Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          iV1d4OTgNpFmBz1T/xq4IogNKDUvNKcns0r64/4Kax4=
Subject key identifier:   E6:9B:A0:B4:38:BD:E5:5A:66:A8:B4:60:9C:CA:E1:D1:17:C0:18:8E
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       018FD33F0BA0EB5AAEF8A6979880D8745EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          11B2
Signing time:             Sat 01 Jun 2024 10:01:15 +0000
Manifest this update:     Sat 01 Jun 2024 10:01:15 +0000
Manifest next update:     Sun 02 Jun 2024 10:01:15 +0000
Files and hashes:         1: 1-Po6XIJm_QWihg4vEG_CqNvU92U.roa (hash: 7B7wGpVxttRIFEDT2NOExj9G5jjP0m01nLIFY+/f308=)
                          2: 44_CYiRYI2lQ3UbvPmPWdwL5kyg.roa (hash: bn7Oh3qAZ1KcLo2g6nutb3s75+yP2S4gRskYXsEhWcw=)
                          3: 61VlCk-Vz2JmwNmlTjV0tKwkJaQ.roa (hash: Tcvrdc7rHYowh7js121tHE39+TZIAhAOXTxh3daMRak=)
                          4: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: geunhXwnCS1EefDKOVtYR8WAqh5PZg6GeKp+k4Jlv6A=)
                          5: 9IlULI2kwU3pfAa2saeXeUPXk-Y.roa (hash: qiu6vpj3527B+xAxM6in8xvzY7lFy/4HQdLZOt1D0t0=)
                          6: Fq9UYbok09LpN5ou1TNQPJgDicU.roa (hash: A6gadyDiX5+jMGfC7djLws+UJHWa70wqRLWbWtbI/DA=)
                          7: IxgmJijszzL0pVYkFc2u4HLqoA4.roa (hash: puZd6d94O/ocxVX671QXVpie/4zq5lpHVCTisZcbsXM=)
                          8: PTHY3FnSNKL1qGShlQcnArSa6Vw.roa (hash: 22MCtIjTOoVjb+/8ROR7rUF3WXBTnYqIsuSyg3TfbOE=)
                          9: ZlcgNBDs3X-nrWq5JRZwNZrxDJs.roa (hash: mZGLVSMgkg1WSDf/EazAgkOhlbpg5TRMGoF12tKxC2w=)
                          10: _jo1neDOPgBw16JKs3w734c_EQs.roa (hash: QSUqebleAkzzx2IVDYfX2CFKHz6w8bMFKnVWq2lSjoE=)
                          11: bjVVxOfPu4iqFSQ-BYDk-_JwwvA.roa (hash: e7vI8pm9nse9he1enJrWSoe9gs8uXlbPAcTUa/EkHGA=)
                          12: h08WqFQXghLHx2y1uCXP6PwJKx4.roa (hash: jhN/yNwxHhhIogMoXe/kPC8GSqZR3XWw6y18x8dIATE=)
                          13: mPRYdtyLk-KOdptUX2-fkEzxkJM.roa (hash: 01HgMc41TW81cnQ3pXQwm3+r0lhZpx/6lUoJpmR7ud0=)
                          14: pTrcpQZFE3h-VmEdpWPLU4bad5o.roa (hash: Jk2viaI+01Do2IkryDaDW5C4dSDzJPApuo+MJd50x6E=)
                          15: r6CpOc4SoQ-62QLjAdHrCHsLLoo.roa (hash: 2wyVP0ccxdW0URA2e94AfPJwMVPiFO5e8c1Xa0cwYRg=)
                          16: tdyqThyHZ9UfUI7RfxAkjPjCpP0.roa (hash: 33lwhvj8NXSTiyEUhblemoQldOmJVCGannC26ZWMw6w=)
                          17: xg-0vuEzXVuzdiuzwktHQrOJlhc.roa (hash: UnYr7lD0GNxJhvhS7k6elo5bcXBq3WKgu5KoJxG2aU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d3:3f:0b:a0:eb:5a:ae:f8:a6:97:98:80:d8:74:5e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jun  1 10:01:15 2024 GMT
