Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
File:                     M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json)
Hash identifier:          FMNGoDUhVouv0uzh3cyuFxU8CJlLjp9fTpFjPTgEK3s=
Subject key identifier:   3C:FD:5F:B0:10:21:66:0C:4F:06:8F:82:76:E7:67:BD:5A:3F:05:33
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Certificate issuer:       /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial:       01901E58A9155E5992105D0A8C501C0728FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:45 +0000
Files and hashes:         1: 09s7ZwJwpj5rvThPKXL3hP5XaxI.roa (hash: lKDt+IHzhSA3jfZezco0bUwDn1E85xnTnc5GRe4DmHM=)
                          2: 6UFqDbZBvJBdAevSDBxf3RvSgAs.roa (hash: yTm6J5QNT1UUqIejG0gvemAIm4uue0Fi+ZB4nROObOQ=)
                          3: AFhVw7L2cmfyKUGDwOCmO7Yo1gY.roa (hash: iXRx1HHxSJILYVnLoIi9U9OHCxx0SDrAT43Hzdppprg=)
                          4: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: ORue43JFAvFMrKPv5v9Pswrjl8k8YP+KzpbOEzeOdrA=)
                          5: ND-2T-TXVgO1iidRxUqpbiZ62f8.roa (hash: QKJfEvAusxYEqCt0nLS1vzk10Jd8GtUZ8EFTkQjxvAA=)
                          6: TEk_FA6o2pbt1p51ZxzSAe76zMo.roa (hash: 08xiBx17omWGybU4wMg/hoTFzhhTfqGKrTFbCpJLz9s=)
                          7: UCRT57JB4nrX1LHH-8XpTtRVxrA.roa (hash: 8bXJ7RUXGrq8CNpxtblHoqn66vlfLoL6jSuWnPchWCw=)
                          8: V1aAdMTQ-SApwo5HduseKDzrH9Y.roa (hash: +b8q42nBVNpwIeVCkZirAbwNa6bBuKoMbFw9l+V5Gz8=)
                          9: VhC1WinLvrdcU3ng-7Bl7zWD9f0.roa (hash: jQOqgvg0Mjk9TNcQzTUNUpGwQEHskTA+8BGF0gwKb3Q=)
                          10: ZTlGc_8YpPcmvwCJzSww-IaSn7Y.roa (hash: xzl5G9nqCp+ywJUIEt9XmQIAgxL67eQHDgLkpZzj54o=)
                          11: btdRWIVdlGF-hdEWxEiYsMh-6C0.roa (hash: TmaLTHpuWUdlDyovlqD8W4V3YnyhHPoqylFAmqqkhTU=)
                          12: chKAQjKLdtlq9kL4h4y1g19hli8.roa (hash: JFsKC8DTcP+1OSi0Nk84Jd7DSTYq+TGa+xIJCw3f8wY=)
                          13: eighutQF57gl_oHvgyGcBuhwOcY.roa (hash: M/EtpyLKEBlv1ftVFUelzx/zoZNX7Ysh7PkvU8iFiC4=)
                          14: kEphm1CWxvsMAb2r_lfEth-S7v8.roa (hash: iJOt3NMhCw15oHIv/DO45Qd234s64oO128kwjcXoK2w=)
                          15: p2FJTbKZxxBxtXrNJ4Di1VjkFCI.roa (hash: m12vKxRxkrdXLcaY3MlwEqwI5o2+I9pDov63ovpkHWw=)
                          16: rW3tRzfjRvW0Wx6a2_gYjIr6eG0.roa (hash: sq3RUE+b5o/bjHOXJt3/yOnMlXN5bcVAcd3sdI+ExC0=)
                          17: yQh1oq1Ogt2ePutTcx_6C-oKrwA.roa (hash: /bFMmEnYpF9xQ06uk/KHCywfKCr0GtELxkI5iuEJa9s=)
                          18: zJ4YK-UkCeu2RS-DGgJ0EfSTrZ4.roa (hash: d1u31mPkuhzWWQo5z3lq2TH+KdbFR5TtfL682Hmkjz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:a9:15:5e:59:92:10:5d:0a:8c:50:1c:07:28:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
