Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          OnhwqMk1e3uXpMGGSnkgWwXtoSspR+N+UPUFaz05Ww8=
Subject key identifier:   68:A8:63:B2:83:4B:98:BA:54:22:7D:69:43:14:B1:D5:4D:63:3A:72
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       018F88C8BA826D4725F9C0959A039432A50E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          1181
Signing time:             Fri 17 May 2024 23:00:07 +0000
Manifest this update:     Fri 17 May 2024 23:00:07 +0000
Manifest next update:     Sat 18 May 2024 23:00:07 +0000
Files and hashes:         1: 0_dv6_hKNqZ-4nTsvvkqnn4eqkg.roa (hash: FmNRQIGEjlH2YkVaVaK37VyRMbjXxoBjD2UyFB5IzJs=)
                          2: 5Qc6C6XAUxeWDomixUSnkRG8m-A.roa (hash: PaHxvnvCv2103ZVw8avQreXVKUJe2rYs5jEFfb674EU=)
                          3: 99oVUw4qBHCoVD1Y64NqQbkrYEQ.roa (hash: ukusrWOlIceexNZf1bi3hZIoFJNvt4ChkRTpLtAJphw=)
                          4: AfiwHuz1_fE3uWHyqmYCo7emZ3I.roa (hash: N0wU3ONbWhNXpsxuJEOndCoXX/06wSPyuJ2YS0JuIVs=)
                          5: BPIxqhLCrJCG_lGKgKi50yKMVvs.roa (hash: qhK1yocou2kRuKfUswGjugkgurhdRzuvAoLSOV7Kr3k=)
                          6: Dvd9_zQ47pRujPwYBGMv4Yr7JzU.roa (hash: AqoAvieIEi7c/5yfD5qpteCjKnHXzeq6zRwAbUOslhk=)
                          7: GChUTI2A2-sfYZUGet6Hj3Z3F5k.roa (hash: De+WaQ5MYPoR964wfzemC42HT2cuZu/ybnADNHxKZWY=)
                          8: KBf8j9UMFoZXwT3u3uJkzZl5f_M.roa (hash: K4PA6YlD8WQXWWv/0hLPhN8n/YB6Ao189dtLPIDoR0g=)
                          9: P6wovKJ4HsIFeyW9yX4-rJo9t24.roa (hash: vbWytlAXub0qbj8J0dOT08uTe/PxZEK+8YMLhE0S0vo=)
                          10: SaBDgGPdSywOc1OTZ8SjW4aaqOk.roa (hash: QpRbqrmljZEoRZAxAcREU4Mj06dqTes67UZmic2uLIs=)
                          11: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: 8KhgafYEhRaicVtDTAn7RtgYNk/9yRqNbKCyywfRQlo=)
                          12: aHw4739QneDJicfHm8Yc1Rl4TvQ.roa (hash: BsLCOfhX+hvi7DBkxd42/1OkNtDnKQzEOvGL2JzJUAM=)
                          13: e1PYF8UI-q6Wd15IXSgSUgOOgM0.roa (hash: uR8XcEj/6dGZ1UeHd84IiofMQFMaoTXhieU+WbbxBEs=)
                          14: eP5EXrmsPf2u3XppyC1gJ_4iUqw.roa (hash: XirZL7369pcfsx3BhOb6HQSq8ymcMEWJRpAjO/xHljo=)
                          15: fHwCt-TlVf83K-kCRpA3dmWLD34.roa (hash: T2mNm5oydcBb0v82fzeOb+58gLjHLeCZZ6gNDvgoWGE=)
                          16: q36EbkkqDy_91lS4zoRVoYUp4ZE.roa (hash: E+2D/rGXtloh6mMT23bkCDG5ZgewSn6H0wy3TL2gfp0=)
                          17: s53IUwL0OEzcYN19aA0UUregMcY.roa (hash: oGlK43xLbGliRac5fedl0x3SRzLK1wu8hJei6Z9MNA8=)
                          18: upJqSAoRM0K-eK9r3JzxY9AktXY.roa (hash: g/8zTi4gPfOGWwRYDAWSEGMQsz2ZuBI9cTPM/xQcfx4=)
