8t9bCc=)
                          2: o1LgdYBt9VC-Km2SOadvRSsCJZ4.roa (hash: vOWUMso7dWlMYUWLjY76PtaPe8jl4W7ZtN9q+vfEkIY=)
                          3: whN2rlu4LvClQ0WO0AhW7cblk0s.roa (hash: MU4Pfz+w/7f7KG0Vj41Pvgn3i/2O9klu372ouIAUAM8=)
                          4: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: UEARJxNRhMp6Shm+wvtMajVBv5zBuTWL6Q3ACtZKc90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:5e:a7:8a:3e:49:e8:0d:b3:c5:65:95:b0:12:16:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
        Validity
            Not Before: May 19 15:00:50 2024 GMT
            Not After : May 20 15:00:50 2024 GMT
        Subject: CN=9f8ad5867a2ecee4a290710f9e83f83193788634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:60:6e:fa:be:1b:7e:13:e0:d2:84:17:99:
                    56:11:db:e8:81:76:26:73:e4:82:d8:b1:12:24:3c:
                    a7:b3:cc:9d:56:6e:ee:31:56:71:41:e6:fd:e8:16:
                    54:2d:44:14:19:2c:5a:9d:e5:d6:0f:66:36:33:43:
                    17:1f:35:ba:af:97:f6:fb:f1:04:03:47:0e:ec:30:
                    b8:42:a2:7c:23:01:48:38:03:bc:3e:3e:0d:e6:58:
                    6c:58:1a:9c:85:56:af:96:99:48:89:0d:fd:7a:01:
                    1c:dc:1c:eb:85:0a:79:c5:2d:e1:b0:24:16:18:52:
                    ff:9b:e2:cd:5c:c6:84:e1:07:7d:2f:cc:95:69:8e:
                    39:a2:56:9a:57:73:80:77:29:49:2d:d4:da:74:f5:
                    c7:01:25:e5:35:db:22:c7:2d:41:67:4c:22:6a:36:
                    ea:e4:37:1e:05:a9:a2:44:fa:76:ee:a8:7a:42:9f:
                    a4:93:8a:f3:c5:81:51:c4:07:07:40:d9:0c:fc:0f:
                    d1:21:1a:43:d9:58:2a:23:61:07:2f:b2:22:b6:59:
                    e6:a5:0d:45:5f:7e:ae:43:ec:15:66:d7:29:dc:99:
                    4c:7b:c8:08:67:be:b0:cd:ab:62:6a:34:bd:dd:be:
                    b8:53:1e:80:d8:3c:3b:b9:0d:dc:cd:ac:a2:50:b4:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8A:D5:86:7A:2E:CE:E4:A2:90:71:0F:9E:83:F8:31:93:78:86:34
            X509v3 Authority Key Identifier:
                keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:07:39:d4:cb:4d:71:cb:dd:82:b6:e2:38:49:3e:1d:08:
         ac:51:6f:97:b2:a4:22:18:43:f3:78:ce:67:3b:a5:79:de:4d:
         c9:87:50:06:47:58:e8:64:c2:80:16:49:5d:f4:40:c2:1a:e5:
         fb:fa:3b:63:c5:8d:10:ad:a4:99:a2:24:91:67:ac:94:80:ee:
         11:22:60:70:72:dd:23:26:12:d1:9b:81:fb:fc:c6:88:34:75:
         63:de:45:b4:4c:19:16:78:f0:b0:31:f2:71:bf:f8:b4:d1:dd:
         b8:95:c3:2c:78:c5:82:e2:93:6e:4d:6a:d1:d2:4b:60:b2:90:
         3b:3b:d3:ef:81:55:32:8b:ea:b0:bb:c9:67:4b:6f:1f:65:c8:
         18:81:7b:ab:89:95:42:f2:20:d6:6f:e3:ad:1c:65:ba:45:c1:
         8e:6a:e2:3e:ef:6c:dd:df:ab:79:9c:bf:d5:b3:19:6e:21:19:
         6d:ff:00:d5:6e:61:d4:4b:56:cc:c2:0b:5e:18:64:76:85:a2:
         7c:b3:69:d4:cb:e6:ae:fb:27:88:43:37:7e:ea:17:28:a1:87:
         63:91:36:3f:5f:b3:71:03:0c:d2:12:b4:e3:9f:5e:31:61:87:
         e8:b1:aa:05:c5:da:f6:b1:79:d8:e4:bc:bc:0e:b8:06:30:c1:
         c0:94:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:08:41 2024 by rpki-client on console-fra.rpki-client.org