Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File:                     wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier:          aw4j2bhR07/JAtXcB5Qcvv1iXmj/NcL24oMZiEatlZg=
Subject key identifier:   9B:8F:DA:69:9D:C1:1F:03:7F:10:61:B5:8A:81:B2:50:BC:E4:5E:AA
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer:       /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial:       018F874A5D5CB96B721E78AA047253CFA92A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number:          039E
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: 4MZUNj1gLvesyFZQS8vpyOHBTNc.roa (hash: +2De/oANzCEXzgS2t+59fXzlL7cCNq+3DavhBj/RN38=)
                          2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: af9Dj/F46Iz3r/0UnaqP5MaLiMWGDAKyOvM2Paa6TNA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5d:5c:b9:6b:72:1e:78:aa:04:72:53:cf:a9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=9b8fda699dc11f037f1061b58a81b250bce45eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:3d:fa:98:1a:c2:2a:f9:f0:8a:31:a6:55:
                    a7:c8:74:7a:58:32:1a:5b:58:8c:6e:44:16:33:82:
                    43:ca:fa:56:52:21:e8:f9:e7:16:eb:fa:7c:8e:b9:
                    a4:81:1e:3b:79:28:0e:b9:b6:f2:65:e8:f2:bb:30:
                    12:6c:a5:b3:68:3b:36:3c:83:b0:9e:6e:9a:89:99:
                    55:ae:24:43:19:93:bb:49:f6:c3:2b:c3:0a:ea:b6:
                    74:1c:a9:d8:1c:9e:4b:84:86:d0:23:e9:6d:d4:4f:
                    1a:00:30:c6:4e:14:2c:f8:f5:f5:f7:9b:c2:d0:27:
                    c9:89:0b:c7:1a:6f:56:55:c9:78:1c:b7:f5:94:69:
                    b5:80:40:fc:64:89:67:69:22:82:9a:a2:92:3d:58:
                    fe:a6:41:d0:69:bf:e8:5e:a6:ae:05:9e:a6:b8:22:
                    29:34:6e:0b:6e:8b:60:d8:fd:e6:05:49:b7:ba:8d:
                    56:47:1b:33:b8:3a:a1:58:6b:95:f8:6d:34:13:c1:
                    5b:e7:a1:a2:28:f8:5e:63:5d:63:e7:26:c2:b3:0e:
                    4e:bb:e5:84:ba:31:db:28:8f:b4:0e:b9:03:06:d0:
                    f4:37:1c:fc:df:5d:84:5b:c4:c8:9c:20:34:76:8d:
                    68:22:14:fb:ef:42:09:3d:01:fb:4d:9b:39:3e:d1:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:DA:69:9D:C1:1F:03:7F:10:61:B5:8A:81:B2:50:BC:E4:5E:AA
            X509v3 Authority Key Identifier:
                keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:4e:35:c0:74:26:28:32:03:9a:1e:6b:af:4c:03:98:d4:
         58:1d:54:50:d4:4c:f7:0d:a1:3d:3d:05:be:59:3a:7a:b1:72:
         3a:d8:74:9a:9f:ca:f2:dc:44:e5:41:ce:17:6a:8d:71:df:05:
         8b:d4:bb:5c:82:22:df:a5:29:ff:3e:c3:da:7a:af:53:92:03:
         32:6d:86:fa:c4:5f:26:64:8d:30:75:60:b2:ec:cf:12:fc:54:
         75:78:4c:c9:8a:ba:76:1a:a8:9d:ef:27:b0:24:1d:9f:f8:e6:
         50:f8:c0:bb:95:0c:27:12:04:d9:a1:e2:39:64:9f:e6:31:c3:
         02:6f:e4:b2:72:ff:4a:c8:03:52:96:0e:55:fa:e1:a9:86:74:
         61:ea:5d:00:87:04:e3:64:d9:f0:24:bb:b5:f9:81:1f:00:bf:
         be:88:5f:3e:dc:01:62:5b:f7:5b:b1:ad:ee:af:b8:74:a9:fa:
         9d:cb:25:8d:c5:ea:82:5b:6e:3e:0c:fb:bf:c9:9a:ec:1b:33:
         5a:96:88:f0:5b:19:89:83:35:41:98:e2:9e:57:ed:fb:04:7d:
         6a:ad:12:79:e3:75:95:11:df:3b:42:23:45:65:89:b0:9d:0f:
         51:1e:21:fe:22:ce:db:83:bd:c0:ca:5a:52:b8:63:36:f2:b8:
         2d:65:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:30:25 2024 by rpki-client on console-fra.rpki-client.org