Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File:                     MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier:          jdIihFOug0EoOv8mtxexBeSJbrEiRXwL1+l/qynkrtU=
Subject key identifier:   77:7E:50:9E:4F:53:60:D3:07:B7:F9:61:A6:C0:BF:15:C6:8E:AF:8D
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       018F874ADC4941E2E14F830CC5483914C0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number:          01F3
Signing time:             Fri 17 May 2024 16:03:01 +0000
Manifest this update:     Fri 17 May 2024 16:03:01 +0000
Manifest next update:     Sat 18 May 2024 16:03:01 +0000
Files and hashes:         1: 3d6rmL0uXgX_zfTOKnp1wQ_be4E.roa (hash: RL6M05yZ8SWV5Q6/DqEliE8OXZ/ya4LO48aWAA6fgtQ=)
                          2: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: eLsXVu3Q+0bZn5qU5IxACWne0F1mUnF8o/gCWIqdnYA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:dc:49:41:e2:e1:4f:83:0c:c5:48:39:14:c0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: May 17 16:03:01 2024 GMT
            Not After : May 18 16:03:01 2024 GMT
        Subject: CN=777e509e4f5360d307b7f961a6c0bf15c68eaf8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:76:d0:b1:ec:cb:3c:7d:66:f9:3a:6f:d2:
                    35:3b:08:d3:a6:6a:a0:cd:35:8e:83:b2:34:68:ba:
                    da:2c:38:93:d7:47:51:41:71:b2:68:c1:40:cb:34:
                    82:68:f1:0a:49:08:a7:5a:17:cf:44:4d:f6:31:1d:
                    7c:46:81:53:fa:c1:41:a6:fd:60:bf:0c:25:da:e3:
                    2c:07:d5:9d:a4:08:2c:ae:30:9c:8d:c8:8f:73:d7:
                    0a:b4:43:6c:e7:ea:33:60:13:aa:77:d3:0d:bf:8f:
                    b3:4c:21:55:61:62:f2:c5:6c:24:12:01:c4:e1:62:
                    60:69:9f:b5:65:99:9d:d7:13:86:63:ef:6d:94:99:
                    33:0b:d3:40:b3:a4:70:ec:b0:78:8d:bc:24:7a:04:
                    aa:f3:e4:29:34:f3:6a:bc:25:ca:c3:6b:f9:40:15:
                    a1:f9:94:bd:d6:c7:4d:49:7f:b9:99:4c:b0:56:e7:
                    01:b6:6e:8f:90:a3:12:66:85:80:13:ed:fc:a7:29:
                    7f:cb:84:75:b9:9c:3c:03:26:9b:d0:c0:c2:da:61:
                    1b:8d:56:24:6f:d2:1a:70:85:37:10:0b:9f:25:23:
                    ad:6f:91:bc:cd:9f:93:73:68:fa:f4:94:8a:1d:63:
                    db:c4:66:59:07:13:2e:cc:33:43:67:71:77:40:06:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7E:50:9E:4F:53:60:D3:07:B7:F9:61:A6:C0:BF:15:C6:8E:AF:8D
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:0b:55:7c:6d:db:d5:83:a3:17:56:c6:a5:31:6a:ce:92:
         72:25:53:83:9b:23:9a:ad:ca:6b:7a:e1:e5:42:ca:21:29:e6:
         7c:6d:3a:6b:b2:f3:e4:73:88:15:aa:38:3e:0c:ad:20:c4:9b:
         0b:03:1f:f0:52:eb:b2:6b:32:83:1c:b4:12:ff:c7:18:e5:68:
         91:84:d2:aa:a0:89:e3:24:1c:ac:70:d9:20:03:1f:c4:e4:76:
         49:97:f6:6f:04:f0:89:94:ca:05:b5:44:d7:2e:26:c4:f8:19:
         bb:0f:be:e4:5f:a4:d5:3f:a3:6e:51:aa:b2:87:c3:fa:b7:9b:
         0a:ff:b3:c2:c3:e8:b6:42:77:c4:fa:5d:9c:cc:8a:d8:a7:f8:
         9c:d3:9e:a9:ab:4c:41:6d:52:df:ee:ca:6a:e4:87:66:55:a3:
         f7:81:5f:c5:4c:6c:2b:a0:d9:27:90:6a:cf:6e:33:a4:02:3d:
         5b:22:20:f1:09:09:fe:4f:79:90:d5:be:f6:75:75:6a:2f:0c:
         a9:29:63:6a:fd:d7:18:fa:5f:ca:6a:46:60:8d:20:43:53:77:
         59:ba:1e:76:52:cd:c7:3a:5a:e5:93:41:0d:e0:81:49:9a:ca:
         e0:17:d7:32:ec:3d:fe:93:85:f3:6d:aa:74:2a:cf:4b:4a:64:
         29:39:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:07:21 2024 by rpki-client on console-ams.rpki-client.org