Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File:                     bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier:          NE5ej96q/b08TBqnaG0Hr39KVZotxubDs2paQ/8I8Bc=
Subject key identifier:   9C:32:B7:EF:EB:74:26:1D:D7:BC:D8:FA:AE:95:14:C6:2A:9F:FF:7E
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer:       /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial:       018F87B6845AC289E596133E9415695AF766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number:          0FE5
Signing time:             Fri 17 May 2024 18:00:36 +0000
Manifest this update:     Fri 17 May 2024 18:00:36 +0000
Manifest next update:     Sat 18 May 2024 18:00:36 +0000
Files and hashes:         1: T7F0hGxTvkOGfq586kTtLLEtblc.roa (hash: zIQlsZ/NKNKWDaUfT5MBioURWdalTx6UPEfd0bHwKbI=)
                          2: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: PXeTuEq0vAKkc53KY2ex595gTc33OUNWeoyq675fx1I=)
                          3: qrsgFv1N400x51e1ZNYcrcMfTxs.roa (hash: 5de49eBTbFVfaT0uxbbTyXdGAgW1af7n/xHyYtM31us=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:84:5a:c2:89:e5:96:13:3e:94:15:69:5a:f7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
        Validity
            Not Before: May 17 18:00:36 2024 GMT
            Not After : May 18 18:00:36 2024 GMT
        Subject: CN=9c32b7efeb74261dd7bcd8faae9514c62a9fff7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:c1:27:0d:84:47:2a:5a:3d:d9:8c:42:cb:
                    31:da:6f:d0:34:f6:e3:f1:21:a0:96:39:2c:87:a6:
                    79:3d:19:70:af:31:77:f4:bb:81:3e:b6:4b:d4:02:
                    96:73:a6:00:e3:36:fc:ab:04:36:94:8d:fd:59:cb:
                    c7:08:5f:64:3e:39:dc:93:24:28:22:1d:4b:aa:cf:
                    3f:35:cc:b8:67:b4:28:ab:3f:88:45:8a:4d:b1:6b:
                    1b:ff:98:58:ec:61:cf:1f:b5:42:bd:da:9e:1f:b7:
                    e9:78:44:cc:01:5d:c0:c8:33:84:c2:23:45:5b:6c:
                    bb:7f:68:2c:3c:2a:b3:6e:f9:54:50:13:dc:10:e6:
                    97:fc:8e:d5:a1:97:c5:8d:9a:3d:fb:38:3b:1f:6a:
                    9c:43:e2:ca:5a:24:8c:40:f9:ec:44:b0:73:66:68:
                    27:ce:f2:d2:b3:8c:c0:35:6a:c2:48:2f:ab:d0:ab:
                    ad:5b:1f:52:5a:39:6b:3c:af:7e:a9:3a:1c:a2:ec:
                    8d:59:11:ab:d7:f6:d9:26:05:6a:88:e2:99:74:ad:
                    7b:b5:97:69:58:f9:76:c4:a3:2c:32:68:7c:7d:3d:
                    63:98:90:c2:84:29:2d:bc:94:65:d4:8c:89:a4:17:
                    44:d0:46:ab:cb:b9:ed:57:7d:f0:4f:a6:a8:ad:96:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:32:B7:EF:EB:74:26:1D:D7:BC:D8:FA:AE:95:14:C6:2A:9F:FF:7E
