Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          pPfpEinz44vHb07g2tZv+82gwN1qbOkP3M6hZgDOdHY=
Subject key identifier:   EA:D9:51:50:BB:5E:DE:A5:F8:29:8D:D4:96:3B:FF:71:69:10:27:CE
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       01901DED1588AAF70426193B8D9E1B63288D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:14 +0000
Files and hashes:         1: 75cGkrrgToCge7SV5YrDorYZZYc.roa (hash: U52+Lc076afThl2BeUfKhoaiZXYOX/A4VgnK2hFY7+g=)
                          2: CC8iGdlWt84ylrPXLHgfUIibfZM.roa (hash: gxIUQFxFuHUzqvmFnTheCtHaKkwPyzG2HfL8gqG6fJs=)
                          3: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: M0cdtnggjKBP9M4OZ93yI/67YwMTawtLQ2UEdgctHCE=)
                          4: z3BCgrIDN9hBwc62yHiRKBw7Vgk.roa (hash: dJprmZ/0Eh8w6+Ua2ZI5IqZH/IsTDKPjaExObVLr0sg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:15:88:aa:f7:04:26:19:3b:8d:9e:1b:63:28:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Jun 15 22:03:14 2024 GMT
            Not After : Jun 16 22:03:14 2024 GMT
        Subject: CN=ead95150bb5edea5f8298dd4963bff71691027ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:c2:80:12:92:bb:a5:cb:f5:b6:b9:56:11:
                    5b:32:34:f6:a3:2f:a4:42:1d:32:b7:17:9f:a4:58:
                    d3:ba:d6:15:b6:91:7b:84:d6:5b:17:59:e8:23:f8:
                    b7:a0:2a:73:4a:b3:f4:d3:f0:da:ee:49:df:ee:47:
                    af:24:18:a1:2d:5f:19:73:af:36:73:b4:83:d7:2d:
                    ef:d0:d4:c6:5d:90:5f:e4:1e:e2:67:f6:ed:01:00:
                    de:4e:cf:74:43:75:d5:12:0d:e7:35:f7:dd:22:42:
                    43:c9:bb:ef:9f:94:89:54:be:94:d8:12:45:81:23:
                    3c:38:a3:46:a8:50:ce:80:96:c1:c8:07:c1:e8:ae:
                    9b:7b:f0:2f:8a:d8:91:9b:5e:f6:67:05:18:09:d5:
                    b2:15:c2:2a:87:ad:96:0a:84:8a:15:22:10:a4:82:
                    10:74:0c:93:b9:f9:c1:39:f6:43:e6:5c:70:07:68:
                    ce:bf:09:d3:35:40:30:c5:d4:e6:d9:43:83:d3:60:
                    c6:b8:5e:8c:26:f6:b2:4e:82:57:3b:a2:59:b5:1a:
                    79:69:30:8e:7b:73:68:a5:6c:b5:67:94:07:0f:24:
                    a7:b4:d5:be:ce:a9:f3:54:2c:99:fb:11:7e:f9:2b:
                    ed:e5:39:76:5d:e5:0f:c9:b1:4f:0c:40:c1:81:fc:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D9:51:50:BB:5E:DE:A5:F8:29:8D:D4:96:3B:FF:71:69:10:27:CE
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:da:21:50:25:0d:27:73:6f:dc:72:02:76:df:67:f4:ef:
         2a:14:1a:e6:14:9e:2d:d6:d3:8f:79:fc:e6:32:e6:3e:5d:4f:
         8b:34:95:35:6e:15:cb:da:ed:e8:aa:bf:87:3d:61:af:09:10:
         0b:5b:36:ea:de:b0:30:f2:09:41:23:fa:73:e9:a7:d3:dd:49:
         72:12:f9:79:b6:76:1c:5e:85:0c:8b:67:15:ef:32:21:87:1d:
         d6:9f:53:c7:df:75:ba:26:c7:13:81:20:8d:a8:57:be:52:58:
         3e:a6:9b:11:37:e0:92:f1:ff:fd:3b:84:61:92:48:e7:63:16:
         10:ec:f8:f7:af:7e:d7:dd:6d:4c:be:f8:cb:83:42:29:0d:72:
         7c:7a:ab:59:99:9c:dc:22:89:89:f2:fd:c1:11:08:6f:76:b5:
         0e:26:4d:c5:70:ed:02:ec:55:d2:a3:05:76:ed:f6:fd:18:f1:
         c1:cf:6b:ca:b0:4f:57:bb:3e:af:1b:f6:5f:5e:b0:93:2f:ba:
         7d:07:f7:33:1c:e2:c8:0f:d5:d0:fc:b4:c9:d9:9a:67:d7:de:
         66:3c:7e:d4:62:b3:1d:49:eb:ee:32:13:20:f9:12:19:89:a3:
         cf:6f:e7:f9:0d:db:f4:1c:40:f2:a2:b8:65:e1:ce:5f:f7:67:
         d6:b6:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:47:33 2024 by rpki-client on console-ams.rpki-client.org