Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File:                     smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier:          FgKZVfQPyX6IP709rnV3GoqLuOt/2LF+UzZqWpINmFs=
Subject key identifier:   F7:EF:78:1F:AD:C9:55:7A:C6:E4:3B:70:FE:94:D5:49:1C:FA:49:DA
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       018F945F11DA37327350C976BCA170A50198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number:          0A06
Signing time:             Mon 20 May 2024 05:00:09 +0000
Manifest this update:     Mon 20 May 2024 05:00:09 +0000
Manifest next update:     Tue 21 May 2024 05:00:09 +0000
Files and hashes:         1: 1rxqMkwe53kSwaCy3mGSj-ZUsTY.roa (hash: HakC1r5U5svRxH+355lSpFdS1JtDdnOy4HJS8ahaGEA=)
                          2: FiVjqMHDAgSE7gXFJhvYes2_hf0.roa (hash: /sWso13qcI38NBsIeY/hYwyLMkAFHZtMUZgaclM3bvo=)
                          3: TncL1YSTuGgkZkk-O1e5PW5RD8M.roa (hash: q/URDtVqzmWndEAtkcvu1nyd1z46cd7JQVw0elAz4WQ=)
                          4: WMXPoc13Uqe498O30TMU9o_T170.roa (hash: lft8vD8pORBQtelFXHXBGgVZJyEqTJN0ba+xZvhmwuA=)
                          5: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: pN5lftjZT5vsDCdJnyViist0cHvuFQ/g5IEXlFrt+34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 05:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:5f:11:da:37:32:73:50:c9:76:bc:a1:70:a5:01:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: May 20 05:00:09 2024 GMT
            Not After : May 21 05:00:09 2024 GMT
        Subject: CN=f7ef781fadc9557ac6e43b70fe94d5491cfa49da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:07:83:9b:be:a8:a7:69:f1:a2:da:76:ed:
                    21:c8:37:5b:db:ef:bc:0f:cb:0b:ca:46:f4:6a:bf:
                    f4:a3:f1:4a:77:62:43:80:57:f2:74:7a:4a:33:7b:
                    4e:f3:f4:36:d4:60:13:49:22:97:cc:e9:cc:b1:12:
                    6a:bb:a5:44:26:09:de:e3:31:8f:ee:22:1b:7f:f6:
                    5e:8a:91:38:77:7c:0b:1e:bf:12:4a:03:de:9e:02:
                    94:02:ac:0a:d9:73:81:f6:42:48:9a:06:77:57:91:
                    74:d5:72:fe:c3:93:f5:e9:07:5d:3f:14:3f:ca:9b:
                    20:6b:28:3f:27:31:84:2c:1d:96:65:94:a2:07:a9:
                    16:13:52:cb:15:2f:e1:7a:15:50:dc:0e:6e:9d:ab:
                    fa:32:74:94:44:cd:58:7d:4b:aa:6f:2b:cd:6b:23:
                    63:31:d0:de:7c:a2:c2:e3:d7:7c:77:76:5f:00:0e:
                    02:e1:51:d9:da:7f:f0:d4:8d:3c:7b:5e:6d:c9:42:
                    18:5e:1f:1b:a7:74:e4:a7:e8:94:35:20:14:26:69:
                    c0:dc:e2:61:05:7a:61:e0:f5:d6:bf:a8:a0:1a:1b:
                    c1:67:b9:8b:7a:39:ef:b7:d5:d2:c3:4a:28:69:1d:
