Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File:                     dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier:          DLYrH1+ZVZbUYsPfBOhRiAj+Vsw+ytqcUJnE/T2+T8U=
Subject key identifier:   DC:8D:12:CA:99:A7:10:B4:7E:29:66:D6:92:EC:1C:01:49:F0:C0:11
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer:       /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial:       018F87498A11901892BEA989B65EA1950D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:34 +0000
Manifest this update:     Fri 17 May 2024 16:01:34 +0000
Manifest next update:     Sat 18 May 2024 16:01:34 +0000
Files and hashes:         1: Vwjb9a9BFLFwbM6AugTS3gUck30.roa (hash: 4fdOglCHkt5idADTy7QsOmDxNqbTCf3LdJYjLvSvlFk=)
                          2: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: pFfLyizlbVqdS+zjNO6VU3dD2ntjaDErJftfek60TMY=)
                          3: mQ9LE1o9_k1ZCRHPlcSaE3MW2Qw.roa (hash: 2tGisHv2ziptkw6NiDVMR6HhSnY6a8dAzzvTnzBFPgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8a:11:90:18:92:be:a9:89:b6:5e:a1:95:0d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
        Validity
            Not Before: May 17 16:01:34 2024 GMT
            Not After : May 18 16:01:34 2024 GMT
        Subject: CN=dc8d12ca99a710b47e2966d692ec1c0149f0c011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:74:d0:d9:d0:d2:32:35:46:6a:c5:e1:ec:
                    7f:8e:c6:a9:ed:9d:e2:8e:5b:1f:db:db:72:19:81:
                    5d:b1:b3:7d:4f:57:39:08:1e:72:70:1c:7d:dd:cc:
                    45:69:4d:d1:df:e7:dd:35:d1:04:45:e6:b5:c5:df:
                    6c:12:69:46:bf:80:8b:85:ef:38:ee:88:ab:5b:2d:
                    64:50:ea:ef:6c:86:af:32:b8:63:c6:aa:3b:94:e5:
                    6a:56:c5:c9:25:56:be:1e:7c:a7:59:5e:68:a1:c1:
                    c6:83:a0:f6:04:06:48:d8:6e:a6:89:47:be:53:e5:
                    39:ba:33:de:78:d4:6f:f5:9d:da:3c:1a:00:cc:8c:
                    1b:60:1a:96:cf:3c:d5:1a:e9:a1:25:76:a2:24:86:
                    f5:2e:85:c4:61:04:2f:78:49:81:67:bd:a5:b7:4a:
                    10:81:e5:c4:20:39:e8:9f:c2:6d:a8:8e:e1:19:8d:
                    8f:26:01:1f:fc:b5:62:74:29:66:ab:7d:53:a3:bf:
                    22:a3:a3:48:b7:3f:ba:33:79:28:5f:b8:5a:c2:b5:
                    c0:96:26:50:cf:a7:94:c2:a2:3d:45:6e:0c:86:e5:
                    08:a4:0b:b7:5a:28:b0:33:c6:f6:05:e5:65:b7:3a:
                    21:98:0c:ee:73:15:d0:06:4b:9f:20:63:b2:e2:f2:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:12:CA:99:A7:10:B4:7E:29:66:D6:92:EC:1C:01:49:F0:C0:11
            X509v3 Authority Key Identifier:
                keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:15:2d:8a:ef:27:14:a6:8c:59:9a:b0:d5:84:51:75:dd:
         a7:13:4c:2c:8b:9d:ee:1d:50:f5:d9:c0:c3:87:ea:e2:e1:30:
         14:a2:3b:4a:56:06:8a:9e:fc:79:13:ab:24:0c:32:ab:ba:06:
         80:37:80:28:4c:44:af:64:b6:c2:7b:39:8e:ff:ae:87:ca:97:
         ca:8b:01:38:5a:25:90:7b:2d:7f:97:49:16:85:ea:a9:4e:4d:
         a6:a1:f2:e8:10:0c:d1:2a:3f:c1:08:e4:33:b7:a6:87:26:fb:
         b4:c3:21:83:3d:f5:fc:43:26:6c:06:3e:a9:91:eb:71:f2:f1:
         fa:49:ec:f6:76:01:8e:21:1d:55:9e:26:a0:9f:90:36:fc:b3:
         a4:c5:9a:a0:86:47:80:a6:35:2e:a9:42:d7:55:74:d7:fa:7e:
         23:02:3c:fb:56:d9:eb:b3:45:14:01:e7:ea:d7:13:f5:cd:53:
         37:e5:5b:04:ee:8d:6a:4c:08:ba:cd:a3:a6:3b:3c:ba:7b:a4:
         50:65:2d:79:5b:a0:a2:1d:4f:5e:01:75:c7:89:de:c6:81:8e:
         bc:95:38:a5:d2:d8:7f:44:c9:4a:8e:ca:5f:53:76:57:07:30:
         0f:54:b1:79:29:df:06:ec:49:90:3b:67:c2:11:ea:c3:bd:4b:
         eb:f6:09:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSYoRkBiSvqmJtl6hlQ1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjQwNTE3MTYwMTM0WhcNMjQwNTE4MTYwMTM0WjAzMTEwLwYDVQQD
EyhkYzhkMTJjYTk5YTcxMGI0N2UyOTY2ZDY5MmVjMWMwMTQ5ZjBjMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArul00NnQ0jI1RmrF4ex/jsap7Z3i
jlsf29tyGYFdsbN9T1c5CB5ycBx93cxFaU3R3+fdNdEERea1xd9sEmlGv4CLhe84
7oirWy1kUOrvbIavMrhjxqo7lOVqVsXJJVa+HnynWV5oocHGg6D2BAZI2G6miUe+
U+U5ujPeeNRv9Z3aPBoAzIwbYBqWzzzVGumhJXaiJIb1LoXEYQQveEmBZ72lt0oQ
geXEIDnon8JtqI7hGY2PJgEf/LVidClmq31To78io6NItz+6M3koX7hawrXAliZQ
z6eUwqI9RW4MhuUIpAu3WiiwM8b2BeVltzohmAzucxXQBkufIGOy4vKnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyNEsqZpxC0film1pLsHAFJ8MARMB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA8VLYrv
JxSmjFmasNWEUXXdpxNMLIud7h1Q9dnAw4fq4uEwFKI7SlYGip78eROrJAwyq7oG
gDeAKExEr2S2wns5jv+uh8qXyosBOFolkHstf5dJFoXqqU5NpqHy6BAM0So/wQjk
M7emhyb7tMMhgz31/EMmbAY+qZHrcfLx+kns9nYBjiEdVZ4moJ+QNvyzpMWaoIZH
gKY1LqlC11V01/p+IwI8+1bZ67NFFAHn6tcT9c1TN+VbBO6NakwIus2jpjs8unuk
UGUteVugoh1PXgF1x4nexoGOvJU4pdLYf0TJSo7KX1N2VwcwD1SxeSnfBuxJkDtn
whHqw71L6/YJ8Q==
-----END CERTIFICATE-----
Generated at Sat May 18 00:04:20 2024 by rpki-client on console-ams.rpki-client.org