Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File:                     Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier:          zcxW1qSEIaOkYEPWA0lvz31WZFJk+fENW442736kO30=
Subject key identifier:   47:80:35:AC:D0:F8:B6:40:CE:36:2C:3F:BC:58:79:6B:ED:83:60:C1
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer:       /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial:       018F874847D499376644444DA883B69660C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number:          10A3
Signing time:             Fri 17 May 2024 16:00:12 +0000
Manifest this update:     Fri 17 May 2024 16:00:12 +0000
Manifest next update:     Sat 18 May 2024 16:00:12 +0000
Files and hashes:         1: 72NaRxsbucnFW8h04GVCBGNBQJM.roa (hash: xrYHS/UjIboaCAyzwMW7Ah8fPANTzE0hPNzykFQwrXw=)
                          2: T99PmFEYdT-WIgDSqKNBb_i0cGk.roa (hash: jVUbheO1XVt6+DQw9BagH9wzGP860/NLqUilS7H5Vhw=)
                          3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: h9NRS0xqpBs0ugsGk4FE9cnDbVMUAs7b+C4uowcOLO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:47:d4:99:37:66:44:44:4d:a8:83:b6:96:60:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
        Validity
            Not Before: May 17 16:00:12 2024 GMT
            Not After : May 18 16:00:12 2024 GMT
        Subject: CN=478035acd0f8b640ce362c3fbc58796bed8360c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:be:6a:44:a0:88:5d:ee:94:4f:b6:6b:31:
                    0c:5d:20:d9:ff:b0:29:c7:42:f4:22:2d:9c:68:b5:
                    bb:53:9c:98:5e:65:75:a6:dc:41:a4:ae:90:04:5c:
                    38:76:65:aa:4c:03:47:3c:29:90:b6:a9:44:83:89:
                    e6:c4:9c:37:0e:75:a8:2f:10:dc:29:6e:54:1c:79:
                    32:f9:10:e4:4b:8f:72:08:5d:d6:91:ff:91:97:83:
                    6f:05:2f:e8:95:dd:b3:74:17:6e:81:81:30:bf:22:
                    a7:c5:db:21:13:38:15:79:fb:25:8d:76:0d:1b:21:
                    5c:26:be:6b:7f:ab:72:3f:32:39:55:db:bc:4c:b9:
                    53:1a:eb:64:39:e8:47:98:6d:70:ea:d2:a9:34:b0:
                    bc:48:90:9e:57:fc:48:d2:2b:64:0d:57:ef:90:e1:
                    e0:0f:87:e9:c1:a1:b2:3a:0f:38:da:48:66:bb:4c:
                    6a:dd:d8:8e:af:38:9c:b7:14:03:dc:4b:a1:53:67:
                    88:df:12:69:81:0e:09:a3:81:b0:6c:a4:b0:eb:67:
                    57:c3:a7:5d:36:ec:fe:11:c2:67:4c:4d:2b:af:f7:
                    dc:52:91:cf:ac:1f:76:19:71:cc:ce:e5:59:15:01:
                    0f:e9:da:7d:83:e3:5f:a5:98:5e:63:5c:e2:8b:33:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:35:AC:D0:F8:B6:40:CE:36:2C:3F:BC:58:79:6B:ED:83:60:C1
            X509v3 Authority Key Identifier:
                keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:ed:8c:ff:31:9a:0f:ff:16:f6:da:fd:63:38:13:22:fe:
         a6:07:11:fc:55:02:59:05:1a:6a:5e:36:68:4b:90:40:7e:86:
         bb:d9:27:7d:45:51:16:93:20:0b:23:8e:fb:e7:79:72:6c:e4:
         23:86:75:75:d6:99:8c:20:63:ea:b4:09:9f:e3:ab:ec:24:0b:
         91:62:3c:64:2a:ea:85:1b:ed:63:63:dc:4f:05:8c:89:62:f8:
         aa:01:ec:f8:01:1d:8c:ea:2e:2b:6f:15:ad:7b:52:79:d1:4e:
         1f:8c:bd:34:96:18:6f:db:c1:7c:04:41:a1:59:16:61:af:8d:
         24:c6:e3:96:cc:75:13:26:b5:46:da:e2:61:87:20:2b:a5:4b:
         65:12:65:34:95:08:26:ee:e0:47:44:2f:77:e9:8b:e0:83:92:
         c2:37:31:06:de:73:f6:6d:a7:c7:31:6b:6d:53:a5:a4:43:53:
         2a:8a:f8:51:91:cf:cd:b2:02:bb:b2:98:4e:58:94:0c:54:6f:
         b9:be:a6:f3:cd:e3:49:7e:43:0b:07:05:b9:af:42:b8:bb:17:
         75:c9:e0:a5:03:dc:1c:fb:cd:06:c7:72:81:09:51:c0:b9:c4:
         24:79:0a:90:8c:0b:58:57:a0:38:64:c1:3b:4f:dc:e3:52:5e:
         e2:62:38:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSEfUmTdmRERNqIO2lmDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjQwNTE3MTYwMDEyWhcNMjQwNTE4MTYwMDEyWjAzMTEwLwYDVQQD
Eyg0NzgwMzVhY2QwZjhiNjQwY2UzNjJjM2ZiYzU4Nzk2YmVkODM2MGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GW+akSgiF3ulE+2azEMXSDZ/7Ap
x0L0Ii2caLW7U5yYXmV1ptxBpK6QBFw4dmWqTANHPCmQtqlEg4nmxJw3DnWoLxDc
KW5UHHky+RDkS49yCF3Wkf+Rl4NvBS/old2zdBdugYEwvyKnxdshEzgVefsljXYN
GyFcJr5rf6tyPzI5Vdu8TLlTGutkOehHmG1w6tKpNLC8SJCeV/xI0itkDVfvkOHg
D4fpwaGyOg842khmu0xq3diOrzictxQD3EuhU2eI3xJpgQ4Jo4GwbKSw62dXw6dd
Nuz+EcJnTE0rr/fcUpHPrB92GXHMzuVZFQEP6dp9g+NfpZheY1ziizMCmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeANazQ+LZAzjYsP7xYeWvtg2DBMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1TtjP8x
mg//Fvba/WM4EyL+pgcR/FUCWQUaal42aEuQQH6Gu9knfUVRFpMgCyOO++d5cmzk
I4Z1ddaZjCBj6rQJn+Or7CQLkWI8ZCrqhRvtY2PcTwWMiWL4qgHs+AEdjOouK28V
rXtSedFOH4y9NJYYb9vBfARBoVkWYa+NJMbjlsx1Eya1RtriYYcgK6VLZRJlNJUI
Ju7gR0Qvd+mL4IOSwjcxBt5z9m2nxzFrbVOlpENTKor4UZHPzbICu7KYTliUDFRv
ub6m883jSX5DCwcFua9CuLsXdcngpQPcHPvNBsdygQlRwLnEJHkKkIwLWFegOGTB
O0/c41Je4mI4XQ==
-----END CERTIFICATE-----
Generated at Fri May 17 23:56:57 2024 by rpki-client on console-ams.rpki-client.org