Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          +aRnygh2SQIaX4GIz/AQQUWNZli9jpfY+tqPdwLJFjw=
Subject key identifier:   F1:2D:57:6D:A8:C0:5C:FA:DE:67:1C:AA:10:BB:C3:CE:14:20:F2:78
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       018F76C33F228EB8CDE389BF7B0109750A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0796
Signing time:             Tue 14 May 2024 11:00:58 +0000
Manifest this update:     Tue 14 May 2024 11:00:58 +0000
Manifest next update:     Wed 15 May 2024 11:00:58 +0000
Files and hashes:         1: 0FmTnBMnuM8CqJKRzbeXAkp0I4o.roa (hash: i629uKssaNv3QUt1y581X9Lg1jqct2mganKXsSuOIGA=)
                          2: 1-VJwgbKCQbjnWsAOmvQzwQQL2I.roa (hash: 1cSJCbLXLvV56b+3dPMZhn5LwzCYtSYMBQw2dOKqS1I=)
                          3: 1-iHgS7mD3dzHH1w8lcnayA3cmmU.roa (hash: 6goMk1Kr7rz810o84x0pUgRnU14FKOLkmHsz+YXSL3o=)
                          4: 61Z_0Yl1Ls-nqVgKYxVDPpYV6MA.roa (hash: ddla1jqlqBDLe80bR0Y1WoLELnKy80MfpN9DNdZ/xao=)
                          5: 97OsD3yI58_k6wsFCud8i7hhIhY.roa (hash: ZqG8JmykGF5hsCwxyVm1KVGMWLog90mSmx3+LJlh2JM=)
                          6: CWf_qK9Xms_E5BzAHckc9nJFJoQ.roa (hash: peq/pAWODx6eOku2RmbnvEUO7g3/C6DE5qNC+zODJjE=)
                          7: ERH0M8rBZY63h5hGwmwrgI0jkUQ.roa (hash: 2AULkqQRDVYaR9FJ2OUk2FKylspp1AqXmGZcuJi6gsw=)
                          8: G2uYqyKdzHx8Ts-CoIv7al2Q3RY.roa (hash: ReXyvqIbYYC4U0IB3LS0BjlhdA3A6DRbPO3zdzNEV4g=)
                          9: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: eM+7jJCYV7ngHAvl+0r/pvGxXRy2vEGi7oL53ZaNeog=)
                          10: V_t8dxwfbbAmHrUMP0owL-KHOyI.roa (hash: nYXqPGGa+VpMEzCTf5skAH0H2zY6c2C3bfYxubFQzrI=)
                          11: WzNFl30SpTGro4t1aTCIojupjOk.roa (hash: igNH8Jfb+KjGNL+hvMQ+ENVPWn2UsTTD7oMm+mKGLjQ=)
                          12: ZzulzD395cBSoKuykRMGZIjsMfs.roa (hash: TXF2QL7kNoMHjVcEZ34yU4bm/vfjsSnRV79piYD8Kbs=)
                          13: a2WW0_7N8tPOLevidLaWxdzOVCo.roa (hash: s3Yc575DPaM3Q5O//GaVHB1jatiXf1PeLam3YIIiuIg=)
                          14: dmHMJaRnXcooVoAGEmQNVEEkj-c.roa (hash: lSIVb2yGgPGT4Lw+8aYfejS0fIyMOajul31WaxiAuMo=)
                          15: gewsFfibh95H4MSKhsDnj393ozg.roa (hash: JzEG6jVuV+4DaqtNuVMqfAbXRmPwWOszoeMuYYqG4co=)
                          16: iyfQ4fQn8FUSvWOQoTRQwotwxhs.roa (hash: 0EHWFey/1Qz7WrE2ehGnf95LJeN8UUGRJFFSyYNNKqo=)
                          17: jLgR7wU8jpfqYagjR4kV3UJaZQE.roa (hash: mE5Qrrp0Eqmz1hXxUIs82XsIjX902aX34pfC20ak1bc=)
                          18: jsgLkfgxBptAvj17kkDR4qjAyLk.roa (hash: 6lWgM9untHlAdvo2Avy6egquV0IHp63V7w7n9lOYQu0=)
                          19: kKL50WbZsD6OfQmp80uotWvJNpo.roa (hash: OH3QSN4bN2jDTNJBfAyXQrq98x0xm0sOK3vvWf693YM=)
