Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File:                     nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier:          fcRpwFmizYI0B6xy0unw9FwU88GY/rtx5DMVyeFC2cw=
Subject key identifier:   CC:F4:62:CA:39:73:72:2C:35:E6:62:0E:C7:57:0E:76:E5:97:7A:27
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer:       /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial:       018F8824648DD4308040353591440BED04FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 20:00:37 +0000
Manifest this update:     Fri 17 May 2024 20:00:37 +0000
Manifest next update:     Sat 18 May 2024 20:00:37 +0000
Files and hashes:         1: 6z18SKrMuFdA9hR0Avainjcopfw.roa (hash: 0lf8Pkrhr/tpn8KoDYndPhgiBD42jcdwrUMS3A9U28U=)
                          2: FBaTFdfO7uXpWmZTzh5vn7Sywrk.roa (hash: mRUXvTccHTkTQoYryadpPOPT6mhldqhS4sENFjuWBMc=)
                          3: l5ef7-PI4VPLQzwpp9r9SLHxWmY.roa (hash: lpaw67m+TtbWpnvDg+ls7j8n5G2cRDsRTamkHoQBJCE=)
                          4: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: aj9hI2HEfDViPVHXalYrotcAqWp/w33n8h4Xwtu59s4=)
                          5: zzz47ezlQZZK9mMQtdx2lQThuME.roa (hash: e731ztpUNA+LIZKINUTOjxIKNowj66ZC04ssL1DM9G0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:64:8d:d4:30:80:40:35:35:91:44:0b:ed:04:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
        Validity
            Not Before: May 17 20:00:37 2024 GMT
            Not After : May 18 20:00:37 2024 GMT
        Subject: CN=ccf462ca3973722c35e6620ec7570e76e5977a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:44:e5:bc:a1:c5:3b:6b:d3:c5:46:c2:06:ac:
                    2e:46:88:49:d1:63:d3:79:33:1b:f4:dc:d3:03:fe:
                    1a:6b:6a:23:9b:11:e9:b4:d3:5d:ef:57:83:56:8f:
                    38:14:28:9e:40:0f:24:87:f7:6f:65:9e:7e:06:ba:
                    ed:4a:f4:a7:9d:e2:2e:63:f8:69:54:d7:88:40:1f:
                    a9:04:7a:89:00:d9:b8:ba:1b:c3:a6:85:5b:8b:82:
                    e1:16:ed:b7:1a:8c:7c:3b:9b:61:a4:8e:83:90:68:
                    fd:f5:7c:4e:78:73:a3:67:c2:96:1b:88:52:c5:3c:
                    09:fc:48:b4:7d:f1:78:be:da:0d:90:ad:56:52:f7:
                    ad:e4:b5:29:d2:07:4c:b0:97:42:b4:d8:4c:99:1b:
                    14:31:40:de:c5:10:92:da:e0:88:78:46:ca:a0:ef:
                    03:56:c1:20:7f:41:a2:9d:4f:3d:d5:4a:7a:e6:31:
                    df:b9:26:8a:59:9f:d6:47:03:4d:a5:de:73:30:e2:
                    49:11:a7:02:8a:27:1e:d0:dd:16:b5:60:02:9c:d2:
                    1d:8d:0a:29:5e:bf:af:d4:e0:f8:e7:60:56:9f:6f:
                    88:96:e4:ec:45:c9:b6:a2:7b:fb:ce:67:ea:65:6e:
