Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File:                     MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier:          rb7A9AEuVo1sQo7RoD3YcotI4khKNWx283kGjDYspaI=
Subject key identifier:   EA:17:85:85:06:79:D1:1B:80:5E:D8:EA:F5:91:16:2B:77:86:AB:32
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer:       /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial:       018F86A3BA081649EF74844A83126FD65408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number:          1076
Signing time:             Fri 17 May 2024 13:00:27 +0000
Manifest this update:     Fri 17 May 2024 13:00:27 +0000
Manifest next update:     Sat 18 May 2024 13:00:27 +0000
Files and hashes:         1: 623k6gsGXBa4ksVmTwjUipYrUAA.roa (hash: SkP0HZnhVeKNbahDYxYQU+FCG2Vk0GYz1Qka/F0GL6w=)
                          2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: MALCyjNNqcgsgVstOwaN/3qvi6IRds43G5mw3WlqnWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ba:08:16:49:ef:74:84:4a:83:12:6f:d6:54:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
        Validity
            Not Before: May 17 13:00:27 2024 GMT
            Not After : May 18 13:00:27 2024 GMT
        Subject: CN=ea1785850679d11b805ed8eaf591162b7786ab32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:63:5c:09:57:8a:ad:48:9d:12:58:8f:d6:
                    60:d3:29:43:8d:5e:d6:da:f7:2d:0e:8e:83:55:84:
                    fc:bd:2e:25:e6:70:ae:3a:6f:73:41:d7:65:09:0e:
                    48:78:4d:81:3f:21:aa:1d:4e:f6:49:ea:e6:b2:81:
                    a5:e4:18:a2:bf:45:3d:1c:8c:93:6f:80:c2:37:ad:
                    fc:5e:03:67:75:41:23:b4:51:5c:f7:f0:7c:1d:84:
                    36:62:fc:8f:56:e5:af:b6:de:df:7d:df:35:57:76:
                    f0:51:ff:04:3e:40:0e:c2:72:16:20:d1:5e:04:53:
                    a6:a0:28:e6:c3:43:1d:22:90:5c:48:df:e6:b3:d7:
                    f7:e6:a7:80:d0:fc:a9:97:e6:41:cb:e5:53:3e:82:
                    09:4e:d4:ed:f2:74:52:64:17:90:6e:09:fd:4a:ed:
                    fe:f0:36:9f:01:59:bd:f3:57:57:e5:86:d8:db:04:
                    b3:c3:fe:d7:15:b2:de:f6:f7:a0:07:52:d5:7c:64:
                    f9:c6:e9:ba:cf:70:cb:74:2e:59:dc:4e:5f:9a:d7:
                    21:76:b8:cd:39:05:87:fe:be:fa:48:c6:bb:28:fc:
                    e5:f3:06:10:54:2b:b8:d5:8c:7f:5a:59:8e:26:4c:
                    d4:79:38:d3:cb:a0:c5:4e:e2:03:da:bd:36:8c:c1:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:85:85:06:79:D1:1B:80:5E:D8:EA:F5:91:16:2B:77:86:AB:32
            X509v3 Authority Key Identifier:
                keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:7c:d1:01:ff:02:98:32:62:60:7d:91:69:2c:2c:57:02:
         16:39:09:5d:e9:44:d8:97:6b:a8:15:7f:9c:01:22:af:a7:15:
         6b:43:3e:66:f9:d9:78:49:b0:b1:27:b6:e3:c7:36:af:5d:a3:
         43:7e:04:c2:42:ff:e3:4e:93:e0:10:32:63:24:97:83:d0:f0:
         a2:9b:bd:d7:5e:07:9f:8c:3c:2f:64:76:30:d1:bf:71:7d:60:
         6f:d1:44:91:0e:25:4b:2b:24:84:c2:27:ce:24:34:39:35:48:
         62:e3:7d:13:24:cd:39:54:ea:cb:84:e0:53:85:5d:62:e2:80:
         9d:fa:2f:b0:e2:70:06:1d:02:a5:0a:a4:96:c4:1b:99:0f:4a:
         0c:2b:7a:fd:53:6d:56:56:b7:41:a9:08:86:fc:68:66:9a:38:
         e7:36:a4:6b:b9:08:ab:02:5d:27:e2:6b:b2:d9:b1:c9:4c:89:
         e5:18:62:93:10:6c:71:eb:fd:59:ef:29:b8:7f:64:94:03:86:
         aa:e4:59:07:c4:fa:77:54:47:67:cd:cb:08:1b:36:ed:53:e1:
         17:b1:33:b9:44:c0:a7:a8:8c:23:47:a6:77:ed:e3:55:3f:7a:
         65:8d:71:d3:11:ea:cb:cf:7d:fa:15:a1:30:7b:20:47:2b:be:
         c5:a0:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:06 2024 by rpki-client on console-ams.rpki-client.org