            Not After : Jun  2 10:01:15 2024 GMT
        Subject: CN=e69ba0b438bde55a66a8b4609ccae1d117c0188e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:de:26:5c:6b:2f:dd:77:2d:eb:9e:12:c8:
                    92:d3:0f:1d:84:93:a4:33:a8:03:56:89:71:bc:9c:
                    6f:ef:56:ea:3f:22:95:66:bb:87:17:7e:bf:12:47:
                    3e:99:53:27:3a:13:db:9e:01:81:84:31:47:ee:7b:
                    d8:ea:7f:1c:b2:7a:bc:a9:03:3a:dd:89:d9:c6:48:
                    ae:b7:eb:d3:5f:56:22:1b:60:e4:19:2d:12:f9:62:
                    6f:c2:22:c7:20:bd:0c:da:a7:97:fd:43:0a:8a:ca:
                    47:7c:74:e5:32:a9:18:6f:87:99:ce:e2:9d:b4:59:
                    57:69:50:54:c4:27:3a:9c:85:c1:f5:50:ea:6d:f2:
                    dd:d4:5b:89:95:08:04:88:f2:3f:b1:89:02:e3:b1:
                    b0:e2:95:c0:15:31:e3:7b:5b:77:b5:37:87:79:23:
                    1a:56:77:c0:7c:aa:5a:ca:f5:3b:70:fe:2b:9f:64:
                    d1:7e:1b:a6:6f:71:96:1c:49:b5:0b:b9:4c:52:58:
                    ad:d1:c2:da:b0:d5:0c:2b:36:89:35:60:03:82:db:
                    fe:19:ab:c7:4f:4a:f2:1c:40:4b:09:95:df:25:e9:
                    98:b0:49:1d:08:09:ea:b4:13:5b:d8:81:c9:f9:bd:
                    45:6f:17:75:50:6c:ff:a0:fb:80:35:4d:90:ec:65:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:A0:B4:38:BD:E5:5A:66:A8:B4:60:9C:CA:E1:D1:17:C0:18:8E
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:ed:70:a8:f3:93:3c:be:fe:4a:de:45:92:db:49:6d:a1:
         8b:8c:26:74:d4:7e:5c:09:75:d5:2a:2a:b5:f4:31:4f:d3:34:
         4a:45:bf:f1:04:0e:60:8b:3b:aa:5c:1c:31:f7:69:21:8b:18:
         0c:0e:ad:e1:a2:71:a5:c2:00:ff:86:d4:54:c4:68:8e:d6:f8:
         e2:fb:43:e3:51:73:e9:46:54:8d:dc:b2:9f:5b:f2:84:dd:8d:
         0e:04:86:9e:f2:d3:cb:13:67:5e:ca:f4:dc:0a:c3:a8:76:28:
         9a:f4:26:2a:fa:60:f7:65:e5:54:f7:cb:a4:21:7e:a6:41:11:
         8f:49:f2:cf:d6:04:5d:9f:24:f4:1a:8e:40:4e:3b:0b:7f:54:
         1f:a6:73:e5:47:fc:46:10:99:95:df:c5:85:ae:3c:e8:13:56:
         9c:3c:f6:a1:f4:a0:d1:dc:41:0c:29:8b:8d:18:b5:b4:ff:43:
         62:20:f7:76:ac:d6:99:3d:ce:c0:12:73:91:5d:49:dd:31:2b:
         3d:42:b8:24:1a:c1:a4:5b:2a:97:0a:11:6b:26:84:6a:60:e8:
         0e:07:2e:59:d5:33:e0:6c:45:79:af:1d:43:94:d3:35:9a:89:
         37:43:70:98:b9:8f:2e:c0:46:81:36:92:b8:31:ea:13:35:a0:
         03:c9:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:20 2024 by rpki-client on console-ams.rpki-client.org