Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
File:                     w3i8O9NQ7txPN3wiRVayUNpt3m8.mft (raw, json)
Hash identifier:          4cBI37R0PV4Yg2AJoauBO3l47NN5RxX7Gw2hQCGhbJc=
Subject key identifier:   68:6F:73:34:5C:70:C8:F7:0B:FE:2A:E1:40:BA:BA:E7:22:ED:55:3C
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       018FA778927E493DA07A6BD14C389CBCF1E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
Manifest number:          01DF
Signing time:             Thu 23 May 2024 22:00:47 +0000
Manifest this update:     Thu 23 May 2024 22:00:47 +0000
Manifest next update:     Fri 24 May 2024 22:00:47 +0000
Files and hashes:         1: 0nUa-hs-k7EYdoDhgKMjb0p_dCQ.roa (hash: B9yXrZhizgNnwE4CNyb2QK9LPSoKnZI9bBj47+Og7TY=)
                          2: 1-tCnuTKx3QD_6wCBK2aEDMGEFSU.roa (hash: hVhn4wpPPrwogAqf0r5ufIfXA/KLA61EKizCUem196M=)
                          3: 1-vkwx3yW3crLL4ge4aEgcyVVCMY.roa (hash: rk7eLrflqzTa87r0jAOeT/CVA+SwAHRvhbN2KpmFicg=)
                          4: 3uFWR0vVPRl8D2lPM7roQ9WJz0Y.roa (hash: LSmzWgn/hYIHi4NUmlM6GKYm3LBmcQmORRPkif4dGKQ=)
                          5: 6X5ifuhs87ekvaO6u1TGv9mSnrY.roa (hash: 8hyRk37gmsiqWuOCOl8l0dab0H/cXlXc/52njKb+bD0=)
                          6: 9wyPoXbYBRydhs9Ff4ii_7M7cSo.roa (hash: zHcpd4rQY3sfRjfO0FxaAycXVICh6hMBl/gup5ZmJlM=)
                          7: AYV8vqDsI0L1Jq_o_AFoEAepqjo.roa (hash: YA6GKqXsGqXgKqypq8FCMDqrP6wRuiW+LC+QlLYbkWk=)
                          8: AtiPNY5M1k-GpfrvThD3Z2bg0Lg.roa (hash: 04omoSUm8bZAaqa4LNpSJzgm0bIlqO6UIy4hXR7/6cI=)
                          9: DRlUupqZIr7fiDvqcxzWjbVqcWo.roa (hash: 78sjLx2n021XJaNz77IhBMm+ussq+bbvnLGIiZQ4r/0=)
                          10: ESLfopNmgu5850KR2Bu9yhKxIL8.roa (hash: 8aautCYMPm6wFX3dwljJoi2ppL8Hr3LkWgpBb61yKJU=)
                          11: QUfR4QzQVBMEFqQeGNEHQvtsaLc.roa (hash: xT0IGFzcdHr5yptsj7RDwBqOKFivYXYv/EjiOvQA2lM=)
                          12: RHFnY95t4uvGsj-qTMJoEYxjsYw.roa (hash: jFBNKpkQQdEQfY7XMexHXeh3GYabj7Jbs9i015IuQWc=)
                          13: UsqH1KVqXJ6Fv6qTxxNRsU5xXq4.roa (hash: Ze+ltFBhEZi90vIale8iaPOqDcFsPkdSLyB+9x4HnmE=)
                          14: _woB-k25EN7z3XiAHe5D8zDoVYg.roa (hash: nnsux1v/Rb73Uz9STxcZ4/1rSuUiYU+/hRWd+ppanE0=)
                          15: bSZ9HQmlmDl-2g06PNPWjdv1x28.roa (hash: 7MDP/F+MIUuob8iJHdT8kFHgTHSA+3AeBaz277LJ9dA=)
                          16: ge0rL519YV6DIO7OHQtZFiU_Amo.roa (hash: UC2eOvxqJOZkK8IFqpLf76mLm61NMExYNyf3Wtb7/3w=)
                          17: jcaJbWMuJ-zRM0uY1-KBZHQ2wY8.roa (hash: F9CdJBaYIc90s4LTAcRKWuatdAvkxeD8qpnBXnQxvRw=)
                          18: jvvIL990XaTYxw-VeLqzvIrXD3A.roa (hash: PY+/8bk3/EQePvx/TRYxHScZnj5sFMK+3gBhhjytTLo=)
                          19: pINUp2io4Tpbc7Gn7YxsA6Lt8mA.roa (hash: F1gmG4AxGffRMFNm8UtOfvWv3JzHTZGEB9cWh9szsEM=)
