Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          tQGyxP5Ai7C8Kh1TkGeVIploOXhqzJa/99O/kNchwjM=
Subject key identifier:   3C:F8:35:EC:0E:FB:F3:8F:5C:E7:29:96:BA:94:E1:CE:50:0E:2A:F7
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       01903F2D262EBB6B6C2C46D9F35B77D0078E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          0AF8
Signing time:             Sat 22 Jun 2024 09:00:41 +0000
Manifest this update:     Sat 22 Jun 2024 09:00:41 +0000
Manifest next update:     Sun 23 Jun 2024 09:00:41 +0000
Files and hashes:         1: 48UHfzmWiAVRxS4Otcpy0ODRKeE.roa (hash: iO9bP/Ht85C6UC+3ecfNnagsIeColrIER2vB5VGYGVA=)
                          2: 59Q38f6pBeHAvEs2OjRKsrne1Kc.roa (hash: iZWzVZQjDBxzGTjmx23p+rx0NIf11wzvEPjUNNztrNI=)
                          3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: FutQDaBF3hpFfQUBmWK26AFvO5VFEN1tvmLKw5oZl3E=)
                          4: 9xzGsccraeCaP4X56bn0tcdnUxg.roa (hash: f6Dtfa0OBaTmc6GObZzJLy0mNFlhIr8oaDIJu9Ui/NI=)
                          5: AagMDoMdG9v576aVvjqTXP7k2_w.roa (hash: 9md2GP02XxgyJ7kVJkT88QfCmLz9WOPHdHN/dLfUnI0=)
                          6: DL21VQN0mBb50HU2wFLIY7yrnzs.roa (hash: qSPg2bEUrhI4/fY1iXCuE9hLZfBCMe2m2vXsvjlWeSk=)
                          7: IM9oFWxp3G6E35QFpXocvq8Um_A.roa (hash: rRcEh99bPUd//kbj3UEhiVfaEe2+N0Rs7KdxStDH7yk=)
                          8: JJZ1gsvV-qEjqW4ZuxiUx7eptz4.roa (hash: v4sNp3ZUmHFWBjHZJU/84D8NjQXvYo/Amc4s383sq3Q=)
                          9: M9uny4rY1hRqvDOjZqUkW-qwl-k.roa (hash: IKbC1Rmx1suyRe0qCGXus0whW/gNpvE1d6Jqa78CaiA=)
                          10: Uaznv0pZ0wmKtKM9xY-vR6sOGk8.roa (hash: C7xq3SD0FwCxHn9VXkUqO4z6C1TJF3izWxnv2TLIzsw=)
                          11: XCtZRzCrDDsdj7TlQyPohdu7M-w.roa (hash: LN93d8hL9OIQHJ5s+Ja5qCVXrnWHj2VUHGbjUK89lVA=)
                          12: YMRgontEWx9ftd6C-GfvXVzVo8M.roa (hash: wNs/zt+fUYot2kavmSkyau5TYcEd08+RG0SfvPgkW/w=)
                          13: Zn5uA6g94v2EEL5Asa1rU4LgCAw.roa (hash: XkwRh6h6CI15dbIOaf+OQX8vQhy+coZI4TFA1gE5PFA=)
                          14: g8DQzt56varxTW2_sWGWJ0ogDLY.roa (hash: jxVC2loP3F7h1y3wLQrcisEBIASoxU6nl0/LVMTIL90=)
                          15: hJxrFf0M9bET9ySDnZBNwiPhKMg.roa (hash: oxYY7QEi7grS2nqPDbA0dW7GcDJ8iiCA9z6ZGSgXTGg=)
                          16: lBMWRGHyTuWMvA-fYhXnUd66lUM.roa (hash: +RWV4HbLQKwEapa8UwUcWozH5OHIC2+9mA8HYCwjlu8=)
                          17: oRuFB3pFspLpqLYa9_uc9LIgfRk.roa (hash: XMpH472rjjeOzqqnL2MDIJEQEQc3M0bGj7nBs1slLjI=)
                          18: xtlw-bMOaihzL9rPg0PUvQpEruY.roa (hash: s0PmUnG9iSI7jf6Mw9yvOfVkXkCodbIOIwdtCQOXIQU=)
