Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          c2UtYWWsvuuVCLHVYgzzXk7CvEA/QTzROhOCoq9Lr3k=
Subject key identifier:   8B:E3:10:C8:1E:FD:91:56:1C:67:DB:57:B7:B2:9B:AB:3F:FC:07:42
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       01901C335C0558F929EEDC7F8186A0CE2292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 14:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:46 +0000
Files and hashes:         1: 1a40stfoGT00xXLGUr3OAb0iv0Q.roa (hash: uhMCgpvG9g61aCFZBPVKyY/mz0UJlRnoNNyf661PYE4=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: NokiXpk5DbyW+eVfEpLoVgacKl67K+Nw/53hB2ZgyiA=)
                          3: eGmAlQqD_aI1o5A0zQDmjexDRcA.roa (hash: MK7P9j/r0rUrkkesJqq+bhTLEUvAPlvJ1k16Bsv2/WY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:5c:05:58:f9:29:ee:dc:7f:81:86:a0:ce:22:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Jun 15 14:00:46 2024 GMT
            Not After : Jun 16 14:00:46 2024 GMT
        Subject: CN=8be310c81efd91561c67db57b7b29bab3ffc0742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:c0:0f:5d:f0:81:df:f1:d9:df:bb:ca:c7:
                    ce:f3:fb:05:b9:5b:91:71:aa:b6:f7:e8:32:a3:d9:
                    35:56:ab:c0:80:31:f2:eb:88:2d:9d:64:9c:35:d6:
                    ba:1b:36:b5:44:f3:19:6d:95:a9:94:d8:20:6d:39:
                    d9:e3:2e:5f:47:28:3a:70:f5:f5:b1:88:b5:f8:88:
                    5f:62:95:82:84:79:0e:f2:52:e4:54:19:fd:8c:1e:
                    05:8b:a3:58:ad:a0:9d:94:18:1d:eb:73:a3:2d:ee:
                    57:33:91:ef:8f:ed:fd:d3:66:db:73:50:3f:00:e2:
                    e7:32:3f:fd:19:c0:60:18:34:94:c3:49:ec:c5:37:
                    fc:b2:f9:2b:4c:fa:cc:c7:67:b9:74:2d:8a:ef:32:
                    91:e4:99:a2:2c:88:9a:46:2c:29:20:b2:cc:84:a6:
                    8a:0f:7b:37:29:4b:b7:ea:50:31:3e:20:f5:04:95:
                    86:ab:ea:99:38:05:bd:ce:3c:2f:41:3b:56:ff:3f:
                    2b:27:27:76:b8:36:41:21:cb:72:ea:91:c9:f3:92:
                    a2:5f:2c:bd:34:fd:68:aa:7f:a2:91:f9:0a:3d:bf:
                    77:b1:16:e2:c1:59:78:14:a5:44:ae:61:d2:e0:94:
                    2d:d6:f0:b3:76:d3:82:e9:4e:2c:f5:92:64:f8:25:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:10:C8:1E:FD:91:56:1C:67:DB:57:B7:B2:9B:AB:3F:FC:07:42
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:00:91:90:9a:60:de:e6:d4:2f:c2:ca:ea:3d:02:80:e4:1c:
         ae:14:df:ad:99:ad:c9:d1:65:43:6c:3b:3c:0d:84:fb:ab:d7:
         61:0f:97:aa:ec:70:c7:3c:c9:ab:a9:a4:4d:31:f9:1f:b7:b3:
         89:31:f9:b8:be:ff:57:27:0a:89:01:65:be:26:31:04:9c:c3:
         c7:fd:0e:79:a9:01:34:43:ff:45:70:45:6d:dd:e1:ab:f3:ca:
         19:c0:e6:1e:47:08:90:37:24:6a:7b:bf:32:4c:26:42:7f:74:
         c0:5d:fe:60:a1:4d:a0:95:0f:ba:20:85:e6:08:cb:9f:cf:16:
         b5:b6:f2:ac:36:58:40:81:a0:d2:c9:43:0e:66:7e:dd:99:69:
         a4:2b:b9:54:ca:32:9e:b2:e2:1e:71:2a:ca:54:3c:44:23:a6:
         c2:e6:45:0d:58:45:f1:f0:d0:ec:49:03:7a:9c:94:0b:27:25:
         fd:2b:b1:a3:ad:04:4b:c0:2a:e3:4a:ca:8b:a8:e3:5d:f7:70:
         d2:7a:16:4a:25:69:95:91:f2:62:f8:b0:47:36:c6:67:2b:5f:
         61:04:25:cf:6c:4c:06:02:96:81:23:a4:da:e8:97:c2:cd:57:
         e7:b5:bd:a5:df:f6:ad:bb:ee:27:96:a0:1b:11:5a:53:70:9c:
         f3:5a:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:35:43 2024 by rpki-client on console-fra.rpki-client.org