Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          B04AW/vGo+DsxIbXD0B/2kzXNeQA85csScdtiEsnXGA=
Subject key identifier:   C8:2A:DB:78:01:34:11:DD:56:74:FC:80:07:75:3C:99:90:0F:0A:72
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       018FAE8D4B5C644F5701B6F511DE85B6295F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          118D
Signing time:             Sat 25 May 2024 07:00:46 +0000
Manifest this update:     Sat 25 May 2024 07:00:46 +0000
Manifest next update:     Sun 26 May 2024 07:00:46 +0000
Files and hashes:         1: 49Xa_PnTt_sZ7RJDHGtdkk6rAPg.roa (hash: JwZjgtCDlyD0QU0lYkwga7fGTSQL5Dk1x3CM6yNhTp4=)
                          2: 5f1-IBNOjW779NamWREt2b2xTzw.roa (hash: VYSWmaFm9fDp8Dx7LNqL6s1EHFITBAQ0+6fmQoQii14=)
                          3: KkPaC_J66mVGT4TrVg2pD6Tx-xY.roa (hash: 0OM3zFtROjkvPjZzoY2rhWqE6fZq8m7LX3apFFmBlOI=)
                          4: LmrBk9SjWqqCDsb9OpHwMjXVCss.roa (hash: eItw05lqy67m7Mg0MMUWltLmTadt+TBW8rC7djylfC8=)
                          5: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: z7tLtyeYr/GcUFx9ZL2HI0eXkJV1mHG0+Oxx7prEff4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ae:8d:4b:5c:64:4f:57:01:b6:f5:11:de:85:b6:29:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: May 25 07:00:46 2024 GMT
            Not After : May 26 07:00:46 2024 GMT
        Subject: CN=c82adb78013411dd5674fc8007753c99900f0a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:cf:fb:1b:ad:9b:96:70:fb:24:26:55:d9:
                    75:59:57:b2:e6:a5:30:90:89:43:66:3d:33:2f:f7:
                    8f:ea:7e:27:be:a5:55:78:75:a3:5b:b7:8f:3c:54:
                    5b:95:5b:90:a9:21:63:55:0f:58:d2:f3:35:d9:bf:
                    89:ee:b1:e0:4e:4a:27:e9:5e:69:51:82:92:02:bc:
                    d4:2f:7e:83:3a:95:3b:ec:ad:b7:fb:d7:85:c6:25:
                    44:b1:5a:17:1b:ec:7b:f8:3b:c2:f7:aa:d8:1c:10:
                    61:6a:6d:97:66:cd:cc:3f:fc:23:4b:e1:1b:14:c7:
                    d3:01:8b:bf:46:b1:f3:ba:e5:bc:e8:3f:a2:2c:c3:
                    48:a3:8d:7e:ab:3f:b6:15:f8:1d:76:d7:58:f6:aa:
                    86:f2:e4:47:44:d2:ac:9b:fc:00:da:75:01:d8:e1:
                    10:8d:e2:fd:16:cf:5d:84:e6:a0:ab:74:95:c7:e8:
                    61:83:e4:9d:a1:8f:6b:f8:4a:bb:07:95:91:28:e5:
                    81:f4:28:51:0a:21:0a:b0:a9:7c:c7:16:76:d5:64:
                    8d:bf:f4:75:dd:86:ca:54:3c:7f:4d:8d:4a:5c:b9:
                    9d:16:6e:45:5b:3c:56:5a:fa:62:fd:fe:d1:93:b9:
