Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          EjP1wEhbn+APUcHKeSF+t/ZXdve9JvL9gVf4NbIHcW8=
Subject key identifier:   E3:C2:8E:55:D2:48:20:60:E1:07:6F:77:BE:1C:B3:6F:67:6C:CD:C4
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       018F88FFBCE3C81AAB37CA37C14427B92D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          56
Signing time:             Sat 18 May 2024 00:00:12 +0000
Manifest this update:     Sat 18 May 2024 00:00:12 +0000
Manifest next update:     Sun 19 May 2024 00:00:12 +0000
Files and hashes:         1: 2TmEhMqR5_fns249Qf5u2YhPK4g.roa (hash: NZVAIzg0a70fdzzkhtMUww+j95nJ4Zo6mAlTyItiJnk=)
                          2: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: sUAtruH1j2i3i0RB3bbFcjpWWyBsQNAzErctpWWjeBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:bc:e3:c8:1a:ab:37:ca:37:c1:44:27:b9:2d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: May 18 00:00:12 2024 GMT
            Not After : May 19 00:00:12 2024 GMT
        Subject: CN=e3c28e55d2482060e1076f77be1cb36f676ccdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:6d:8c:69:6f:48:47:b5:0f:2e:10:54:73:
                    b3:8f:09:26:4d:59:d4:ce:2b:d5:a5:54:31:3c:c5:
                    81:6e:73:8a:06:38:32:91:8d:26:93:4c:c3:4a:20:
                    b6:bf:f0:af:0b:cc:c8:c7:5d:25:17:d7:b2:fe:dd:
                    0d:ee:67:4a:f6:9f:4a:43:75:25:19:ab:03:44:ac:
                    b9:bc:49:52:b1:0c:7b:74:3f:3f:78:f1:10:84:44:
                    d9:26:dc:59:f6:f1:ba:01:81:0a:4b:5d:01:48:b5:
                    dd:5d:69:74:4c:d6:62:aa:1b:88:ad:44:bc:6e:03:
                    66:16:25:94:b5:8a:1a:8b:bc:df:cc:8f:e3:c2:01:
                    36:fc:f3:b1:26:ff:48:76:e4:5d:ff:b0:21:49:8b:
                    06:2e:3a:cb:ec:56:85:32:91:e7:df:4a:6b:e7:78:
                    4a:e9:9e:65:69:19:fd:f6:b7:39:7c:4b:d3:ff:10:
                    f4:bb:75:29:76:35:ee:bf:4a:ab:93:11:b9:f7:11:
                    73:3f:5f:66:2f:e4:b6:a5:ce:6f:51:4d:d4:a4:1d:
                    63:12:e8:71:d4:f6:41:11:f1:84:5f:c7:29:76:24:
                    60:f9:49:bb:bd:3c:8b:7e:91:46:96:62:12:88:53:
                    c6:f7:78:65:ac:df:45:69:65:a2:9e:38:3e:0b:5e:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C2:8E:55:D2:48:20:60:E1:07:6F:77:BE:1C:B3:6F:67:6C:CD:C4
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:20:53:71:24:64:e5:9b:b8:9f:ff:cf:c2:4a:ed:51:d3:5a:
         21:8b:05:05:c3:16:c1:b8:3d:f5:33:c1:8f:b0:e2:71:3c:0a:
         a1:f7:3f:f6:3e:97:f5:02:6f:8c:32:b9:c9:35:83:6c:b1:d5:
         a9:36:7c:30:76:da:9a:7a:15:a1:04:7d:20:b4:76:48:7c:82:
         59:b8:5b:78:17:65:5e:df:db:1a:70:7d:c6:6b:82:8b:32:99:
         8c:28:d9:d3:25:e9:93:70:9e:60:a1:6d:1d:48:12:e7:4e:f5:
         ea:ff:e6:81:22:b9:73:21:d3:d8:66:7d:cc:be:ae:9b:83:67:
         32:f7:be:26:18:c5:c9:19:42:53:61:56:0b:8b:6e:23:b0:1c:
         9b:e8:c2:c7:35:cf:67:5f:de:02:dd:a7:02:a2:fa:57:b7:3d:
         14:38:6e:81:c9:2d:49:ad:5d:aa:8e:12:9a:7a:40:52:30:37:
         d4:d8:bf:c9:ae:09:1f:9d:53:81:b1:f7:13:2f:5f:f3:0a:af:
         83:2d:98:b8:bb:b8:27:38:04:a9:2b:52:c7:06:ea:b6:df:87:
         e1:70:96:45:47:13:ab:c6:b3:70:54:6c:62:ab:1a:28:8b:42:
         eb:4a:70:60:f2:94:20:ec:19:52:c2:2e:0b:4f:a5:b0:b3:17:
         88:ac:83:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:50:43 2024 by rpki-client on console-ams.rpki-client.org