Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File:                     1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier:          XZfCYCe53ZjPyN9+ZZps7OWFYpstqlyYbnW9+Q8Lrmc=
Subject key identifier:   91:4A:75:34:42:43:18:8E:BF:F1:53:1F:B2:99:B9:21:61:9D:05:E0
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer:       /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial:       018F441FA44A6933BBA7834B60053A65D97C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number:          1157
Signing time:             Sat 04 May 2024 15:01:15 +0000
Manifest this update:     Sat 04 May 2024 15:01:15 +0000
Manifest next update:     Sun 05 May 2024 15:01:15 +0000
Files and hashes:         1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: ZAoV3oPDfrqmVzuDmG4XJXJIUKwdfbdaLkPpWWrjV60=)
                          2: 1KYG3F8pHKNPo0Xcmmw4LB-YfeU.roa (hash: V/C4+cebLGRIpHH0s7FnVcrAHDMjo2KgHcCuNuiGAJY=)
                          3: 3J4jcvSpdD0oPsF4qn0Wgua3FDg.roa (hash: 8s58AlZmGxy6KVIvXLDnR/+39u7uYLxZc+JOFQuvbvY=)
                          4: 7VspCms8L1ACllsPYgL6wt0gx6s.roa (hash: 9E4UAeMSARnSkF25x8m2n0O3MLp7h0l5BsC171utTK8=)
                          5: ahJ7lD1mOSxzgP-IOOvpwlgnpVw.roa (hash: NYX1OxcWL4t7l9/TWvlt0g1EMgq3YT1bx5z+SBIgdqE=)
                          6: t3adbEqeVIP4Vq4fpq6kprZbrSo.roa (hash: E47BfDxVLPamkuKvU+hbcYyeV3Hg9I2nR6CrG43PR9E=)
                          7: u-s0oy9wDiSII-o__xGMAV4AJaw.roa (hash: vvCvmU/OXTFOBco+McSZu7g1PDFwFlbIs4LveQBPrWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:a4:4a:69:33:bb:a7:83:4b:60:05:3a:65:d9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
        Validity
            Not Before: May  4 15:01:15 2024 GMT
            Not After : May  5 15:01:15 2024 GMT
        Subject: CN=914a75344243188ebff1531fb299b921619d05e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ed:33:4b:9f:a8:35:5d:9c:f0:f5:4e:94:e2:
                    ef:d1:f4:d4:2e:1a:b1:81:99:aa:05:09:ef:9b:90:
                    ef:e9:47:79:4a:8d:f0:87:4b:37:9c:53:2c:65:d1:
                    d1:8c:ce:2f:7a:ae:2b:58:9b:39:70:28:38:40:19:
                    55:aa:9e:f1:76:47:47:8b:bf:ef:41:14:36:d4:d2:
                    93:d6:c7:2c:1a:dc:d9:9f:9c:6b:2c:db:dd:8c:76:
                    70:6c:2e:cd:04:5a:e0:8c:43:15:8e:9f:bc:26:fa:
                    12:39:83:5d:55:0c:7b:28:8c:bc:d0:02:c0:b7:20:
                    2a:fa:e1:3e:79:ed:19:45:ca:bf:70:a7:1b:84:09:
                    7a:a7:d1:7b:f5:f0:c9:44:46:12:20:4e:23:d9:1e:
                    1c:17:80:20:17:c2:f3:38:e3:89:39:97:2c:c5:41:
                    16:1b:e0:da:6c:21:cb:68:54:61:ee:84:e0:fd:03:
                    f8:14:f5:9c:54:3d:a9:4f:3f:21:5e:23:ab:26:d2:
