Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File:                     nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier:          /QAVsXi9WkFAxFw90C/em2hL13aIcIzsegultYIbvA4=
Subject key identifier:   DD:4F:DA:1B:02:64:54:55:00:BF:B4:46:A5:1B:AD:56:37:4E:E1:02
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer:       /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial:       018F8D1415428AFF9E22A73D9CF2332C4401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number:          117B
Signing time:             Sat 18 May 2024 19:00:54 +0000
Manifest this update:     Sat 18 May 2024 19:00:54 +0000
Manifest next update:     Sun 19 May 2024 19:00:54 +0000
Files and hashes:         1: WreWuZJfkWBxwDB7sw_Z_TY4XYw.roa (hash: n68x6zDIsG/pxNn1FrRFr/BzmrPlsUzqhmjkdIhRgK4=)
                          2: gsf_92xxJ6uvnirY6hkVd5SDkxg.roa (hash: qjEEl9DqsHIB1+fhEpYjZSgg/raokyhhl847ibXGpw0=)
                          3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: gWGvUdF/4QBs0H1n3XYMEpE+RiOrW5lekbwbMmn0dYQ=)
                          4: nW9AzuLvNnhWjuaFdFYYM-MyX9o.roa (hash: 7pbYL9/seWFsOrYEJ3c/xz+7ssJf8bpJimIa56ZLnRA=)
                          5: o877rONs1eylmiODz8T5wgOWXBk.roa (hash: Dy1aKSXZT86gDcgT3Q99oB3/a+OF+/EFJz1yZhjiGqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:15:42:8a:ff:9e:22:a7:3d:9c:f2:33:2c:44:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
        Validity
            Not Before: May 18 19:00:54 2024 GMT
            Not After : May 19 19:00:54 2024 GMT
        Subject: CN=dd4fda1b0264545500bfb446a51bad56374ee102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:86:92:dd:b1:8c:de:74:42:16:ee:0b:d5:
                    cf:3a:54:01:bd:cc:cd:23:07:f9:37:8d:dd:58:e4:
                    6d:e2:ec:b9:a1:ea:29:29:c4:c4:0f:92:34:c8:60:
                    04:3a:44:f4:cc:d0:e4:f7:34:dd:8a:db:cd:4b:cd:
                    3a:04:c1:3d:86:4f:5c:d7:98:cf:17:8f:ba:28:e8:
                    32:05:32:b9:79:33:52:b8:2f:c3:3a:e6:6d:a7:90:
                    c7:4b:e8:f7:b3:1d:24:a3:63:7e:d9:0f:80:3e:5b:
                    1a:35:72:bf:01:2c:35:19:37:eb:40:a3:94:af:71:
                    8d:76:d4:57:8c:f0:19:fc:8f:24:d8:77:1f:b9:fa:
                    c9:81:90:be:bf:f0:ac:fd:f9:97:25:c2:1f:2e:32:
                    5b:be:0c:f2:ce:99:be:c5:a4:9e:6e:96:e3:d5:8f:
                    0f:2b:3a:f9:8b:e6:da:e4:80:ea:b3:38:89:d1:6e:
                    ec:2b:d0:ee:34:f9:df:76:db:b3:7b:11:5a:ae:f3:
                    0b:08:02:3e:7b:5d:b5:0f:23:0f:1f:f3:9e:73:60:
                    30:5c:3e:f2:26:fb:1d:cb:af:52:aa:6e:5a:49:a1:
                    53:c3:e6:d4:99:9a:b5:b8:04:b4:96:75:14:03:94:
                    ad:04:d0:9d:54:2a:ad:cb:33:de:1b:76:ee:da:1f:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:DA:1B:02:64:54:55:00:BF:B4:46:A5:1B:AD:56:37:4E:E1:02
            X509v3 Authority Key Identifier:
                keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:20:01:af:05:24:7f:48:0d:46:4b:bc:51:ef:e6:d1:eb:a1:
         3a:33:38:04:c1:68:e4:95:3e:18:e9:c8:d9:89:ac:fc:6e:c5:
         0e:d3:61:a3:96:a2:37:43:ac:ed:38:76:c4:58:37:5c:ed:41:
         1c:f2:63:bf:e7:28:28:c7:fb:8f:67:43:7b:54:61:8d:f8:f4:
         94:54:13:6e:cf:83:b6:a1:70:3b:ff:63:ac:4a:fd:f3:c3:2b:
         bc:35:11:d2:c7:d2:f0:0e:95:25:c5:41:19:8c:17:74:83:11:
         11:0c:3e:f9:39:b7:c1:ba:cf:29:19:e4:44:16:55:93:28:c7:
         62:59:f4:ac:66:69:0e:98:4d:97:70:06:7c:d6:0c:42:b9:ff:
         ba:dd:4e:be:dc:b1:79:95:2e:33:21:36:f1:e5:a2:5e:36:aa:
         d7:4a:e4:32:5f:d2:e7:cc:36:c6:28:6b:84:d6:39:46:48:58:
         01:fd:da:e0:80:41:fd:f1:18:72:cd:33:e2:49:65:44:b4:4a:
         00:fd:58:54:90:80:a9:35:68:ae:98:f5:84:17:a7:c9:26:c2:
         2b:bb:28:03:30:fa:69:26:1e:fa:29:db:48:9a:e8:86:65:27:
         f2:7c:ea:fc:b3:bc:45:a4:eb:02:7f:9b:9f:7a:4b:2f:56:a5:
         f5:c2:aa:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NFBVCiv+eIqc9nPIzLEQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1
NjVhODEwHhcNMjQwNTE4MTkwMDU0WhcNMjQwNTE5MTkwMDU0WjAzMTEwLwYDVQQD
EyhkZDRmZGExYjAyNjQ1NDU1MDBiZmI0NDZhNTFiYWQ1NjM3NGVlMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm2Gkt2xjN50QhbuC9XPOlQBvczN
Iwf5N43dWORt4uy5oeopKcTED5I0yGAEOkT0zNDk9zTditvNS806BME9hk9c15jP
F4+6KOgyBTK5eTNSuC/DOuZtp5DHS+j3sx0ko2N+2Q+APlsaNXK/ASw1GTfrQKOU
r3GNdtRXjPAZ/I8k2HcfufrJgZC+v/Cs/fmXJcIfLjJbvgzyzpm+xaSebpbj1Y8P
Kzr5i+ba5IDqsziJ0W7sK9DuNPnfdtuzexFarvMLCAI+e121DyMPH/Oec2AwXD7y
Jvsdy69Sqm5aSaFTw+bUmZq1uAS0lnUUA5StBNCdVCqtyzPeG3bu2h/dMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1P2hsCZFRVAL+0RqUbrVY3TuECMB8GA1UdIwQY
MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt
MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw
LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyABrwUk
f0gNRku8Ue/m0euhOjM4BMFo5JU+GOnI2Yms/G7FDtNho5aiN0Os7Th2xFg3XO1B
HPJjv+coKMf7j2dDe1Rhjfj0lFQTbs+DtqFwO/9jrEr988MrvDUR0sfS8A6VJcVB
GYwXdIMREQw++Tm3wbrPKRnkRBZVkyjHYln0rGZpDphNl3AGfNYMQrn/ut1Ovtyx
eZUuMyE28eWiXjaq10rkMl/S58w2xihrhNY5RkhYAf3a4IBB/fEYcs0z4kllRLRK
AP1YVJCAqTVorpj1hBenySbCK7soAzD6aSYe+inbSJrohmUn8nzq/LO8RaTrAn+b
n3pLL1al9cKq2Q==
-----END CERTIFICATE-----
Generated at Sat May 18 22:48:15 2024 by rpki-client on console-ams.rpki-client.org