                    1b:12:64:0e:be:e6:5d:93:7b:d9:47:0f:d2:9e:56:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:78:1F:AD:C9:55:7A:C6:E4:3B:70:FE:94:D5:49:1C:FA:49:DA
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:d7:d6:9d:3c:3c:eb:a3:a0:5f:19:77:12:51:e2:c3:11:
         e3:8b:e3:59:9e:0f:2b:7e:e0:27:b7:fa:7d:46:37:db:be:32:
         d4:26:c8:6f:c6:ad:85:1a:40:2f:91:4b:5c:8c:2c:41:97:97:
         01:d9:bb:f9:ba:78:bb:3e:d8:0e:97:09:65:4c:8f:e2:9d:86:
         6a:e4:8f:ce:b5:ee:78:21:0f:0e:77:0e:cd:5a:0d:c7:22:08:
         9d:93:20:9c:7e:41:28:91:6b:91:7e:c5:81:40:ab:27:d7:3d:
         a3:43:9a:2b:c5:f5:80:ac:d8:1e:ef:5b:0d:0b:0a:b6:1c:32:
         c3:db:b6:53:98:e3:ad:c2:8d:fd:e9:e0:9b:89:00:94:e5:f2:
         90:18:a7:ce:1f:9e:3a:56:22:f4:41:b5:bc:96:d6:d0:b9:3a:
         4d:6f:a1:4a:30:c1:60:21:59:9a:7e:c6:96:d8:e7:56:88:2a:
         c6:7d:f9:8b:ca:1a:8a:46:bf:e7:b0:c3:39:52:8b:3a:1e:1a:
         36:24:5c:0d:0b:3e:87:af:cf:18:8d:9a:72:b1:f6:34:f4:98:
         1c:4f:9b:17:2a:20:34:50:aa:01:fe:b1:18:45:68:3a:b5:02:
         27:ed:c3:20:a5:12:07:62:53:94:b7:34:17:56:f5:58:bd:eb:
         56:08:00:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+UXxHaNzJzUMl2vKFwpQGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNjJiZjIxZGU1MTM4NTg1OTQxNmM0YzYwODAwMWUyMDI1
YTVkMjUwHhcNMjQwNTIwMDUwMDA5WhcNMjQwNTIxMDUwMDA5WjAzMTEwLwYDVQQD
EyhmN2VmNzgxZmFkYzk1NTdhYzZlNDNiNzBmZTk0ZDU0OTFjZmE0OWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hEHg5u+qKdp8aLadu0hyDdb2++8
D8sLykb0ar/0o/FKd2JDgFfydHpKM3tO8/Q21GATSSKXzOnMsRJqu6VEJgne4zGP
7iIbf/ZeipE4d3wLHr8SSgPengKUAqwK2XOB9kJImgZ3V5F01XL+w5P16QddPxQ/
ypsgayg/JzGELB2WZZSiB6kWE1LLFS/hehVQ3A5unav6MnSURM1YfUuqbyvNayNj
MdDefKLC49d8d3ZfAA4C4VHZ2n/w1I08e15tyUIYXh8bp3Tkp+iUNSAUJmnA3OJh
BXph4PXWv6igGhvBZ7mLejnvt9XSw0ooaR0bEmQOvuZdk3vZRw/SnlZFeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfveB+tyVV6xuQ7cP6U1Ukc+knaMB8GA1UdIwQY
MBaAFLJivyHeUThYWUFsTGCAAeICWl0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEt
MTRjNmM1MDU1Zjg4LzEvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEtMTRjNmM1MDU1Zjg4
LzEvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqnX1p08
POujoF8ZdxJR4sMR44vjWZ4PK37gJ7f6fUY3274y1CbIb8athRpAL5FLXIwsQZeX
Adm7+bp4uz7YDpcJZUyP4p2GauSPzrXueCEPDncOzVoNxyIInZMgnH5BKJFrkX7F
gUCrJ9c9o0OaK8X1gKzYHu9bDQsKthwyw9u2U5jjrcKN/engm4kAlOXykBinzh+e
OlYi9EG1vJbW0Lk6TW+hSjDBYCFZmn7GltjnVogqxn35i8oaika/57DDOVKLOh4a
NiRcDQs+h6/PGI2acrH2NPSYHE+bFyogNFCqAf6xGEVoOrUCJ+3DIKUSB2JTlLc0
F1b1WL3rVggAjA==
-----END CERTIFICATE-----
Generated at Mon May 20 10:21:19 2024 by rpki-client on console-ams.rpki-client.org