                    82:65:c7:8e:fb:c8:b9:83:6a:3c:dd:ac:a3:55:1a:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F4:62:CA:39:73:72:2C:35:E6:62:0E:C7:57:0E:76:E5:97:7A:27
            X509v3 Authority Key Identifier:
                keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:17:10:a9:1a:e0:72:75:ae:a7:20:bc:7d:5f:ef:72:2c:1d:
         25:21:92:9d:f0:dd:a5:9f:e8:f9:fd:25:07:9a:31:c8:71:26:
         98:89:e5:ee:29:86:96:2c:8f:17:88:59:83:aa:06:6a:9e:92:
         bd:50:44:73:3d:95:71:a1:00:48:2d:f2:8c:10:e7:a9:4b:be:
         52:ed:8e:75:3a:4b:3e:4c:f5:99:95:b6:03:a4:c3:16:67:20:
         70:f9:19:7e:7b:33:77:b6:3b:38:3d:07:73:c0:b1:9f:7f:0a:
         9d:ef:dd:a8:9d:17:44:67:83:70:5c:72:2a:3a:f8:97:44:b6:
         f6:cc:21:ff:7a:29:ef:47:8c:d6:09:8f:32:63:d9:bc:d5:84:
         1c:98:e8:02:89:53:6f:90:0f:b3:36:c6:51:81:f6:6e:f3:3e:
         4e:c3:00:75:e6:ce:8d:b8:9d:78:ec:fc:88:ed:80:e3:1f:d3:
         28:e8:07:20:3c:b0:38:b9:7c:44:c7:19:28:c2:08:eb:3b:b7:
         7a:c0:d8:2b:61:a4:01:45:2c:aa:97:02:b4:e0:7e:e1:8b:a2:
         89:94:47:3a:a1:76:13:bd:c7:2a:78:43:10:5f:37:c5:aa:b3:
         dc:64:be:73:78:ab:9b:aa:a3:7d:9d:b5:6a:42:8f:53:e7:b9:
         25:97:51:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJGSN1DCAQDU1kUQL7QT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZGVkZjQ3ODIyYWVlMjdkYTI4ZDM0ZGFiMWZlN2EzYzYw
YTZhYWEwHhcNMjQwNTE3MjAwMDM3WhcNMjQwNTE4MjAwMDM3WjAzMTEwLwYDVQQD
EyhjY2Y0NjJjYTM5NzM3MjJjMzVlNjYyMGVjNzU3MGU3NmU1OTc3YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkTlvKHFO2vTxUbCBqwuRohJ0WPT
eTMb9NzTA/4aa2ojmxHptNNd71eDVo84FCieQA8kh/dvZZ5+BrrtSvSnneIuY/hp
VNeIQB+pBHqJANm4uhvDpoVbi4LhFu23Gox8O5thpI6DkGj99XxOeHOjZ8KWG4hS
xTwJ/Ei0ffF4vtoNkK1WUvet5LUp0gdMsJdCtNhMmRsUMUDexRCS2uCIeEbKoO8D
VsEgf0GinU891Up65jHfuSaKWZ/WRwNNpd5zMOJJEacCiice0N0WtWACnNIdjQop
Xr+v1OD452BWn2+IluTsRcm2onv7zmfqZW6CZceO+8i5g2o83ayjVRqoowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz0Yso5c3IsNeZiDsdXDnbll3onMB8GA1UdIwQY
MBaAFJ7e30eCKu4n2ijTTasf56PGCmqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUt
ZDczOTkyOTIwMTlhLzEvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUtZDczOTkyOTIwMTlh
LzEvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBcQqRrg
cnWupyC8fV/vciwdJSGSnfDdpZ/o+f0lB5oxyHEmmInl7imGliyPF4hZg6oGap6S
vVBEcz2VcaEASC3yjBDnqUu+Uu2OdTpLPkz1mZW2A6TDFmcgcPkZfnszd7Y7OD0H
c8Cxn38Kne/dqJ0XRGeDcFxyKjr4l0S29swh/3op70eM1gmPMmPZvNWEHJjoAolT
b5APszbGUYH2bvM+TsMAdebOjbideOz8iO2A4x/TKOgHIDywOLl8RMcZKMII6zu3
esDYK2GkAUUsqpcCtOB+4YuiiZRHOqF2E73HKnhDEF83xaqz3GS+c3irm6qjfZ21
akKPU+e5JZdRfw==
-----END CERTIFICATE-----
Generated at Sat May 18 02:04:30 2024 by rpki-client on console-ams.rpki-client.org