Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File:                     ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier:          ltPSTE/Enwlqjw/rprNzhem+Fmx9rEbgfawzhO5yxsg=
Subject key identifier:   60:0A:7F:F9:FA:56:C2:5D:86:06:66:1E:3F:9B:50:AD:46:A9:B4:D3
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer:       /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial:       018FA5C1260F503C96BDF2E5ACA1171982DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number:          1188
Signing time:             Thu 23 May 2024 14:00:49 +0000
Manifest this update:     Thu 23 May 2024 14:00:49 +0000
Manifest next update:     Fri 24 May 2024 14:00:49 +0000
Files and hashes:         1: Y_Td3tRryL86DtqSbFW3QgUHdew.roa (hash: YJGagO+9Xo+r/fLrCF1ZvlJAYk3zuUoj7QuDMfshiRA=)
                          2: hQt7MbWrlCbyLRTUqkR73w1UYrY.roa (hash: RsyE+dHZ0sX/pGe6sONCTutRkQpOMfRkxhnpzxfaAXs=)
                          3: jP8H1ojEACltRTZkla3_yetVdVA.roa (hash: bgSYSOPG8ivUYvml8OIwBc5hEMTcp9N+4kpcb1T4Z88=)
                          4: nE4RAyUyUQcYAJ2aLCwDxd6PG94.roa (hash: 4hvD8fr8xTv+jvZ/OQm8Af1dQ7aZhEMvn3MegEga9VI=)
                          5: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: 2fUcsWKDb/gEM1SaYHTtLZ09YVt5whZx9l6e4A0vRDg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a5:c1:26:0f:50:3c:96:bd:f2:e5:ac:a1:17:19:82:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
        Validity
            Not Before: May 23 14:00:49 2024 GMT
            Not After : May 24 14:00:49 2024 GMT
        Subject: CN=600a7ff9fa56c25d8606661e3f9b50ad46a9b4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:da:5c:1f:fd:b4:b0:0b:9d:cd:78:2b:5c:
                    bc:e4:46:57:fe:20:b6:33:f0:9f:85:01:f4:11:03:
                    03:05:5a:37:2a:e3:8a:4f:88:04:7c:a5:49:37:8f:
                    f1:ef:a6:67:61:7e:05:c8:96:ad:f3:ad:a2:d5:d6:
                    77:ed:5f:b7:12:f1:13:c0:02:b6:39:64:fa:fd:72:
                    4f:f7:50:40:bb:e3:d3:73:f6:3c:df:92:84:a2:6f:
                    e5:0e:5c:d5:b6:89:43:7d:a2:fc:7e:58:78:bb:15:
                    6f:f5:d4:f8:84:3f:c1:db:92:dd:15:d5:7a:18:0d:
                    e4:07:cf:dd:09:2e:d1:e0:65:79:dd:f8:3c:8e:24:
                    43:e7:1c:84:bf:48:2a:a8:81:72:08:84:f8:1a:6e:
                    2d:bc:33:f4:1a:0d:c0:cf:bd:62:e2:47:14:d6:e0:
                    2b:f4:6f:01:92:15:47:aa:95:98:e3:54:15:4c:6e:
                    1f:b4:62:b1:7b:29:38:1c:a2:62:1f:55:5d:ab:e3:
                    09:3a:c2:3b:db:6f:d7:2b:a6:2b:ac:42:19:e2:16:
                    80:0b:f7:ea:10:6b:5b:d4:4e:86:dd:ee:da:57:99:
                    f5:fb:27:a7:2d:b9:c0:1d:65:60:bd:50:e1:dc:76:
                    b4:13:d6:16:a6:a7:96:ca:8d:24:4a:bd:06:5f:3c:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0A:7F:F9:FA:56:C2:5D:86:06:66:1E:3F:9B:50:AD:46:A9:B4:D3
            X509v3 Authority Key Identifier:
                keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:c5:b9:90:81:05:c2:0d:02:0e:ca:85:9b:cf:8e:b9:38:
         eb:4a:c4:66:c5:3a:c7:bf:3b:c3:bd:61:a3:2b:3e:bb:41:77:
         dd:22:6e:58:88:bd:d4:28:96:d0:c0:e3:c8:5a:76:30:86:7b:
         19:a6:48:f7:45:e2:5e:54:f9:72:c0:14:84:3b:7f:1e:cc:e2:
         c7:74:6f:dd:12:7f:4f:a8:99:70:91:e7:b1:d5:04:ee:ce:57:
         75:86:7b:0f:57:9d:2a:b7:83:97:d1:1f:1e:cd:d1:64:b8:1d:
         75:71:66:ea:90:2d:60:02:43:66:3f:7d:78:f4:2f:18:20:c6:
         7b:fb:28:ae:ca:59:cd:52:1c:ea:ed:d6:83:c1:3b:a5:80:2d:
         fe:a0:98:8e:88:37:1f:da:a9:53:15:73:eb:d6:bc:35:f0:e8:
         2a:bf:30:db:da:a5:32:0c:f9:48:e6:75:68:ed:4c:ca:60:ca:
         9e:13:22:44:4f:66:67:ea:db:d5:db:91:6c:a5:91:e2:90:68:
         af:23:d2:9a:f7:a7:50:02:1d:b0:a3:51:8b:51:7a:f3:51:f6:
         f1:47:48:58:b5:0e:70:2c:00:9f:84:bb:37:ab:4b:f9:54:30:
         fc:b5:53:29:1c:de:3e:25:1c:74:ae:c9:a0:c7:e9:fe:37:b0:
         c2:67:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:01:10 2024 by rpki-client on console-fra.rpki-client.org