Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File:                     q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier:          uQZgOmYRmPyX8E7zHH6MeiKsHM3jeGuuTzRjAgYsZsU=
Subject key identifier:   9F:85:41:D9:D6:D6:32:65:BA:11:0E:3B:62:8F:20:D1:38:B4:74:69
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer:       /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial:       018F874AE89079059A26D8D647355F172656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number:          0170
Signing time:             Fri 17 May 2024 16:03:04 +0000
Manifest this update:     Fri 17 May 2024 16:03:04 +0000
Manifest next update:     Sat 18 May 2024 16:03:04 +0000
Files and hashes:         1: 8wtXj6f5qBp0uAZpxTYBOHrvQJk.roa (hash: UXYtW3d3czaSDn5V7vj5GOsxwszbIv0BxdBtlFZErL4=)
                          2: CfBp2ubaQf0zLp1aneZdupfPIPE.roa (hash: cVxbSZA5Qpbsh7EPFAe7fSpVAabjjFW5xafo3stvWV4=)
                          3: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: zvl91X5ZIIrpU2KvKR5L8jXpjvyzmCuDJMvxFPd1+NE=)
                          4: rRKah9Di5-fwiLSZzckNJJGgc_c.roa (hash: ia+p12ww5SvNlj521cLWDANMFMD51juR9S8F6EGHcxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e8:90:79:05:9a:26:d8:d6:47:35:5f:17:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
        Validity
            Not Before: May 17 16:03:04 2024 GMT
            Not After : May 18 16:03:04 2024 GMT
        Subject: CN=9f8541d9d6d63265ba110e3b628f20d138b47469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:18:0f:ad:98:7e:47:fc:14:2a:5e:4d:92:
                    d2:ba:aa:a5:6e:3c:e4:0b:10:d4:d3:dd:7c:6c:b7:
                    ad:1b:4e:cc:cb:67:fa:76:e5:28:b7:14:c2:5e:c5:
                    77:67:32:a2:18:fc:fd:b5:66:f9:a7:8c:52:62:98:
                    7f:de:73:a1:0c:3e:85:07:2c:2d:df:59:14:7f:d1:
                    88:85:5b:b8:51:0a:84:a7:ea:ea:e0:bd:b7:8f:c5:
                    e4:42:db:c6:39:4f:57:8b:e9:cc:6e:6c:8c:59:ab:
                    a7:5d:66:3d:53:11:29:1c:6a:ca:49:99:c8:56:54:
                    f1:66:ff:39:6e:72:5a:79:e4:44:43:5b:75:de:e9:
                    1d:70:21:b0:da:4f:8a:f2:f6:c6:35:11:4a:4a:0f:
                    a5:c7:2b:05:e1:88:ce:d1:0a:52:2a:5d:aa:c5:07:
                    2e:83:47:91:cf:3a:8d:bf:16:7f:a6:99:8d:73:9a:
                    86:54:7a:9c:4d:07:a4:e9:f1:a0:f9:f1:e1:57:ce:
                    f0:91:35:42:fd:0b:77:8d:b1:bb:b8:61:f7:70:83:
                    31:14:73:4f:4b:d3:ba:13:cf:d5:51:5c:5c:8b:fc:
                    a5:5d:82:a8:15:e9:95:b8:0b:17:5e:54:55:4a:f0:
                    88:f1:a0:d3:cf:43:cf:87:4a:43:f6:77:44:fe:41:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:41:D9:D6:D6:32:65:BA:11:0E:3B:62:8F:20:D1:38:B4:74:69
            X509v3 Authority Key Identifier:
                keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:d6:03:9b:7e:14:aa:c6:28:e0:0e:f4:5f:9b:ae:07:02:
         00:c7:18:58:b9:a9:1e:33:72:50:a8:62:af:1c:1a:58:b7:4c:
         fa:e8:89:30:33:8f:2a:ce:97:77:97:a9:33:71:79:18:9a:db:
         f7:60:00:f9:ea:91:18:e7:7f:c3:6f:8e:ae:2d:24:86:49:f2:
         6e:0e:1e:ed:af:10:13:8a:12:f2:b3:36:7d:39:80:7c:f1:77:
         fa:0b:9f:2f:17:c7:95:4c:f9:13:0d:e8:da:6c:40:28:20:27:
         a0:e4:b0:33:8d:a9:c1:ac:17:f8:7b:c8:d2:ea:4a:61:23:d4:
         5b:1a:f2:d4:a2:61:40:11:7e:47:eb:64:c3:41:e4:64:d8:03:
         57:89:ea:10:d7:d2:6d:e2:ef:b7:28:91:19:a7:fd:4b:e0:84:
         be:85:cb:58:e9:73:ba:6d:20:aa:2f:a0:83:ff:a6:4b:c0:a6:
         59:eb:4b:8e:01:df:39:df:3f:10:51:8b:05:84:94:10:b4:d3:
         ec:cf:cf:55:5e:d9:ba:ce:93:20:43:73:48:b8:2c:d1:05:1a:
         6a:7f:b1:5e:4c:ed:11:33:6c:b6:18:fb:a7:81:d1:37:b6:1f:
         55:b5:d2:e5:b7:8a:a3:7d:8d:ad:49:e8:87:e2:83:01:73:72:
         2d:0b:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:01 2024 by rpki-client on console-fra.rpki-client.org