            X509v3 Authority Key Identifier:
                keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:b3:b3:96:f8:fc:c5:23:53:00:26:ca:24:90:ef:55:88:
         4f:ff:71:ff:88:c2:c9:39:24:f2:88:d8:0d:81:23:b8:61:c5:
         0b:18:ef:b8:4e:ab:e2:c7:1e:5a:38:47:87:5c:eb:ef:65:2f:
         f1:25:15:03:33:01:42:d2:b5:2a:05:99:af:46:35:e5:fe:c0:
         32:29:60:b2:ac:81:12:58:ef:e7:a9:b4:50:68:cc:3f:a1:45:
         ac:59:11:96:82:34:17:38:7d:0f:82:82:bc:3c:83:9e:91:51:
         3d:ff:c3:84:43:58:bf:09:d1:f6:8f:ab:23:27:65:49:59:b1:
         2d:90:69:37:06:e6:f2:96:ce:32:e0:e3:8e:b0:e5:65:11:e5:
         44:06:28:54:58:cb:0a:a5:67:34:9d:cd:54:e2:8a:db:d8:b8:
         3b:ed:18:45:2b:43:50:27:b1:dc:a5:da:de:0e:a6:e1:95:9b:
         4d:e7:05:61:c1:d6:bd:12:ba:81:6a:58:f7:7e:c2:b2:78:6a:
         3f:5a:05:18:8c:7e:f2:71:79:6f:b8:e0:bc:11:48:93:f6:ea:
         1e:56:8b:c3:22:50:1b:dc:65:01:fe:b5:9c:e5:b7:82:41:5e:
         98:fc:75:13:4e:48:71:8a:14:29:fc:a2:eb:3c:5c:c1:54:d1:
         e4:cd:01:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtoRawonllhM+lBVpWvdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzcwMWQ1ODUwNDkxZjUwMjk5ZWY5M2YyZDc0MDliNzhj
ZDZjOTYwHhcNMjQwNTE3MTgwMDM2WhcNMjQwNTE4MTgwMDM2WjAzMTEwLwYDVQQD
Eyg5YzMyYjdlZmViNzQyNjFkZDdiY2Q4ZmFhZTk1MTRjNjJhOWZmZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYDBJw2ERypaPdmMQssx2m/QNPbj
8SGgljksh6Z5PRlwrzF39LuBPrZL1AKWc6YA4zb8qwQ2lI39WcvHCF9kPjnckyQo
Ih1Lqs8/Ncy4Z7Qoqz+IRYpNsWsb/5hY7GHPH7VCvdqeH7fpeETMAV3AyDOEwiNF
W2y7f2gsPCqzbvlUUBPcEOaX/I7VoZfFjZo9+zg7H2qcQ+LKWiSMQPnsRLBzZmgn
zvLSs4zANWrCSC+r0KutWx9SWjlrPK9+qTocouyNWRGr1/bZJgVqiOKZdK17tZdp
WPl2xKMsMmh8fT1jmJDChCktvJRl1IyJpBdE0Eary7ntV33wT6aorZbBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwyt+/rdCYd17zY+q6VFMYqn/9+MB8GA1UdIwQY
MBaAFG13AdWFBJH1Apnvk/LXQJt4zWyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAt
NjZhMzI5YjZhZmFkLzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83Zjk5N2MtMDdjZi00NGMyLWJkZjAtNjZhMzI5YjZhZmFk
LzEvYlhjQjFZVUVrZlVDbWUtVDh0ZEFtM2pOYkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANezs5b4
/MUjUwAmyiSQ71WIT/9x/4jCyTkk8ojYDYEjuGHFCxjvuE6r4sceWjhHh1zr72Uv
8SUVAzMBQtK1KgWZr0Y15f7AMilgsqyBEljv56m0UGjMP6FFrFkRloI0Fzh9D4KC
vDyDnpFRPf/DhENYvwnR9o+rIydlSVmxLZBpNwbm8pbOMuDjjrDlZRHlRAYoVFjL
CqVnNJ3NVOKK29i4O+0YRStDUCex3KXa3g6m4ZWbTecFYcHWvRK6gWpY937Csnhq
P1oFGIx+8nF5b7jgvBFIk/bqHlaLwyJQG9xlAf61nOW3gkFemPx1E05IcYoUKfyi
6zxcwVTR5M0BMA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:17:13 2024 by rpki-client on console-fra.rpki-client.org