Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File:                     sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier:          khYVTSgjcwVLwxavbnFVdpFhITQCzpnpNSUKrs3htZk=
Subject key identifier:   7E:0D:D1:98:0E:DE:E6:CC:84:BD:A0:A5:DF:23:BF:6A:2D:79:57:8C
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer:       /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial:       018F8748DE98AB0C467841665E4FE49B3D4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number:          0F09
Signing time:             Fri 17 May 2024 16:00:50 +0000
Manifest this update:     Fri 17 May 2024 16:00:50 +0000
Manifest next update:     Sat 18 May 2024 16:00:50 +0000
Files and hashes:         1: 5ylXAzU6Vf-SE4CakKNb0V2fmU0.roa (hash: iCfEESWxyrhy5VUOU0FSuOGqSAeMzzcqGt777OBNVxc=)
                          2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: d/sScmvZlWydnxSUbp8devCddR8D4fUDvvXcnAbrT6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:de:98:ab:0c:46:78:41:66:5e:4f:e4:9b:3d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
        Validity
            Not Before: May 17 16:00:50 2024 GMT
            Not After : May 18 16:00:50 2024 GMT
        Subject: CN=7e0dd1980edee6cc84bda0a5df23bf6a2d79578c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:fa:aa:c9:00:81:b8:48:15:51:1f:85:67:
                    21:d4:61:00:3b:bb:3c:06:3f:88:4f:6d:93:03:11:
                    61:1b:88:26:30:bc:15:60:3c:d7:1f:9e:0a:25:aa:
                    de:0e:74:76:69:46:9e:1b:70:80:c4:12:79:23:c9:
                    96:40:08:7e:b8:f5:15:eb:a2:da:7c:16:b7:25:d5:
                    7c:cc:7d:69:ac:f0:6c:d2:66:15:b3:76:ce:48:7f:
                    a3:c5:f4:96:07:93:bb:06:ad:ac:29:18:56:d9:0c:
                    45:a6:a0:f5:83:24:0a:eb:bd:9d:99:ef:40:f2:ff:
                    a3:16:6b:98:db:c4:f9:61:7e:d5:25:b0:10:28:f0:
                    99:fc:59:ba:fb:10:8e:71:5d:c0:50:a1:1b:ef:3c:
                    42:47:5c:d2:04:91:0d:4e:51:cf:08:cf:09:53:d6:
                    ae:0e:e9:a2:22:b4:a0:01:37:81:ed:cd:de:39:02:
                    9d:16:81:29:7a:bd:c5:14:35:28:92:9d:3a:19:99:
                    11:86:32:14:7b:08:5e:52:6a:6f:5e:e9:8d:fe:d7:
                    05:24:e7:65:c1:67:c2:31:e1:7e:7a:8a:f9:b2:b8:
                    b5:a6:8b:ee:86:ae:17:f5:8d:fe:92:06:8c:90:e7:
                    ad:d1:d0:46:fe:dc:ce:c9:4f:f6:a5:21:f7:7e:a0:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:D1:98:0E:DE:E6:CC:84:BD:A0:A5:DF:23:BF:6A:2D:79:57:8C
            X509v3 Authority Key Identifier:
                keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:a5:e9:10:aa:dc:62:19:73:f4:f4:c0:57:7e:6c:46:2e:29:
         44:83:15:8b:df:6c:53:98:1f:3a:85:5f:dc:f2:3e:25:8e:03:
         72:36:59:7d:0d:7c:dc:04:f9:47:c6:5b:c4:b5:6f:9b:e8:f6:
         d4:21:e5:55:c0:26:ca:c6:3c:b9:30:be:b4:5e:16:fa:d5:05:
         10:3e:2e:22:a3:b4:e2:56:6b:5d:92:3b:95:da:c5:1a:63:17:
         e5:9a:b7:38:2f:6d:7e:0a:f7:24:7c:30:f8:da:38:17:98:d5:
         50:cc:25:2f:d8:a6:27:7f:aa:df:fa:9d:92:5c:2e:e9:aa:9e:
         7f:6e:0d:71:77:bc:7c:9c:1e:b8:1b:b8:61:78:c6:60:d2:56:
         6d:16:bc:46:58:b1:05:d3:bf:d1:88:9a:cb:39:da:7d:66:77:
         bb:be:d6:72:a8:bb:e7:02:48:36:0e:81:02:62:e3:c4:7d:b3:
         4b:da:29:a1:20:86:05:da:87:8b:e6:7b:5c:d4:0f:15:85:7f:
         d8:52:ae:34:98:89:d2:30:eb:de:6e:c4:17:33:45:a1:2b:e7:
         b4:65:41:76:b7:36:a7:d3:cf:d3:f4:9e:2c:99:ab:f7:4b:5d:
         b3:73:ae:cb:d0:ed:8a:53:bf:d5:ba:99:4a:59:06:30:53:b4:
         89:58:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:46:24 2024 by rpki-client on console-fra.rpki-client.org