Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File:                     NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier:          bpMizP+p6Ol9OqdP7r1kXtB0iJch2UBU9E1y9kKu0po=
Subject key identifier:   91:93:F3:76:C7:91:1B:36:2E:15:EF:27:4D:E5:96:44:8C:7E:B7:DD
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer:       /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial:       019075AE0770B6D519C1A56B63FB014F7F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number:          0D9F
Signing time:             Tue 02 Jul 2024 23:00:57 +0000
Manifest this update:     Tue 02 Jul 2024 23:00:57 +0000
Manifest next update:     Wed 03 Jul 2024 23:00:57 +0000
Files and hashes:         1: N2KrmzfcCB_BrdYQ3YUQFlAO758.roa (hash: coJa60IGrn7svlSdRBnKD3l3TvU4KVbD88GohBNR5QM=)
                          2: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: 7qGlzfrlPNRsGxO1W7pFOjMygMKHzYNdV1q14Vj5xVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 20:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:75:ae:07:70:b6:d5:19:c1:a5:6b:63:fb:01:4f:7f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
        Validity
            Not Before: Jul  2 23:00:57 2024 GMT
            Not After : Jul  3 23:00:57 2024 GMT
        Subject: CN=9193f376c7911b362e15ef274de596448c7eb7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:ea:41:76:21:64:84:5f:7e:cb:cc:d1:87:
                    57:78:88:e8:49:16:fa:fe:b3:36:41:43:9c:11:c1:
                    13:c2:90:02:dc:17:9a:51:9c:46:d5:d4:f3:b5:8c:
                    9a:f3:43:8e:7b:0f:1b:b2:38:88:85:9f:38:21:ea:
                    12:80:45:1a:0c:0f:ac:b7:b5:20:e6:58:39:f7:69:
                    87:54:27:44:8d:ce:53:86:68:99:d9:84:d5:82:bd:
                    94:b4:92:b1:b1:90:5b:33:85:df:36:2b:b6:08:1b:
                    11:90:61:1e:91:8a:b2:9e:25:5d:26:f6:19:64:db:
                    a2:6c:71:c7:2f:9f:1d:8b:61:80:22:17:5e:cd:4f:
                    72:ff:56:f1:34:a4:45:d4:dd:94:34:93:63:a7:8d:
                    a4:a6:ee:29:c3:19:9b:d2:68:1e:73:98:8c:00:01:
                    6b:9e:46:18:a5:d5:cc:13:9f:aa:38:52:98:15:e8:
                    e4:b0:8f:57:66:ab:45:db:b9:cf:db:f4:2e:a4:31:
                    fd:a1:02:80:a1:d9:aa:e8:5c:9c:5f:ed:75:40:27:
                    6e:21:98:23:3c:67:04:71:77:b0:54:7a:24:a3:1d:
                    9e:45:13:2f:a6:65:a5:49:86:6a:8f:58:da:8b:08:
                    e5:66:da:29:15:e4:29:9e:20:8d:db:e0:fd:47:ad:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:F3:76:C7:91:1B:36:2E:15:EF:27:4D:E5:96:44:8C:7E:B7:DD
            X509v3 Authority Key Identifier:
                keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:f7:bc:c4:52:9c:3f:ec:16:41:31:b3:f6:72:ad:b9:52:
         11:cf:42:f4:70:24:3d:4f:4a:b2:bc:68:99:7d:53:2b:a8:9a:
         af:17:b7:8f:f0:28:de:63:d2:8e:ed:2b:e4:3c:5b:82:04:a7:
         e1:07:91:08:62:fb:b7:70:f6:5c:42:71:1a:e5:53:19:17:fc:
         47:a4:d5:6b:e4:c7:f5:01:f2:8a:ca:ca:03:6c:f6:ae:e9:d6:
         14:2f:2b:97:ba:d4:a0:65:e1:75:42:3a:4a:48:68:a9:d8:65:
         3a:11:72:58:e0:ba:8d:87:58:1a:fd:ec:8c:c4:52:3b:3b:26:
         5f:6f:ea:40:49:0a:eb:00:b3:7d:11:3a:09:5e:41:34:5f:df:
         dc:60:d9:47:a9:9e:4e:8c:e6:64:3b:99:cc:61:9d:8c:20:05:
         58:ea:69:8d:8c:36:96:50:8f:81:e7:4b:de:64:99:7b:7f:e6:
         da:ad:61:68:25:3c:2a:f8:7b:e2:03:78:1a:cd:3d:4b:7b:f6:
         94:d8:f1:28:ed:ca:d6:ba:2a:4d:37:91:b9:cf:ca:01:58:0a:
         a2:57:94:af:bd:3d:77:ea:b5:5f:69:07:d8:3e:27:10:20:9d:
         88:15:ee:3f:84:ac:00:97:e2:3f:ab:b3:2d:2c:58:9b:99:dc:
         9b:d7:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:13:49 2024 by rpki-client on console-fra.rpki-client.org