Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File:                     yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier:          YGOAbwDy82Q2DN7+ydztT7mdYrCjXJp8gG+1C/1CoMw=
Subject key identifier:   BA:8B:F7:63:50:52:D7:A6:46:63:4D:F6:DB:00:F8:49:E1:34:8D:61
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer:       /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial:       01901D7CE6801A9179C9D657004C8142149D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number:          0F0C
Signing time:             Sat 15 Jun 2024 20:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:43 +0000
Files and hashes:         1: XX1gQ8j5ek29CW55tdKFjDpoMiY.roa (hash: cyWnLOSFFncIEkf0MX0WeNPZhUV5jIgX06jd9naGUpo=)
                          2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: OaPCX6KM/oUclRwgedKYjaO/xL8Gbiv+TIw64F3Hcgs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:e6:80:1a:91:79:c9:d6:57:00:4c:81:42:14:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
        Validity
            Not Before: Jun 15 20:00:43 2024 GMT
            Not After : Jun 16 20:00:43 2024 GMT
        Subject: CN=ba8bf7635052d7a646634df6db00f849e1348d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:8f:ce:ef:89:33:b9:ad:73:c5:f0:f2:48:
                    16:69:51:6d:dc:93:1d:29:f2:6c:68:f4:d1:3c:92:
                    01:86:e3:9f:eb:9c:14:25:41:94:56:e3:4a:72:86:
                    89:9f:6b:fd:61:ac:d5:c9:18:ad:8c:3c:9a:44:2d:
                    e7:d7:c7:57:47:4d:9c:60:ac:f1:49:89:10:81:3c:
                    5f:01:04:23:1a:60:f5:23:90:ba:98:9d:42:bc:ce:
                    cb:52:fc:b6:14:29:ae:2f:fe:51:07:20:1d:66:c4:
                    42:2c:2a:7d:11:e9:15:fa:6b:c5:c8:b5:06:9d:d7:
                    06:79:f7:e1:b1:c9:c7:42:8e:42:12:75:bf:0d:b4:
                    db:85:f3:72:d8:cd:95:fd:78:26:ca:98:27:70:8d:
                    9c:ac:77:84:61:45:77:89:8f:6b:7f:7a:bf:53:3f:
                    e5:ac:ab:16:d7:cd:f7:b8:73:dc:8d:e3:c8:71:a1:
                    f5:65:5d:fb:a1:38:6c:41:71:cd:2b:68:ca:6b:f3:
                    f6:9f:96:1b:31:71:b8:1d:41:82:07:58:ee:51:38:
                    1d:91:96:4e:c3:cd:0c:72:30:90:5d:a4:1b:2a:ff:
                    5b:00:dd:8c:56:fa:13:f2:e3:b1:7c:ca:13:b6:f5:
                    df:c3:83:d0:41:d2:f7:d0:53:1d:da:2d:9a:02:3e:
                    a3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8B:F7:63:50:52:D7:A6:46:63:4D:F6:DB:00:F8:49:E1:34:8D:61
            X509v3 Authority Key Identifier:
                keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:ac:b4:9a:39:b4:44:eb:d8:93:3d:70:cb:d1:12:f4:57:
         d4:c6:de:f7:cd:3c:5e:4e:33:06:23:88:18:7b:61:ed:e0:3e:
         6a:e9:91:26:cc:b4:74:a1:be:9b:1a:22:ab:66:7f:69:fe:4a:
         b3:b8:dd:a1:1b:27:84:2a:31:0e:75:25:c4:6d:21:24:9d:20:
         d9:e5:5e:77:34:05:f9:2e:b2:31:dd:ca:6c:e2:9b:94:90:39:
         03:71:f2:60:7c:db:30:b0:8c:72:ad:20:da:e3:98:63:e1:10:
         ae:e0:6a:ed:30:9d:ab:12:1d:77:22:cf:dc:d5:d3:f7:00:6b:
         f3:f8:40:19:e8:cc:47:b4:7c:4d:df:55:96:21:e2:79:16:3d:
         c6:be:1f:80:c7:00:97:77:ff:b2:d7:a0:ae:ea:74:cf:9f:bb:
         50:02:55:d2:1d:e1:a5:9c:9d:88:d7:08:e5:77:a2:31:f9:67:
         a2:23:e4:00:f3:17:20:eb:7d:7c:dd:e6:79:cd:f4:b0:1e:c9:
         e1:b5:33:fb:a3:60:cc:1c:ee:69:28:82:84:ca:f7:0f:fc:fe:
         c3:87:3b:69:5d:94:c5:ed:86:01:9a:31:af:ef:45:dc:ec:02:
         f9:2c:6d:b6:14:6f:cd:ad:e9:76:9e:99:2b:f9:ae:27:79:2e:
         cc:8d:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:28 2024 by rpki-client on console-ams.rpki-client.org