Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File:                     87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier:          0MSBxBpR9Hn5cvC3xRSMl/eiVxqwrWH0RVC5zviKrlk=
Subject key identifier:   02:CF:68:4B:25:1F:FD:94:34:1B:2F:05:57:63:18:0E:13:11:16:A5
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       018F88C8BFBD343D4ADFDE98BDCCBD60150C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number:          030D
Signing time:             Fri 17 May 2024 23:00:08 +0000
Manifest this update:     Fri 17 May 2024 23:00:08 +0000
Manifest next update:     Sat 18 May 2024 23:00:08 +0000
Files and hashes:         1: 1GtkLMnTfbRcdd0qTe3zatyUcsE.roa (hash: szFEJobN69w8vpl4UxKmC7haNqOCbgdQDEW5ZUwONnk=)
                          2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: NtUxsdH1lgFaIdAWBfgDvCAQFzuAGNXSFVMjG2vNsyk=)
                          3: A-afEIlrE5XNwqvqXzdFn-gjYTE.roa (hash: EGsAkb4JUX2fScm/GERI2kSm37YiHR3uz/Dr4gjrpnU=)
                          4: BzPL20-RQqQNHl3mvkdVpKFKztY.roa (hash: gTyTIxCJ7Tq2dyD7acXbF9IOdSKDSh9RVHjGEQoNM98=)
                          5: F7eyjgD9pUUUHWItfbm9ElF7TIs.roa (hash: Wm4RyVT5EsquYlAYHTqeuliqWNoqF/kSkV0ceBossiw=)
                          6: ZWXJr5w3JH9wYEGmLPmeDlxxIJM.roa (hash: frx8V15MA5b8qXpwnMJfzgX9XCWtsF+s34ptbiuVFcU=)
                          7: _g5tZPhIhludqwXpdzpjXWL4ixc.roa (hash: rAfkW/sefzjYJ88w53HOdhpm3jtfsTR/8yHMUJmWP70=)
                          8: dmphHvEeJzortBRvHbUqrSt3y6U.roa (hash: KJB9F0CDiKWRZOdpwfmtDXu2IsD6ugQh9F362zDvrCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:bf:bd:34:3d:4a:df:de:98:bd:cc:bd:60:15:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: May 17 23:00:08 2024 GMT
            Not After : May 18 23:00:08 2024 GMT
        Subject: CN=02cf684b251ffd94341b2f055763180e131116a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:b7:73:f1:42:6b:33:10:ec:89:ad:f4:9a:
                    ad:2d:ec:35:91:25:4f:54:5a:89:5e:99:3a:c1:1b:
                    4f:c6:3a:a5:22:13:7e:22:af:6b:b7:8c:c5:2a:af:
                    3e:f4:db:d9:b9:35:3c:8d:3c:b9:4a:88:8f:c2:65:
                    49:ab:62:6d:65:ce:4b:51:b8:45:e1:eb:91:f1:e7:
                    bc:ea:2b:81:1c:48:7e:aa:cb:d4:92:d7:d8:fa:ef:
                    9f:44:70:d9:5e:95:b8:c4:5c:71:cb:84:c7:12:0c:
                    6e:b7:fb:ee:32:fa:c1:ea:97:f4:80:de:e6:7f:82:
                    96:03:39:92:24:b5:a0:63:55:22:ff:b2:40:34:f5:
                    83:07:05:f0:df:d1:bd:3e:55:bc:ee:89:bc:59:3e:
                    5f:0d:77:9e:86:4d:eb:c1:1b:e6:88:fa:ee:57:32:
                    a5:7f:2b:d6:89:ec:a8:2e:c5:ed:bc:38:8c:c5:76:
