Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File:                     ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier:          1hkWFbA+ziqV8fZcIGaRp2+kc2379KGLsDTh9bl0w0c=
Subject key identifier:   16:8E:C5:9E:EE:41:C3:3B:D9:70:78:CB:72:6D:75:09:E3:E4:AA:D3
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer:       /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial:       018F87B60E1295282C97B950154C54F1310D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number:          09D0
Signing time:             Fri 17 May 2024 18:00:06 +0000
Manifest this update:     Fri 17 May 2024 18:00:06 +0000
Manifest next update:     Sat 18 May 2024 18:00:06 +0000
Files and hashes:         1: XAxc8nrxQe_9foz5eXAz5zRx75o.roa (hash: 44ppZwWS+xmwT7dXs8B2ZU09bH3kbsTFiWSjnn9xSLM=)
                          2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: EMl13vUlv7CH3ifbdjKyk4scsZJGU0VcumpCtBOlR2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:0e:12:95:28:2c:97:b9:50:15:4c:54:f1:31:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
        Validity
            Not Before: May 17 18:00:06 2024 GMT
            Not After : May 18 18:00:06 2024 GMT
        Subject: CN=168ec59eee41c33bd97078cb726d7509e3e4aad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:88:26:78:b4:02:db:55:12:73:ba:04:d8:a0:
                    9f:37:63:ce:e7:57:39:c4:2a:07:d0:4f:b7:a2:fe:
                    45:d9:7a:4c:a8:85:9f:26:a3:ff:d5:00:2f:45:26:
                    c1:60:be:3f:36:64:6c:35:d4:c1:78:9d:10:07:d9:
                    d1:df:01:1c:bc:bc:eb:1e:b4:ed:63:3c:fe:6d:2d:
                    60:16:0b:f6:3e:6b:9c:1a:2f:95:e6:5c:d4:bb:e2:
                    b1:5c:33:c4:b1:71:b8:b0:76:b2:3c:8e:ed:20:eb:
                    25:89:58:dc:41:e6:4e:03:53:2e:1a:fd:7c:f6:cc:
                    26:95:e3:2a:dc:25:8a:bd:ee:71:0d:6a:13:60:63:
                    09:5a:74:f3:c9:03:6e:46:81:5f:38:e3:ee:23:94:
                    bf:e2:4d:26:50:9a:c8:6b:5e:bd:82:60:b7:a8:86:
                    8b:e6:56:27:67:07:a8:8d:15:6b:50:c9:d1:20:68:
                    2c:30:a1:57:67:24:f1:e9:07:12:15:f5:41:17:60:
                    2b:1e:60:71:9d:e6:31:71:d1:26:4e:ed:3f:6c:a9:
                    46:57:c5:9f:92:48:8c:4a:52:89:68:53:66:ab:18:
                    7f:36:2d:72:48:68:95:1f:f9:3a:58:2b:9e:04:06:
                    47:97:5b:f6:0a:4f:37:3c:32:a9:6a:da:3c:bf:35:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8E:C5:9E:EE:41:C3:3B:D9:70:78:CB:72:6D:75:09:E3:E4:AA:D3
            X509v3 Authority Key Identifier:
                keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:ae:45:c0:32:0d:96:31:26:b3:8a:d3:bf:f3:26:2a:92:
         3e:af:c7:87:a7:0c:17:13:bb:93:95:20:ae:5a:de:ce:50:69:
         85:22:1d:aa:dd:2f:b6:a5:4a:ce:56:e8:9e:6c:62:4d:93:08:
         af:fd:2a:e2:4a:5c:b3:1a:79:13:59:31:9a:7a:76:d8:f2:45:
         20:e5:53:80:6a:f5:04:ed:e1:b1:dc:66:91:4d:ac:04:dd:b6:
         4d:10:04:cb:4a:f3:75:86:0f:dc:f6:08:a2:9f:1e:7e:67:6a:
         fe:84:ad:ea:cf:a8:34:76:c6:7a:6f:5a:94:c7:0b:f2:7b:72:
         4f:68:9d:04:9c:7d:5f:d0:4f:17:75:a9:5a:96:29:1a:c6:9f:
         40:f5:59:81:77:52:74:26:65:e3:72:d7:a6:c6:37:e1:da:b2:
         e1:37:6d:5c:07:bd:ef:12:e1:84:cb:66:ee:4d:0b:ae:e5:0c:
         b9:b1:67:f3:c4:34:40:e7:8b:5d:d0:ea:3a:64:90:a9:ba:96:
         9c:9d:ae:62:e4:5d:64:05:82:f2:25:ea:50:3d:66:05:6b:ba:
         ed:4a:af:d0:6f:d1:b7:08:fb:d2:ae:37:13:89:9f:18:11:34:
         68:98:cb:52:ca:2c:12:40:29:b0:28:8b:a1:8b:ae:20:9a:5c:
         d8:60:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:01 2024 by rpki-client on console-ams.rpki-client.org