Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File:                     fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier:          k0VHtIuVU7O9P7GFUAjl6k7vyLSJOSR/g70G536omj4=
Subject key identifier:   5A:D1:17:FA:67:26:DD:49:13:D5:00:EE:E8:E5:9E:74:23:82:5B:E2
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer:       /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial:       018F889249C97F37AA5E0E11FFD9BC0D904C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number:          117F
Signing time:             Fri 17 May 2024 22:00:39 +0000
Manifest this update:     Fri 17 May 2024 22:00:39 +0000
Manifest next update:     Sat 18 May 2024 22:00:39 +0000
Files and hashes:         1: _t8XawAzMMEIsI1hBOjjaEm5C4s.roa (hash: ARRaAOph6CXNbsDFGklB87pjDRr7/r6pl4yR3UC+HdA=)
                          2: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: UBLbsI00iZMayjP0/jLCkt16xaIYOIngfcaydtbt8kQ=)
                          3: qiU5dCfEDFhI0F0Irely1BzdGVY.roa (hash: l2PgX5ugCo7fdCHckPat4cbaYjv6Kt78W9HHtB4jXa8=)
                          4: w-HrDO54JJ8tHtakXhRJBkbofbY.roa (hash: vPWUhebWIzXC17smzTp553sjzEqC6TYAJsD54QIh/1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:49:c9:7f:37:aa:5e:0e:11:ff:d9:bc:0d:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
        Validity
            Not Before: May 17 22:00:39 2024 GMT
            Not After : May 18 22:00:39 2024 GMT
        Subject: CN=5ad117fa6726dd4913d500eee8e59e7423825be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:17:7e:49:a6:6e:c2:0f:40:ec:78:a0:de:
                    08:8e:7a:f0:8d:50:53:32:1d:9a:30:1d:f5:59:97:
                    c7:3b:11:21:9f:d3:4f:93:32:7b:c0:3b:95:40:40:
                    46:18:8b:ef:58:e1:db:31:ee:6d:ed:bb:5e:b2:01:
                    e5:a1:f4:f4:1b:2a:eb:2b:88:63:74:d4:ba:e8:cb:
                    a7:52:e3:ce:d4:ee:b6:11:66:14:e8:6e:41:a5:b2:
                    48:b2:e9:1a:33:5a:62:f4:db:ff:05:1f:8f:c7:bb:
                    e0:0b:fe:64:8d:af:fd:13:dc:3a:b6:4b:74:e9:c7:
                    3b:19:5e:6d:c3:cb:a5:89:fd:61:85:8c:f2:84:6b:
                    c0:11:6e:54:a1:1f:ee:04:8f:58:72:d5:ec:0c:a7:
                    e0:9f:e2:0a:c9:59:d4:93:d6:bb:27:ab:e1:e3:40:
                    a6:00:17:66:f4:55:0f:33:73:ce:69:4d:86:14:fd:
                    d2:01:df:12:45:b0:9e:a8:5b:a7:6e:31:71:75:c5:
                    2c:90:39:2c:82:3f:05:74:bd:0a:aa:d4:0b:81:9f:
                    c9:53:fe:4a:a0:cb:ea:dc:7d:9b:dc:7e:57:07:e0:
                    93:c8:b2:70:8b:66:58:0f:16:d9:33:a6:b3:e1:55:
                    bb:ce:2e:ec:40:9b:e7:31:7f:01:e6:3b:51:42:d8:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D1:17:FA:67:26:DD:49:13:D5:00:EE:E8:E5:9E:74:23:82:5B:E2
            X509v3 Authority Key Identifier:
                keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:95:4e:db:89:91:b8:8e:5c:8f:35:25:00:ee:d3:ab:86:ad:
         26:47:fd:d3:cd:02:53:4e:1e:21:4e:12:33:28:be:75:04:75:
         0f:4b:40:15:51:8a:9b:dd:a6:53:d0:f3:55:33:4f:c9:69:2f:
         b3:c8:87:eb:4f:84:6a:66:80:8c:82:3b:1a:af:36:4b:61:45:
         d0:45:d6:6d:bd:cf:7b:8e:74:77:92:fe:d8:9a:8f:17:61:73:
         42:ea:2f:90:f6:90:df:74:ae:3d:bf:f0:9a:a1:cb:bc:3f:83:
         b3:28:86:2e:40:7e:77:94:be:ad:e1:71:4c:74:6e:dd:27:66:
         8c:ac:a6:fa:a6:a1:f5:22:ce:65:9b:4e:ad:93:fa:ce:be:21:
         a0:95:54:7a:ec:2a:01:db:9a:2b:e6:3c:74:01:bc:ec:20:c9:
         21:f3:d1:d4:83:a6:8e:dc:7a:92:b1:9d:df:6c:21:d4:52:eb:
         a0:bf:31:13:90:01:60:75:29:6c:fd:40:4a:73:13:9c:c5:52:
         12:c5:e7:4e:c2:5b:de:90:12:f2:77:74:a8:9d:a7:9e:24:e6:
         b1:88:46:79:ad:21:45:0f:be:6f:48:8f:bd:62:de:47:80:cf:
         4d:b2:fa:80:36:9b:34:57:b1:51:ce:b0:1b:4b:09:cf:68:7b:
         41:b0:c5:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkknJfzeqXg4R/9m8DZBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjQwNTE3MjIwMDM5WhcNMjQwNTE4MjIwMDM5WjAzMTEwLwYDVQQD
Eyg1YWQxMTdmYTY3MjZkZDQ5MTNkNTAwZWVlOGU1OWU3NDIzODI1YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/IXfkmmbsIPQOx4oN4IjnrwjVBT
Mh2aMB31WZfHOxEhn9NPkzJ7wDuVQEBGGIvvWOHbMe5t7btesgHlofT0GyrrK4hj
dNS66MunUuPO1O62EWYU6G5BpbJIsukaM1pi9Nv/BR+Px7vgC/5kja/9E9w6tkt0
6cc7GV5tw8ulif1hhYzyhGvAEW5UoR/uBI9YctXsDKfgn+IKyVnUk9a7J6vh40Cm
ABdm9FUPM3POaU2GFP3SAd8SRbCeqFunbjFxdcUskDksgj8FdL0KqtQLgZ/JU/5K
oMvq3H2b3H5XB+CTyLJwi2ZYDxbZM6az4VW7zi7sQJvnMX8B5jtRQtiz8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrRF/pnJt1JE9UA7ujlnnQjglviMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5VO24mR
uI5cjzUlAO7Tq4atJkf9080CU04eIU4SMyi+dQR1D0tAFVGKm92mU9DzVTNPyWkv
s8iH60+EamaAjII7Gq82S2FF0EXWbb3Pe450d5L+2JqPF2FzQuovkPaQ33SuPb/w
mqHLvD+DsyiGLkB+d5S+reFxTHRu3SdmjKym+qah9SLOZZtOrZP6zr4hoJVUeuwq
AduaK+Y8dAG87CDJIfPR1IOmjtx6krGd32wh1FLroL8xE5ABYHUpbP1ASnMTnMVS
EsXnTsJb3pAS8nd0qJ2nniTmsYhGea0hRQ++b0iPvWLeR4DPTbL6gDabNFexUc6w
G0sJz2h7QbDF3g==
-----END CERTIFICATE-----
Generated at Fri May 17 23:46:51 2024 by rpki-client on console-fra.rpki-client.org