Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File:                     xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier:          3FGgWqHVwETGC9UI9uvLtGJC/w0GjF114uhy55AWlOA=
Subject key identifier:   BE:12:0E:A8:86:CC:15:0E:36:3C:E5:94:40:10:19:64:5B:D0:9D:FB
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer:       /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial:       01906DBD88F3604252DEDB040A9169DC1B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number:          0126
Signing time:             Mon 01 Jul 2024 10:00:56 +0000
Manifest this update:     Mon 01 Jul 2024 10:00:56 +0000
Manifest next update:     Tue 02 Jul 2024 10:00:56 +0000
Files and hashes:         1: 0c5UM22NrPug-PHarETLG-UCccg.roa (hash: XLBscBgSKAn4G0BeDwUgfwpl7vCzp2VbaXlIgzu9HUQ=)
                          2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: gKj3QvcZihBZ/eq9y/oSt6hjUZemCsnc/lA2BuwxirI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:bd:88:f3:60:42:52:de:db:04:0a:91:69:dc:1b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
        Validity
            Not Before: Jul  1 10:00:56 2024 GMT
            Not After : Jul  2 10:00:56 2024 GMT
        Subject: CN=be120ea886cc150e363ce594401019645bd09dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:ff:df:a1:70:83:4d:c7:5b:a0:cb:22:ad:
                    d8:2e:0e:8a:27:4b:65:69:2b:e9:0b:26:c2:96:10:
                    75:19:ac:a2:da:84:ed:9e:68:66:20:fc:0a:7d:66:
                    1a:b5:6a:62:ed:16:83:8d:d4:18:3f:3c:8d:5f:8e:
                    57:09:f8:4d:ee:cd:a1:b8:94:bb:8e:9a:8d:b7:22:
                    98:a9:b3:e2:89:b8:ba:9c:07:df:bc:60:44:5e:70:
                    3c:04:b1:74:aa:45:1b:9f:74:aa:82:65:ba:e9:1c:
                    a4:41:cd:cb:fe:1a:a8:0a:e8:76:62:92:d2:47:a0:
                    bb:5c:14:39:c4:af:59:09:63:8a:f6:ed:f5:b7:5b:
                    3a:17:e4:a2:26:48:ca:b0:93:ab:fb:f1:dd:57:d3:
                    f3:3e:62:33:3a:d6:ac:82:8f:0d:c6:e1:2d:74:70:
                    d1:54:97:96:80:b3:e0:16:fb:89:0b:80:9d:e3:a8:
                    63:71:f6:45:c6:97:db:1e:e0:0e:ca:f9:94:ec:22:
                    63:da:7c:71:08:8c:bd:25:5d:4e:c4:41:e6:74:4f:
                    73:83:95:bf:4b:1f:58:9a:08:49:e7:82:87:32:7f:
                    40:30:ac:a1:ec:4b:d7:ea:03:63:25:8e:c3:28:ce:
                    a3:b6:de:bd:58:72:30:6d:be:7d:ce:f6:ae:70:61:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:12:0E:A8:86:CC:15:0E:36:3C:E5:94:40:10:19:64:5B:D0:9D:FB
            X509v3 Authority Key Identifier:
                keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:74:9f:06:11:ee:38:df:b3:75:60:6e:bc:d1:f6:a0:31:cf:
         1d:17:fb:00:f7:d6:93:5f:d8:f3:b1:89:fd:41:bc:82:68:bf:
         99:4d:6b:db:06:19:8a:0c:54:3e:8e:77:a9:24:57:45:7d:1c:
         84:01:c8:f2:fc:7f:3b:e0:31:bf:ba:1e:76:bc:d2:08:35:4b:
         9d:fa:cd:86:ca:8c:98:7b:5f:1a:fc:1d:ba:ea:26:6b:8e:f5:
         c1:58:61:7a:51:b0:ae:15:42:b5:9d:ac:2f:57:8f:1b:a5:7b:
         a3:18:a7:f9:4e:dc:1f:ca:7b:91:9b:19:78:59:80:b5:d4:71:
         28:d8:d2:50:e4:bd:4e:9e:55:3c:2d:5f:82:f5:78:6f:c7:8a:
         69:2f:16:3c:d9:72:d2:6b:fb:d7:f8:ad:90:52:42:12:ac:98:
         de:4f:50:a5:56:02:f1:a5:2b:9a:d1:63:0b:14:32:3d:a7:54:
         fa:9d:a6:1b:54:d0:5e:6c:2c:30:bb:1c:f2:7e:5c:e0:9a:3e:
         e0:cc:1d:0b:8f:86:59:ec:ae:49:29:bf:64:58:ad:08:c4:3d:
         59:4d:2a:2b:c7:90:97:ac:0c:9e:22:3c:55:5d:5d:64:19:2f:
         d4:eb:76:08:45:6c:68:21:18:9d:8b:28:8b:3c:60:38:04:5d:
         fd:89:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:52:20 2024 by rpki-client on console-fra.rpki-client.org