Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File:                     ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier:          jdJh3Wfm231+WyeeGRWEmdsvk9o+/xnNJfaR7B9dBcY=
Subject key identifier:   04:F8:A4:A2:A7:A8:FC:14:32:8A:02:AC:C4:9E:06:9B:44:06:DE:D5
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer:       /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial:       018F84476E0E0D3CA8479F353E8FA4FC7D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 02:00:24 +0000
Manifest this update:     Fri 17 May 2024 02:00:24 +0000
Manifest next update:     Sat 18 May 2024 02:00:24 +0000
Files and hashes:         1: 0gCjs_Pvk4VtJ5eWbeV_D42eDVU.roa (hash: pGzoSHjaMvBo1KQF1aQPdEWBuRTgnfTWamgG23W6RGk=)
                          2: XvYHGxG2tuJ_snAqHlHxHulXhz4.roa (hash: 5EBS6qIbX/u+oHBX/xQVx7M/mmII/D0dkHese5Uoptk=)
                          3: kOpMS4p2YRY6nqSMGBD4_srJCcM.roa (hash: mkWeTBYfPU+NvBt3l9bVl2ID5nJILE4U9tOyr6Vl+3s=)
                          4: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: MkKt+ceo48nQz8UxpUtbbwTz+pfGSz1vOPsNMNgjtak=)
                          5: y53LCrbgOMChJ36WqlbjNE7PFdA.roa (hash: rsLPYmR6sei3gVPRHl3c66WhsGjFMylBen1pqjLSk1s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:47:6e:0e:0d:3c:a8:47:9f:35:3e:8f:a4:fc:7d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
        Validity
            Not Before: May 17 02:00:24 2024 GMT
            Not After : May 18 02:00:24 2024 GMT
        Subject: CN=04f8a4a2a7a8fc14328a02acc49e069b4406ded5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:ad:7a:ef:d5:ce:ac:18:80:2b:31:6b:c2:
                    f7:c7:ff:3f:d2:8b:ee:3d:75:3a:25:d5:82:a7:3e:
                    87:2f:37:4c:d8:50:b0:1b:5b:3d:a5:02:44:87:8d:
                    ec:93:4f:54:69:34:14:26:72:4b:f0:93:b6:fd:c0:
                    e0:f2:ae:9e:9a:6a:80:ab:fd:a9:da:de:be:a0:59:
                    8d:02:c6:f9:d9:c8:c2:4b:f7:f8:29:d4:8b:6c:13:
                    6f:4a:8a:38:b7:56:54:8a:71:f0:37:18:c0:10:d6:
                    19:41:3f:9a:06:1e:ff:2a:97:51:fd:0c:09:c7:84:
                    c4:ff:fb:40:d3:92:6a:d6:d7:a8:67:50:c6:41:a2:
                    72:92:2e:90:7f:1b:4e:8f:05:a5:44:4c:7d:62:95:
                    6b:2d:89:eb:89:b8:ba:33:52:c1:71:8f:e1:0b:d1:
                    a9:ab:7f:89:72:4e:1c:0f:3c:8c:64:71:ca:73:40:
                    cd:64:4c:65:e4:43:49:95:0c:1e:4a:ce:32:f0:ad:
                    de:12:e9:49:c2:0a:56:9b:ac:0d:2a:42:0b:a0:97:
                    c2:03:f8:ba:b9:f0:01:6a:0d:57:00:f9:da:47:57:
                    12:13:ab:4f:07:87:15:86:4d:f5:09:11:0d:ae:5b:
