Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File:                     xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier:          Zp0agNa2ElKIFBxh5TyX/TuEVV1c1Ha4W3YBe1ieFDw=
Subject key identifier:   EF:BA:56:41:5E:44:12:B1:C6:DC:6A:67:A2:64:90:4A:17:12:EF:E3
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer:       /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial:       018F87B67F067818730ADE80CC5FBFA41063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 18:00:35 +0000
Manifest this update:     Fri 17 May 2024 18:00:35 +0000
Manifest next update:     Sat 18 May 2024 18:00:35 +0000
Files and hashes:         1: P7LVguO3ATsGR0SQ6GZg2vK6u5s.roa (hash: niHgYvTbcI1qV3jo/MH7iwYtxyvsFm4VRGakpBDuQK0=)
                          2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: G/vkCHr7n4Hc/pz0u0v2CE33/P8KLQKgeFdAV5AX4XQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7f:06:78:18:73:0a:de:80:cc:5f:bf:a4:10:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
        Validity
            Not Before: May 17 18:00:35 2024 GMT
            Not After : May 18 18:00:35 2024 GMT
        Subject: CN=efba56415e4412b1c6dc6a67a264904a1712efe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:d2:f5:ca:fe:4e:6e:53:9d:7e:11:81:1e:
                    b7:63:53:f1:a6:e3:73:c8:56:12:c5:01:a6:31:00:
                    e4:94:ce:39:2f:88:6b:1a:16:54:96:cb:8e:eb:9f:
                    53:88:33:9b:09:ae:1b:ed:e0:e9:68:18:f2:1d:d4:
                    b4:42:61:4c:22:33:2f:18:6f:23:59:40:bc:68:bf:
                    fb:08:bd:ae:10:44:a8:e4:d8:a8:15:91:32:36:c6:
                    cd:cf:5e:2e:db:57:e8:cb:d3:1b:51:7d:5d:b3:78:
                    2f:8f:81:fe:53:29:c5:ea:2f:5c:a2:14:b4:3b:c5:
                    27:af:fa:a7:a5:8e:55:ee:cd:8a:fe:81:d2:1a:2c:
                    9f:0a:2c:54:2d:ec:f4:b6:1c:cd:c4:29:a6:0b:e9:
                    77:e3:00:ee:83:89:65:91:0a:db:0d:1b:fb:07:26:
                    89:09:a1:39:6a:0a:f8:03:51:ee:6f:e1:5d:1a:fc:
                    05:85:8f:eb:21:5b:b4:0d:d5:0b:ad:34:0f:4d:34:
                    00:30:25:8e:62:81:d4:20:51:00:10:25:14:d6:27:
                    b1:f1:da:a7:67:50:5b:25:c3:00:31:ad:58:6b:7c:
                    a4:8a:5f:48:7e:1b:e9:32:6a:27:69:b3:30:b4:bc:
                    a4:65:0f:82:12:e5:f3:b6:b9:67:ea:17:88:c0:f8:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BA:56:41:5E:44:12:B1:C6:DC:6A:67:A2:64:90:4A:17:12:EF:E3
            X509v3 Authority Key Identifier:
                keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:38:d9:4d:92:3b:2f:f5:fa:67:14:88:d8:08:20:37:71:
         42:2d:b1:70:35:dd:75:9e:53:32:fb:3c:43:25:40:b4:af:62:
         90:64:a0:d0:d6:5d:b1:5e:2a:52:bb:6c:bd:86:c2:82:59:09:
         31:7b:46:c0:89:60:ed:fa:5a:91:6b:f7:38:0f:6a:d2:4a:d4:
         e8:77:95:c8:1e:d7:3d:42:60:e2:d2:68:fb:4a:ea:e4:ef:25:
         00:4c:f6:5f:8e:61:11:9e:5c:0c:3d:60:66:cc:00:57:fa:1d:
         d8:37:39:67:c8:74:4f:e7:cc:0a:14:85:03:3a:68:a7:1f:fd:
         1d:4f:6f:0e:1f:fa:40:e1:79:ca:58:08:ba:97:41:7d:ba:98:
         05:bb:92:8e:6a:9a:64:a9:92:a3:a5:e4:2d:52:45:d8:38:89:
         3e:59:8d:cf:66:7d:a4:40:3c:e3:dd:fc:46:8f:36:8d:d6:a3:
         21:64:04:ae:9a:20:c9:0b:e1:eb:6a:1b:cc:f7:4a:ce:97:f4:
         c6:cd:28:c5:b4:91:4f:39:bc:43:e2:e9:e4:66:c3:c6:33:6b:
         d2:ac:1c:4c:b5:d5:96:5b:d2:5c:b1:75:67:98:59:ff:b6:13:
         a9:cf:74:b1:9e:ed:1e:c2:fe:34:b1:00:76:48:6d:80:41:52:
         b6:1f:04:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htn8GeBhzCt6AzF+/pBBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmY5MzUwNTdjM2JkYmFkYmRmNDlmMzQzNTYyYzVlMzAw
MTYwNDQwHhcNMjQwNTE3MTgwMDM1WhcNMjQwNTE4MTgwMDM1WjAzMTEwLwYDVQQD
EyhlZmJhNTY0MTVlNDQxMmIxYzZkYzZhNjdhMjY0OTA0YTE3MTJlZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk3S9cr+Tm5TnX4RgR63Y1PxpuNz
yFYSxQGmMQDklM45L4hrGhZUlsuO659TiDObCa4b7eDpaBjyHdS0QmFMIjMvGG8j
WUC8aL/7CL2uEESo5NioFZEyNsbNz14u21foy9MbUX1ds3gvj4H+UynF6i9cohS0
O8Unr/qnpY5V7s2K/oHSGiyfCixULez0thzNxCmmC+l34wDug4llkQrbDRv7ByaJ
CaE5agr4A1Hub+FdGvwFhY/rIVu0DdULrTQPTTQAMCWOYoHUIFEAECUU1iex8dqn
Z1BbJcMAMa1Ya3ykil9IfhvpMmonabMwtLykZQ+CEuXztrln6heIwPh4NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+6VkFeRBKxxtxqZ6JkkEoXEu/jMB8GA1UdIwQY
MBaAFMT/k1BXw726299J80NWLF4wAWBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYt
MTdlMWEyNTY5NTY4LzEveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYtMTdlMWEyNTY5NTY4
LzEveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNY42U2S
Oy/1+mcUiNgIIDdxQi2xcDXddZ5TMvs8QyVAtK9ikGSg0NZdsV4qUrtsvYbCglkJ
MXtGwIlg7fpakWv3OA9q0krU6HeVyB7XPUJg4tJo+0rq5O8lAEz2X45hEZ5cDD1g
ZswAV/od2Dc5Z8h0T+fMChSFAzpopx/9HU9vDh/6QOF5ylgIupdBfbqYBbuSjmqa
ZKmSo6XkLVJF2DiJPlmNz2Z9pEA84938Ro82jdajIWQErpogyQvh62obzPdKzpf0
xs0oxbSRTzm8Q+Lp5GbDxjNr0qwcTLXVllvSXLF1Z5hZ/7YTqc90sZ7tHsL+NLEA
dkhtgEFSth8ErA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:09:36 2024 by rpki-client on console-ams.rpki-client.org