Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File:                     Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier:          45OIMqXzgUqaqp6YCZVN44YoAoypz2dn3nPxVFM2cDs=
Subject key identifier:   3E:D3:CB:6A:9A:D0:2D:7F:1F:F3:E7:E1:DF:CE:76:F6:DC:26:CA:3E
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer:       /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial:       018F87B67E8A07298E3E9062874C746706EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number:          0604
Signing time:             Fri 17 May 2024 18:00:35 +0000
Manifest this update:     Fri 17 May 2024 18:00:35 +0000
Manifest next update:     Sat 18 May 2024 18:00:35 +0000
Files and hashes:         1: Dr9EMFpwo67jMW9fonbaDxzGB2w.roa (hash: e6Dj57Jo8X1lVIzpj+sp75tULSGHSaQBdV9aYXQwdYM=)
                          2: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: XZnLO4l6BP2UGK2BOWQTeykIAb75pt/JS2f8LEtzimw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7e:8a:07:29:8e:3e:90:62:87:4c:74:67:06:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
        Validity
            Not Before: May 17 18:00:35 2024 GMT
            Not After : May 18 18:00:35 2024 GMT
        Subject: CN=3ed3cb6a9ad02d7f1ff3e7e1dfce76f6dc26ca3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:77:f7:0f:48:3a:e8:8b:4c:53:46:6f:55:
                    0f:cc:ba:91:4b:8f:51:de:d1:18:03:46:cc:99:ec:
                    0d:d2:14:96:f6:98:70:5f:d8:51:90:c3:8b:51:6a:
                    97:2c:37:7f:66:ef:e4:1c:79:46:2d:6d:e5:11:fb:
                    fe:4f:b0:97:f1:23:42:df:9c:6d:62:33:ae:eb:14:
                    68:84:82:48:d8:10:23:3d:af:1e:74:8a:6a:ef:aa:
                    05:2d:bb:d8:c6:22:ab:c5:aa:e0:48:ac:37:db:57:
                    9b:99:6e:e1:a2:42:72:37:69:5b:5b:77:41:c5:c4:
                    52:66:a9:7b:90:ee:84:bc:94:f0:16:0a:aa:1d:93:
                    3e:18:fb:1c:31:82:dd:18:7f:1e:f7:6c:ba:06:51:
                    c1:92:6b:b4:7a:7d:5a:ae:49:6d:79:d8:95:8d:42:
                    46:50:ec:7c:8c:f0:2e:f8:0d:04:68:17:fd:65:eb:
                    23:fd:81:7d:1e:7a:54:e9:78:d5:34:91:2c:23:c3:
                    f3:e0:53:5e:31:46:fb:e8:7a:9f:f8:72:53:f4:10:
                    f7:74:a7:08:7c:da:70:da:fe:3e:50:39:50:26:e1:
                    e3:f1:7e:45:97:7a:cd:81:66:92:24:5b:42:27:b7:
                    13:3d:df:76:b4:cf:aa:5b:68:cd:19:73:3c:cf:8c:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D3:CB:6A:9A:D0:2D:7F:1F:F3:E7:E1:DF:CE:76:F6:DC:26:CA:3E
            X509v3 Authority Key Identifier:
                keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:1d:12:a3:a3:bc:96:78:6f:59:e3:0a:14:df:13:1b:09:
         1c:dc:d6:c6:c3:c4:1d:e5:4f:0d:cc:4b:3b:52:15:35:26:bc:
         05:f4:4f:1c:ac:da:fc:96:84:13:a3:34:93:93:de:2d:34:5b:
         fd:44:fb:88:a2:a2:7b:78:44:27:1c:f9:7f:c0:49:87:8a:a2:
         e4:9f:79:a6:7e:92:f6:d5:78:29:a7:35:ab:5c:4e:c2:3b:13:
         eb:0c:c8:ba:63:d7:b8:2a:89:d3:b9:94:97:46:e3:36:37:10:
         3b:5b:da:64:69:60:6f:ad:9d:d3:4d:ac:a3:f8:09:46:8a:9f:
         88:fe:9e:76:24:01:b6:6d:b9:5a:f6:d1:f1:ff:58:bb:fa:71:
         9f:54:2a:ee:85:7e:7d:a9:6e:54:2b:2a:bf:f6:f1:03:a2:b2:
         d5:18:fa:68:37:f1:b0:97:08:d8:be:b2:f3:44:5d:7a:35:8d:
         13:24:6d:ba:28:04:33:10:96:36:ea:11:cf:e6:27:fb:5a:62:
         79:24:ce:cf:46:62:52:ed:e5:61:db:f1:c8:b6:6f:81:ed:84:
         8c:ac:0d:7c:9d:ff:31:d3:d0:e8:89:bb:c4:ad:d3:ee:f9:80:
         d5:c3:5c:80:56:57:5e:52:94:e5:76:77:41:c4:8a:8d:ee:0a:
         b4:ef:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----