                          19: zsetB9lXxTPEgEwWWpCwjj12YNg.roa (hash: Krmj1SJ+iuECQDViIisdxmCqnMEZwLnRoTzdwbkzTC0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:ba:82:6d:47:25:f9:c0:95:9a:03:94:32:a5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: May 17 23:00:07 2024 GMT
            Not After : May 18 23:00:07 2024 GMT
        Subject: CN=68a863b2834b98ba54227d694314b1d54d633a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:ad:bd:e6:f1:32:e3:2e:68:90:3d:3e:72:
                    a9:f8:57:5f:04:cf:93:6f:f5:48:ac:6b:78:1a:42:
                    29:4d:eb:b4:a7:6f:fa:a9:76:74:9d:00:33:5f:25:
                    b2:75:6a:62:8e:cd:df:57:60:10:74:0a:4f:42:b0:
                    95:5c:9f:1d:b8:ed:86:46:cf:47:35:19:8a:65:42:
                    12:f2:30:0d:b2:eb:5a:67:08:a8:12:50:d0:e6:7a:
                    4f:ee:76:ef:fe:8a:b9:09:04:0b:83:33:69:18:2c:
                    85:e1:b4:ea:92:89:52:e3:6d:d7:80:2d:ad:07:b3:
                    c4:76:76:3f:70:ca:07:6b:18:7b:6c:0e:e0:63:1c:
                    54:56:43:0a:5e:ab:e7:9a:ce:8d:20:4d:9d:d8:13:
                    c4:af:8b:05:69:ae:92:52:2e:f3:55:88:1e:c2:1e:
                    90:5d:84:8b:0d:80:81:de:80:95:bd:2b:8c:63:e9:
                    19:f9:57:7f:ce:72:a2:1c:47:dc:3f:ab:1c:fc:12:
                    d2:e6:df:33:64:89:2b:48:e8:86:72:06:b9:80:37:
                    22:c8:47:04:39:35:4e:e0:58:d5:0d:da:d3:4d:6c:
                    11:f5:44:63:90:4b:2e:38:36:30:ec:c9:7f:6e:67:
                    65:20:a8:2f:e5:b4:77:c8:f5:4d:34:e7:03:b5:bb:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:63:B2:83:4B:98:BA:54:22:7D:69:43:14:B1:D5:4D:63:3A:72
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:9e:82:99:d5:29:6f:89:28:f1:98:23:2c:21:05:38:0b:
         85:13:11:ec:c6:9f:b8:0c:91:4e:9d:a7:88:e0:79:20:23:81:
         b1:75:e3:13:60:fc:ed:50:f9:50:72:1a:ba:7a:6a:78:6d:44:
         da:8b:51:c3:8b:92:75:bb:43:c1:90:f2:fc:37:09:6a:e0:66:
         25:08:96:0a:de:77:e8:ca:88:b3:c4:21:09:d5:b9:e7:a3:c4:
         0c:73:af:ee:5e:54:5f:b5:72:7d:7f:9e:e7:c8:ce:e4:8e:e8:
         f1:f2:ae:24:2a:f7:8c:78:a9:f3:90:c7:9a:ae:18:64:cc:60:
         fc:25:d1:4e:90:36:65:02:6e:f1:68:1b:70:ff:1a:ff:6d:18:
         70:06:54:93:6c:b0:0c:05:ff:11:9f:1c:24:a3:6b:1c:0c:cb:
         01:1c:ea:94:33:92:41:49:af:46:50:cc:cd:cf:12:5c:82:a3:
         10:cd:05:2c:a8:c3:59:45:a4:b8:4f:46:86:be:1d:37:ee:a8:
         0f:b7:40:76:e4:49:0a:57:6c:95:b4:20:2d:0a:70:b7:bc:58:
         03:cf:44:ab:6c:30:44:1e:07:2c:de:74:6a:a5:9f:37:8a:dc:
         c8:52:4e:6b:2b:7a:f8:64:f8:66:08:4f:87:18:69:ab:c5:22:
         21:bd:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:50 2024 by rpki-client on console-ams.rpki-client.org