                    be:36:95:ed:e5:24:72:03:b1:21:a9:1d:7e:48:75:
                    c8:27:3a:f4:20:7b:28:77:f6:13:df:e6:32:61:9d:
                    0f:64:b4:bb:8b:59:cd:00:6f:f6:36:66:c6:6c:3e:
                    f6:91:ae:28:7b:da:8f:66:2e:45:eb:95:f7:9b:8e:
                    01:8c:46:78:c6:cc:be:13:8e:b5:fa:2b:dc:31:d0:
                    8c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CF:68:4B:25:1F:FD:94:34:1B:2F:05:57:63:18:0E:13:11:16:A5
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2e:2a:97:6f:46:42:4c:80:28:59:79:75:28:54:6d:36:e0:
         da:d2:eb:f2:25:e7:19:ed:af:33:6d:09:18:df:64:68:8b:ec:
         2a:03:32:da:ad:29:4e:f4:52:da:89:18:3b:ba:54:51:65:b3:
         83:af:e0:94:90:ba:33:c2:07:2c:b3:7c:f1:db:94:98:a7:57:
         05:3a:d7:63:9d:01:e8:d4:95:c0:11:30:f5:0b:80:95:30:b3:
         05:5a:a7:5d:87:36:4e:e3:be:35:8b:0d:8f:8c:28:77:15:79:
         df:81:c8:10:59:eb:4c:34:d1:b6:0f:e8:62:36:ef:c5:aa:2d:
         d6:ad:e7:4a:21:6b:f4:e4:f4:68:4f:62:b1:4d:b7:b8:d9:71:
         0b:76:75:fd:f4:05:85:7c:a0:d5:cf:a7:b8:09:cb:95:45:49:
         1f:ca:47:8b:3f:3b:f2:ad:75:fa:96:76:b8:ed:fe:57:8e:8a:
         2d:c8:08:3a:84:c3:7a:77:13:01:2a:2d:98:24:0c:ef:e2:2a:
         6d:3e:a5:78:09:72:88:21:9d:c8:cd:c8:a1:06:bf:4a:f5:d9:
         ef:3f:b1:7c:79:9e:db:e8:7c:af:be:7e:3e:3e:00:e6:9a:67:
         1f:df:51:07:47:cd:96:39:45:d6:44:ff:fb:47:0e:c6:b1:38:
         77:cd:d0:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IyL+9ND1K396Yvcy9YBUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjQwNTE3MjMwMDA4WhcNMjQwNTE4MjMwMDA4WjAzMTEwLwYDVQQD
EygwMmNmNjg0YjI1MWZmZDk0MzQxYjJmMDU1NzYzMTgwZTEzMTExNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zO3c/FCazMQ7Imt9JqtLew1kSVP
VFqJXpk6wRtPxjqlIhN+Iq9rt4zFKq8+9NvZuTU8jTy5SoiPwmVJq2JtZc5LUbhF
4euR8ee86iuBHEh+qsvUktfY+u+fRHDZXpW4xFxxy4THEgxut/vuMvrB6pf0gN7m
f4KWAzmSJLWgY1Ui/7JANPWDBwXw39G9PlW87om8WT5fDXeehk3rwRvmiPruVzKl
fyvWieyoLsXtvDiMxXa+NpXt5SRyA7EhqR1+SHXIJzr0IHsod/YT3+YyYZ0PZLS7
i1nNAG/2NmbGbD72ka4oe9qPZi5F65X3m44BjEZ4xsy+E461+ivcMdCMuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALPaEslH/2UNBsvBVdjGA4TERalMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny4ql29G
QkyAKFl5dShUbTbg2tLr8iXnGe2vM20JGN9kaIvsKgMy2q0pTvRS2okYO7pUUWWz
g6/glJC6M8IHLLN88duUmKdXBTrXY50B6NSVwBEw9QuAlTCzBVqnXYc2TuO+NYsN
j4wodxV534HIEFnrTDTRtg/oYjbvxaot1q3nSiFr9OT0aE9isU23uNlxC3Z1/fQF
hXyg1c+nuAnLlUVJH8pHiz878q11+pZ2uO3+V46KLcgIOoTDencTASotmCQM7+Iq
bT6leAlyiCGdyM3IoQa/SvXZ7z+xfHme2+h8r75+Pj4A5ppnH99RB0fNljlF1kT/
+0cOxrE4d83Q8w==
-----END CERTIFICATE-----
Generated at Fri May 17 23:43:08 2024 by rpki-client on console-ams.rpki-client.org