                    c3:f5:be:f4:3b:06:10:56:44:d8:88:2d:ae:b4:05:
                    de:b9:f4:8e:1e:eb:f8:2a:be:90:42:5b:f9:ac:ee:
                    55:3f:9b:66:1f:1c:e8:7d:e4:05:b7:cc:ff:05:5e:
                    e0:8f:c3:77:f3:e5:20:37:ff:47:bf:cd:5e:1d:8d:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4A:75:34:42:43:18:8E:BF:F1:53:1F:B2:99:B9:21:61:9D:05:E0
            X509v3 Authority Key Identifier:
                keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:41:0f:4d:a0:ca:0a:da:13:1a:b0:26:95:71:44:36:c4:ff:
         5b:77:49:40:9a:f9:2d:c2:1c:fb:d1:b1:63:3c:b9:bb:5f:10:
         56:d1:f8:7a:cc:4f:65:ce:7a:9a:f3:13:ce:1b:eb:3a:8d:d6:
         79:54:74:2d:ef:04:5c:48:aa:81:88:20:5a:e1:d1:be:4d:93:
         82:67:39:ee:03:79:32:a0:2c:4a:26:88:73:a3:68:04:a0:68:
         22:2e:c5:b7:77:90:56:14:91:20:a2:9d:f3:70:e3:4b:0b:d9:
         e5:a1:a9:36:9a:93:a6:60:70:98:03:e0:e7:3a:bf:3a:0a:19:
         f8:ea:60:bb:ab:88:d5:5d:1c:f3:78:6a:68:e3:f8:5d:ff:2d:
         eb:52:a0:63:87:84:f6:ff:43:92:ae:cb:66:53:6a:02:e8:a7:
         35:25:43:ed:1b:1f:9b:d9:c2:60:7f:66:78:49:e9:40:8b:f5:
         b3:b5:67:14:9f:bd:83:f8:20:21:c8:c7:f8:2d:4d:e7:79:d3:
         5b:f2:af:45:7b:b2:d9:95:5d:52:04:d8:9c:fa:9b:5a:59:b7:
         ee:fd:55:bf:31:5b:3f:41:30:e9:0e:40:df:07:7f:31:f0:73:
         36:bb:44:bf:a1:76:7f:22:64:69:44:cb:d1:43:b6:c9:be:35:
         3e:8e:a6:bb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9EH6RKaTO7p4NLYAU6Zdl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1
MGQ4MTMwHhcNMjQwNTA0MTUwMTE1WhcNMjQwNTA1MTUwMTE1WjAzMTEwLwYDVQQD
Eyg5MTRhNzUzNDQyNDMxODhlYmZmMTUzMWZiMjk5YjkyMTYxOWQwNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e0zS5+oNV2c8PVOlOLv0fTULhqx
gZmqBQnvm5Dv6Ud5So3wh0s3nFMsZdHRjM4veq4rWJs5cCg4QBlVqp7xdkdHi7/v
QRQ21NKT1scsGtzZn5xrLNvdjHZwbC7NBFrgjEMVjp+8JvoSOYNdVQx7KIy80ALA
tyAq+uE+ee0ZRcq/cKcbhAl6p9F79fDJREYSIE4j2R4cF4AgF8LzOOOJOZcsxUEW
G+DabCHLaFRh7oTg/QP4FPWcVD2pTz8hXiOrJtLD9b70OwYQVkTYiC2utAXeufSO
Huv4Kr6QQlv5rO5VP5tmHxzofeQFt8z/BV7gj8N38+UgN/9Hv81eHY34mQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJFKdTRCQxiOv/FTH7KZuSFhnQXgMB8GA1UdIwQY
MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0
LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx
ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0EP
TaDKCtoTGrAmlXFENsT/W3dJQJr5LcIc+9GxYzy5u18QVtH4esxPZc56mvMTzhvr
Oo3WeVR0Le8EXEiqgYggWuHRvk2Tgmc57gN5MqAsSiaIc6NoBKBoIi7Ft3eQVhSR
IKKd83DjSwvZ5aGpNpqTpmBwmAPg5zq/OgoZ+Opgu6uI1V0c83hqaOP4Xf8t61Kg
Y4eE9v9Dkq7LZlNqAuinNSVD7Rsfm9nCYH9meEnpQIv1s7VnFJ+9g/ggIcjH+C1N
53nTW/KvRXuy2ZVdUgTYnPqbWlm37v1VvzFbP0Ew6Q5A3wd/MfBzNrtEv6F2fyJk
aUTL0UO2yb41Po6muw==
-----END CERTIFICATE-----
Generated at Sat May 4 17:57:06 2024 by rpki-client on console-ams.rpki-client.org