Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File:                     zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier:          Rhswm9XpLv6zs7lhCPstZvuwArgK/eLdKOorCyKfAjU=
Subject key identifier:   86:D4:2C:12:02:AA:6C:E5:5E:91:E6:30:CD:8E:48:45:73:89:B0:D3
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer:       /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial:       018F874888FFA7C25DD650E233CB434182AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:28 +0000
Manifest this update:     Fri 17 May 2024 16:00:28 +0000
Manifest next update:     Sat 18 May 2024 16:00:28 +0000
Files and hashes:         1: 1VRoI_Bkw-zO2UPcK6BJyk9nTTA.roa (hash: v6HaGRljkE0emBioPYsHWZaaSePcCrts290l/M4V4Ps=)
                          2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: uJkBG6va8irUNFGZsY0wHXeKIq19UakX4qKEBGHzAfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:88:ff:a7:c2:5d:d6:50:e2:33:cb:43:41:82:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
        Validity
            Not Before: May 17 16:00:28 2024 GMT
            Not After : May 18 16:00:28 2024 GMT
        Subject: CN=86d42c1202aa6ce55e91e630cd8e48457389b0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:7d:ce:5a:eb:18:f0:f0:a2:09:06:04:fc:
                    34:e9:1e:96:0c:70:9a:c3:38:4e:62:97:c4:70:38:
                    e5:07:c7:f1:9c:ab:dd:a8:40:d8:ab:ec:e8:06:80:
                    34:67:1a:80:c6:42:3b:3e:ed:cb:56:79:98:b0:43:
                    50:1f:51:98:c8:46:a7:dc:17:c1:17:d1:0e:53:cc:
                    ba:a7:6d:a8:a6:00:9f:1a:44:65:75:f3:bd:2e:75:
                    14:2a:79:b6:17:40:34:c9:32:2a:5a:2e:b0:eb:a0:
                    26:a4:72:aa:e2:a3:cb:44:8b:ab:8d:a7:ab:c4:05:
                    ef:69:f5:65:39:80:8a:78:3a:1b:af:ad:45:e4:c2:
                    ea:3a:59:0d:a7:71:5b:be:7b:41:7f:3e:34:f6:fa:
                    44:ba:fc:29:d1:10:37:2e:a1:b5:f1:fb:a4:f8:90:
                    e6:12:51:2e:07:90:f4:c1:03:3f:95:96:a3:d4:9e:
                    d0:47:0d:6d:e1:40:fe:07:24:24:3c:b3:15:8c:98:
                    13:0a:cf:34:32:46:1f:66:0e:59:e6:01:0e:ec:b9:
                    95:dd:e5:d1:56:b8:9a:78:a8:67:cb:16:d9:70:12:
                    dc:72:df:16:11:d2:68:05:b5:5b:6b:83:09:38:44:
                    46:19:33:25:af:2a:0a:43:4b:18:bc:7f:66:ea:f9:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D4:2C:12:02:AA:6C:E5:5E:91:E6:30:CD:8E:48:45:73:89:B0:D3
            X509v3 Authority Key Identifier:
                keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:2b:cb:4d:10:45:12:7e:55:24:91:f9:4c:05:aa:a5:85:
         e7:dc:81:0f:b0:ae:ec:d5:d4:4f:21:a5:0d:49:ea:67:db:92:
         e5:08:dc:4a:4a:a6:e2:84:ab:0b:dd:af:9d:7d:cc:6a:28:41:
         a2:87:94:14:f5:97:20:96:2a:76:ed:32:08:f0:db:4b:ca:ff:
         2a:df:b7:13:18:96:bd:a2:de:f2:05:0e:3c:1b:fc:a5:f2:ee:
         6c:e5:68:4d:d7:d8:c5:66:69:26:1b:88:7a:7f:b9:56:99:fe:
         d7:ab:03:c0:4f:cd:a8:a2:ab:52:09:49:fd:f2:54:73:7e:c8:
         bb:2e:d1:a1:7d:76:3c:e9:33:69:6e:5f:5b:0a:c6:88:09:eb:
         f1:ca:a9:67:ab:91:e3:d5:0d:15:e7:c3:ae:a7:ed:62:90:6b:
         af:c4:b7:df:8d:e3:69:9e:55:c5:d1:e7:75:f3:0f:23:fc:4c:
         80:48:41:14:ba:d5:4a:74:de:96:0d:66:54:d4:0d:83:ad:b7:
         b8:56:d2:54:24:e2:fd:2e:8b:78:23:66:74:3d:26:fe:fb:3a:
         8a:3c:63:c2:b6:81:af:6c:bf:07:65:15:33:99:2c:41:3b:b3:
         55:d2:e1:c3:9e:bc:0a:36:ca:1c:54:af:52:3f:b4:b7:ed:3b:
         2c:57:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:10:48 2024 by rpki-client on console-fra.rpki-client.org