Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          FnS2SgtIwGLyxlGx8bO/0yUQvWz3YLABJwr+eLO8fpc=
Subject key identifier:   D6:B2:CE:59:C6:E8:27:00:62:EC:44:F0:62:B7:C2:EF:B6:2F:C0:28
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       018F87491D97FBA0EACACBBFE90D0C93407A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          096B
Signing time:             Fri 17 May 2024 16:01:06 +0000
Manifest this update:     Fri 17 May 2024 16:01:06 +0000
Manifest next update:     Sat 18 May 2024 16:01:06 +0000
Files and hashes:         1: HgCS1Qcnf-aNK0PfXIRQw0YFyuA.roa (hash: IXTTQE5G2/9nj3XejZG9nGw/GwdrichVbP2HsC49sFQ=)
                          2: POgJEqh5yw5U-CMfkRVhpojBN_g.roa (hash: EbFUAZc4of2up9nrbscSy4vqbc6/03UzFnXE8HAjKvI=)
                          3: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: RBZkiHoYPnhIRdkDwUHnh+76N3R434LS1EXO/86DzF0=)
                          4: rkhsUNkaZdR5ssM7jfnzVuus9N0.roa (hash: qUG1X0bNCKNLKpXgDWc40eymULtbqil2vWjF9iXq5dY=)
                          5: zsBhu7buK7mMD-OXqyipESRa2rk.roa (hash: 9eHEdFoayE/myPKeVd9ZX52ayMzuka4Pm3L42Q3G6g4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:1d:97:fb:a0:ea:ca:cb:bf:e9:0d:0c:93:40:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: May 17 16:01:06 2024 GMT
            Not After : May 18 16:01:06 2024 GMT
        Subject: CN=d6b2ce59c6e8270062ec44f062b7c2efb62fc028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:66:5b:b5:a7:91:d5:37:4a:9f:50:28:60:
                    94:89:fb:8f:42:0f:b4:71:98:0a:93:a2:f1:34:02:
                    8c:f7:3d:73:dc:4f:c7:70:42:b2:62:ba:e9:bf:d0:
                    f7:d5:36:5d:9b:e2:d6:90:1b:26:c6:99:9a:33:3e:
                    a2:c8:a4:41:97:b4:8b:ed:4c:21:6f:c8:8a:a1:22:
                    97:22:44:4d:fb:b7:26:e3:d6:68:87:33:f6:db:09:
                    e7:3a:dc:16:ef:ad:22:c1:cf:27:95:ac:b4:7c:89:
                    78:d9:a1:59:7a:6b:91:47:17:49:0e:93:45:58:8a:
                    50:d1:04:98:5f:b8:1a:e2:f4:0a:d8:2b:78:e2:46:
                    0c:c3:1a:ff:71:59:32:5e:e1:2e:ac:ef:a5:d9:7d:
                    8f:5a:0e:6b:ee:48:07:f3:96:f1:14:57:fa:8d:c6:
                    58:15:ae:64:09:b6:ea:d7:9e:1d:f2:fa:59:bb:ee:
                    e5:0f:e3:88:ad:1b:3e:73:f3:bf:35:aa:8d:8b:77:
                    3e:bb:70:03:75:d1:e5:e6:08:d2:4b:60:0b:44:5d:
                    83:eb:ff:3a:90:46:dc:9a:5f:ef:4b:30:a1:a5:f0:
                    93:1e:fb:01:04:e0:d6:7f:87:01:68:8b:d4:24:17:
                    97:30:ba:30:2d:05:0d:7d:cc:d1:b8:2c:5f:55:0b:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B2:CE:59:C6:E8:27:00:62:EC:44:F0:62:B7:C2:EF:B6:2F:C0:28
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9d:63:58:79:e2:18:fb:ed:4a:72:0e:db:d8:08:ce:f4:d3:
         5b:06:e7:74:ee:6f:0c:b0:76:cd:c1:29:f6:93:12:ba:0a:6e:
         20:2a:fa:ff:00:98:7b:4b:21:01:83:f4:35:68:f3:65:03:f8:
         cb:2a:6b:31:f1:b5:52:31:c4:24:67:f5:49:53:d5:26:81:65:
         9c:07:cc:15:23:b9:c1:bb:5a:56:de:a9:5f:3e:4d:05:85:f6:
         ed:85:b5:14:84:7d:a6:87:80:12:a9:0e:89:6b:4e:7b:65:d0:
         23:aa:e6:ce:7b:a7:2e:03:0a:ef:e2:67:80:71:08:fa:37:e8:
         9a:fc:58:7f:29:e7:9a:d0:56:8e:2a:d4:df:bf:9a:b1:17:5c:
         5f:19:02:69:6b:65:38:ab:4b:70:75:2c:48:d3:2d:94:5d:de:
         f7:f7:8d:91:49:4a:69:e4:fe:61:f6:82:9f:89:72:04:5c:6e:
         1b:43:72:04:2a:77:9d:a4:fe:ee:c7:3c:dc:15:b9:a3:cb:e5:
         ec:a4:45:70:6b:fc:1a:b2:98:49:87:39:ca:b3:5a:e2:40:c4:
         f6:9d:b3:b9:57:7f:31:d4:a6:50:8d:c3:e5:ed:5d:da:1f:3a:
         cf:c0:6a:f0:c2:c4:07:6d:05:12:92:de:aa:01:30:68:31:68:
         c4:16:00:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSR2X+6Dqysu/6Q0Mk0B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjQwNTE3MTYwMTA2WhcNMjQwNTE4MTYwMTA2WjAzMTEwLwYDVQQD
EyhkNmIyY2U1OWM2ZTgyNzAwNjJlYzQ0ZjA2MmI3YzJlZmI2MmZjMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2pmW7WnkdU3Sp9QKGCUifuPQg+0
cZgKk6LxNAKM9z1z3E/HcEKyYrrpv9D31TZdm+LWkBsmxpmaMz6iyKRBl7SL7Uwh
b8iKoSKXIkRN+7cm49ZohzP22wnnOtwW760iwc8nlay0fIl42aFZemuRRxdJDpNF
WIpQ0QSYX7ga4vQK2Ct44kYMwxr/cVkyXuEurO+l2X2PWg5r7kgH85bxFFf6jcZY
Fa5kCbbq154d8vpZu+7lD+OIrRs+c/O/NaqNi3c+u3ADddHl5gjSS2ALRF2D6/86
kEbcml/vSzChpfCTHvsBBODWf4cBaIvUJBeXMLowLQUNfczRuCxfVQsQKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNayzlnG6CcAYuxE8GK3wu+2L8AoMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAp1jWHni
GPvtSnIO29gIzvTTWwbndO5vDLB2zcEp9pMSugpuICr6/wCYe0shAYP0NWjzZQP4
yyprMfG1UjHEJGf1SVPVJoFlnAfMFSO5wbtaVt6pXz5NBYX27YW1FIR9poeAEqkO
iWtOe2XQI6rmznunLgMK7+JngHEI+jfomvxYfynnmtBWjirU37+asRdcXxkCaWtl
OKtLcHUsSNMtlF3e9/eNkUlKaeT+YfaCn4lyBFxuG0NyBCp3naT+7sc83BW5o8vl
7KRFcGv8GrKYSYc5yrNa4kDE9p2zuVd/MdSmUI3D5e1d2h86z8Bq8MLEB20FEpLe
qgEwaDFoxBYA9w==
-----END CERTIFICATE-----
Generated at Fri May 17 17:51:59 2024 by rpki-client on console-ams.rpki-client.org