Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File:                     r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier:          Ms1GZUzEYBFIIcGOEQFxm045w3FSAwKLVfw5S8r7N9k=
Subject key identifier:   BB:E9:E8:6F:2C:E6:EC:01:20:43:00:11:FB:DD:3C:73:0D:5C:B2:42
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer:       /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial:       01901BFECCBC1CDFB7F2276C0B931E9A53CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:03:21 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:21 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:21 +0000
Files and hashes:         1: ICwiR2uTtX-pSM6PZQTXiqvxJDo.roa (hash: KNJ2db0M6AZ07CuBGou/uBeJnLatd+TIDEwiMNPym28=)
                          2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: Dhu+hfT7W6tAF+s2WkdkzxKI4mVDWlcxAXmFThKwehs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:cc:bc:1c:df:b7:f2:27:6c:0b:93:1e:9a:53:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
        Validity
            Not Before: Jun 15 13:03:21 2024 GMT
            Not After : Jun 16 13:03:21 2024 GMT
        Subject: CN=bbe9e86f2ce6ec0120430011fbdd3c730d5cb242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:eb:e1:67:1b:58:a0:46:a5:16:62:f9:47:97:
                    6f:d7:88:9f:eb:35:c1:47:4c:66:e5:f3:89:91:26:
                    c2:56:82:fd:7c:41:8e:31:2e:7c:99:ec:4c:2a:d9:
                    ae:7c:32:f5:a1:4d:43:66:f9:f7:2c:4b:14:1d:a0:
                    fa:55:bb:7e:e1:7e:eb:a4:e9:b3:e5:f8:5c:ac:4e:
                    2f:28:63:2a:44:78:65:b3:85:11:7c:6f:39:c1:c7:
                    bf:b6:53:ec:8c:dd:61:45:f3:4c:2f:0b:88:32:20:
                    89:b7:d2:f7:00:a1:a4:bd:10:9f:50:c3:4d:c9:bd:
                    66:3e:30:1a:c4:4f:1a:7b:67:fe:8a:40:22:e5:9c:
                    61:3e:9d:6b:19:02:69:3a:2d:1a:7b:bb:3f:f3:62:
                    de:50:b6:f6:d0:5e:bf:e5:25:67:87:94:d6:f4:e6:
                    28:3d:2e:35:fb:56:a0:5f:cc:72:07:2a:82:55:f8:
                    1c:a7:29:5e:68:79:95:2a:e2:f1:ca:15:62:97:05:
                    8b:ab:4d:5f:80:37:b1:84:b9:8a:f1:2c:5b:0c:60:
                    b6:8b:18:e6:81:30:b8:7e:56:b8:55:1d:bb:53:7f:
                    bb:28:db:f3:47:4e:45:07:80:43:ff:ca:85:54:a9:
                    e6:8c:16:5f:91:85:be:e8:e5:84:a4:43:74:af:24:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:E8:6F:2C:E6:EC:01:20:43:00:11:FB:DD:3C:73:0D:5C:B2:42
            X509v3 Authority Key Identifier:
                keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:46:e5:71:a0:73:f1:10:5a:13:ed:72:9c:ce:01:67:2b:
         59:e1:f2:99:11:1e:c2:7f:d5:a1:c5:55:0a:34:82:cc:38:28:
         0b:55:81:62:25:fa:1b:08:4f:65:48:6b:0f:93:13:4e:9e:1b:
         90:a8:46:86:5f:7a:ca:3a:7a:99:6c:b9:1d:4d:63:d5:c3:d7:
         64:b8:19:e7:04:36:9e:03:63:0f:4b:37:76:3b:4b:d5:44:d1:
         b3:b0:23:eb:01:c4:5c:c8:da:76:16:fd:9a:5d:09:47:5c:40:
         cb:ca:f7:07:cc:fb:0c:fe:58:4d:2d:2d:c0:63:d3:ea:1e:2f:
         00:a2:a6:65:33:9a:1b:af:06:1f:e1:7a:bf:48:44:ed:d6:7d:
         f3:7f:9c:80:57:27:bf:8d:72:c8:a0:a9:52:81:9d:54:21:b7:
         b1:df:03:be:a8:0e:c9:9c:73:c5:42:ea:28:06:4b:ad:4d:a9:
         22:47:64:0e:e4:24:ea:1a:f8:29:6b:61:e0:ea:83:9c:01:f1:
         20:7f:cb:a9:c7:c8:ae:15:6c:2a:38:5d:48:73:5c:4c:2d:c5:
         9b:a7:e8:ae:6f:e1:3e:c6:ab:00:2b:52:6f:0e:2d:47:65:57:
         b5:c6:75:4d:2c:d6:df:e0:8d:6f:c6:3e:75:5a:e0:a1:0d:82:
         4b:ff:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:38:48 2024 by rpki-client on console-fra.rpki-client.org