Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          rzOMLQ8XcvvrVjxTX4lET6JEVgyRfGK4wPdM3goB1pU=
Subject key identifier:   E6:05:11:37:E4:04:32:C2:B0:85:A4:A8:CE:6E:79:FE:B5:3C:C1:19
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       018F874A13B2281405104A87C741B01E8F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          03DD
Signing time:             Fri 17 May 2024 16:02:09 +0000
Manifest this update:     Fri 17 May 2024 16:02:09 +0000
Manifest next update:     Sat 18 May 2024 16:02:09 +0000
Files and hashes:         1: I0oAxDxSLp0kYIJPzmSmAbm_pC0.roa (hash: y5GzuisJisO10LjhFbKQRkgOHB9toSy6woSqQLas3GU=)
                          2: KtJvHbn2CvcjPoj5lEpNcsEeltI.roa (hash: Oq6uowMyAtIzDQJsMGyjCMI8hfqYmdOyaMurC3lBVSw=)
                          3: NZ_VJNXAdV28Uswc4U9C7rGrHjk.roa (hash: ROszkRlCdNDmh34pJK48pAv0LCnZZl3yVqCLjVjsOag=)
                          4: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: vxQ9/9FufCwkuSBVCa0st0RO7Bb1Bqs4pgQxLeD2hyY=)
                          5: _J2oMa4txYmsd8jjfdhXgnSEgK0.roa (hash: Hygd4MhSxdAPcna+qVKlt7//3D9676SnGtG4Yii7ojE=)
                          6: qw4U9X5XyFxhojia5031DGjy31k.roa (hash: ANQEimuKh1P1OnAHcr/5cZ6Tb+LWxN9K50Q4SPmUY/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:13:b2:28:14:05:10:4a:87:c7:41:b0:1e:8f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: May 17 16:02:09 2024 GMT
            Not After : May 18 16:02:09 2024 GMT
        Subject: CN=e6051137e40432c2b085a4a8ce6e79feb53cc119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:3e:87:26:45:d0:c1:71:1b:d7:1f:29:f5:
                    3e:02:8a:2b:ec:d5:36:5e:17:a1:49:3f:7d:ac:c7:
                    46:06:2f:5b:07:a6:1e:f0:e2:60:e1:3b:40:17:fa:
                    69:03:92:8f:73:9d:ae:b6:ba:d7:4b:ad:63:bf:e9:
                    e4:28:a6:42:c1:66:70:b0:31:91:82:0e:21:d9:cb:
                    bf:f4:6e:58:90:15:c3:18:0d:60:fa:d1:c4:94:cb:
                    4c:be:df:7e:fb:ab:d0:7f:2f:64:ba:bf:e8:7f:c0:
                    1c:3b:91:06:a9:1b:28:bb:c1:77:90:1c:90:16:e2:
                    59:a5:b2:47:e2:75:bb:33:a1:f2:d4:0b:8f:d7:71:
                    12:9b:b0:54:f1:d3:b6:41:9c:ed:25:ec:9a:8c:c2:
                    4b:2b:7a:5e:74:6f:cc:bb:c1:9a:e4:91:3b:28:a1:
                    f6:2f:bf:17:f5:5d:97:b5:b1:8d:0d:66:b7:5a:55:
                    1c:a8:77:da:ff:28:b9:59:55:5c:63:78:d0:d8:55:
                    60:76:96:42:d7:6c:31:1f:6e:eb:67:f5:f3:b9:b5:
                    f7:3f:7e:15:52:f6:de:c8:aa:4e:27:0c:42:52:c8:
                    5f:b1:0f:48:5b:db:67:90:83:ba:04:44:2f:13:ac:
                    4d:c9:38:1f:52:bc:f7:43:f8:bb:97:8c:02:e9:e9:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:11:37:E4:04:32:C2:B0:85:A4:A8:CE:6E:79:FE:B5:3C:C1:19
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:93:df:ee:ec:d4:00:95:60:a9:45:44:38:47:93:82:a1:fe:
         b6:7c:d7:02:8a:87:d3:b6:f3:e0:bc:30:ad:2f:df:a6:16:c8:
         7b:c2:8d:85:c0:87:80:c2:0d:8b:b8:6f:d5:ff:9b:b4:12:2b:
         2b:78:06:28:2e:03:cc:fa:2f:8a:8b:50:7d:d3:c0:f2:38:28:
         f9:54:cc:78:a7:3d:57:ef:c9:c0:26:66:e4:89:22:01:2d:e0:
         0b:ed:74:45:1f:16:fa:e5:c1:d6:ab:3e:97:30:6b:4a:04:ca:
         d7:f7:f0:21:e5:e0:5a:13:10:f4:c2:f8:3d:7d:40:1d:4b:06:
         df:08:5a:8a:82:e0:b3:c1:90:7f:8c:f2:7f:ee:3d:a3:77:f8:
         20:4d:92:93:a3:54:c3:9b:98:8d:94:cd:47:22:64:23:a3:db:
         83:1d:5c:44:f4:5d:6b:54:5d:0a:7f:bf:70:a8:bf:cb:af:b2:
         f2:d8:be:ff:49:9a:27:14:d9:86:e1:b5:d9:47:c4:6c:f4:33:
         bf:5a:24:fd:f6:39:ff:a1:aa:b9:1c:e9:4f:8c:21:80:3b:65:
         01:09:68:2d:b8:2d:b8:1a:95:d3:f6:cb:75:ee:e4:b9:bf:47:
         a7:57:4d:0c:dd:c8:41:19:1e:79:b8:50:26:3c:91:0f:8f:62:
         3d:2d:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:58 2024 by rpki-client on console-ams.rpki-client.org