                    f4:27:48:8e:9c:8a:cc:08:2e:8c:5b:9e:f2:9a:c6:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2A:DB:78:01:34:11:DD:56:74:FC:80:07:75:3C:99:90:0F:0A:72
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:c0:40:fd:52:21:02:fe:ea:32:ab:05:8a:3a:e6:e5:c6:
         ad:3c:f9:14:dc:a5:9b:ad:51:2f:ee:d0:35:cc:4c:a5:27:d1:
         e5:d6:c3:09:1b:1a:1a:c3:96:84:23:3d:22:0a:76:3d:dd:64:
         1b:89:7e:6c:28:e4:b3:b6:ce:39:1b:ec:01:ca:f7:46:e2:4a:
         f3:67:a0:f0:99:6d:8f:b1:dd:cf:7e:5a:30:dd:eb:26:4d:5e:
         8b:34:fd:be:31:3f:61:24:db:d6:01:af:03:64:e2:ec:26:dd:
         bd:ab:43:d3:66:03:66:a7:bc:27:71:e9:a9:e2:38:21:98:90:
         5e:5e:e2:9a:ed:6a:4e:b3:c4:98:14:b3:61:92:0d:a5:26:39:
         e9:05:3b:d6:21:b0:13:43:bd:42:f9:87:ff:e2:c8:d9:eb:ed:
         6c:65:35:55:6a:3f:f5:ed:fd:1f:d3:ae:56:f0:26:d1:d2:d6:
         b5:d7:ca:7d:9d:06:8b:1d:e6:7c:9e:40:fb:5d:26:20:e3:dd:
         ca:5f:da:f0:04:30:42:f0:d0:ac:b6:df:00:4e:8c:5a:aa:0e:
         6c:f7:72:ae:da:ea:a2:56:a0:16:40:a4:d6:fb:7b:c1:cd:95:
         f5:f5:58:f5:c7:31:5e:8a:71:9b:b7:24:8c:df:c9:a5:a2:df:
         83:88:fd:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ujUtcZE9XAbb1Ed6FtilfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZWNhNDAxMmJmN2I1MDU2ZTJlMGExNjFlYjQ2MTg4NzZj
OTExMmEwHhcNMjQwNTI1MDcwMDQ2WhcNMjQwNTI2MDcwMDQ2WjAzMTEwLwYDVQQD
EyhjODJhZGI3ODAxMzQxMWRkNTY3NGZjODAwNzc1M2M5OTkwMGYwYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQvP+xutm5Zw+yQmVdl1WVey5qUw
kIlDZj0zL/eP6n4nvqVVeHWjW7ePPFRblVuQqSFjVQ9Y0vM12b+J7rHgTkon6V5p
UYKSArzUL36DOpU77K23+9eFxiVEsVoXG+x7+DvC96rYHBBham2XZs3MP/wjS+Eb
FMfTAYu/RrHzuuW86D+iLMNIo41+qz+2FfgddtdY9qqG8uRHRNKsm/wA2nUB2OEQ
jeL9Fs9dhOagq3SVx+hhg+SdoY9r+Eq7B5WRKOWB9ChRCiEKsKl8xxZ21WSNv/R1
3YbKVDx/TY1KXLmdFm5FWzxWWvpi/f7Rk7n0J0iOnIrMCC6MW57ymsYxuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgq23gBNBHdVnT8gAd1PJmQDwpyMB8GA1UdIwQY
MBaAFHvspAEr97UFbi4KFh60YYh2yREqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYt
NThjYWY0NzAxYmUzLzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYtNThjYWY0NzAxYmUz
LzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8/AQP1S
IQL+6jKrBYo65uXGrTz5FNylm61RL+7QNcxMpSfR5dbDCRsaGsOWhCM9Igp2Pd1k
G4l+bCjks7bOORvsAcr3RuJK82eg8Jltj7Hdz35aMN3rJk1eizT9vjE/YSTb1gGv
A2Ti7CbdvatD02YDZqe8J3HpqeI4IZiQXl7imu1qTrPEmBSzYZINpSY56QU71iGw
E0O9QvmH/+LI2evtbGU1VWo/9e39H9OuVvAm0dLWtdfKfZ0Gix3mfJ5A+10mIOPd
yl/a8AQwQvDQrLbfAE6MWqoObPdyrtrqolagFkCk1vt7wc2V9fVY9ccxXopxm7ck
jN/JpaLfg4j9bw==
-----END CERTIFICATE-----
Generated at Sat May 25 10:42:00 2024 by rpki-client on console-ams.rpki-client.org