Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File:                     JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier:          9qSYFXLnm7b09u6R0qXsE1RgkunEoWNcBqDadDC2PwY=
Subject key identifier:   2F:17:CE:81:1E:D1:E9:80:35:93:8A:A1:4E:E2:08:71:84:4D:85:E2
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       018F863630C934775ACA048243527EC9A2D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number:          096A
Signing time:             Fri 17 May 2024 11:00:49 +0000
Manifest this update:     Fri 17 May 2024 11:00:49 +0000
Manifest next update:     Sat 18 May 2024 11:00:49 +0000
Files and hashes:         1: 0qXCVLpBSq-WDW0MnXg0patXs44.roa (hash: D0PpxnjR+qURpVrLufhSCBXRmXc39MDSFnJaQHUu5r8=)
                          2: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: 0+JN1jIFrBkcUOiF2ioSSqTAJnbedZcy6yZH7HBJimU=)
                          3: TfR0wDApdyMIYllhxPcsoSfbhXc.roa (hash: kP7qq1/M/ZKy17F+zOlshrvU5X3wdIPQU/M/r1C1Ypg=)
                          4: V7K2alEgvDLkC1n7WNX14ehbmuY.roa (hash: X+LypJsJyaXkYrWUqMHEaB2BGtVIrrLeBRkXa8nr62U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:30:c9:34:77:5a:ca:04:82:43:52:7e:c9:a2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: May 17 11:00:49 2024 GMT
            Not After : May 18 11:00:49 2024 GMT
        Subject: CN=2f17ce811ed1e98035938aa14ee20871844d85e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:53:53:75:40:b8:97:9b:ac:36:e5:1a:02:
                    72:f2:1f:a8:5e:7d:d0:bf:81:05:55:d5:d4:ad:51:
                    1a:a1:88:a0:46:50:14:a5:23:e7:18:4d:38:f7:15:
                    c0:01:cc:7b:36:f7:1c:df:b9:8d:c6:52:4d:92:bc:
                    f3:8e:f6:ae:ea:5b:12:60:00:85:0c:fe:06:26:4a:
                    fa:94:8e:f6:7d:84:2a:ce:c9:ba:df:3c:16:29:0b:
                    e2:e4:e5:cd:79:53:0a:48:d6:bc:99:11:20:9c:47:
                    e3:63:4f:5f:66:29:81:4f:2b:56:f9:f9:ca:a9:cf:
                    80:9a:2f:db:6b:7d:33:04:67:30:38:a5:b0:0e:69:
                    d1:1a:02:34:75:dc:81:bb:de:ea:37:5c:ef:8d:cc:
                    bc:21:11:29:62:f6:39:0f:bd:76:57:06:3b:90:2b:
                    c1:86:86:1f:c4:a9:1f:43:7d:40:af:0e:5b:0d:66:
                    04:cc:1f:c4:c2:bd:39:5f:f9:8a:1d:ad:14:4a:97:
                    5d:99:81:d6:84:f4:b0:cc:be:f7:60:1e:99:0b:1b:
                    a2:c3:0b:9a:37:9f:a1:03:71:6a:73:21:d3:4a:f2:
                    36:4e:19:98:bd:7d:46:06:bc:44:bd:de:bd:af:95:
                    f0:d9:ef:08:df:1d:de:97:1f:33:e4:cf:d7:a4:ea:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:CE:81:1E:D1:E9:80:35:93:8A:A1:4E:E2:08:71:84:4D:85:E2
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0e:58:47:f1:88:80:fb:f3:e2:3f:4f:53:ce:27:64:5d:dc:
         16:45:8a:c1:42:2a:33:4c:15:15:a9:36:55:2f:99:40:27:74:
         b1:b4:47:b7:8d:66:7a:3b:d5:9d:e3:53:75:8a:93:26:66:09:
         65:70:0f:4d:1f:2e:72:c0:c1:1b:20:0f:99:d2:77:bd:1d:1b:
         ef:17:da:d4:7e:a0:a6:84:b5:9f:1b:ae:c8:8d:26:df:b7:62:
         ba:fe:0d:14:2f:e4:4c:c5:a3:6f:78:a8:2e:e3:e3:98:56:00:
         df:67:e5:df:16:a0:4d:bb:2b:1e:a9:b2:0a:98:ff:0d:95:47:
         2e:d7:aa:d1:3f:fc:5b:4c:9f:61:62:c5:fc:2c:e6:f1:be:8f:
         77:b9:30:b8:b0:3e:54:0d:94:7c:54:1e:0b:1b:29:61:ea:96:
         5a:dc:12:7e:8c:78:37:90:ff:aa:1f:4c:6f:1b:40:cb:4f:ea:
         70:27:65:63:2f:71:10:1a:d0:9d:cc:56:95:1a:b2:5c:b6:52:
         f2:1d:9f:d8:1d:45:f7:52:6b:b0:4c:65:ab:83:10:ec:62:ef:
         f8:8e:8d:af:b8:e2:6c:d0:94:fa:08:eb:00:98:12:7d:9d:87:
         a2:4c:38:95:ff:37:bc:9f:4d:e6:3e:9b:63:26:f7:a4:88:c8:
         bc:28:36:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNjDJNHdaygSCQ1J+yaLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI1ODYzYzMwOWYyNjU1Yjg4NGMxNjAwMzk0YzQzMzhl
N2ZiNDEwHhcNMjQwNTE3MTEwMDQ5WhcNMjQwNTE4MTEwMDQ5WjAzMTEwLwYDVQQD
EygyZjE3Y2U4MTFlZDFlOTgwMzU5MzhhYTE0ZWUyMDg3MTg0NGQ4NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspNTU3VAuJebrDblGgJy8h+oXn3Q
v4EFVdXUrVEaoYigRlAUpSPnGE049xXAAcx7Nvcc37mNxlJNkrzzjvau6lsSYACF
DP4GJkr6lI72fYQqzsm63zwWKQvi5OXNeVMKSNa8mREgnEfjY09fZimBTytW+fnK
qc+Ami/ba30zBGcwOKWwDmnRGgI0ddyBu97qN1zvjcy8IREpYvY5D712VwY7kCvB
hoYfxKkfQ31Arw5bDWYEzB/Ewr05X/mKHa0USpddmYHWhPSwzL73YB6ZCxuiwwua
N5+hA3FqcyHTSvI2ThmYvX1GBrxEvd69r5Xw2e8I3x3elx8z5M/XpOqqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8XzoEe0emANZOKoU7iCHGETYXiMB8GA1UdIwQY
MBaAFCZCWGPDCfJlW4hMFgA5TEM45/tBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMt
YzE0ZjZiYTI1Y2IwLzEvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMtYzE0ZjZiYTI1Y2Iw
LzEvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg5YR/GI
gPvz4j9PU84nZF3cFkWKwUIqM0wVFak2VS+ZQCd0sbRHt41mejvVneNTdYqTJmYJ
ZXAPTR8ucsDBGyAPmdJ3vR0b7xfa1H6gpoS1nxuuyI0m37diuv4NFC/kTMWjb3io
LuPjmFYA32fl3xagTbsrHqmyCpj/DZVHLteq0T/8W0yfYWLF/Czm8b6Pd7kwuLA+
VA2UfFQeCxspYeqWWtwSfox4N5D/qh9MbxtAy0/qcCdlYy9xEBrQncxWlRqyXLZS
8h2f2B1F91JrsExlq4MQ7GLv+I6Nr7jibNCU+gjrAJgSfZ2Hokw4lf83vJ9N5j6b
Yyb3pIjIvCg2dw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:40:15 2024 by rpki-client on console-fra.rpki-client.org