Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
File:                     TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json)
Hash identifier:          wS+U/GQdkEAQ0jYXU+G+rTjsUZR7j3sc5pzkKFclpXo=
Subject key identifier:   F0:33:F6:83:DF:2C:C4:14:4B:2E:38:27:63:9F:24:C0:65:D6:C9:48
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Certificate issuer:       /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial:       018F874A64DA1E18140B20A751ED62FE551B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
Manifest number:          10B1
Signing time:             Fri 17 May 2024 16:02:30 +0000
Manifest this update:     Fri 17 May 2024 16:02:30 +0000
Manifest next update:     Sat 18 May 2024 16:02:30 +0000
Files and hashes:         1: 23M91Gnrn26S_GMAxct48UG5fLY.roa (hash: CeqjlA6eUL46maf/DqMkD14wh9N5hSIpFgiGiSgkF+s=)
                          2: 2gAUfPyTZwGJ5_JMyedUfdGaeqI.roa (hash: weF3xID1uKWo4isZSnZvFL/SOsaDIbA+ZuMM18jYLn8=)
                          3: 3oiItQGSOQToq1RcsYOZHQaqx9g.roa (hash: vhHlt8SQaYV2tRBOR3o9UNVV3kcTrRIvVpYqqtU+8eo=)
                          4: 4LQRw4BgeKzT0XyTD5QBjNFL0kA.roa (hash: 75c6Vy+oVZq0RHWQ07BkDH7k5DGceGU8HgDKkl2pGdc=)
                          5: 6GV4_SfX1qtoJ04oiJspb89b0qA.roa (hash: YPehfOkn1bsaEeljGvTWZNe5HdhLWaaJV/TmIaW6o0w=)
                          6: BtOt_o02JspPAqwMgb8tUd7kJ8k.roa (hash: 9BLACitiG5tvoY3giftIgBq9++Mp2xXQa8yuW4kGkJw=)
                          7: DXXrsXsExvRo9JUI0G0ZzeIo7G4.roa (hash: wlVA56F4GwBVjV6jWhjg43AqYkYvECWUQlRiyPa97Y0=)
                          8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: RT2yMHaPM8Z/g987Z5P7IpRbC2qhfR50ova5OWJsTQE=)
                          9: ic_CtB62t_-MNoPcsKZ9s5APprk.roa (hash: GOfyA4nTzLum0CVbCBDUUETEpKMmBgTRpUBlGHgPZA4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:64:da:1e:18:14:0b:20:a7:51:ed:62:fe:55:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
        Validity
            Not Before: May 17 16:02:30 2024 GMT
            Not After : May 18 16:02:30 2024 GMT
        Subject: CN=f033f683df2cc4144b2e3827639f24c065d6c948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:fc:25:ff:d5:27:bf:94:f0:fa:cf:c0:5e:
                    84:ec:ec:60:1a:93:72:5d:aa:1a:58:94:88:7c:c1:
                    5b:6e:db:6f:44:ca:b5:f8:23:de:16:34:b1:2b:e3:
                    01:d5:33:41:a4:ba:f9:72:f3:e5:97:1f:50:53:e2:
                    0b:bf:9b:f6:d6:5c:8c:1a:7f:bc:b1:cb:29:54:85:
                    13:71:32:35:df:c0:9d:d6:40:ed:6c:0b:1f:ef:75:
                    c5:ba:03:ec:5d:c7:df:be:a0:27:a7:be:a0:c0:68:
                    d5:0b:e9:0b:0e:ae:ca:3a:f4:18:12:90:ed:27:54:
                    8f:2a:4b:e8:42:7e:2c:46:9d:06:5d:a2:f2:46:04:
                    da:26:7b:a3:73:9a:1b:0b:68:e4:0e:57:fe:b6:e3:
                    ab:a9:8f:b4:69:27:1a:24:20:7e:c1:6f:2f:0a:f0:
                    59:60:f0:dc:82:a9:01:b2:c9:03:98:ed:eb:e0:f4:
                    fd:19:69:ae:ef:e3:40:a7:48:44:22:09:75:90:35:
                    e7:ff:11:78:40:e6:24:44:90:3f:16:dc:ae:2e:08:
                    78:27:76:ed:bd:32:e2:54:82:2b:eb:88:18:e7:29:
                    d4:2c:bd:27:ab:b9:dd:c6:32:10:dd:ad:a4:63:d5:
                    9c:3a:45:57:76:f6:6f:c1:a2:f3:6b:1a:39:de:ef:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:33:F6:83:DF:2C:C4:14:4B:2E:38:27:63:9F:24:C0:65:D6:C9:48
            X509v3 Authority Key Identifier:
                keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:39:5b:32:fc:b0:0e:9a:1f:3a:50:0b:d2:e0:60:4c:b5:94:
         77:ee:9c:aa:85:d0:84:cf:cb:0b:85:ab:89:4a:a1:93:a7:b1:
         37:50:9a:6c:72:a3:c6:b2:27:9b:3c:eb:6c:cf:36:83:4a:0f:
         b7:17:ce:49:f9:eb:e1:16:a2:f2:e9:69:1e:70:a6:63:b1:e9:
         1d:f5:95:bf:1c:bc:60:6a:fc:aa:d9:61:53:09:53:52:99:b8:
         6f:75:4d:7e:f7:e3:e9:d0:4a:ed:f7:96:49:26:5f:6c:a1:45:
         09:f4:78:91:72:97:ec:d8:6b:4a:71:3e:05:0f:29:c7:b7:5c:
         ec:7e:a7:3c:58:90:81:e0:87:c2:f9:18:1b:2c:37:e8:e1:ee:
         c0:c8:6b:1c:39:e5:dc:8d:85:2b:c9:69:40:6d:ae:7e:9e:88:
         e8:ee:d0:36:a5:ae:dc:3f:55:1c:32:95:43:4c:74:78:7b:b6:
         8d:17:96:5c:8d:f7:ed:1f:9b:7f:65:30:d9:79:03:42:7b:4e:
         5b:e6:b5:e3:fa:04:e0:de:86:52:92:7b:e5:4a:8b:8d:ff:c0:
         d3:9d:2a:07:4e:e3:1f:be:2d:53:1a:e2:4a:e9:8d:bc:9b:32:
         71:1c:85:e4:75:11:e5:bb:73:45:53:52:b0:2c:68:30:12:e0:
         1b:d1:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:57:48 2024 by rpki-client on console-ams.rpki-client.org