Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
File:                     6JeVIBx9PZPNKghd42ku3XG3cm0.mft (raw, json)
Hash identifier:          Sb49ybiAqUYHVLv0zFlDlBSy8Z9+uCVVk9sOY+WNrp4=
Subject key identifier:   80:3E:68:B8:54:69:05:AE:A0:0D:48:F2:EB:E1:C5:EB:C4:AC:65:08
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Certificate issuer:       /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial:       018F5400881896B47FCA8BA302D261E836D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
Manifest number:          04DD
Signing time:             Tue 07 May 2024 17:01:11 +0000
Manifest this update:     Tue 07 May 2024 17:01:11 +0000
Manifest next update:     Wed 08 May 2024 17:01:11 +0000
Files and hashes:         1: 6JeVIBx9PZPNKghd42ku3XG3cm0.crl (hash: j2zhSNCZAe1VL/wHeQ/xvW2sr2XOljjp9x5hJyd/uE0=)
                          2: dMg8kb30k_RHGhQLDGBoYQ2q8rQ.roa (hash: gbcvdfronOruPG3G21DfZaZeAbqKh9zWKtT5U/1z8G0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:00:88:18:96:b4:7f:ca:8b:a3:02:d2:61:e8:36:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
        Validity
            Not Before: May  7 17:01:11 2024 GMT
            Not After : May  8 17:01:11 2024 GMT
        Subject: CN=803e68b8546905aea00d48f2ebe1c5ebc4ac6508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:f6:96:3d:b7:60:a5:db:ff:27:f1:98:3b:
                    5e:d7:01:60:fb:cc:28:b4:78:f3:23:55:e8:02:e3:
                    ec:e2:84:9d:46:59:70:51:aa:0c:a4:5d:ab:70:46:
                    d1:44:ec:a1:7d:bb:0f:61:86:4d:53:ba:22:2e:61:
                    b4:64:69:9a:c2:ba:06:17:ab:f7:b6:86:09:15:a3:
                    3f:51:16:bf:c9:05:f6:af:87:f6:38:e5:69:94:b4:
                    76:f4:45:02:96:7f:31:46:c3:cb:1b:07:23:b6:e5:
                    a7:17:5c:c0:6c:6d:aa:c9:c0:e6:a9:bd:24:ab:b9:
                    95:3b:9c:5b:11:ef:65:8e:94:7a:7d:67:bf:bb:fe:
                    72:ff:95:b1:43:ad:93:e1:fd:02:0e:2d:04:b5:c1:
                    0b:2b:c6:4c:01:21:f8:06:b9:9d:f1:95:7a:8b:bb:
                    e9:4c:aa:a7:6e:2c:bb:71:ad:0d:41:44:e8:2b:0b:
                    dc:74:bb:24:57:f2:7f:c7:22:fd:f2:91:9b:3e:62:
                    32:cc:da:a5:32:48:ef:03:56:4e:96:d4:49:43:28:
                    02:11:a8:0d:76:01:93:29:13:a8:20:dd:fe:3d:a2:
                    d8:0b:71:0f:a3:3a:ce:5f:93:40:f8:3d:37:55:0f:
                    62:97:5a:c5:0a:1e:77:50:86:74:d1:85:9d:b5:1e:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:68:B8:54:69:05:AE:A0:0D:48:F2:EB:E1:C5:EB:C4:AC:65:08
            X509v3 Authority Key Identifier:
                keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:4b:42:61:e1:fd:15:83:f7:28:64:55:36:91:70:0c:a5:
         28:6d:a0:73:08:c1:61:14:6a:7f:51:bc:33:ae:90:99:78:49:
         ed:14:b5:29:ad:5f:62:fe:dd:9d:b2:6a:45:7e:b9:98:94:55:
         60:47:98:48:82:b5:5b:de:f1:11:a2:a6:df:32:59:41:92:d7:
         51:89:60:04:ab:74:42:52:e4:ad:1c:73:b1:70:7d:95:10:89:
         c8:85:aa:30:e9:82:d0:c8:0c:2e:57:b4:91:94:fe:c0:0b:c8:
         bb:ce:0f:4e:2e:cd:5c:08:a5:ff:0e:87:8e:44:39:84:91:0c:
         8e:47:d6:54:d9:56:90:b7:37:cd:3f:6c:eb:5a:e8:c9:2e:66:
         ae:b8:ba:6e:ba:62:38:1f:52:cc:10:43:5b:76:b6:b2:69:eb:
         01:9f:50:14:07:8d:f4:38:35:f2:06:01:17:f2:34:41:ab:fb:
         f5:40:a5:76:6c:c0:be:3f:11:ac:a0:4b:1e:11:03:fa:a9:85:
         0b:9c:2d:2c:39:af:ef:53:38:93:cf:76:ac:29:0c:fb:67:0a:
         51:0c:66:6c:21:41:4d:33:a7:e0:38:ab:7a:81:18:62:ec:23:
         35:e2:f5:64:e9:7f:23:d4:59:1a:a8:6f:7f:d9:8e:80:66:c1:
         0a:28:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:48:17 2024 by rpki-client on console-fra.rpki-client.org