Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
File:                     KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft (raw, json)
Hash identifier:          zTlA+jQfEw2pFjjhkKquYAvz05WM+S69+ajFzz0ohks=
Subject key identifier:   4A:73:8D:12:9E:66:99:28:CE:28:C8:00:14:B2:86:8C:85:40:E7:47
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       018F6923617C72474FE83443C676A61C88AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
Manifest number:          0A36
Signing time:             Sat 11 May 2024 19:31:17 +0000
Manifest this update:     Sat 11 May 2024 19:31:17 +0000
Manifest next update:     Sun 12 May 2024 19:31:17 +0000
Files and hashes:         1: 3LJI2FDmVfdwGoDGBwKrTAsp7Pc.roa (hash: LeqT1fF7zMBCRHVESMRL8Gon1R2oOgyVQR2oI+kqH0Q=)
                          2: 4e09IfPxGiD8OaD0Bi-JimO9Vmw.roa (hash: nhWtqAbfTzL5ITb4Kq2rOcpzeklXuQ+lOoBZPRUbNxw=)
                          3: 7vDLRqRLvfwmJCEEzYe999RSvP4.roa (hash: eLQUhVDWYWHpX87CoXHi/UaRow+9tvZBDLbNlwX1HBM=)
                          4: BglJepmkLUiiQ0LheXbXjPiCvLg.roa (hash: xXcB+y9OHnftpL2fSRIkHTOlm6FZAMcau0ffKR5N1D4=)
                          5: HBLcsyu0jJir52V3Mrk2qgpXI_c.roa (hash: l2wV2l4200L73DVOplI/oUf2wh0Ewmc0mCnfbR2VpCI=)
                          6: HkTGLoevfP9PICaEDJJqeGBJxus.roa (hash: wMNQVOF/4pgZ0mYhIVRe116E3LhVQZjCuQjLiRz3Af4=)
                          7: KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl (hash: yS485j08KrzbWm4FMzjDLkJiDsNzrRgdWJt5XuWp/kc=)
                          8: Odli5zTC_KuE1rTLoF8ARl3tReg.roa (hash: 3R1/Z+Pgi440YvwOC9FZMd3yFerfbl6vV92zeV4+6Dg=)
                          9: PAnuTo-tVI7z2PoXjso0YIt2vYs.roa (hash: ekTqrfV5l1LgMHDykFepdp0SHZGe49qvjft5DNsDQsw=)
                          10: QCIHUGVE3kTIFoEuC8v1m31sM9g.roa (hash: ppSGxtp9pbTOMMKdgb4eaIvDsRApADBFLQT39xhSeDw=)
                          11: UCbZ2BRTaJpnOiuRzEAijC6ArKw.roa (hash: DoxisFAhfywqa8ql9wqOcvy5fus7KRr/nFedHDEZjwk=)
                          12: ZuMlAOVSBDR2Uu8z8KE1yEZVJBU.roa (hash: wrTxHWNx3Xe9oW5fAkd41u9LJypmDbzbc9lI+VOOzGs=)
                          13: _xU_jJPEg-bf6TNf59-mLO8MJOM.roa (hash: YBvGgwzMR8rVP4+OiZtDGfT3Ce1gs5ObB5o8wDvUqJY=)
                          14: acbohE8I0I4NcDGX0xBlpKt6Hwk.roa (hash: SpcEPz9wK/HRn2Y8rsgw6sbcW9wRs5G7qXN3dITXVn8=)
                          15: e5abxwjYB0yzGX0Op3lz8AWUIGc.roa (hash: dmSTeuNMit7YOjcVWRQEX8xLp5NkRS3dCIoxsLTtewc=)
                          16: iiIkNIjU4qEAPELIlnWuy8Deuho.roa (hash: ai3VDK4npOcRyVXWPJCkImr7733pUNdC3Ukucz6Rsp8=)
                          17: mIO_svSyQadhNStbS0iGLMsUXic.roa (hash: DUKcGqbf9gPLgGDJQf2nrcg8cjvddRZWYb8hvErhcMk=)
                          18: nAeaDlbX-l2wZY9J377oSgCc2IE.roa (hash: Q7iMGAeSVidKzbHV0uLRJayl/NIXOjCzaQrios2VufA=)
                          19: rEpFn3YgOLMiBLhKRoid9MMSRhw.roa (hash: E7RAuqkf/HIcdLYFuXonJ7CCG7rkJvbbc3aWJ3PvFw4=)
