Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7494cf-3bdb-4fc7-9093-4e4abedc809f/1/zH6QyeU2xToI6swIF772P7cGj-4.mft
File:                     zH6QyeU2xToI6swIF772P7cGj-4.mft (raw, json)
Hash identifier:          kNngIP9GzpQNhIcinQ/4WGWY0Kalhf6v0cClxM7u6mE=
Subject key identifier:   63:AC:AF:A2:D1:7D:F4:99:E7:29:38:D3:F0:30:E9:76:F6:BF:00:BA
Authority key identifier: CC:7E:90:C9:E5:36:C5:3A:08:EA:CC:08:17:BE:F6:3F:B7:06:8F:EE
Certificate issuer:       /CN=cc7e90c9e536c53a08eacc0817bef63fb7068fee
Certificate serial:       01901E8F8AED08B9D6E091A6A129E3AFD87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zH6QyeU2xToI6swIF772P7cGj-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7494cf-3bdb-4fc7-9093-4e4abedc809f/1/zH6QyeU2xToI6swIF772P7cGj-4.mft
Manifest number:          07FF
Signing time:             Sun 16 Jun 2024 01:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:41 +0000
Files and hashes:         1: flSkx7weCg_UmmbyqA2JVU2ca6I.roa (hash: neuEjNExr/VJukOnCOJUj2oCGEE/UkbOcaycQ3UlCdA=)
                          2: zH6QyeU2xToI6swIF772P7cGj-4.crl (hash: PC2Z75zsgGuXm0kLzvX84vMZjvZd+3aRIZ+UM6KEypc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7494cf-3bdb-4fc7-9093-4e4abedc809f/1/zH6QyeU2xToI6swIF772P7cGj-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7494cf-3bdb-4fc7-9093-4e4abedc809f/1/zH6QyeU2xToI6swIF772P7cGj-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zH6QyeU2xToI6swIF772P7cGj-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8a:ed:08:b9:d6:e0:91:a6:a1:29:e3:af:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc7e90c9e536c53a08eacc0817bef63fb7068fee
        Validity
            Not Before: Jun 16 01:00:41 2024 GMT
            Not After : Jun 17 01:00:41 2024 GMT
        Subject: CN=63acafa2d17df499e72938d3f030e976f6bf00ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:fd:02:3a:85:ad:33:fa:9b:67:06:6b:8f:
                    c3:55:7c:a4:ed:5e:a6:a4:93:d1:db:05:d2:21:3c:
                    d7:67:e0:3c:c1:1c:07:a6:f1:48:4e:cb:78:94:0e:
                    94:32:ad:2b:85:b1:b9:89:13:e8:f1:8c:b9:ce:f1:
                    ad:70:a7:8e:38:0d:0e:46:a6:3e:89:95:62:0a:9a:
                    0b:28:9b:a7:60:5f:35:95:1b:9a:53:1d:2a:25:c1:
                    e1:08:9a:31:13:8a:ba:a4:16:9d:18:7b:1b:70:28:
                    ab:2e:dd:aa:52:e5:d1:eb:14:2a:b7:28:97:bc:8b:
                    a3:fe:dc:b9:14:bc:8f:2a:96:ad:a9:73:37:30:7f:
                    79:2b:80:90:a3:47:8b:39:3b:d3:6d:ff:4f:b1:95:
                    09:99:47:0c:c3:20:a1:ff:53:3c:e9:e8:85:90:70:
                    08:10:70:34:74:91:8b:3a:b0:fc:98:c9:16:2e:b8:
                    6b:c3:30:da:ff:31:69:22:76:94:3e:14:b4:fc:ac:
                    22:c1:35:3e:fb:87:ab:65:ec:06:e0:e3:da:15:e2:
                    b3:ce:1c:77:92:aa:1a:e6:9b:27:e9:49:4c:45:39:
                    ce:3e:55:88:3f:c6:82:ea:6b:dd:b9:7d:3d:68:8f:
                    d6:28:f3:5c:35:32:c1:46:ae:78:49:64:0a:c7:8f:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AC:AF:A2:D1:7D:F4:99:E7:29:38:D3:F0:30:E9:76:F6:BF:00:BA
