Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.mft
File:                     JzIQePNZ15kCdtq7D4wwBw5oWWM.mft (raw, json)
Hash identifier:          WE0EeiQofnia2NHgIWByLpHDHYUlmnaa/NnPKurHVRU=
Subject key identifier:   0A:25:5F:60:28:E5:C6:0C:6E:73:31:E7:C4:08:C1:29:54:16:32:95
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Certificate issuer:       /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial:       018F885B29B101FA17D09C1395A01437C9B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.mft
Manifest number:          10AB
Signing time:             Fri 17 May 2024 21:00:26 +0000
Manifest this update:     Fri 17 May 2024 21:00:26 +0000
Manifest next update:     Sat 18 May 2024 21:00:26 +0000
Files and hashes:         1: Aouv7GdOdzobGwUkAAMe6yEFQzg.roa (hash: rEQs+08pS7lJ4uxNxgj6/hDioK3sLHCe5okzzFTSJEw=)
                          2: D0sQ7M54nIFsiBVbgq9YqftnvtU.roa (hash: 8/46fxaRRUf1HCBKzNhBqyWBuGBGa0CuKtNGA1c0yXQ=)
                          3: JzIQePNZ15kCdtq7D4wwBw5oWWM.crl (hash: rtsHcV4r7aLrBHbPRnFXUPQgQFcc2kIJNBGcuad0xno=)
                          4: RJs7vkcN9AHVak2AoPYYj8KnugU.roa (hash: //AY7S1b7acmOVSi7GtuH4v2SjnaVJoeMmlr8j9Y8d8=)
                          5: TR2ExuBdII67CCjhLx470FGH-1Y.roa (hash: JMD30coUkAZcMYrns0zG1sLZj2Oye2yYqvEneYIsLxY=)
                          6: XAFzcsZphsAkE3Nh7ThgUwcjXWY.roa (hash: teG4ODoq6h2gUtkF5e2jAzrpCsw9wwQop9gcUGJ3nXs=)
                          7: cUf_ucABkY52EfwQHCzWj8OXBHg.roa (hash: M4+dsoJpmBcNMNiTY4A9WR/rv3PyMgvOOqeNzQ9MZS8=)
                          8: dxoiRnOS0o4U_vHMR3bSoEoo1_A.roa (hash: VHSqUms8qVy5q8bBRtSu3GtW99GA4IxKqRhTv61Oo0c=)
                          9: kQA6vNkfVacwg2M0Limujk8urOc.roa (hash: aqRD3jz+upe4ryA9ENbn7U2mYc6GCWAW7t2eeuZm3hE=)
                          10: lAYODwF9qevhOc39kXyqzUDbTJk.roa (hash: kj5w/QEXM+vqpyKYppdleM5o2CsqARBoYHjMG2fpA8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:29:b1:01:fa:17:d0:9c:13:95:a0:14:37:c9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
        Validity
            Not Before: May 17 21:00:26 2024 GMT
            Not After : May 18 21:00:26 2024 GMT
        Subject: CN=0a255f6028e5c60c6e7331e7c408c12954163295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:68:c2:14:ee:e2:40:bf:9e:12:0c:42:ee:
                    97:7e:25:d4:86:56:54:3e:f6:ce:1d:b3:64:20:dd:
                    03:78:23:04:10:c3:be:3a:d3:3f:c8:32:e7:78:c6:
                    e4:01:8f:df:51:3c:98:11:22:20:4d:38:a8:6d:b3:
                    7b:2a:78:15:01:b8:f7:6f:12:04:a4:b1:30:83:c9:
                    e5:38:42:74:e9:c1:b1:02:ba:29:a8:f6:95:4b:6d:
                    5a:52:57:4c:45:03:40:23:53:8c:60:ad:41:97:39:
                    fd:ad:4a:65:de:1c:a5:7a:eb:a2:c8:22:03:67:4e:
                    03:cd:d0:19:98:fc:e3:3c:e0:52:11:2b:95:33:90:
                    31:7a:6a:c5:43:75:e7:72:58:20:81:c0:48:35:00:
                    c5:7a:6b:fb:3b:42:2e:aa:c6:1e:62:6e:14:dd:49:
                    28:f9:ed:7f:49:0f:ee:c8:33:d8:e5:73:95:bd:66:
                    b9:bc:e8:c1:63:b7:4d:fb:7d:35:66:f1:9d:8c:4b:
                    35:24:e4:5d:3e:43:63:6d:15:f1:28:2e:0e:0a:12:
                    0f:b4:85:8f:e6:0d:61:16:c0:a8:8f:00:36:84:61:
                    ca:be:bf:56:f5:2c:d2:5d:4b:f0:3e:71:92:1d:c0:
                    c9:1b:1d:68:03:03:9c:54:e5:ae:be:af:b2:22:d5:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:25:5F:60:28:E5:C6:0C:6E:73:31:E7:C4:08:C1:29:54:16:32:95
            X509v3 Authority Key Identifier:
                keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:76:de:41:a1:85:5e:7c:5b:ca:a8:90:7d:43:1e:c9:1b:f1:
         7c:8c:87:4d:41:22:ec:f5:77:aa:01:43:bc:ff:62:63:a0:16:
         60:85:cf:29:4b:66:12:6d:c2:2b:12:f3:5b:80:99:e1:f9:90:
         04:61:f0:1f:7b:e9:45:f3:6d:14:cb:44:ba:0d:c9:5b:26:f9:
         eb:a8:04:01:7d:1a:c2:47:9c:01:24:81:40:9b:97:c5:b8:35:
         eb:84:b2:49:2f:e3:b3:11:9f:46:65:7a:b1:f5:95:40:2c:12:
         15:c2:1a:e5:b3:1d:e0:43:50:76:5b:ff:81:ef:00:a4:f1:5d:
         93:34:0c:02:44:7e:49:f0:ee:e6:43:b2:a2:cd:52:21:21:a1:
         d4:a6:b9:d2:c8:67:43:3b:a4:13:56:15:a3:70:41:cd:dc:c6:
         3f:9f:c5:f6:8d:35:be:ed:3a:ab:7a:27:d2:be:30:15:e8:f0:
         89:b1:16:06:95:5e:8b:0f:df:25:46:00:f8:dc:6a:e9:a1:8a:
         64:3e:d3:bb:74:38:78:5b:49:7e:9e:29:ba:10:6e:4f:ac:33:
         07:6a:53:fd:e1:25:40:3c:fa:06:1b:0d:ed:b4:97:4d:b9:fc:
         5f:f6:3a:c0:a4:30:77:a3:b9:11:c1:f5:3b:28:34:c2:ef:7e:
         f0:6e:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:09 2024 by rpki-client on console-fra.rpki-client.org