Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File:                     y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier:          okfIsmDVjmksg3L1GclqM7NcIH0SuDnX6YX3o0p0PrM=
Subject key identifier:   24:3E:F8:FE:5C:B4:D6:39:0A:4B:92:09:66:43:4B:75:3D:54:1A:42
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer:       /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial:       01903AE2B82B4B3D1ED5DFCED1A23D0410B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number:          0C7F
Signing time:             Fri 21 Jun 2024 13:00:55 +0000
Manifest this update:     Fri 21 Jun 2024 13:00:55 +0000
Manifest next update:     Sat 22 Jun 2024 13:00:55 +0000
Files and hashes:         1: fyun39i0hpE25gGvBWfxhMiF8lE.roa (hash: ZUjzzhOo9wpyn27eIn33/VMfz1EYf2hZLpAxox6nq34=)
                          2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: WbKddHk1ufxR1LDMFAw+bpnWbYEQOmZLrwCih73R3ro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e2:b8:2b:4b:3d:1e:d5:df:ce:d1:a2:3d:04:10:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
        Validity
            Not Before: Jun 21 13:00:55 2024 GMT
            Not After : Jun 22 13:00:55 2024 GMT
        Subject: CN=243ef8fe5cb4d6390a4b920966434b753d541a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:c1:7b:08:15:f5:27:5f:93:aa:8b:3e:97:
                    b1:f4:a2:79:c5:43:97:2b:e7:f9:6d:7f:0a:3a:55:
                    b5:bf:e4:d7:30:83:51:11:0c:39:40:80:43:2f:8a:
                    f7:13:6e:a0:d2:2e:74:ba:01:31:49:2a:05:81:ba:
                    f7:9e:48:20:0a:26:65:d7:fb:77:35:4b:fa:c7:10:
                    ad:ea:9c:10:08:86:44:5e:fc:16:1e:57:0b:a3:84:
                    82:01:37:48:69:6f:a1:f1:78:da:cb:d8:49:f3:50:
                    2f:c8:5a:80:6e:df:e3:63:a5:64:c7:d8:fa:e2:0d:
                    14:91:50:e8:7c:34:e3:79:78:f4:cb:dc:ee:b4:b0:
                    cb:ba:56:94:29:36:95:30:e8:62:2a:d7:38:62:ee:
                    59:79:03:ee:21:7e:36:af:6b:f2:34:74:fd:2c:8b:
                    c9:3d:da:8a:9e:7b:cb:93:66:0b:07:e1:a1:53:7e:
                    85:2c:b0:2b:a7:ad:74:fc:79:ed:c4:b8:84:c0:37:
                    e6:30:73:e0:02:52:81:b0:cd:0f:6a:3f:7d:f2:e7:
                    97:4c:96:d3:d2:66:d7:ad:0e:cb:e4:9f:b3:24:df:
                    c7:15:cb:48:c6:44:9e:bc:92:29:61:57:13:dd:20:
                    f4:ed:52:38:e2:47:15:da:b2:6f:44:1f:5d:4c:f5:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3E:F8:FE:5C:B4:D6:39:0A:4B:92:09:66:43:4B:75:3D:54:1A:42
            X509v3 Authority Key Identifier:
                keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:60:54:38:b1:17:56:67:20:b8:ce:3e:27:55:f7:a4:f9:
         b2:ba:1a:30:a0:8e:8a:b1:12:3a:d1:1b:22:dd:2a:f1:ae:04:
         60:bd:9e:1e:4c:37:09:52:82:02:d9:80:54:d9:4d:87:78:1b:
         20:83:ba:db:4e:6b:80:2f:41:51:d6:90:78:ad:98:49:fd:93:
         c6:b3:fd:2e:8b:68:4c:bb:e9:5a:b9:64:81:84:f6:8d:a7:02:
         95:33:a8:9d:a0:a4:09:37:87:e4:81:64:3d:fb:aa:7e:76:83:
         56:8f:b4:45:a9:95:77:80:2c:85:e7:8e:11:c4:76:47:e6:dc:
         a7:60:c0:d9:ee:80:17:7d:9b:51:ea:d7:fe:e3:48:0c:1d:3f:
         5f:26:be:3e:60:77:3c:7e:f5:83:6a:56:af:63:d4:90:bd:c6:
         b5:43:c0:e3:84:13:9b:6c:17:04:ea:86:f4:90:64:ec:c7:a1:
         3e:e9:a8:c8:c1:6b:a7:75:9a:99:3d:ad:55:09:3a:8a:5a:16:
         ee:ce:42:4b:2d:d0:1c:6b:6d:a0:0e:e6:6d:0d:01:67:f3:ca:
         b8:41:c8:8a:a8:b0:1e:28:bc:49:bf:98:cf:87:c0:3b:60:d9:
         d4:b1:b5:f7:72:9c:6c:f9:3c:8f:3a:85:4a:ff:9f:83:05:5d:
         c9:4f:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:54:29 2024 by rpki-client on console-ams.rpki-client.org