Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File:                     qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier:          Nb+A9qLVVO3LCmt/YjprwbnjKjYC8ZGqNfuTYVEXCgM=
Subject key identifier:   9D:99:67:EB:E2:82:F9:29:EE:48:0D:EA:87:4D:81:DE:F1:84:24:A4
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer:       /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial:       018F595DDEDE3706A5093A21917AFF6940D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number:          07EC
Signing time:             Wed 08 May 2024 18:01:15 +0000
Manifest this update:     Wed 08 May 2024 18:01:15 +0000
Manifest next update:     Thu 09 May 2024 18:01:15 +0000
Files and hashes:         1: 6a9ZLaPFmgE_5pPt4jTBTWcelzY.roa (hash: JFosxTJTo7vyE1BX9mwkRuidA5Py5o/ktUqggwEnv/s=)
                          2: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: dFyV+qs4qccEkuZDswROy4i1lJoYGu1iprTeOwuZRPg=)
                          3: sFI6jiwEIOSY78SQlf2VjWq1yOY.roa (hash: yimBWYpH1b7o29JpJ+XFoo7m7QTWoVWXILyzAzkkfAo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:5d:de:de:37:06:a5:09:3a:21:91:7a:ff:69:40:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
        Validity
            Not Before: May  8 18:01:15 2024 GMT
            Not After : May  9 18:01:15 2024 GMT
        Subject: CN=9d9967ebe282f929ee480dea874d81def18424a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:bd:c8:cc:3f:70:4b:ae:d3:75:a7:48:bb:
                    cc:37:da:f6:ab:7c:2f:12:7a:f6:b2:65:f2:54:7d:
                    39:40:71:20:d4:b7:0b:c4:dd:7a:cf:78:bd:35:3e:
                    9f:09:c1:04:a8:43:aa:32:55:e3:83:31:f9:d2:e3:
                    af:8c:5d:99:76:f7:f8:04:dd:16:36:54:f9:b9:9d:
                    76:bd:2f:54:53:18:41:f4:36:e9:13:07:79:e9:e4:
                    d3:19:5c:1b:d6:3b:06:3c:a0:f0:b4:bd:92:53:fd:
                    32:86:38:85:ea:22:e4:a2:30:5e:3d:61:64:63:76:
                    ae:c5:1b:eb:5d:43:a7:2d:6d:c1:28:6c:89:73:67:
                    a2:ee:4b:2b:b6:ba:fe:2c:5f:28:59:9f:08:80:0c:
                    4f:f0:06:d8:5e:aa:49:cf:65:ab:d1:57:65:93:f0:
                    39:23:d3:05:c2:78:e9:6f:62:4f:30:2f:be:7e:9a:
                    2e:da:8e:ad:f1:d5:d4:f9:a1:b5:d2:44:74:bd:26:
                    c4:4b:79:30:cf:b3:69:ba:c1:ba:dd:9c:14:50:6f:
                    d6:61:ee:92:3e:e3:69:5a:13:bf:58:b5:66:cc:d3:
                    d0:d2:cd:98:b5:ce:cd:5c:19:4c:87:d0:8f:ff:9f:
                    74:46:9b:fd:20:f1:7b:e6:e5:16:57:8f:ef:d4:d1:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:99:67:EB:E2:82:F9:29:EE:48:0D:EA:87:4D:81:DE:F1:84:24:A4
            X509v3 Authority Key Identifier:
                keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c6:09:25:90:15:56:a5:a1:1b:c0:85:65:18:0b:79:3a:77:
         06:b0:02:4d:8a:1b:aa:02:21:f7:96:e1:01:15:10:f3:69:d6:
         23:c1:5d:9f:32:b1:94:a4:fb:e4:9f:4e:a3:39:32:42:23:9b:
         16:4f:68:05:1a:88:31:1f:1a:8a:52:ab:23:43:ac:40:87:83:
         63:e9:42:fb:64:a4:00:0c:6a:99:5c:ff:a5:09:35:95:d3:4f:
         cf:90:75:bf:df:2e:90:63:50:28:3a:01:f4:04:b8:a9:3b:96:
         e4:a4:ed:9c:df:ce:2b:78:c6:32:d5:74:32:a1:63:40:b9:95:
         fa:1b:d2:d3:7c:0c:28:11:d4:5a:7a:a9:0a:b0:ef:ee:93:e2:
         37:a7:8d:bf:a4:52:ae:08:44:14:86:55:ed:56:be:67:47:9b:
         39:e0:a3:8e:f6:e0:49:cf:4d:93:a6:23:cd:5e:38:65:2d:11:
         ab:4c:32:c4:f9:59:f0:ef:0e:84:a2:40:94:b7:eb:01:1d:db:
         bf:12:37:48:41:7f:a3:cc:97:86:be:7a:a2:ff:4b:5a:7d:a7:
         4d:68:4b:01:c2:9e:04:7b:c7:a6:2f:a8:a9:61:9f:1e:64:74:
         69:99:7a:ff:c0:2d:ce:2a:14:90:31:b0:cb:27:89:4d:ee:44:
         97:71:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:47:15 2024 by rpki-client on console-fra.rpki-client.org