                          19: yFqyXDNT6yEjcBbeWRh9zcBElsA.roa (hash: BQqrmXw2DwlA85dlMtAv4eRrecULypfChn6yNf8AJVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3f:2d:26:2e:bb:6b:6c:2c:46:d9:f3:5b:77:d0:07:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jun 22 09:00:41 2024 GMT
            Not After : Jun 23 09:00:41 2024 GMT
        Subject: CN=3cf835ec0efbf38f5ce72996ba94e1ce500e2af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:ad:a9:fc:ce:ec:13:fc:7c:30:12:63:a5:
                    66:69:7b:85:96:a6:5e:ae:c4:58:f4:69:d5:db:0c:
                    44:dc:95:7a:cf:5c:ca:95:5f:7c:17:8f:cc:77:30:
                    59:c9:98:a4:35:02:f2:4f:f5:fd:65:2e:e5:16:7b:
                    15:bf:44:c2:12:22:24:44:98:d1:69:47:cd:a3:3c:
                    bc:e4:07:09:04:ba:ed:8b:a1:50:ad:37:2c:c5:3f:
                    29:4b:37:54:bc:2b:fe:63:58:2e:d1:f4:b6:93:b2:
                    a5:00:5b:49:cc:fe:81:42:8d:97:ea:fb:ec:3e:f3:
                    fa:50:a3:70:a7:5d:70:d4:8a:91:55:b5:4e:a6:81:
                    f0:b4:43:2d:d1:1a:86:35:fa:13:45:6c:39:70:fb:
                    08:12:0e:9e:fb:de:7d:3a:18:ad:a1:7f:49:1c:d1:
                    15:0c:bf:67:5f:98:af:8b:05:d7:63:e9:1d:04:84:
                    5e:9f:7d:65:49:31:d8:40:d0:3b:8a:3c:3a:2f:6e:
                    c7:86:c9:7b:30:0b:a9:e2:54:5e:77:13:7c:de:2c:
                    74:c8:6c:e7:45:73:92:44:79:c8:43:07:bb:0a:f3:
                    33:25:92:19:5b:23:7b:ef:e6:29:5a:db:95:ff:cf:
                    15:10:57:db:44:3d:a4:e8:c9:53:93:75:39:db:74:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F8:35:EC:0E:FB:F3:8F:5C:E7:29:96:BA:94:E1:CE:50:0E:2A:F7
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:01:b2:db:35:23:ee:13:55:62:73:9f:db:80:6d:a3:3a:
         6c:1d:fa:12:ea:75:37:3e:9f:5a:f6:a5:1f:c5:dd:10:38:0c:
         33:f9:ab:37:de:e5:23:5f:72:93:93:9f:28:a9:55:06:a3:60:
         d8:fa:7c:59:be:72:2e:54:c6:81:51:47:79:fc:3a:9b:59:61:
         91:0c:64:e2:9d:81:dc:38:15:58:45:e1:87:48:cd:8b:2f:00:
         34:8c:2b:1d:de:e7:48:26:b5:e8:02:37:bb:d8:f7:55:e3:52:
         40:23:fc:b8:d7:c6:86:9c:5c:18:98:4d:db:5b:26:95:f4:26:
         35:4a:5a:37:13:34:eb:b1:16:0c:1b:df:ca:7e:0e:0f:a7:17:
         01:66:c2:ba:49:4b:29:89:42:e4:63:ed:bb:56:b9:49:a8:0b:
         7a:03:c6:64:5d:0e:68:a0:e5:b1:69:2d:8b:8c:df:78:be:03:
         20:05:62:5c:9b:5e:b4:8c:4e:4a:92:51:e4:84:4d:77:d8:3f:
         40:8a:6a:12:a1:c6:c8:09:bf:21:cf:aa:07:fb:df:ea:e1:8f:
         07:2b:5e:64:3f:ec:2b:72:2b:6d:08:a8:41:24:1c:80:25:95:
         7e:b4:21:31:55:38:7a:75:b7:0d:d7:9f:57:f9:dd:99:ca:97:
         c8:a0:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 11:40:55 2024 by rpki-client on console-ams.rpki-client.org