Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File:                     QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier:          NnQyfRjm7bMDPzVKQO7lVg5s4PKkYnvOA7lAm++4Mdg=
Subject key identifier:   BA:B1:E3:18:9A:C1:96:57:87:67:41:41:7C:20:18:A8:31:C5:F2:7A
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer:       /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial:       018F874A306709D1AFAC6EC1596138562F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:17 +0000
Manifest this update:     Fri 17 May 2024 16:02:17 +0000
Manifest next update:     Sat 18 May 2024 16:02:17 +0000
Files and hashes:         1: A3Nzh5IMPdBrw6ZYMVUEQ_N86Hc.roa (hash: 5MaNpHmKeTyn/fJ+VjcwU8k7PJOljEqeXXhAN9QgS5w=)
                          2: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: 2Wd0pRccwUvoIYlhogv+ADmaT+pyRygT/1eKPdN9itY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:30:67:09:d1:af:ac:6e:c1:59:61:38:56:2f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
        Validity
            Not Before: May 17 16:02:17 2024 GMT
            Not After : May 18 16:02:17 2024 GMT
        Subject: CN=bab1e3189ac19657876741417c2018a831c5f27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:f5:ef:0d:9d:31:3c:5c:bc:99:ed:7b:88:
                    46:f3:8a:4f:80:bb:3f:0e:21:e5:de:0e:3a:69:0e:
                    33:ef:86:00:86:9e:1a:6a:0e:2d:81:d4:c9:f4:a8:
                    de:ba:ad:34:5a:68:b1:51:9d:d6:df:35:cf:67:fe:
                    97:aa:ff:f5:f8:af:58:f3:f0:b0:f4:a4:ac:c7:f0:
                    f3:33:14:84:27:74:30:3e:7e:7d:b0:c8:b8:ce:2e:
                    d8:36:76:f5:ab:84:79:37:68:04:9a:d1:83:c5:25:
                    12:9c:26:6f:08:82:4d:a4:6e:f8:35:c0:b2:2f:63:
                    c8:fe:36:f2:63:12:18:0d:85:36:4e:a4:bc:07:3c:
                    6b:0f:c9:30:36:7c:cb:c5:cd:b9:cd:a7:6c:c0:98:
                    5e:49:8d:78:3b:b0:24:db:07:48:03:c8:c6:ad:a0:
                    4f:f2:66:93:a1:13:fc:d3:a0:e9:19:72:94:14:42:
                    30:6c:a4:bb:bc:12:29:e4:4b:1e:90:ed:ce:d3:cf:
                    97:5f:e4:e3:1a:35:cd:eb:b7:16:7f:81:4d:c0:e8:
                    4e:e1:57:31:f9:1f:d3:67:2f:1e:90:4d:93:89:c5:
                    a8:d5:16:84:51:1d:6b:88:93:78:0f:b3:43:c2:7a:
                    1f:53:d2:c8:06:ec:8d:c2:5c:bf:1f:97:77:17:dc:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B1:E3:18:9A:C1:96:57:87:67:41:41:7C:20:18:A8:31:C5:F2:7A
            X509v3 Authority Key Identifier:
                keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:ae:3c:db:e8:fe:cf:a7:dc:0e:8b:1f:f9:4e:44:8f:79:
         37:48:a4:3a:78:27:e3:2f:b0:b4:97:e2:8c:fb:d8:70:18:a4:
         22:8f:48:59:71:6a:3d:93:0b:dd:0f:27:97:33:ef:1b:19:e3:
         42:21:dc:14:bd:b9:b2:35:54:0d:66:25:8c:b4:6b:69:7d:c3:
         e6:5b:40:da:4e:70:bb:b4:c4:0e:20:53:79:0a:9f:d0:e6:8e:
         bb:26:8c:75:84:04:c7:54:a2:62:f6:b1:9a:cd:3e:d7:ed:8a:
         b1:c9:0d:a2:f3:be:24:c6:c1:ca:3d:50:3b:9b:df:c9:11:cb:
         f1:39:04:dd:71:23:da:3c:e7:03:43:42:85:f8:94:49:4d:0a:
         89:30:5d:e8:96:33:3b:68:93:39:28:14:07:b5:e0:dd:ec:45:
         54:15:f1:98:b9:23:a7:dc:3b:8c:1c:35:76:70:dc:70:4d:f0:
         2c:8c:43:7b:51:fa:9d:a9:ff:63:41:54:93:78:5a:29:69:7a:
         7e:41:b5:41:8e:94:c3:90:d8:68:42:11:5b:e1:02:b1:a4:4f:
         5a:e2:26:c9:e8:45:87:94:e0:d3:d8:33:e3:1f:72:87:c4:f5:
         4a:6c:82:2a:fe:a8:af:f5:70:d7:d9:bd:28:81:bb:d6:26:93:
         8b:4b:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:49 2024 by rpki-client on console-fra.rpki-client.org