Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File:                     zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier:          txsP7AWC5Z/+8ERhiEpqi6NVPRMvLKr8e8rjY/ZeLo0=
Subject key identifier:   DF:01:F6:5D:01:74:F1:16:04:6C:8F:51:83:47:F7:71:0A:D2:DC:34
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer:       /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial:       01901DEC66E1BABD81A3193438735566B958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number:          04FB
Signing time:             Sat 15 Jun 2024 22:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:30 +0000
Files and hashes:         1: nk3NI177XmOh67vBK0jO-qE1kDs.roa (hash: mj9wfwmMkcDMGJAWXTsaR5to7VXNi/U1h4Xi6nnCFQ0=)
                          2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: FY8ctwMUjhrQWdi0U6saBgs/ZS7hVqY3qftr18dxB/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:66:e1:ba:bd:81:a3:19:34:38:73:55:66:b9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
        Validity
            Not Before: Jun 15 22:02:30 2024 GMT
            Not After : Jun 16 22:02:30 2024 GMT
        Subject: CN=df01f65d0174f116046c8f518347f7710ad2dc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:03:b3:32:c3:84:53:af:4b:aa:00:2e:a8:d3:
                    ad:f0:10:c9:5a:17:68:27:0b:f0:89:5d:de:78:99:
                    79:7a:71:e8:74:8d:48:6f:00:f4:49:b9:da:b1:71:
                    31:8e:2f:c8:9e:0e:83:02:7a:c1:18:2a:59:13:0c:
                    77:12:3d:eb:c1:f3:97:85:53:a8:78:a8:03:f0:5c:
                    d8:52:6f:05:dc:a6:05:1c:b1:9e:e4:ed:52:1d:d1:
                    a2:38:8e:68:4a:ce:b9:01:f8:71:50:77:22:4a:29:
                    a1:61:af:57:90:66:e0:68:59:45:c0:01:0b:19:e7:
                    45:42:24:76:32:71:7a:47:29:80:fc:78:d3:7f:e9:
                    4e:83:9d:08:15:93:ef:55:2e:af:fb:7b:51:4f:01:
                    51:49:f8:a3:a5:27:68:38:7a:d7:98:60:7b:7e:68:
                    28:0d:82:89:7b:13:a5:13:f7:0b:bc:5a:77:ac:7b:
                    14:29:22:59:06:ab:f4:59:b0:a2:18:a1:eb:d2:96:
                    51:4e:46:7f:48:82:7e:ce:aa:8f:ee:8e:39:f0:67:
                    5c:f3:e5:f6:78:cb:60:f3:e9:99:f6:2e:c5:53:5d:
                    18:fb:ad:0a:bd:7b:09:b6:b9:d1:78:b5:e4:15:78:
                    48:56:45:61:c9:dd:32:dd:86:ed:c4:f6:93:04:14:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:F6:5D:01:74:F1:16:04:6C:8F:51:83:47:F7:71:0A:D2:DC:34
            X509v3 Authority Key Identifier:
                keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:87:3f:72:75:de:73:57:86:08:83:32:67:89:dc:e4:a1:d0:
         ab:85:74:cf:a4:58:8c:66:68:a9:73:1a:b6:eb:a0:a8:1b:a3:
         43:16:3e:89:85:ad:ef:33:34:59:b1:a8:f0:0d:61:43:a5:07:
         e4:fb:78:ea:7d:0c:3f:3d:cb:51:df:86:8e:6a:be:6a:df:c8:
         c5:9c:1f:da:5a:2d:3f:f2:a6:a3:f0:fe:fd:91:00:1c:aa:c6:
         97:f6:da:8e:04:b7:d4:92:e9:b9:fe:40:61:55:cc:09:2c:33:
         63:1b:4c:44:84:7f:30:55:f2:0d:4f:35:d9:01:2e:6f:eb:be:
         78:15:2f:5c:81:bf:d7:73:c8:94:29:d4:a2:52:e0:bb:a7:8c:
         d2:57:8d:b5:b5:01:e3:f4:01:87:bc:90:c0:d7:c6:de:60:25:
         82:9b:1d:f7:2a:65:82:a3:51:bd:8d:3c:26:3a:5d:4e:ab:af:
         69:ed:0c:c5:7f:f7:db:92:43:c3:aa:65:80:38:27:5e:ec:b8:
         3c:81:ef:41:6c:1b:5d:e0:b1:0e:6c:7c:e5:bc:dc:b2:df:11:
         5e:bd:b6:84:35:bf:49:fd:d6:82:a0:80:e3:43:4b:24:b8:ff:
         ad:6a:8b:66:b5:56:f0:f8:b9:42:46:52:15:2f:73:5f:32:0d:
         fa:00:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:04 2024 by rpki-client on console-fra.rpki-client.org