            X509v3 Authority Key Identifier:
                keyid:CC:7E:90:C9:E5:36:C5:3A:08:EA:CC:08:17:BE:F6:3F:B7:06:8F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zH6QyeU2xToI6swIF772P7cGj-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7494cf-3bdb-4fc7-9093-4e4abedc809f/1/zH6QyeU2xToI6swIF772P7cGj-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7494cf-3bdb-4fc7-9093-4e4abedc809f/1/zH6QyeU2xToI6swIF772P7cGj-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:ae:6a:df:55:56:e6:52:f3:41:4b:6a:50:f3:16:16:7f:b9:
         81:71:ce:0c:c9:dc:4f:a5:08:48:96:83:95:d1:ee:d7:fe:05:
         81:92:6c:a8:0f:53:73:33:df:0c:05:84:bd:91:f0:7b:ea:b6:
         67:be:35:e1:e8:c0:9f:64:ed:88:e5:18:69:68:3e:53:df:e0:
         88:98:c2:f4:0b:6c:28:20:fe:99:9e:8d:30:c2:b7:31:83:d5:
         a4:3e:b5:b9:dc:21:80:11:89:b7:07:4d:fe:cc:13:a3:54:11:
         aa:26:6f:46:a8:90:65:61:88:9e:62:80:24:66:3c:a6:40:fe:
         ed:00:40:a0:6d:64:40:76:13:5d:b0:cd:71:00:7a:f0:4b:8e:
         a6:2c:82:c2:6c:d6:15:f9:ed:4e:59:64:4c:96:73:93:cb:95:
         6a:58:e4:bc:8b:60:b8:bc:63:2f:c7:d5:af:a1:b3:2a:33:c9:
         bc:d9:b5:b8:59:59:3e:28:d0:1c:b5:89:80:5c:5c:cf:f7:de:
         0b:8b:df:22:45:26:e7:36:f5:83:c3:24:9c:85:0d:da:3a:90:
         20:74:1d:7e:51:d7:4a:c2:01:d6:f0:bf:f9:33:d6:bd:b0:1d:
         ed:1a:e4:6a:d6:0f:6c:0e:f3:6a:03:e3:52:73:98:89:a4:67:
         8a:7a:7e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej4rtCLnW4JGmoSnjr9h/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjN2U5MGM5ZTUzNmM1M2EwOGVhY2MwODE3YmVmNjNmYjcw
NjhmZWUwHhcNMjQwNjE2MDEwMDQxWhcNMjQwNjE3MDEwMDQxWjAzMTEwLwYDVQQD
Eyg2M2FjYWZhMmQxN2RmNDk5ZTcyOTM4ZDNmMDMwZTk3NmY2YmYwMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiH9AjqFrTP6m2cGa4/DVXyk7V6m
pJPR2wXSITzXZ+A8wRwHpvFITst4lA6UMq0rhbG5iRPo8Yy5zvGtcKeOOA0ORqY+
iZViCpoLKJunYF81lRuaUx0qJcHhCJoxE4q6pBadGHsbcCirLt2qUuXR6xQqtyiX
vIuj/ty5FLyPKpatqXM3MH95K4CQo0eLOTvTbf9PsZUJmUcMwyCh/1M86eiFkHAI
EHA0dJGLOrD8mMkWLrhrwzDa/zFpInaUPhS0/KwiwTU++4erZewG4OPaFeKzzhx3
kqoa5psn6UlMRTnOPlWIP8aC6mvduX09aI/WKPNcNTLBRq54SWQKx4+6lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOsr6LRffSZ5yk40/Aw6Xb2vwC6MB8GA1UdIwQY
MBaAFMx+kMnlNsU6COrMCBe+9j+3Bo/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekg2UXllVTJ4VG9JNnN3SUY3NzJQN2NHai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDk0Y2YtM2JkYi00ZmM3LTkwOTMt
NGU0YWJlZGM4MDlmLzEvekg2UXllVTJ4VG9JNnN3SUY3NzJQN2NHai00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NDk0Y2YtM2JkYi00ZmM3LTkwOTMtNGU0YWJlZGM4MDlm
LzEvekg2UXllVTJ4VG9JNnN3SUY3NzJQN2NHai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0a5q31VW
5lLzQUtqUPMWFn+5gXHODMncT6UISJaDldHu1/4FgZJsqA9TczPfDAWEvZHwe+q2
Z7414ejAn2TtiOUYaWg+U9/giJjC9AtsKCD+mZ6NMMK3MYPVpD61udwhgBGJtwdN
/swTo1QRqiZvRqiQZWGInmKAJGY8pkD+7QBAoG1kQHYTXbDNcQB68EuOpiyCwmzW
FfntTllkTJZzk8uValjkvItguLxjL8fVr6GzKjPJvNm1uFlZPijQHLWJgFxcz/fe
C4vfIkUm5zb1g8MknIUN2jqQIHQdflHXSsIB1vC/+TPWvbAd7RrkatYPbA7zagPj
UnOYiaRninp+5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:03:44 2024 by rpki-client on console-fra.rpki-client.org