Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          1/NopHdRKKYl1C9Cg4z58Flbelh80seI2M9EfNn/vrQ=
Subject key identifier:   46:2D:A1:0A:E1:4C:AD:11:8B:C2:6C:E5:6B:B4:C8:F3:F0:2A:97:A8
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       018F8DEF6AE1B88B06D68BC7846F5A7C198A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          08CA
Signing time:             Sat 18 May 2024 23:00:28 +0000
Manifest this update:     Sat 18 May 2024 23:00:28 +0000
Manifest next update:     Sun 19 May 2024 23:00:28 +0000
Files and hashes:         1: 7M-l5_w5FI8rVvHD9rwX7wdrrEw.roa (hash: NY+LBH3Sjou6IXdbuF+M0KQqXoqJ+v2aE6MoPSUiS8g=)
                          2: C8nY2Wgijubo5tztgxJNmohibAY.roa (hash: hzzU+R4ZGoCYHaWRReh/kum5ptcqzMseGoyP4kx6QVU=)
                          3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: DyG+QaCWNu6F5RrnVXT7bkKhs+w9G+j/wKat3Gcn0js=)
                          4: QQxplVbDtlHGZQZGCUKVxBGsXz4.roa (hash: 8Q57hqVBUClJYvvdabxldGMC1WcoYKBG90Z0i8MtziQ=)
                          5: TzmvFMp3MA-NLc5KGR8mw6sZbj0.roa (hash: AOHqKvmMU/gc1B5uGP1Z3EGGtHHLZ162WyRQig0bbQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:6a:e1:b8:8b:06:d6:8b:c7:84:6f:5a:7c:19:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: May 18 23:00:28 2024 GMT
            Not After : May 19 23:00:28 2024 GMT
        Subject: CN=462da10ae14cad118bc26ce56bb4c8f3f02a97a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:aa:f2:33:2d:ec:fc:be:c5:31:8b:63:b4:4b:
                    3b:53:fe:d5:ee:58:4c:6c:cb:39:47:98:63:e9:95:
                    e7:51:f7:cd:dc:e1:6f:49:63:b3:9d:46:b6:df:e2:
                    ba:84:d5:01:21:4f:0a:3c:06:5c:56:29:38:2c:30:
                    62:5e:2e:f2:89:ab:0c:f5:53:98:a2:9a:c1:9d:a3:
                    22:ea:35:24:49:d5:d7:66:86:9e:bd:15:69:24:cc:
                    cf:6e:0a:3d:cb:d5:32:f4:7b:72:bb:a1:db:cd:a8:
                    56:29:be:e6:b6:9b:5e:b3:ea:af:bd:39:f4:fc:24:
                    d7:b2:0f:3b:dc:29:28:f1:e8:fc:fd:7b:31:7e:ba:
                    e8:0f:50:44:2d:a8:03:e9:56:54:69:c0:9f:e6:89:
                    9f:52:ca:e4:bf:b1:76:20:62:8d:c8:f9:6a:74:6c:
                    39:17:67:f7:09:71:14:5b:91:6e:f0:0e:71:52:bf:
                    27:a1:e2:8d:35:96:55:5e:b8:01:42:37:2e:2a:e8:
                    01:5e:a9:fd:ef:3e:6d:3a:39:47:13:bb:50:31:c3:
                    6f:f1:c3:0c:85:ed:a0:e8:50:13:06:6e:98:1b:9a:
                    62:fa:50:ac:66:a2:7d:65:0c:99:c9:54:60:bd:bf:
                    41:c5:d3:80:7f:c8:5c:3d:3e:68:0e:3c:ac:a2:80:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:A1:0A:E1:4C:AD:11:8B:C2:6C:E5:6B:B4:C8:F3:F0:2A:97:A8
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:15:b4:c0:50:02:43:8a:27:aa:38:54:21:e0:03:19:30:
         6b:ee:9f:13:f2:f9:54:4d:3b:62:5f:01:85:7a:27:0d:9e:33:
         65:e1:76:c3:82:0f:6a:9d:6d:ce:25:38:6a:27:2e:2c:7f:79:
         01:91:71:8a:ed:ef:3e:d5:7b:af:76:8a:04:72:15:1d:3a:13:
         84:97:e5:09:7c:0a:de:e6:bf:9a:25:d6:c1:ce:81:99:5d:d0:
         58:8e:e1:a2:af:0a:02:dc:ae:89:d0:97:45:e9:29:26:f2:14:
         30:d8:c7:a4:7d:ae:4c:7b:f1:6b:f7:b2:a7:79:df:65:ea:b4:
         4e:56:c8:01:d3:2e:20:c0:91:5b:4a:df:5c:c4:dc:99:90:a4:
         a3:0d:bf:02:e8:49:60:37:14:68:c0:55:3a:f3:4d:09:04:40:
         48:3c:a7:9b:32:d0:fc:85:22:f9:cc:73:fc:59:03:5c:bf:07:
         ea:03:67:bb:bf:ba:d3:67:9b:4e:b8:99:4e:55:d2:b0:44:29:
         d9:94:65:94:0c:2c:6f:95:41:cc:2b:3c:d6:52:3d:58:43:46:
         ce:e4:d7:3d:d4:07:9b:12:14:1c:ef:b6:2a:ba:2a:34:ab:9b:
         5d:c5:53:4c:c2:19:03:3f:0a:ca:d9:01:4e:25:82:84:70:1c:
         77:81:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:44:08 2024 by rpki-client on console-ams.rpki-client.org