Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          xDQRncgHzjAEoj7xEzlBxl5r6opqy37mwqHguMqqEF8=
Subject key identifier:   10:C5:10:63:8A:A9:C0:3D:EF:E6:26:59:C0:3D:92:74:02:F9:A6:EB
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       018F0F8E8C3A3F8056C88F95A79BDEBD4111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          0E78
Signing time:             Wed 24 Apr 2024 10:02:31 +0000
Manifest this update:     Wed 24 Apr 2024 10:02:31 +0000
Manifest next update:     Thu 25 Apr 2024 10:02:31 +0000
Files and hashes:         1: UjqBYUezB4iRMCdJjcVV1A15AFI.roa (hash: 57kYDFNVVTCmUQVXc0Quzv7zHCcVM6YIWNyNIJdxfdQ=)
                          2: a4vmpNJH9x7EqcB7Bs2HgHXBhHQ.roa (hash: Ru8G+uMhJpzOEyOmsYwp0/3EDe5UfCfNRWTduF8bI4s=)
                          3: d4bynnLthwvgIITjnXpX_ZJ_pKw.roa (hash: JELXX0hEJbowY8FeevV9GY3Ayvj0Rud8kT3y9Vyz730=)
                          4: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: 0tMZlKPxK0zptcRzpPnBAZUxj/hU8+qzLo87c6Blihs=)
                          5: pX9VssUu1cEMqY00fgi0Eg94gPY.roa (hash: EjTxD+f6o16NKRn/fBc1xacFcc4tuOM1nf/GnQ3UzI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 02:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0f:8e:8c:3a:3f:80:56:c8:8f:95:a7:9b:de:bd:41:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Apr 24 10:02:31 2024 GMT
            Not After : Apr 25 10:02:31 2024 GMT
        Subject: CN=10c510638aa9c03defe62659c03d927402f9a6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:8b:a7:31:05:a9:d9:d8:3b:9d:f0:00:eb:
                    fc:39:12:cd:dc:89:98:ad:c4:e9:33:6d:54:7f:f1:
                    71:20:51:5a:69:b7:e8:35:82:13:6d:ce:41:58:9a:
                    05:39:ca:19:a3:7c:36:33:5b:db:35:12:11:68:a3:
                    6c:db:db:87:44:7d:b4:be:d9:4a:23:1c:88:2b:29:
                    de:5c:4e:b5:c6:7b:f3:c0:be:25:92:e5:72:80:04:
                    ea:29:0e:4f:a7:bc:b7:5c:fa:85:b9:60:a5:32:d0:
                    8a:a1:8d:cc:30:b2:90:84:f1:41:ed:3e:17:c8:83:
                    8c:c0:b9:5a:4e:bf:bf:e4:93:5f:81:90:d0:da:40:
                    0e:99:51:42:92:85:02:20:2a:7a:c2:f6:fc:93:6f:
                    23:73:f6:6f:62:ee:4b:d5:fb:77:e6:b2:38:3a:0f:
                    95:eb:34:3c:c7:1d:62:b8:2b:95:86:5b:7e:ed:fd:
                    7b:bb:01:5b:ba:13:87:02:35:40:c5:e5:22:71:20:
                    fb:02:a4:ed:19:09:8c:c8:f7:b7:1a:06:35:56:39:
                    4e:2f:ee:d6:9b:6b:90:93:19:c6:d9:35:0f:91:97:
                    ea:22:33:6c:bc:c3:0a:72:5a:3a:cb:4f:01:6d:f3:
                    f4:b4:16:78:fe:91:9d:2e:3a:bc:9a:a0:5b:4f:c9:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:10:63:8A:A9:C0:3D:EF:E6:26:59:C0:3D:92:74:02:F9:A6:EB
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ba:b5:9c:1d:ad:7a:96:d8:cc:3d:ce:0c:c5:06:ec:05:2a:
         84:96:37:21:6c:5b:56:90:11:3c:59:71:bf:5c:3b:4c:2b:bd:
         4a:2e:2f:84:bf:f9:4f:bc:eb:ae:a5:0e:ff:c6:cd:a4:bc:b8:
         4e:c3:47:17:a4:af:84:eb:f8:5f:4c:69:86:53:af:fc:31:49:
         20:a6:12:13:2e:f5:ca:69:ef:5b:47:21:2a:ce:e8:5b:ac:6f:
         a4:47:a8:d7:b3:9b:d8:b3:16:41:c4:ce:90:2b:c0:ab:89:86:
         eb:f0:8a:d8:cd:ef:95:e2:aa:d1:f7:08:f1:68:9f:65:34:c9:
         e0:1e:b2:b9:81:f3:1c:cc:ac:e0:68:9c:66:11:e0:9b:8d:69:
         3b:15:91:2c:3e:48:f1:3d:fc:53:2a:b7:d9:f1:92:a9:da:6a:
         a0:b5:ce:8f:8b:42:c0:d7:a0:b0:83:e1:1c:0b:26:43:1e:c0:
         93:b2:4d:6a:0e:0b:ca:40:42:1a:b6:0c:ff:a9:d6:9d:dc:2f:
         99:2c:4c:35:3f:c6:ee:a7:a4:57:44:1d:e2:cd:14:8f:92:66:
         2c:03:e2:be:87:32:aa:5e:c4:cc:ac:bc:49:e1:e5:63:ab:5a:
         e5:52:2b:0b:ed:46:3d:fc:4d:ef:a1:f3:e4:b1:2e:00:36:a9:
         bc:a1:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:37:27 2024 by rpki-client on console-ams.rpki-client.org