                          20: wbXZXmDtfX06mZznQ42RomlcMh4.roa (hash: JtwXSk0P9RPCgrVpsPf+QRdS3FAcDJdV4Cu0CCdyd+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 May 2024 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:76:c3:3f:22:8e:b8:cd:e3:89:bf:7b:01:09:75:0a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: May 14 11:00:58 2024 GMT
            Not After : May 15 11:00:58 2024 GMT
        Subject: CN=f12d576da8c05cfade671caa10bbc3ce1420f278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:8b:bc:2c:f8:f9:72:f0:75:16:71:73:5d:
                    75:b9:c8:8b:78:07:34:98:5c:1b:56:8f:1c:d6:33:
                    b2:88:0f:1c:2b:dd:03:1e:90:90:33:92:69:16:4c:
                    47:75:a3:ca:1e:c9:d8:a7:7c:5d:87:83:98:e1:71:
                    56:ed:52:48:b3:00:45:58:69:8e:0e:33:81:99:4d:
                    cf:95:8c:76:31:71:fc:c1:31:dc:11:cb:81:1e:1c:
                    9e:ef:ca:3c:c4:6f:d8:9a:ee:17:2c:eb:dd:bc:4d:
                    6f:5b:b6:4d:81:cc:1a:f2:88:86:e6:eb:4c:36:52:
                    d2:07:29:c8:38:88:7e:00:bf:80:06:92:02:93:6c:
                    31:ae:8c:4c:0b:50:12:6a:0f:ab:21:3d:71:cd:99:
                    da:84:f9:49:f4:2d:e5:81:08:7f:24:38:4a:ef:c1:
                    95:f7:5e:09:8b:e0:1b:15:f2:03:02:b7:09:01:e1:
                    ca:ac:f9:5c:e4:95:2f:95:d2:66:52:41:ca:37:28:
                    00:83:86:0d:1b:e0:c3:ad:cd:a7:b6:a9:63:ec:9f:
                    14:39:4c:b2:d6:e1:11:24:ad:af:15:49:20:db:52:
                    66:65:d5:8e:58:77:4a:cd:3f:9f:3b:b0:15:a2:dc:
                    89:7d:d4:16:88:15:fa:eb:81:40:c6:ed:55:19:33:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2D:57:6D:A8:C0:5C:FA:DE:67:1C:AA:10:BB:C3:CE:14:20:F2:78
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:c8:60:d2:6d:af:a2:e8:8c:31:fa:6d:61:f0:03:8f:50:
         a2:ab:89:bf:61:4e:f7:b6:5c:29:b6:df:fa:03:9f:0e:90:f3:
         51:84:05:61:2d:51:ca:9b:85:c9:16:00:87:a0:40:d3:a9:d0:
         ba:8b:b5:28:2f:93:d8:25:31:4b:43:96:ae:96:b3:65:45:be:
         10:40:39:dc:18:45:fc:2d:0e:74:7d:ea:ca:f0:dc:0d:7f:0a:
         f3:36:3e:30:7f:c3:7e:51:26:62:04:a3:8f:0a:e5:39:4e:59:
         4b:fd:06:21:43:ca:5f:91:c2:9a:a2:be:cd:d6:49:98:5b:81:
         4f:4c:18:46:48:88:02:d4:3f:72:d2:e5:66:91:f2:e0:00:a7:
         40:48:3d:5c:56:51:74:ae:a0:ba:55:61:bf:93:40:42:05:ec:
         e8:c1:82:3e:37:29:98:35:10:4d:b6:eb:79:15:1d:2c:1a:52:
         37:79:fc:3d:73:1c:bc:1b:c2:19:d9:54:a9:d7:1c:a1:1d:19:
         da:dc:e5:d2:73:d9:8b:b7:91:f8:78:13:6d:76:66:d7:1c:d8:
         9c:dc:da:7d:3c:2a:d1:34:12:c7:8e:f1:79:4b:05:24:db:41:
         bf:a6:b0:94:44:dc:18:e4:45:f6:8d:09:e7:46:f4:cf:f9:77:
         8a:aa:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 15:01:53 2024 by rpki-client on console-ams.rpki-client.org