Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File:                     NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier:          vweCJpvT2FsRCO/5e4/sWv2sHBWnp3u+3WNYN22+0I8=
Subject key identifier:   A9:33:C6:EE:A2:6B:87:2D:CC:CC:3C:B3:64:AE:95:2F:37:38:58:9B
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer:       /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial:       018F8749C43EDF9F849ADCB68AD2668E5486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number:          09F9
Signing time:             Fri 17 May 2024 16:01:49 +0000
Manifest this update:     Fri 17 May 2024 16:01:49 +0000
Manifest next update:     Sat 18 May 2024 16:01:49 +0000
Files and hashes:         1: 7_aiEInBc0uh6TYUwL3NXZBzaHM.roa (hash: WKpdVk1jeFfNGCiSnKhV1+Bey+twp648qnb1o1B2wxU=)
                          2: AFQ2pjXqCntdsWq-u0sUsicU1-0.roa (hash: AdeOHY5PD5Js7u5W8nzqdIxl7okFKaalPwzXzNVRUzQ=)
                          3: IJXpFtfjCdRQVY4jh11gmIAN0ak.roa (hash: cdgcjKSXoeps12eUYZcADC/w8kq4lrcPVQ27/oW0EnY=)
                          4: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: t97lM62mVmLek1hkCminygOumZME6tZR2hkAEmQALiQ=)
                          5: RjO51fT85r-koYTpXjlshbHXHog.roa (hash: Kek8kyydn6ZpOGEQ2USAxtTtJg4+0Dslg7BUFp4RMxU=)
                          6: rDJTLVCKW3hBFtsC-XnSMadA6Z4.roa (hash: oIf9XM/BvNW3sivE0tQduLPF51M8svESIyFHwLxzNFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c4:3e:df:9f:84:9a:dc:b6:8a:d2:66:8e:54:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
        Validity
            Not Before: May 17 16:01:49 2024 GMT
            Not After : May 18 16:01:49 2024 GMT
        Subject: CN=a933c6eea26b872dcccc3cb364ae952f3738589b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:04:bf:28:e9:4e:97:1a:7e:73:ef:9d:99:
                    fb:db:94:5c:c2:a5:4c:75:27:16:97:5f:82:4e:d9:
                    16:cf:1e:74:9a:85:d6:45:dd:df:b7:c0:4b:f0:e8:
                    b2:5c:a1:27:e6:34:f4:7f:45:fe:f8:9b:8e:91:d6:
                    81:8f:50:86:cb:af:d3:6a:1a:76:e4:5c:3d:ed:52:
                    2f:94:26:e5:29:f2:76:9a:7e:e0:9a:6b:8d:c0:2e:
                    9b:86:d8:a4:0f:a9:eb:8f:b0:e3:a9:dd:14:09:9c:
                    ba:42:7b:17:10:4f:80:14:6f:0e:94:7b:fe:f0:35:
                    6b:de:d3:64:83:68:af:89:77:c9:f2:46:51:55:df:
                    72:24:64:db:b6:9c:f7:77:d3:29:bb:82:0a:f5:41:
                    19:4a:d8:e0:68:fc:c7:75:e9:8e:b3:88:00:22:03:
                    89:57:d5:95:8b:8a:4e:38:05:16:3c:36:1f:03:79:
                    aa:b2:43:0a:c7:5e:54:21:22:ef:b1:92:d7:df:9b:
                    82:85:e4:3c:2c:50:2a:67:6b:5e:b9:83:3c:ba:7d:
                    6b:3e:7b:a0:07:c2:79:58:fa:90:2b:6e:c4:7e:0f:
                    28:9e:6a:b3:58:04:07:48:5c:22:4d:13:c8:eb:64:
                    74:c1:2f:2c:a4:da:b4:71:1d:4f:8d:23:5e:99:8e:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:33:C6:EE:A2:6B:87:2D:CC:CC:3C:B3:64:AE:95:2F:37:38:58:9B
            X509v3 Authority Key Identifier:
                keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:8a:92:8c:fc:bb:0f:05:27:70:71:71:a7:c1:f8:19:2e:
         b6:c9:0a:5b:ed:07:18:bc:6e:87:cc:18:c4:e2:9b:14:8d:4e:
         12:01:2d:0b:e0:72:3a:d9:82:60:54:ac:3f:9b:c5:0f:36:b6:
         01:61:5d:fb:4e:f1:65:ba:71:73:a4:8f:7b:5e:d1:c2:d7:3b:
         93:84:27:33:ba:f2:fe:e9:3f:93:90:41:fb:77:83:9e:fd:24:
         bd:be:db:a7:2f:3d:d8:94:7a:89:94:ca:be:36:dc:49:37:a6:
         95:bb:78:ca:23:02:28:fe:55:8c:87:1f:d0:00:e2:70:b0:3f:
         62:97:bb:78:99:c2:cf:11:d4:a4:b3:e9:00:90:b1:7c:68:4b:
         2b:4c:23:82:d9:0d:df:ee:73:91:7a:3b:38:9d:af:d3:b4:c4:
         a6:d9:d7:b4:77:f7:3c:4e:dd:45:8b:e0:f3:ac:e8:69:39:89:
         24:f1:61:9d:30:0d:78:b4:ff:ef:a7:d9:e7:db:18:cd:21:32:
         9e:ad:b7:16:b6:5f:bc:12:2a:1e:95:d7:de:9e:ad:ea:45:50:
         69:33:34:f4:b0:06:e6:2b:c1:e8:b7:5d:28:db:2c:73:6f:14:
         e6:ed:6a:4b:bf:33:ba:ee:ae:36:3b:60:18:37:c3:91:d8:61:
         c8:6f:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:45 2024 by rpki-client on console-ams.rpki-client.org