Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File:                     b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier:          uc0ADhbaxjetfjBuOiQoo/gh28h0cK67h5tiPWvA3HA=
Subject key identifier:   6A:1A:51:A5:14:3A:2A:DA:A0:40:FE:D8:54:4D:BA:8B:3A:4C:B4:73
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer:       /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial:       01923994A665D19B036D67862B1AF062868B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number:          05BE
Signing time:             Sat 28 Sep 2024 17:01:36 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:36 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:36 +0000
Files and hashes:         1: BqQDmLMO21ujShKNZy01nacVt1o.roa (hash: Qx44DOA+6pIbGJ9KFbNp+B8RA02Kvdw1qBH9XaIA74k=)
                          2: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: YULmhQz5zHRpcx5/g35GSOhW0NOiBJCZTZhvl0AArx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:a6:65:d1:9b:03:6d:67:86:2b:1a:f0:62:86:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
        Validity
            Not Before: Sep 28 17:01:36 2024 GMT
            Not After : Sep 29 17:01:36 2024 GMT
        Subject: CN=6a1a51a5143a2adaa040fed8544dba8b3a4cb473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:5c:b3:10:0a:55:18:31:f9:56:8a:e2:83:
                    43:7d:93:49:c0:67:5a:60:37:b8:65:b6:09:f4:f1:
                    35:09:d3:e1:8b:02:04:63:41:49:d3:ae:5f:dd:d7:
                    06:30:55:6f:9f:ca:30:33:51:5d:eb:64:27:6a:74:
                    04:28:2f:b2:29:d9:f0:82:8f:9f:26:a7:84:14:d3:
                    81:61:e2:00:69:fc:39:37:ec:a1:a2:2d:65:9b:1c:
                    f0:91:61:2f:30:9b:28:4a:0b:86:e7:e2:72:e1:a3:
                    28:07:10:ea:e4:c6:8b:fb:a9:66:28:4d:9b:d3:9c:
                    b3:90:14:fa:0d:c8:88:59:ae:e0:0b:a7:d6:66:a6:
                    fb:54:0d:8b:b5:83:aa:a8:84:f1:55:64:13:ac:be:
                    a0:18:9e:8b:34:20:12:ff:28:e5:1a:39:d4:11:cd:
                    83:bd:70:90:2b:3b:07:9f:1e:f3:fc:a8:7d:3c:28:
                    8b:8d:b9:ee:8e:ab:99:ca:97:4b:67:b3:67:2e:99:
                    15:15:50:f3:0e:3f:e7:98:c1:fe:23:14:95:14:63:
                    9d:44:27:10:a5:11:e9:7d:89:69:9a:48:9e:9b:3a:
                    2a:80:ca:ef:31:f6:89:7f:d4:13:fe:fb:07:8c:b6:
                    ff:91:1a:97:73:31:ee:90:b1:dd:5a:c0:09:3a:f0:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1A:51:A5:14:3A:2A:DA:A0:40:FE:D8:54:4D:BA:8B:3A:4C:B4:73
            X509v3 Authority Key Identifier:
                keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:60:b6:9d:47:00:44:47:da:97:d0:15:8e:bc:bd:01:be:3c:
         1b:4c:65:18:d6:31:32:70:8c:0e:23:c1:04:8b:71:b7:4a:a7:
         af:44:47:f1:80:95:11:fb:30:a2:f9:15:0f:ab:4b:8f:df:8d:
         3c:76:e7:d4:be:8a:58:7e:2f:28:81:7d:40:40:85:64:ab:48:
         24:4a:ab:5c:1c:27:8d:6b:42:5d:8c:01:12:36:e6:92:e8:3a:
         f8:be:d5:d8:34:49:c6:65:1c:4a:c9:20:1c:5a:e0:54:27:dd:
         1f:1a:38:b2:8d:f1:11:6d:ee:ab:05:c4:9c:44:15:d5:7d:39:
         02:74:58:19:c0:8d:e4:24:90:b3:37:0a:ca:ec:2c:43:b6:9e:
         5c:ce:2e:32:d8:1a:5a:42:60:1b:d1:e7:b2:43:6c:5d:cd:ac:
         87:e6:4e:15:17:09:4d:d3:51:40:d0:07:75:95:fd:b3:2d:ab:
         ef:2f:30:b0:bd:b5:41:77:4f:02:e1:4f:36:d4:8b:e0:78:f7:
         1b:ca:6c:34:46:4d:43:57:47:f0:0b:e4:a7:d5:b4:cf:2e:36:
         47:b5:0a:a5:67:b4:70:2f:f5:d5:25:80:c3:f4:67:57:c5:d5:
         73:83:96:a9:d6:ba:0b:9a:e9:ec:42:ea:3a:ca:f9:53:10:c0:
         34:a8:9e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5lKZl0ZsDbWeGKxrwYoaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz
YTVhNzcwHhcNMjQwOTI4MTcwMTM2WhcNMjQwOTI5MTcwMTM2WjAzMTEwLwYDVQQD
Eyg2YTFhNTFhNTE0M2EyYWRhYTA0MGZlZDg1NDRkYmE4YjNhNGNiNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpdcsxAKVRgx+VaK4oNDfZNJwGda
YDe4ZbYJ9PE1CdPhiwIEY0FJ065f3dcGMFVvn8owM1Fd62QnanQEKC+yKdnwgo+f
JqeEFNOBYeIAafw5N+yhoi1lmxzwkWEvMJsoSguG5+Jy4aMoBxDq5MaL+6lmKE2b
05yzkBT6DciIWa7gC6fWZqb7VA2LtYOqqITxVWQTrL6gGJ6LNCAS/yjlGjnUEc2D
vXCQKzsHnx7z/Kh9PCiLjbnujquZypdLZ7NnLpkVFVDzDj/nmMH+IxSVFGOdRCcQ
pRHpfYlpmkiemzoqgMrvMfaJf9QT/vsHjLb/kRqXczHukLHdWsAJOvDsUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoaUaUUOiraoED+2FRNuos6TLRzMB8GA1UdIwQY
MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt
ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj
LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2C2nUcA
REfal9AVjry9Ab48G0xlGNYxMnCMDiPBBItxt0qnr0RH8YCVEfswovkVD6tLj9+N
PHbn1L6KWH4vKIF9QECFZKtIJEqrXBwnjWtCXYwBEjbmkug6+L7V2DRJxmUcSskg
HFrgVCfdHxo4so3xEW3uqwXEnEQV1X05AnRYGcCN5CSQszcKyuwsQ7aeXM4uMtga
WkJgG9HnskNsXc2sh+ZOFRcJTdNRQNAHdZX9sy2r7y8wsL21QXdPAuFPNtSL4Hj3
G8psNEZNQ1dH8Avkp9W0zy42R7UKpWe0cC/11SWAw/RnV8XVc4OWqda6C5rp7ELq
Osr5UxDANKieRA==
-----END CERTIFICATE-----
Generated at Sun Sep 29 01:44:10 2024 by rpki-client on console-ams.rpki-client.org