Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File:                     TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier:          wsJWhJGtVPhZjsP1Z2E0cGCmVIBmgkE3jGn8jsjBVPw=
Subject key identifier:   E4:1D:B3:70:AF:ED:41:FB:D6:EC:E0:0F:D1:EA:6D:67:5C:30:1A:1B
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer:       /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial:       018F885AD2BB605D087E9F8E7E70561772C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number:          096F
Signing time:             Fri 17 May 2024 21:00:04 +0000
Manifest this update:     Fri 17 May 2024 21:00:04 +0000
Manifest next update:     Sat 18 May 2024 21:00:04 +0000
Files and hashes:         1: 5j-brwgKAhHNVV6aCiy18Sub8x0.roa (hash: BRfGUH4qGEL0TyqDbDiwfuCz7Aw3IppKI96auUUdSLI=)
                          2: 6Kk-tsT9UImB9pMuyl0jeFjwf3g.roa (hash: v72SNIS+OEllFGMxqQKbKrA8yT/AcpD3yj987bpzJr4=)
                          3: 8QlFz5vNMVGw8sNU9iJogsoEpHU.roa (hash: yYwB8AEN7vbVd9UeyiqiZfEREeJy9PJrZ0RYWHavo0k=)
                          4: Lg_3nvVILwJnqu90_F3r9zAbk1Q.roa (hash: Q0ny1HlY3b3aRqcBediRfq8vFNRjOY3D2KpynCrHJ/Q=)
                          5: RNXnZ6tSnf-hLEK25bTBgFR3KWY.roa (hash: j8zbSO2ktDh4hlM6lC87JtSye9ArNt2wTxfDZfWqIUY=)
                          6: S6ZMqQTFCkrHxDOFpIME8xKCp3o.roa (hash: rZN7BidfkriV+NUBzbFt330F+B5xpVzksLgmTqdWsKs=)
                          7: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: 1BIdn2x5ZEsk34a4f0s/P1fu7HmHUscD+c0J3zIBDN0=)
                          8: toAtmFEkjhnorhD8eVm55Txj9XM.roa (hash: /FBLoYtt4a0KxbFHPyFCQ9VvcwmmxqKrr/HFfBeMSQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:d2:bb:60:5d:08:7e:9f:8e:7e:70:56:17:72:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
        Validity
            Not Before: May 17 21:00:04 2024 GMT
            Not After : May 18 21:00:04 2024 GMT
        Subject: CN=e41db370afed41fbd6ece00fd1ea6d675c301a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:8a:f8:ef:8c:f7:e5:6e:6d:9d:b2:6b:3b:
                    f2:d2:01:d6:7d:bc:7d:ce:9d:95:b3:15:c4:b6:37:
                    ce:2b:b0:2e:b1:1d:c0:88:c8:15:86:6b:39:8c:45:
                    a2:b0:99:b3:ec:37:d2:59:8e:e6:a8:b3:9a:bf:c9:
                    25:01:22:34:10:37:b5:a9:a6:f9:e2:f9:61:a1:4a:
                    68:c4:d2:70:aa:46:1c:e8:8b:31:a5:a9:9d:09:c9:
                    f5:ac:8e:3e:b9:30:a4:ea:d3:09:20:51:db:9c:0e:
                    a4:8b:f0:a0:0c:ee:29:cf:33:ae:13:d2:c3:ac:16:
                    27:f3:b5:4e:75:40:53:ba:a3:20:93:bb:17:ee:1b:
                    d8:af:91:c2:5b:fd:f8:73:15:26:e6:b6:4d:87:e1:
                    ce:c7:5b:bf:dc:4b:41:82:00:25:97:3f:d6:26:e2:
                    c9:e5:2f:51:da:f1:d0:c5:f8:a9:c8:43:8c:e7:5d:
                    98:2b:10:a8:cd:ff:fe:fa:35:0b:2a:e1:3e:6f:7a:
                    9d:38:9e:16:e1:ae:48:a3:98:c2:ef:72:43:b3:3e:
                    f1:4e:e8:ad:b4:86:c0:5a:b0:4d:92:a2:1d:29:4b:
                    e2:3e:2d:6e:82:56:e5:73:1f:77:4c:34:95:4a:50:
                    b2:2f:e3:3f:2e:11:6a:e6:89:2c:a0:29:34:22:fb:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1D:B3:70:AF:ED:41:FB:D6:EC:E0:0F:D1:EA:6D:67:5C:30:1A:1B
            X509v3 Authority Key Identifier:
                keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:3a:d5:9f:e0:54:84:be:7d:22:11:33:e0:91:22:d2:0b:
         4f:b2:c8:46:6e:4d:9f:47:70:93:01:a3:a7:b0:f2:a7:bc:5c:
         8f:f5:b3:23:90:04:de:da:84:47:84:32:08:92:dd:49:21:46:
         7c:26:6f:1e:4f:97:a9:59:c9:06:e0:dc:d6:44:c1:d1:6a:d5:
         c1:55:4d:77:32:cf:e3:ab:52:f2:ee:7b:73:fe:5f:72:66:28:
         b2:ba:a2:88:ea:02:03:83:ec:85:a7:61:a7:6d:14:56:fa:ed:
         34:84:c2:04:6d:ea:1a:95:1e:a5:e0:0d:5b:cc:c2:0c:eb:da:
         c2:3f:99:43:0c:94:2e:ed:33:c9:ff:44:1c:cc:13:0a:15:90:
         f0:54:ec:d6:0b:44:4c:09:87:1e:a2:c5:48:db:b1:a2:70:6e:
         66:05:5c:d1:f1:da:4d:e4:a4:ae:f9:8c:1c:42:8a:df:eb:45:
         f7:f4:5b:bc:20:b7:68:dc:04:58:85:1d:e6:34:ff:b0:af:05:
         af:df:38:31:46:1d:c3:27:7e:fd:65:e2:d6:49:03:95:13:52:
         1a:b1:11:c7:d3:2a:3d:64:76:11:ad:6f:1b:a6:fa:a0:d8:3c:
         9b:b7:dc:04:9a:67:a1:eb:16:6a:34:b8:76:fa:45:79:b1:ce:
         96:4e:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:06:34 2024 by rpki-client on console-ams.rpki-client.org