Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File:                     kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier:          wYIoXFwWCYm3xcn+rgAsTPAF4o49J44KuqYxztNYxhc=
Subject key identifier:   6D:E6:8D:13:1D:84:B1:41:B7:CD:A5:2B:5C:0A:E9:DD:92:61:1B:AF
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer:       /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial:       018F87B629CDFF114C15615D19CB8D43B6FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number:          0CFA
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: 834msg5O_RtW-sVj3aGoyEa6bfw.roa (hash: 0hbsa2QzJYptsWTCUQYn3DSvT1S3e6iKCu9oXax0NGw=)
                          2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: ObFFS98RJIgXzos5tBtl5wP4If3+ngfF72q8UFq6nOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:29:cd:ff:11:4c:15:61:5d:19:cb:8d:43:b6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=6de68d131d84b141b7cda52b5c0ae9dd92611baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:0e:a2:b4:5c:12:9f:ee:6a:d0:fe:08:96:
                    25:d7:15:94:83:d0:81:2e:35:f1:c5:d4:a6:77:09:
                    31:46:4c:1b:79:a6:54:57:6a:31:3a:79:a4:86:9a:
                    cd:2e:cb:a7:00:cb:f3:8b:e7:f6:dd:87:23:e6:53:
                    03:ea:c8:b0:3d:95:fb:7f:3b:c8:32:3c:fd:e5:e5:
                    e5:3b:a3:f8:c7:0d:6c:78:e6:f3:d6:48:71:f1:f9:
                    22:10:a7:58:fe:58:07:77:b1:94:a9:2e:ac:88:b3:
                    83:c1:24:5a:bd:4c:bd:d1:ae:db:63:d8:b8:49:c1:
                    33:cb:d8:53:eb:b6:6b:22:5c:04:29:71:48:07:8e:
                    26:d4:93:8d:ae:14:7d:3e:16:91:95:1b:9f:fe:2d:
                    f3:e6:f1:ed:97:b9:c7:f4:9f:4c:eb:6e:ad:12:83:
                    a8:ca:83:e3:99:06:00:01:0e:67:77:a6:3f:18:db:
                    27:9f:16:24:15:43:d0:61:99:00:aa:71:e5:65:e5:
                    2f:c7:4d:f2:2e:f1:0c:02:35:f1:b8:e6:c9:a0:86:
                    32:3f:1a:1f:b2:5c:e5:6e:e0:07:c5:b3:6b:d7:90:
                    ff:9d:a8:3a:14:2d:bb:59:b3:01:49:a0:f1:3d:14:
                    ad:56:b7:45:16:a7:3d:0b:ae:61:6b:22:e9:92:da:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E6:8D:13:1D:84:B1:41:B7:CD:A5:2B:5C:0A:E9:DD:92:61:1B:AF
            X509v3 Authority Key Identifier:
                keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:29:c9:16:59:a3:ec:54:b1:2c:69:93:39:8e:16:b4:dd:9e:
         d1:74:12:f6:2b:25:ea:6b:fb:8e:c8:eb:64:9a:3a:5b:cb:d2:
         8b:82:94:2d:fb:a3:44:29:bd:7c:bc:0b:fd:fe:a4:a7:4d:7d:
         58:4e:0b:b9:7e:11:5d:71:75:97:a9:65:92:43:94:5c:03:52:
         51:27:60:92:6e:6b:3a:15:ce:bc:26:c1:89:bd:97:6d:83:f4:
         2a:86:75:91:d2:e1:88:23:d2:1a:3d:a1:06:a2:2f:b1:18:57:
         8e:a2:87:fc:cd:5e:2d:fb:ae:68:b1:33:cb:be:fc:c2:e8:70:
         bb:d1:ce:aa:b5:4f:e6:a3:dc:f3:c1:74:4b:32:e4:fa:de:0e:
         4c:df:d4:2f:28:7e:66:54:f6:2e:de:c5:0a:21:73:03:d8:99:
         84:92:96:70:ff:ed:b6:66:1e:f2:03:42:fa:40:2f:ad:99:34:
         61:b8:d3:d2:69:10:78:85:7d:f8:93:56:30:65:ad:79:20:c0:
         7f:83:87:c3:5d:85:ff:15:3a:2c:45:b0:b3:bf:48:a3:07:50:
         c0:ad:3c:00:82:04:f6:c7:4d:ce:0a:53:27:c2:90:05:cb:6c:
         63:c7:b3:15:2c:ba:4a:a2:5f:1e:46:ed:ba:17:f8:f9:1a:01:
         83:69:a8:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtinN/xFMFWFdGcuNQ7b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2Q0YzZjMTI2MGZjOWE3Yzg5NGJmNmFiZTc3YTZlZWNm
ZWMwNmUwHhcNMjQwNTE3MTgwMDEzWhcNMjQwNTE4MTgwMDEzWjAzMTEwLwYDVQQD
Eyg2ZGU2OGQxMzFkODRiMTQxYjdjZGE1MmI1YzBhZTlkZDkyNjExYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArswOorRcEp/uatD+CJYl1xWUg9CB
LjXxxdSmdwkxRkwbeaZUV2oxOnmkhprNLsunAMvzi+f23Ycj5lMD6siwPZX7fzvI
Mjz95eXlO6P4xw1seObz1khx8fkiEKdY/lgHd7GUqS6siLODwSRavUy90a7bY9i4
ScEzy9hT67ZrIlwEKXFIB44m1JONrhR9PhaRlRuf/i3z5vHtl7nH9J9M626tEoOo
yoPjmQYAAQ5nd6Y/GNsnnxYkFUPQYZkAqnHlZeUvx03yLvEMAjXxuObJoIYyPxof
slzlbuAHxbNr15D/nag6FC27WbMBSaDxPRStVrdFFqc9C65hayLpktr6bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3mjRMdhLFBt82lK1wK6d2SYRuvMB8GA1UdIwQY
MBaAFJHNTGwSYPyafIlL9qvnem7s/sBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2It
ZTk4ZWUyMzgxMTQ2LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2ItZTk4ZWUyMzgxMTQ2
LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCnJFlmj
7FSxLGmTOY4WtN2e0XQS9isl6mv7jsjrZJo6W8vSi4KULfujRCm9fLwL/f6kp019
WE4LuX4RXXF1l6llkkOUXANSUSdgkm5rOhXOvCbBib2XbYP0KoZ1kdLhiCPSGj2h
BqIvsRhXjqKH/M1eLfuuaLEzy778wuhwu9HOqrVP5qPc88F0SzLk+t4OTN/ULyh+
ZlT2Lt7FCiFzA9iZhJKWcP/ttmYe8gNC+kAvrZk0YbjT0mkQeIV9+JNWMGWteSDA
f4OHw12F/xU6LEWws79IowdQwK08AIIE9sdNzgpTJ8KQBctsY8ezFSy6SqJfHkbt
uhf4+RoBg2moDg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:16:26 2024 by rpki-client on console-fra.rpki-client.org