Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File:                     W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier:          CC5kV4aHqWof90MPlY20r7cGq/WUgbPEcT9Ocl9qQ7Q=
Subject key identifier:   F3:CC:30:24:F7:AC:03:83:E0:97:F4:2C:98:6F:EC:1E:A9:AD:39:B9
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer:       /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial:       018F885B4D74B2BD763BF36B2F12DBB73954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number:          0D97
Signing time:             Fri 17 May 2024 21:00:35 +0000
Manifest this update:     Fri 17 May 2024 21:00:35 +0000
Manifest next update:     Sat 18 May 2024 21:00:35 +0000
Files and hashes:         1: 8OiazMxF6i6x2OARB-jjTBxuz_c.roa (hash: bv1YiluWPjdmt4DJoR007Syi/jA279ZMB5uCoC1Fjag=)
                          2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: c6xz/XdSSYt+c69fMg392qtFBXbn1JR+M0xvX4YNGFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:4d:74:b2:bd:76:3b:f3:6b:2f:12:db:b7:39:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
        Validity
            Not Before: May 17 21:00:35 2024 GMT
            Not After : May 18 21:00:35 2024 GMT
        Subject: CN=f3cc3024f7ac0383e097f42c986fec1ea9ad39b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:14:98:29:d2:76:d0:5c:8b:ce:ab:bc:dc:
                    a4:44:e6:89:30:7a:ef:42:45:b8:fc:d7:82:d7:a6:
                    fa:65:04:8c:64:a9:29:83:e0:86:02:29:14:83:ea:
                    9a:d2:91:a9:90:a9:fc:af:7e:ef:49:a3:1d:bc:0a:
                    10:72:1b:40:9f:0d:4c:cd:94:85:cb:08:e7:56:18:
                    01:4a:4a:05:99:8b:f9:0f:58:26:2e:14:1c:9d:0d:
                    9b:76:8b:d1:32:04:d9:06:82:47:6d:74:d7:8d:17:
                    af:38:c1:75:4a:11:c4:7f:ff:a5:37:82:c9:ae:30:
                    bf:ed:c9:4f:0a:81:df:0b:bb:8d:a8:79:4e:de:f1:
                    00:5d:b6:97:d6:34:7f:ee:0a:7d:8d:11:26:c4:cd:
                    b1:3e:8b:9a:26:f5:17:cd:0a:50:b5:1b:d9:d8:23:
                    c1:9b:e0:53:25:2b:65:b5:17:4d:59:26:dc:26:83:
                    93:8d:29:72:86:6a:b9:aa:24:04:36:9a:1e:9e:89:
                    cc:55:1d:c4:89:d2:78:53:98:92:9b:01:8b:f4:ad:
                    08:ae:ba:58:88:f1:85:ab:7f:74:21:a0:a7:d0:b2:
                    60:81:50:4f:fd:1a:a3:b1:40:58:40:0b:df:a0:6c:
                    6d:99:82:56:8c:74:6c:b0:d8:18:38:64:e8:06:1d:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:30:24:F7:AC:03:83:E0:97:F4:2C:98:6F:EC:1E:A9:AD:39:B9
            X509v3 Authority Key Identifier:
                keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:16:4b:11:09:e7:60:34:17:7d:bb:f8:d3:31:28:74:ca:e4:
         91:6e:f9:4d:fe:9e:13:81:57:5f:7d:68:ee:70:f7:1e:bd:86:
         8a:b2:f2:ec:fd:f7:1f:8c:05:fe:c1:79:b3:20:b2:a3:4c:dc:
         07:fb:18:99:9c:85:58:76:16:b6:fc:be:da:0a:a0:e3:94:bf:
         1c:96:0c:1b:9a:a1:00:00:90:79:a3:92:73:73:17:f8:dd:83:
         14:44:78:13:16:55:60:76:8c:86:98:cd:0a:fa:03:35:a0:f6:
         c2:cb:29:65:d7:f8:2c:3d:6c:fb:ad:fa:cb:89:52:e9:85:df:
         e0:29:54:c5:b7:f4:ce:e5:2c:84:2f:4c:08:f8:38:c3:9c:b5:
         e1:6b:02:16:de:d6:a8:31:a6:fc:b5:1e:a4:aa:7d:bd:c5:5c:
         26:54:d5:a7:6c:44:bf:68:00:53:f2:bf:8b:7d:02:99:c0:ad:
         62:6d:d1:f2:46:84:3e:bd:c3:ca:c3:ed:a2:72:17:d4:e5:46:
         4e:98:7a:11:93:d8:99:2d:af:1f:b6:20:40:56:da:53:71:29:
         25:15:b0:de:b0:0c:28:99:dc:7c:b8:aa:c1:1f:14:03:fc:18:
         ef:74:09:ce:b6:f4:76:c1:ec:a2:4a:13:47:3a:3d:ed:4e:52:
         5c:1e:4c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW010sr12O/NrLxLbtzlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjYzMzYyZmVkZWUxYzg5MTM1ZDU0MzRkMzdiNzM3NWVk
NWExMDgwHhcNMjQwNTE3MjEwMDM1WhcNMjQwNTE4MjEwMDM1WjAzMTEwLwYDVQQD
EyhmM2NjMzAyNGY3YWMwMzgzZTA5N2Y0MmM5ODZmZWMxZWE5YWQzOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq0UmCnSdtBci86rvNykROaJMHrv
QkW4/NeC16b6ZQSMZKkpg+CGAikUg+qa0pGpkKn8r37vSaMdvAoQchtAnw1MzZSF
ywjnVhgBSkoFmYv5D1gmLhQcnQ2bdovRMgTZBoJHbXTXjRevOMF1ShHEf/+lN4LJ
rjC/7clPCoHfC7uNqHlO3vEAXbaX1jR/7gp9jREmxM2xPouaJvUXzQpQtRvZ2CPB
m+BTJStltRdNWSbcJoOTjSlyhmq5qiQENpoenonMVR3EidJ4U5iSmwGL9K0IrrpY
iPGFq390IaCn0LJggVBP/RqjsUBYQAvfoGxtmYJWjHRssNgYOGToBh0YqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPMMCT3rAOD4Jf0LJhv7B6prTm5MB8GA1UdIwQY
MBaAFFv2M2L+3uHIkTXVQ003tzde1aEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMt
NmFkMGI2OWIyMDhmLzEvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMtNmFkMGI2OWIyMDhm
LzEvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBZLEQnn
YDQXfbv40zEodMrkkW75Tf6eE4FXX31o7nD3Hr2GirLy7P33H4wF/sF5syCyo0zc
B/sYmZyFWHYWtvy+2gqg45S/HJYMG5qhAACQeaOSc3MX+N2DFER4ExZVYHaMhpjN
CvoDNaD2wsspZdf4LD1s+636y4lS6YXf4ClUxbf0zuUshC9MCPg4w5y14WsCFt7W
qDGm/LUepKp9vcVcJlTVp2xEv2gAU/K/i30CmcCtYm3R8kaEPr3DysPtonIX1OVG
Tph6EZPYmS2vH7YgQFbaU3EpJRWw3rAMKJncfLiqwR8UA/wY73QJzrb0dsHsokoT
Rzo97U5SXB5Mog==
-----END CERTIFICATE-----
Generated at Fri May 17 23:40:14 2024 by rpki-client on console-ams.rpki-client.org