Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File:                     fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier:          hdfT+pWLSwMr8mNZ2RviB8t91zLdq2vixsrtqfweoAk=
Subject key identifier:   45:64:2B:D9:D3:18:E3:C8:3F:04:08:C3:55:35:30:F5:3D:A2:94:75
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer:       /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial:       018F877F39D6474B9A1666A3453543969F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number:          103B
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: N698xH3D3ov-iVkFzRRvmxAv2Ss.roa (hash: bvET/skinFiVg+C1Ampa5Kx3tQNttAEGIZgcHrAkFR8=)
                          2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: AoEF37t+1x170C/z/F2gfizebOWDrrqXCo2S/QihaH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:39:d6:47:4b:9a:16:66:a3:45:35:43:96:9f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=45642bd9d318e3c83f0408c3553530f53da29475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:f5:82:cb:13:2b:08:2f:5d:24:d5:72:9d:
                    e6:74:46:71:9e:db:7f:87:1e:26:54:22:de:b2:5a:
                    b0:30:4d:04:4c:3d:49:59:10:f3:6e:f8:63:64:5a:
                    0f:a9:43:e0:55:6e:6b:d7:c5:e6:78:5c:45:48:39:
                    19:45:54:c3:c2:b4:6e:c8:73:23:34:66:cb:4b:35:
                    fc:8f:cf:57:da:e7:f4:d4:31:95:69:3f:6d:c0:32:
                    e3:a9:81:2a:db:f4:53:d3:09:ce:36:30:21:82:9b:
                    24:36:ea:e1:8a:f1:40:5f:5e:f5:26:ad:16:9d:73:
                    f1:47:6f:6e:17:a4:99:f0:c6:db:1f:ac:db:dc:91:
                    85:d5:1a:9a:0a:0d:5e:5a:8f:68:b1:60:00:28:16:
                    36:56:f3:74:4f:2b:96:aa:b3:20:0b:4a:a1:92:47:
                    2e:d5:64:2d:ca:b5:8c:26:de:a9:31:05:ca:b7:8b:
                    56:4d:68:6c:91:5e:6a:77:17:a6:a9:ac:74:69:10:
                    95:62:d5:be:00:09:12:42:9f:dc:04:84:99:b2:15:
                    a7:8d:8f:75:71:fd:30:45:6d:80:19:31:15:91:f3:
                    1e:d1:c4:52:02:6f:d3:f3:e2:07:9f:8c:6a:db:57:
                    bf:df:59:da:96:31:d4:b8:ec:f5:68:a4:8b:89:6d:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:2B:D9:D3:18:E3:C8:3F:04:08:C3:55:35:30:F5:3D:A2:94:75
            X509v3 Authority Key Identifier:
                keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:81:cf:e5:5e:dc:5c:92:d0:f6:59:62:09:a9:31:8d:1e:ae:
         88:23:55:e7:db:20:9b:15:88:f9:56:5e:7b:b6:d0:ab:34:15:
         bd:45:c6:89:57:43:21:c4:d3:a8:ad:4f:d8:a3:31:ee:e5:77:
         6f:c9:fa:98:64:c9:4b:62:9a:3e:3c:ef:e9:55:37:9b:b8:ac:
         30:b6:69:4a:d1:c7:f2:ec:22:e4:7f:c4:05:76:5f:6d:1d:ff:
         38:c6:71:2a:6f:44:df:61:6d:9e:5c:54:d5:d5:bc:34:ba:76:
         25:78:01:b1:a9:e3:dd:e6:7c:9d:d4:e8:ab:30:65:0e:53:ea:
         f2:63:3f:7a:34:12:18:2f:b7:5d:12:87:f9:15:70:f7:46:c0:
         70:98:7c:c2:4e:e2:a1:42:f4:64:04:73:7d:26:c5:f2:f2:05:
         6d:59:cd:86:ff:06:b3:fb:e5:82:89:87:5a:36:63:90:80:41:
         e5:bd:8a:b5:8d:11:2a:93:cf:81:2f:e1:9e:33:50:66:ea:f0:
         e0:af:21:cc:c3:6d:fe:e9:fd:93:90:20:69:2b:8d:56:65:06:
         ac:9b:cb:cc:ae:88:2e:81:ef:62:03:e9:8d:49:7f:fa:66:43:
         04:fa:b8:03:b8:b2:53:ea:cf:bd:fd:72:7b:84:bc:62:e0:42:
         11:96:4c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HfznWR0uaFmajRTVDlp8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjdjZmQ2Yzg4MjZhNjdmNjQyYTM3M2QxMzE5NTUzMDhk
OWMxY2EwHhcNMjQwNTE3MTcwMDEzWhcNMjQwNTE4MTcwMDEzWjAzMTEwLwYDVQQD
Eyg0NTY0MmJkOWQzMThlM2M4M2YwNDA4YzM1NTM1MzBmNTNkYTI5NDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjf1gssTKwgvXSTVcp3mdEZxntt/
hx4mVCLeslqwME0ETD1JWRDzbvhjZFoPqUPgVW5r18XmeFxFSDkZRVTDwrRuyHMj
NGbLSzX8j89X2uf01DGVaT9twDLjqYEq2/RT0wnONjAhgpskNurhivFAX171Jq0W
nXPxR29uF6SZ8MbbH6zb3JGF1RqaCg1eWo9osWAAKBY2VvN0TyuWqrMgC0qhkkcu
1WQtyrWMJt6pMQXKt4tWTWhskV5qdxemqax0aRCVYtW+AAkSQp/cBISZshWnjY91
cf0wRW2AGTEVkfMe0cRSAm/T8+IHn4xq21e/31naljHUuOz1aKSLiW1X1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVkK9nTGOPIPwQIw1U1MPU9opR1MB8GA1UdIwQY
MBaAFH33z9bIgmpn9kKjc9ExlVMI2cHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAt
YmYxYzVjYzM2YjY2LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAtYmYxYzVjYzM2YjY2
LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoHP5V7c
XJLQ9lliCakxjR6uiCNV59sgmxWI+VZee7bQqzQVvUXGiVdDIcTTqK1P2KMx7uV3
b8n6mGTJS2KaPjzv6VU3m7isMLZpStHH8uwi5H/EBXZfbR3/OMZxKm9E32FtnlxU
1dW8NLp2JXgBsanj3eZ8ndToqzBlDlPq8mM/ejQSGC+3XRKH+RVw90bAcJh8wk7i
oUL0ZARzfSbF8vIFbVnNhv8Gs/vlgomHWjZjkIBB5b2KtY0RKpPPgS/hnjNQZurw
4K8hzMNt/un9k5AgaSuNVmUGrJvLzK6ILoHvYgPpjUl/+mZDBPq4A7iyU+rPvf1y
e4S8YuBCEZZM2g==
-----END CERTIFICATE-----
Generated at Fri May 17 23:41:47 2024 by rpki-client on console-fra.rpki-client.org