Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          Sjxnv3L2iPkEPneXyIRkhPYzyKzhT+SR1CuYhul6xi8=
Subject key identifier:   D7:C2:C3:61:29:04:13:62:88:5A:A8:80:E7:34:E2:EB:33:0A:AE:65
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       018F85FF5ABE97476D0FFD66FBCCEE8976E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          1138
Signing time:             Fri 17 May 2024 10:00:55 +0000
Manifest this update:     Fri 17 May 2024 10:00:55 +0000
Manifest next update:     Sat 18 May 2024 10:00:55 +0000
Files and hashes:         1: D43cCV1NaxcyuyRHLQGbcwBQ7Xg.roa (hash: 8fngCbEmtjK1a5UniZJ031ZVBruBdCeRcuZVslavI8Q=)
                          2: YR08NTa6W0IioxBXIyf6vyQZi_c.roa (hash: z3p04h/KoWf4Z8x138w8dCGbW0Vj1yrOUbLbuXZbuUs=)
                          3: Z0i4huEfMhEUiO6EBJC9azDFiYE.roa (hash: cwXSY0qBr7nWMmKsJySjnRk/uQop1u8JhLqLZKc7mS4=)
                          4: eJIDug9Sh1lHxFySmnK0bxoLkgQ.roa (hash: I8WJMlpGEgGl77b3BQTnjC4XnEu148r3S0AF7O/8WVg=)
                          5: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: 7goT2JOTYxzgR1oM2ErYVzJ2LtgwfyUhGd5J3UCLvCQ=)
                          6: x5ayqJqWTL5Wto6xLHgxlJnEeK0.roa (hash: GH/WME/nVZ647nJCQsDXvnEMrcM371etXOIP41W2y4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:ff:5a:be:97:47:6d:0f:fd:66:fb:cc:ee:89:76:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: May 17 10:00:55 2024 GMT
            Not After : May 18 10:00:55 2024 GMT
        Subject: CN=d7c2c36129041362885aa880e734e2eb330aae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:d8:ec:4b:fb:d4:06:cf:e2:1c:53:97:c9:
                    02:12:f7:e6:85:e1:8a:62:56:3e:6e:db:e5:37:db:
                    72:b2:4e:be:3d:ca:f4:07:c5:4f:21:52:38:97:2b:
                    94:40:02:22:7d:76:c8:28:25:bf:73:1b:ff:5f:6f:
                    f9:5d:17:fe:d0:25:61:cb:7b:77:20:d4:98:28:ce:
                    af:77:42:39:d0:e1:d9:ac:61:78:a1:35:bf:4a:b3:
                    78:8c:a1:88:d9:b4:a8:bc:a2:cc:cd:83:b0:f6:81:
                    b5:90:79:c9:ef:cd:c3:29:3e:2f:86:29:e1:97:3c:
                    93:60:c4:49:ce:30:0d:f1:18:8f:12:9e:5d:20:7e:
                    9c:60:88:62:b2:68:99:ee:b9:ef:1a:24:e5:a5:bf:
                    47:61:93:11:13:83:8f:ca:6a:5a:ad:0e:78:96:aa:
                    3e:f6:33:e6:97:de:45:fa:be:ad:10:25:26:27:c9:
                    66:00:5b:90:10:c7:89:b2:b3:e4:fb:d5:10:d5:21:
                    c3:e0:3a:99:b0:3b:c4:13:3b:18:99:29:b5:c0:f7:
                    66:4c:b4:d2:d7:cf:73:84:05:44:67:ed:d2:9d:b4:
                    c6:0c:82:96:58:62:82:95:71:12:a0:4c:3f:88:02:
                    fc:56:55:fa:2c:e6:50:e6:6e:8a:45:84:f8:cd:6a:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:C3:61:29:04:13:62:88:5A:A8:80:E7:34:E2:EB:33:0A:AE:65
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e3:48:74:41:d5:78:33:87:75:82:12:f7:7c:fd:11:db:f2:
         3b:d6:9e:43:66:b7:bd:af:36:ae:cb:ad:c9:65:d1:83:6c:5e:
         ac:85:d9:45:14:d9:a8:57:ea:44:bd:3d:d4:c0:1e:f6:31:42:
         66:88:c9:02:96:37:a2:51:83:56:e3:1f:2f:35:04:a1:82:e7:
         24:29:26:be:2c:fd:13:ce:a0:fe:ab:7b:56:5e:47:87:2e:a4:
         18:09:05:7e:3d:73:36:f0:94:e9:d2:49:28:92:75:60:16:7c:
         b4:cf:a4:1d:f5:dd:e4:81:2b:56:60:ef:96:b1:6f:6d:de:cf:
         59:d9:01:00:32:fe:08:39:81:1b:09:26:86:d6:59:17:0a:98:
         f5:fb:af:92:c1:fb:58:63:38:53:34:09:2b:3c:a2:87:3c:75:
         77:0c:dc:2c:05:7c:cf:b9:01:4c:c2:45:bd:3d:bf:aa:5e:20:
         1d:49:7c:4a:0a:8d:56:ad:a0:d1:e2:32:44:cb:0f:08:5b:cf:
         f1:2e:0c:ed:fa:83:67:9b:78:50:1d:ab:bf:25:42:20:1e:9c:
         06:b7:4f:f3:28:b7:d6:e5:16:40:9f:c8:d4:43:1c:cf:74:02:
         27:76:76:2c:c7:44:12:a4:67:d4:d5:10:a5:a9:ec:36:cf:35:
         0b:2c:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:49 2024 by rpki-client on console-fra.rpki-client.org