Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          cuMDExnHk107luM+86mribP6KA6x6TFTCGixN+fE58E=
Subject key identifier:   FF:40:1B:A9:F2:7E:3A:42:DF:CB:DF:C2:53:83:D5:7C:55:23:98:82
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       018F8748943FDCB4C05A22E3B7CC2C3D10ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          05FF
Signing time:             Fri 17 May 2024 16:00:31 +0000
Manifest this update:     Fri 17 May 2024 16:00:31 +0000
Manifest next update:     Sat 18 May 2024 16:00:31 +0000
Files and hashes:         1: AS9jTYjVEDIXCOdMlyorwVUaWG0.roa (hash: wWVR8r7Kf2HN8esf0HbXAMxlvLcV3TVtqYl+DumlHG0=)
                          2: AcHw6NFnva8gKOleZy4QvPQ-4R8.roa (hash: 9+7IiNZOOlJyg4jvJL55SkPZwK0IX2xFM88J8B+f3ZI=)
                          3: Rbpv-dBPsLGqldhAPCVFZqZE5kg.roa (hash: tIMO08pb9w6v8o/kzck9Y1J3mCwvPsiAH2jS878vEMM=)
                          4: Ref85zXKMY5FH0MRc8IkuFzw5NI.roa (hash: +C530PKJduX/+x+ElI3K71w3iZOLlus6Y2Zm5R00EdM=)
                          5: mtdklF0CzvxS6DGVAw-ecZiXgR0.roa (hash: nmJeMEoowbsnv/IoWLx2PVLOll0jy9XM2GjqxMhlHjQ=)
                          6: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: JOw/tSVELZjL9e8SA2sI4M5nYqf5tEdEjIzvQLchLl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:94:3f:dc:b4:c0:5a:22:e3:b7:cc:2c:3d:10:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: May 17 16:00:31 2024 GMT
            Not After : May 18 16:00:31 2024 GMT
        Subject: CN=ff401ba9f27e3a42dfcbdfc25383d57c55239882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:bf:5a:22:03:41:55:73:b1:29:9d:a0:58:
                    dd:a6:eb:f5:58:54:75:a0:b8:17:6d:58:16:8e:65:
                    25:17:07:c1:2e:ed:56:22:d4:f5:d4:d0:00:43:b1:
                    a9:b8:7d:bf:41:50:30:06:ea:55:08:ad:31:be:f1:
                    c5:dd:d5:65:dd:80:25:d8:e9:d6:4e:36:47:c3:a1:
                    12:c2:c3:4c:e7:6a:ce:b8:db:a8:c6:7d:90:ff:fe:
                    2b:4b:22:00:81:41:b0:9f:5f:10:8f:9c:fe:c1:7c:
                    2b:dd:c8:82:ac:0b:b1:e5:8f:fc:9e:0e:16:98:bd:
                    92:af:65:2b:46:35:67:0e:ed:e9:f3:f2:04:6b:35:
                    e8:a7:ba:b0:b4:0c:fa:2a:6d:6e:62:f9:1d:86:ae:
                    12:c7:0f:7e:ee:5a:44:11:30:86:22:b9:2f:8e:15:
                    fb:0f:bf:56:98:6a:08:e7:46:c7:bc:c9:0c:03:0c:
                    b5:da:10:45:b1:d4:98:ec:74:f9:e1:7b:9d:85:a0:
                    5e:80:03:91:60:02:58:42:4f:cb:e2:45:07:49:df:
                    0f:38:7c:be:5b:12:83:d0:eb:69:25:cd:ac:7d:51:
                    ea:e0:95:a5:5a:26:eb:79:bc:f5:99:a4:c1:5b:d4:
                    f3:b7:5d:5e:5c:cc:bd:a3:00:f6:36:83:2f:c8:af:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:40:1B:A9:F2:7E:3A:42:DF:CB:DF:C2:53:83:D5:7C:55:23:98:82
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:db:80:b7:39:34:3f:85:29:d1:dc:86:74:6d:e6:74:7f:
         31:fb:e3:73:97:31:54:37:71:56:74:11:b2:13:41:28:ba:c6:
         a8:e9:14:4f:77:18:5a:94:56:ff:b5:2c:76:97:b1:e7:c5:24:
         c3:5a:a1:55:cd:b9:d6:79:05:11:99:59:03:8d:30:ac:0d:d0:
         0c:11:d8:22:c7:95:15:51:12:eb:9f:be:40:53:1f:89:b7:f4:
         fe:16:c8:cc:35:52:57:34:c9:88:65:7d:fc:f4:54:a6:2f:45:
         a3:cf:ee:ef:9d:35:6a:fd:49:42:7d:74:fd:54:99:95:ca:eb:
         f7:c8:04:f2:a1:b3:1c:7b:21:c5:a6:78:96:7e:b6:a9:99:d7:
         54:62:e4:0a:c5:44:d7:d3:ee:84:5f:00:53:a7:c0:3c:49:f1:
         33:e5:12:97:6e:ea:1c:22:1e:e7:dd:f6:42:de:f2:15:b2:cc:
         ed:ca:09:18:87:f1:ba:c2:d3:35:a6:10:de:d2:ea:13:f5:a8:
         0c:41:66:b3:32:7e:99:09:ef:e9:c9:bc:72:ba:c6:1b:8f:41:
         27:ae:25:e4:b6:4c:76:1b:ad:33:ff:38:c8:3b:6f:04:06:0a:
         e1:47:9c:9b:d2:21:a8:53:fa:ad:9b:08:79:c9:74:41:ee:41:
         4c:3f:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:37:44 2024 by rpki-client on console-fra.rpki-client.org