        Validity
            Not Before: Jun 16 00:00:45 2024 GMT
            Not After : Jun 17 00:00:45 2024 GMT
        Subject: CN=3cfd5fb01021660c4f068f8276e767bd5a3f0533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:43:2f:d6:80:7d:55:51:3a:ce:68:06:27:
                    f2:c3:3b:f4:13:ff:67:70:60:fc:d6:13:dc:09:dd:
                    53:cf:fc:8e:8a:0a:3c:9e:7b:cf:6e:a0:0d:fc:8a:
                    b4:e8:b0:b4:71:b6:c3:24:d0:5a:cf:ea:a2:12:62:
                    f0:48:c0:2f:0e:04:06:12:7b:a5:87:2c:95:82:c9:
                    6f:fa:a5:a8:fa:8b:d4:7e:9f:e9:ed:39:73:42:49:
                    65:41:bd:2d:ab:4b:e4:60:8b:03:8b:69:f1:6e:b6:
                    14:40:e0:b7:92:63:c1:be:f1:55:cc:f2:83:5f:3b:
                    27:da:3d:fa:d4:2e:a4:78:8e:6e:ab:55:d9:05:df:
                    eb:03:fe:44:68:18:0a:bc:f2:03:e0:1d:e8:51:72:
                    3a:3d:cc:d4:a5:c1:53:7a:c5:2a:58:2f:57:55:65:
                    0c:de:ef:c7:d9:3f:fe:76:3b:eb:40:af:19:2c:05:
                    6c:6c:7e:f0:2b:c2:da:7d:0a:f2:24:72:06:df:a6:
                    20:3b:be:3e:5a:8d:6f:14:29:b0:7a:31:d8:4d:09:
                    17:df:6b:01:ba:f6:c1:bb:38:0f:92:d8:50:85:f6:
                    53:3a:ca:be:22:c1:e4:4d:76:be:ec:7e:b0:36:d2:
                    36:08:12:e9:81:19:d6:79:6b:0c:39:a5:01:a9:f6:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:5F:B0:10:21:66:0C:4F:06:8F:82:76:E7:67:BD:5A:3F:05:33
            X509v3 Authority Key Identifier:
                keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:10:ab:4a:36:dd:4e:b9:a1:5a:da:b6:5a:b7:17:1a:7d:df:
         8e:81:3a:8f:09:ed:19:fa:12:32:8a:b2:83:ce:d1:7d:85:6d:
         c6:e8:ed:ac:ca:eb:fe:7d:7f:b1:ad:be:90:81:59:85:a3:a0:
         64:4f:c9:75:e9:b8:85:18:97:03:91:d0:02:8a:54:c5:96:3d:
         77:d3:b0:8f:c0:38:83:26:f5:ea:42:e6:cb:53:db:2e:d6:d8:
         d0:bd:b7:42:88:79:77:ff:51:f6:4a:a1:3b:f1:bb:d3:42:2c:
         b8:66:38:bb:70:db:45:07:37:0b:0c:70:54:d5:21:98:2c:0d:
         3d:2f:7f:7b:3e:2f:c6:2c:98:f9:2b:8d:d2:58:c1:83:e3:8d:
         51:5a:1f:37:7b:46:a6:bd:a3:b6:e7:0f:a2:3b:6f:c3:d3:59:
         0d:a6:65:fc:bf:04:57:d3:a4:47:6f:e4:7b:37:61:d0:5f:4e:
         bb:45:98:95:23:a4:d2:55:ca:7d:36:e2:0d:c4:80:11:d1:b7:
         ea:f6:d4:81:4c:86:b8:d3:eb:ae:2e:44:5e:a9:e4:67:ba:fd:
         27:1a:d1:66:31:6f:92:ab:3f:62:fa:f1:36:e0:32:9b:95:1e:
         da:be:2e:8a:54:12:85:6f:b6:e3:27:6c:f9:d4:53:c3:cf:9d:
         40:46:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:07:57 2024 by rpki-client on console-ams.rpki-client.org