Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File:                     1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier:          TpEakJ5FNLv9afwPUOxtLoBsQQjgaZ06Wf6TAYCfylQ=
Subject key identifier:   98:7F:89:3C:18:0C:D7:85:34:43:B3:B9:C5:6F:52:4A:C8:D9:82:EB
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer:       /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial:       018F5325B57D77FA4ED33D5EC2F07366758A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number:          0951
Signing time:             Tue 07 May 2024 13:02:11 +0000
Manifest this update:     Tue 07 May 2024 13:02:11 +0000
Manifest next update:     Wed 08 May 2024 13:02:11 +0000
Files and hashes:         1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: 977LwrfPhfxQG1CisjMgTsI+zKEU9BNQ+x96NeLp518=)
                          2: RhAOam093MOVCDwC8UqF84QqGb0.roa (hash: /ETJczrVjYx5BuOZtXP7jTmVS3oQnR4Nm+GUG4AP6qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:b5:7d:77:fa:4e:d3:3d:5e:c2:f0:73:66:75:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
        Validity
            Not Before: May  7 13:02:11 2024 GMT
            Not After : May  8 13:02:11 2024 GMT
        Subject: CN=987f893c180cd7853443b3b9c56f524ac8d982eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:85:93:1e:3b:d8:c2:b6:6c:ae:2c:0f:09:
                    86:c1:05:57:1f:ed:cf:e8:f1:df:ed:51:76:bc:4a:
                    79:77:cd:14:7e:61:18:2e:26:85:b3:dc:02:56:ab:
                    1a:cc:ae:62:f7:ff:49:aa:fd:b4:45:19:30:3b:37:
                    22:c9:de:60:24:8e:e6:6d:ee:df:9a:83:d8:aa:e0:
                    47:01:e9:cc:b5:49:e7:f1:57:a1:5e:eb:cc:14:68:
                    f8:f8:bb:dc:94:f2:8c:43:29:b4:22:7e:8a:66:4a:
                    45:ff:c4:c3:5d:ec:cc:e9:2e:a0:f4:94:3c:25:19:
                    9f:dd:a3:34:dd:35:35:e6:45:3b:ff:85:94:37:16:
                    57:7e:e4:d5:62:8b:d7:90:6e:58:7d:02:e4:13:82:
                    9a:80:6d:6d:07:c4:03:11:61:7c:29:57:02:e6:34:
                    92:10:41:db:37:54:16:44:f2:f8:af:a1:fa:c3:8a:
                    ab:a1:ae:3a:78:e8:80:ad:88:44:18:94:5f:8e:5b:
                    4a:12:2f:44:ec:26:f6:fa:65:62:a9:ba:64:e1:0b:
                    25:22:c3:31:e4:55:1f:a1:5b:06:a3:53:53:86:f9:
                    60:35:9c:bb:64:2c:31:a9:d4:85:85:25:b7:44:3b:
                    a1:9b:09:5f:72:36:d4:8c:a0:e5:67:f6:8a:4b:17:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7F:89:3C:18:0C:D7:85:34:43:B3:B9:C5:6F:52:4A:C8:D9:82:EB
            X509v3 Authority Key Identifier:
                keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:79:6b:52:7d:7a:ef:7e:70:b3:f0:d9:fb:fd:74:04:16:c0:
         23:57:9a:d5:0f:15:c5:6c:0d:76:3d:9c:a7:af:23:68:69:7d:
         6f:a8:6b:8c:4f:6f:e4:55:77:a7:14:ef:c4:9a:c0:b8:59:51:
         ee:df:d9:d5:30:0c:c4:2a:83:d1:73:9b:35:5b:6c:16:a6:0b:
         db:0d:8f:c8:d6:ee:ef:88:7e:97:91:bb:e9:95:ef:99:ae:c7:
         19:2e:cf:5b:48:ee:7d:02:63:83:18:24:65:45:cd:70:8e:fd:
         98:cf:b3:25:1e:bb:43:47:5a:8c:3f:bd:ee:79:c6:86:e8:9b:
         67:1e:af:9a:5e:cd:d0:ee:ec:75:dd:52:b5:ca:10:dc:32:05:
         ba:ea:ea:4f:41:b0:67:e4:63:41:70:20:a1:23:c9:1e:4e:82:
         4e:d0:08:92:9b:f9:de:58:51:ee:2a:ca:e1:92:61:0b:d1:aa:
         c5:a2:1e:16:65:5c:da:17:53:d4:2e:10:87:f9:a3:3c:18:a6:
         38:5a:3d:43:0d:46:50:3b:82:a0:97:5a:dc:c1:ab:05:af:f6:
         81:96:65:24:9c:0b:78:bf:47:aa:91:90:8a:4c:8d:14:ce:7e:
         eb:e8:be:20:64:e3:cd:21:81:54:0e:d0:f6:a4:e3:92:43:cd:
         c4:11:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:29:27 2024 by rpki-client on console-ams.rpki-client.org