                    a2:61:c5:be:e6:14:e4:a6:5e:29:8b:37:98:2c:61:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:A4:A2:A7:A8:FC:14:32:8A:02:AC:C4:9E:06:9B:44:06:DE:D5
            X509v3 Authority Key Identifier:
                keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:dd:df:3f:62:f6:78:fc:f1:c5:f7:b2:d9:64:91:a1:70:
         67:80:9e:df:fa:54:69:85:8e:85:4c:e8:ba:00:9c:3b:e4:dd:
         6e:2f:31:2c:b3:8a:e6:22:ab:2d:35:33:f0:06:c2:4f:f8:e3:
         7a:2c:2c:0c:33:2c:28:06:d6:a0:48:2c:70:43:db:c1:a4:95:
         b5:71:4c:2e:c3:2f:9b:4a:c3:2e:cb:f2:8c:9a:e4:4e:e4:41:
         0f:79:77:90:59:4d:e1:26:fc:99:88:64:dd:f0:3b:0e:be:f0:
         7c:cf:73:b5:fb:dd:ea:5f:7f:0f:7b:c9:34:cb:df:c7:a8:0e:
         d3:5a:c2:b0:82:44:2f:78:77:55:3e:be:54:95:6c:14:68:6e:
         8a:4a:93:19:ad:a2:13:99:fc:1e:36:39:42:2d:61:70:8c:23:
         88:5e:2d:29:46:80:76:e1:a4:6c:fd:54:35:e9:92:bc:28:20:
         51:15:82:9d:2d:1d:c9:94:83:98:08:d7:ca:b7:a9:76:04:a3:
         a5:bf:74:b0:a0:ca:ca:44:49:8d:b2:6a:a8:71:70:be:bc:14:
         52:58:f1:bf:9b:c0:8a:b2:66:2e:6f:95:78:6d:5c:4d:e0:ed:
         2d:f6:1a:75:2e:c7:42:e6:bb:26:79:f6:5d:ca:25:c6:74:4a:
         3b:68:43:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ER24ODTyoR581Po+k/H0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDM3NGQ3MWJjNTdkYjk2ZGMzOTNlOTFmZWJiOWU5ZDU5
ZmVmOWEwHhcNMjQwNTE3MDIwMDI0WhcNMjQwNTE4MDIwMDI0WjAzMTEwLwYDVQQD
EygwNGY4YTRhMmE3YThmYzE0MzI4YTAyYWNjNDllMDY5YjQ0MDZkZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Kteu/VzqwYgCsxa8L3x/8/0ovu
PXU6JdWCpz6HLzdM2FCwG1s9pQJEh43sk09UaTQUJnJL8JO2/cDg8q6emmqAq/2p
2t6+oFmNAsb52cjCS/f4KdSLbBNvSoo4t1ZUinHwNxjAENYZQT+aBh7/KpdR/QwJ
x4TE//tA05Jq1teoZ1DGQaJyki6QfxtOjwWlREx9YpVrLYnribi6M1LBcY/hC9Gp
q3+Jck4cDzyMZHHKc0DNZExl5ENJlQweSs4y8K3eEulJwgpWm6wNKkILoJfCA/i6
ufABag1XAPnaR1cSE6tPB4cVhk31CRENrluiYcW+5hTkpl4pizeYLGEa4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT4pKKnqPwUMooCrMSeBptEBt7VMB8GA1UdIwQY
MBaAFJ4DdNcbxX25bcOT6R/ruenVn++aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2Et
ODE3ZDg0ZTUzZDUzLzEvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2EtODE3ZDg0ZTUzZDUz
LzEvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhHd3z9i
9nj88cX3stlkkaFwZ4Ce3/pUaYWOhUzougCcO+Tdbi8xLLOK5iKrLTUz8AbCT/jj
eiwsDDMsKAbWoEgscEPbwaSVtXFMLsMvm0rDLsvyjJrkTuRBD3l3kFlN4Sb8mYhk
3fA7Dr7wfM9ztfvd6l9/D3vJNMvfx6gO01rCsIJEL3h3VT6+VJVsFGhuikqTGa2i
E5n8HjY5Qi1hcIwjiF4tKUaAduGkbP1UNemSvCggURWCnS0dyZSDmAjXyrepdgSj
pb90sKDKykRJjbJqqHFwvrwUUljxv5vAirJmLm+VeG1cTeDtLfYadS7HQua7Jnn2
XcolxnRKO2hDRQ==
-----END CERTIFICATE-----
Generated at Fri May 17 04:41:56 2024 by rpki-client on console-fra.rpki-client.org