                          20: s9vn8VnHEFGsXUc8LyMP92tXBTo.roa (hash: sTxGU54F/6jV4K8mp1ItrmVWkwRENAIfJYvahoOHp2M=)
                          21: xPIGMiV2okLp1GMGo2CjJaK8aHE.roa (hash: pmf/hAJy/HOUC2rn2+666TF2/HDevcnUllLIluZ52Pc=)
                          22: xxtKhdFSQ7arXoaO6JrEtumcw8Q.roa (hash: TKJ+YH/c8LH+h/OuVUHf7TMyfZImL40fcZXQ7/8vqhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:69:23:61:7c:72:47:4f:e8:34:43:c6:76:a6:1c:88:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: May 11 19:31:17 2024 GMT
            Not After : May 12 19:31:17 2024 GMT
        Subject: CN=4a738d129e669928ce28c80014b2868c8540e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:f4:91:91:1e:73:96:63:76:dd:7f:0a:f2:
                    fa:ef:06:f7:92:b2:4e:f4:23:a6:c2:38:95:82:c4:
                    28:40:19:8e:d8:9b:6f:d8:a2:6c:46:0f:d9:33:a5:
                    e0:d3:93:ae:1c:22:79:8b:bb:0b:79:a7:d2:c2:82:
                    10:1b:93:2f:21:44:87:83:02:4e:54:3b:c8:69:31:
                    b2:a2:28:46:37:48:21:e4:9a:da:dc:40:39:63:fb:
                    db:11:bd:45:2a:29:26:78:8f:43:05:28:4c:f4:ea:
                    15:ae:f6:72:68:c5:aa:dc:bb:7f:fd:45:49:70:d5:
                    e3:cc:1a:33:c9:7b:26:6d:37:6d:d9:12:fc:da:7b:
                    3b:3a:96:e3:7c:e5:05:e4:fa:bc:2b:cf:c1:07:bd:
                    9c:0e:6c:0e:c4:79:00:75:03:9c:5f:dc:81:ad:a4:
                    b7:ec:50:90:18:4c:8c:fa:e3:50:43:db:15:b5:0c:
                    24:4d:71:93:bf:0f:e2:a4:c6:57:23:d3:d8:55:1b:
                    7d:18:cd:ba:0d:09:6d:58:5c:7a:b9:98:2f:da:18:
                    5d:dc:26:fe:dd:4d:ff:76:ae:0b:f0:bb:83:04:d7:
                    ee:79:9b:9d:4a:6f:6f:74:c5:70:c7:04:68:cd:d6:
                    74:bb:eb:d7:c0:d2:ca:c0:6e:9b:57:e2:41:ed:12:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:73:8D:12:9E:66:99:28:CE:28:C8:00:14:B2:86:8C:85:40:E7:47
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:f9:2a:35:62:3f:39:3b:7e:f8:57:55:b4:0b:90:ce:c5:
         03:de:03:ae:f1:dc:5e:de:af:37:20:b2:10:f8:21:ef:d7:a2:
         53:7d:22:bc:48:45:30:31:0a:c7:6d:89:85:35:1e:ce:1e:89:
         3c:d8:ab:c3:12:c4:fb:d0:9a:d2:eb:1f:32:f1:6c:7f:b2:1a:
         aa:82:32:0a:f7:32:0d:13:1c:38:fc:15:0c:0d:98:36:4a:cc:
         c1:e9:73:7d:7e:a5:d8:53:c2:b5:0c:18:34:98:f1:49:43:8e:
         b3:c5:65:85:82:8d:50:7c:d9:f9:61:72:9a:c9:12:b3:b4:74:
         43:50:e4:bb:12:ca:29:57:d0:d2:24:8e:40:15:79:74:10:a5:
         8d:07:1c:e3:2e:b4:34:f6:16:64:c4:a7:1f:94:2b:fd:64:fe:
         18:c3:d2:a9:f4:a4:a5:79:71:18:5e:93:86:10:a7:c6:77:23:
         8e:b6:5f:52:74:0c:9c:8a:54:94:0b:2a:10:cf:6a:bc:43:a0:
         df:67:5e:de:93:80:93:81:fc:0e:67:cb:e5:6f:78:14:7c:b0:
         83:d0:90:f2:8e:70:b3:0a:ec:bc:62:2a:80:de:c7:f6:44:95:
         b7:b7:8d:24:f9:c1:7e:7f:2e:9d:1a:1c:44:b8:c2:cf:b3:da:
         68:7a:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 20:58:23 2024 by rpki-client on console-fra.rpki-client.org