Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File:                     xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier:          1eqeZPcYC9qh95H0dG5CGrt6PcqRjHOUz4kEABmFuO4=
Subject key identifier:   86:6E:3B:FA:D2:35:B7:D3:FE:E7:63:5E:37:68:93:E9:7E:C1:F1:FC
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer:       /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial:       018F8748BBD49D56B0F025253E93B5A00638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:41 +0000
Manifest this update:     Fri 17 May 2024 16:00:41 +0000
Manifest next update:     Sat 18 May 2024 16:00:41 +0000
Files and hashes:         1: 9MFhRH7FoTNK3XVSO_eOnSAHOG0.roa (hash: MSXxXDgf7+HZAMPJdj72hvvRR1x6qCkH3yk3g7TCLK8=)
                          2: _JmvSj858oi2QB679B-jPk1FSQQ.roa (hash: YB6LAwDidqmHXxqcenifzlZM3fTsEmBWpyJo/DE7mvA=)
                          3: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: DmLpF4EWVsUhl+L82HnnaNK0N8/yDc/5ITFjYDFbdbc=)
                          4: z3xISit2bskijJByYyVc4wza4s0.roa (hash: EzmUwMtFSYLFAqZf3DbParVwN8b2hlFCiivcsqwm3OQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bb:d4:9d:56:b0:f0:25:25:3e:93:b5:a0:06:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
        Validity
            Not Before: May 17 16:00:41 2024 GMT
            Not After : May 18 16:00:41 2024 GMT
        Subject: CN=866e3bfad235b7d3fee7635e376893e97ec1f1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:3d:da:b5:7f:10:c6:5f:87:e5:0e:ec:0a:
                    f9:fe:8c:51:2a:07:5c:95:0a:2c:ca:05:42:ed:43:
                    7f:7d:08:36:ae:b6:bd:45:f9:fd:9d:5e:71:37:d2:
                    fe:30:c2:2c:ed:4e:b8:41:aa:68:be:74:66:f0:38:
                    be:88:4f:a4:3c:7c:60:97:41:99:80:ee:c2:8d:e5:
                    14:09:a2:6e:32:aa:a7:41:ce:74:96:66:95:ea:92:
                    35:42:e1:64:dd:2c:e8:de:79:06:b7:87:cf:26:d1:
                    b9:f1:c0:fa:df:ef:a4:b8:83:06:44:8f:f8:be:5d:
                    7b:eb:5a:a1:77:86:93:e1:e4:55:9f:82:92:86:ee:
                    ce:8f:da:0e:6f:7e:33:79:18:49:b2:e7:25:b8:32:
                    1c:50:0d:38:4f:ef:09:99:da:80:62:93:7e:aa:ee:
                    69:ad:5c:bb:d4:25:74:40:b1:0b:19:0e:29:d6:8f:
                    f0:92:4e:c4:51:07:57:81:db:da:2f:6d:88:67:f9:
                    3f:fd:76:18:67:d1:71:9b:82:4d:5d:da:4d:0c:5d:
                    fb:83:b0:6c:53:f9:d1:48:9b:78:fa:f4:41:9a:d4:
                    65:f3:3a:67:25:e5:66:ae:a9:75:cd:0c:58:b8:e5:
                    e9:1c:48:c5:c0:ae:97:83:cc:88:39:7c:bd:9d:56:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6E:3B:FA:D2:35:B7:D3:FE:E7:63:5E:37:68:93:E9:7E:C1:F1:FC
            X509v3 Authority Key Identifier:
                keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:0e:05:82:52:28:32:b9:e5:4d:e5:db:76:4b:e7:b6:9f:64:
         9b:23:0b:4e:a7:1e:54:57:f0:88:43:9d:7e:eb:74:b3:66:9d:
         e5:d9:2e:52:e5:72:e5:80:48:d3:fb:e5:5b:b5:ee:ff:98:0f:
         c1:13:ef:11:67:12:d0:21:99:01:66:ed:dc:76:13:b5:1a:bb:
         d1:fe:71:bb:67:a6:10:e8:4f:fc:6b:5c:86:53:7d:9b:51:97:
         c2:14:c1:ac:92:39:eb:07:36:fc:1a:4c:93:e8:c1:1a:f0:0f:
         36:82:b1:44:e7:a4:63:27:f4:c0:25:56:09:b2:4f:4a:da:da:
         df:8d:0a:88:54:e8:cf:a8:13:d4:23:aa:1e:89:1a:33:73:8d:
         9a:55:31:af:7b:bd:fc:87:86:bf:85:78:48:2c:33:e7:c3:0c:
         73:a9:45:df:c4:6d:3c:51:a0:e2:88:d7:ba:65:cd:48:e8:6c:
         61:ef:12:6a:d2:6b:72:7f:0c:83:95:60:64:9e:e3:d2:bd:3d:
         21:d8:aa:ed:bf:0f:ac:7c:6e:58:1d:a2:06:2a:de:2d:f0:99:
         fa:71:69:05:55:31:4e:8e:63:fb:da:ff:1a:d0:1b:d3:86:ea:
         93:23:4e:66:a5:46:50:33:54:45:12:40:3e:d4:4c:a3:31:9f:
         f3:3c:81:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSLvUnVaw8CUlPpO1oAY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz
NzBhMTkwHhcNMjQwNTE3MTYwMDQxWhcNMjQwNTE4MTYwMDQxWjAzMTEwLwYDVQQD
Eyg4NjZlM2JmYWQyMzViN2QzZmVlNzYzNWUzNzY4OTNlOTdlYzFmMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLY92rV/EMZfh+UO7Ar5/oxRKgdc
lQosygVC7UN/fQg2rra9Rfn9nV5xN9L+MMIs7U64QapovnRm8Di+iE+kPHxgl0GZ
gO7CjeUUCaJuMqqnQc50lmaV6pI1QuFk3Szo3nkGt4fPJtG58cD63++kuIMGRI/4
vl1761qhd4aT4eRVn4KShu7Oj9oOb34zeRhJsucluDIcUA04T+8JmdqAYpN+qu5p
rVy71CV0QLELGQ4p1o/wkk7EUQdXgdvaL22IZ/k//XYYZ9Fxm4JNXdpNDF37g7Bs
U/nRSJt4+vRBmtRl8zpnJeVmrql1zQxYuOXpHEjFwK6Xg8yIOXy9nVYCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZuO/rSNbfT/udjXjdok+l+wfH8MB8GA1UdIwQY
MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt
YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi
LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQ4FglIo
MrnlTeXbdkvntp9kmyMLTqceVFfwiEOdfut0s2ad5dkuUuVy5YBI0/vlW7Xu/5gP
wRPvEWcS0CGZAWbt3HYTtRq70f5xu2emEOhP/GtchlN9m1GXwhTBrJI56wc2/BpM
k+jBGvAPNoKxROekYyf0wCVWCbJPStra340KiFToz6gT1COqHokaM3ONmlUxr3u9
/IeGv4V4SCwz58MMc6lF38RtPFGg4ojXumXNSOhsYe8SatJrcn8Mg5VgZJ7j0r09
Idiq7b8PrHxuWB2iBireLfCZ+nFpBVUxTo5j+9r/GtAb04bqkyNOZqVGUDNURRJA
PtRMozGf8zyBcA==
-----END CERTIFICATE-----
Generated at Fri May 17 23:45:26 2024 by rpki-client on console-ams.rpki-client.org