Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File:                     bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier:          TUnxf9hJ7uU0Xav22y/B86JcTLtZbOTSckFE782ucM8=
Subject key identifier:   F8:E8:7E:14:B4:BF:06:4E:BC:F4:6F:C7:AE:D4:D4:EC:E6:BE:5A:61
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer:       /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial:       018F877F4852D4610F0688CD1387DBF77508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number:          10DE
Signing time:             Fri 17 May 2024 17:00:16 +0000
Manifest this update:     Fri 17 May 2024 17:00:16 +0000
Manifest next update:     Sat 18 May 2024 17:00:16 +0000
Files and hashes:         1: AlvMn_yPKgvyROwezvyWtxIK-kk.roa (hash: Iruzz+Ph8s6kqnhbf2bOn6KXM2zHb/ZcMBEYDYbuyfQ=)
                          2: Fp6V7nbkLLHUEEn-FkA7R53Usjc.roa (hash: fMegt5QCb6OP2xTFWguBMuvIS0HfhD1tR6kLUdW+ADQ=)
                          3: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: xhr34KW+LKo0XDJtwCMRih1xwM9uzRZzJfGoQ9z9UFQ=)
                          4: xPlhtt53GhDIVXeCJFWJ_KduDAo.roa (hash: ioYqW83JnB7ILtcNCTe5GrwzojCFdv5UCVxHiJsrD2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:48:52:d4:61:0f:06:88:cd:13:87:db:f7:75:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
        Validity
            Not Before: May 17 17:00:16 2024 GMT
            Not After : May 18 17:00:16 2024 GMT
        Subject: CN=f8e87e14b4bf064ebcf46fc7aed4d4ece6be5a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:12:e8:5f:44:cf:ff:26:3c:f7:fa:69:47:
                    9f:98:66:8d:20:c2:54:e9:75:38:61:a0:78:5f:27:
                    8e:10:13:0f:28:87:1f:dc:50:30:95:b0:5b:27:a1:
                    b9:f3:5a:b3:fb:92:a9:c2:67:0c:70:e0:c1:9e:20:
                    52:89:ce:4c:c6:f7:42:42:7d:1e:eb:1f:7f:ee:98:
                    2f:71:08:72:93:51:21:a7:af:3d:7d:04:18:42:9a:
                    93:e3:c4:2b:e1:35:9a:19:64:51:6e:5e:01:f9:53:
                    36:65:4d:f7:7c:8c:68:b2:08:8a:c5:bf:f5:8c:39:
                    78:5b:5d:d7:b0:08:cc:a9:28:a3:dd:a5:38:a3:34:
                    a7:5e:90:53:4a:7d:11:74:d7:68:01:bf:c4:fa:af:
                    e9:a6:3a:df:67:ff:9f:81:48:c9:71:81:d0:a1:92:
                    75:9e:74:ed:e3:1b:6c:5c:a8:9a:fb:36:ff:ea:5a:
                    63:b1:55:ee:c6:22:14:88:3b:68:b3:1d:78:67:5b:
                    53:30:dd:ab:e3:c0:f2:6f:21:92:5e:fa:88:c0:ef:
                    6d:83:7a:c8:44:7f:0e:2f:a6:02:f9:0c:85:c1:3e:
                    fd:08:20:60:dc:5c:bd:65:b3:35:10:f2:5d:a4:e9:
                    4d:ec:b2:f3:b8:80:48:5a:33:90:86:3f:01:b1:39:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:7E:14:B4:BF:06:4E:BC:F4:6F:C7:AE:D4:D4:EC:E6:BE:5A:61
            X509v3 Authority Key Identifier:
                keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:75:25:ec:23:ca:c2:ec:75:63:aa:cb:1d:47:4a:da:bf:42:
         8c:28:ce:d2:cd:ee:33:4a:77:10:a2:d5:66:c2:da:02:82:33:
         e1:46:f3:98:ed:92:38:f7:e0:af:03:9b:ff:bd:9a:eb:03:92:
         a2:db:16:75:ca:f1:dc:19:aa:5c:93:0c:4e:36:eb:67:ef:00:
         84:70:43:df:ce:43:49:39:f0:55:3d:44:65:e6:13:ff:56:08:
         cd:ec:19:91:41:a3:1c:b7:8f:2f:4e:5e:b9:d4:94:3b:70:f6:
         c4:62:8d:dc:3e:85:ea:fb:90:eb:e0:90:18:bd:b1:48:70:a6:
         35:b6:ae:ab:47:99:2b:80:0c:9c:d9:b8:52:b5:cd:b1:d6:65:
         aa:82:86:5a:84:56:03:8a:6d:ee:1d:e5:0f:ce:19:37:b7:16:
         10:5a:a0:e1:2e:53:4a:89:19:5c:c8:b1:d2:eb:92:aa:bf:5d:
         ff:24:68:2e:24:99:31:1d:92:59:16:bb:9c:51:1d:d1:82:55:
         e4:21:50:79:79:c3:50:5d:80:50:19:cf:7b:de:ea:e2:81:e4:
         37:d7:82:27:f0:66:20:a5:ee:f0:d3:7b:6c:13:94:cf:13:4c:
         81:a6:aa:e8:28:1b:93:f3:77:b2:39:b7:c4:0c:99:cf:08:ca:
         68:d5:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:19 2024 by rpki-client on console-ams.rpki-client.org