                          20: w3i8O9NQ7txPN3wiRVayUNpt3m8.crl (hash: Av7tAUu1+7Bt4p+3hz6YgLs4wFSw2oaVnNq/edbDhnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a7:78:92:7e:49:3d:a0:7a:6b:d1:4c:38:9c:bc:f1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: May 23 22:00:47 2024 GMT
            Not After : May 24 22:00:47 2024 GMT
        Subject: CN=686f73345c70c8f70bfe2ae140babae722ed553c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:fa:0d:0e:6e:4f:82:d0:47:7f:47:c4:e7:
                    ad:d1:64:5c:fe:58:ed:98:8b:18:16:8e:d0:ad:a8:
                    c8:d4:a6:cd:e0:cc:69:1f:8b:10:9e:e5:da:7c:4e:
                    cc:7a:bb:fd:21:05:86:28:bc:3a:3b:12:50:cf:88:
                    4c:52:b1:8d:34:58:c9:bd:79:14:dc:65:06:1c:fa:
                    b8:d9:25:52:35:57:e9:6c:bb:ea:07:0d:5f:9f:4a:
                    30:28:31:d7:84:fa:5d:eb:dd:8c:61:69:04:75:6b:
                    25:ef:44:fb:26:2f:19:6d:d5:bc:99:cb:94:09:56:
                    3e:d2:50:36:b8:30:ce:b6:96:a1:c5:ec:c3:62:61:
                    c3:28:99:ad:23:1e:be:44:6a:07:bc:e4:4c:3d:3b:
                    0b:de:eb:02:e1:a7:16:f2:24:2e:48:65:a1:48:22:
                    76:99:c6:04:ce:fc:fe:ac:9e:01:62:26:e4:f9:dc:
                    3d:fa:9b:4a:75:ec:53:a0:9c:48:77:c3:14:b0:50:
                    1c:b0:69:3b:11:23:8c:15:ce:ff:96:48:76:85:06:
                    c1:f6:8c:33:01:51:61:13:f1:b2:bc:de:d0:a1:f7:
                    a1:08:a0:db:e6:ee:a6:f5:18:9a:05:d4:f4:8d:d4:
                    5c:c1:c6:fb:6d:5b:02:ed:80:9c:54:49:8d:eb:40:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6F:73:34:5C:70:C8:F7:0B:FE:2A:E1:40:BA:BA:E7:22:ED:55:3C
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:97:2f:22:44:08:97:e3:2e:fd:00:3d:8f:51:d7:99:da:a1:
         45:38:6c:f8:a4:d8:91:d2:d7:3f:84:08:77:32:26:73:43:8a:
         7c:c6:5c:38:f6:af:b9:4c:a4:c6:26:1a:7e:1c:b3:57:4d:5d:
         26:07:c6:10:21:23:b3:49:f3:42:5d:0a:b4:89:15:13:6a:9a:
         a1:e1:e7:10:d6:01:08:c9:3f:fb:7f:3e:7a:c6:79:fe:db:4a:
         c7:2e:f2:01:2c:05:4b:76:c4:17:d0:b2:ff:ab:5a:8e:4c:30:
         1d:e6:b5:b2:d2:ca:cc:34:79:4c:2c:d9:f0:e4:62:11:aa:5d:
         a5:8e:68:5a:51:88:de:c1:c9:ec:96:4a:00:6f:47:f2:97:b9:
         53:e9:d8:7b:61:a0:d4:36:3a:36:37:b3:d5:29:03:7d:c2:e8:
         d9:03:3c:7d:19:65:81:e6:c1:80:15:f1:f0:af:bd:d0:ed:eb:
         21:bc:81:6d:a1:c3:f1:20:ef:2e:cb:fe:46:a9:d4:2f:68:41:
         51:4c:96:2e:d2:eb:ab:ab:47:05:c2:57:84:0a:f5:f4:6d:f9:
         23:cf:18:cc:8a:3b:69:6d:38:ef:98:55:35:e2:ad:ae:1a:c8:
         74:54:dd:9c:a2:bf:e7:01:c4:70:b4:ee:ec:e5:03:7f:f5:fb:
         3d:4c:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:33:23 2024 by rpki-client on console-ams.rpki-client.org