Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File:                     h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier:          EtAnEIMwta31j+U0AIM22BC1njiRUzezsprvvJ5ZayI=
Subject key identifier:   B3:8E:EB:B2:31:6F:43:3E:F4:C0:5D:CB:41:F8:E6:D4:F0:01:37:F4
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       01905C251B3EAE9FE97D7F0DE34E3BD46164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number:          056E
Signing time:             Fri 28 Jun 2024 00:00:53 +0000
Manifest this update:     Fri 28 Jun 2024 00:00:53 +0000
Manifest next update:     Sat 29 Jun 2024 00:00:53 +0000
Files and hashes:         1: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: MXP8NgFbgF7ewEqGrV16EFdTu0Hrppet1ZRLZqqJLqE=)
                          2: y2d5m2PkTV-QHXUvbgi3rialUnM.roa (hash: yV8bncUwYZuVWMFFAhnBDyVmfkdzesyblIsmaRbwq1Y=)
                          3: zpBs9fu8j4zmTtAS9arcLjOW2Sw.roa (hash: XADnaW/z7agGU3eGC/gw+4TKQC3nbMfjitnjbXK8J4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5c:25:1b:3e:ae:9f:e9:7d:7f:0d:e3:4e:3b:d4:61:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Jun 28 00:00:53 2024 GMT
            Not After : Jun 29 00:00:53 2024 GMT
        Subject: CN=b38eebb2316f433ef4c05dcb41f8e6d4f00137f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:86:2b:c4:91:61:e3:92:9c:ef:5b:39:b5:
                    0c:5c:6f:38:c5:3e:76:d1:b8:2c:24:1e:64:11:7e:
                    bc:0d:ef:cd:7a:eb:8b:8e:0e:c0:c8:bf:4c:73:b2:
                    ea:61:d2:ee:e5:b4:3b:b0:68:d4:31:85:42:a7:b9:
                    2b:eb:f9:06:81:82:3a:34:ab:b8:e6:d5:4e:c9:29:
                    98:2a:56:85:60:18:df:1e:88:6b:2c:f7:f1:c4:08:
                    ba:fd:6a:2c:69:de:08:69:4d:08:f3:df:7f:ae:cf:
                    44:66:77:ed:5a:a3:6b:e5:c4:ba:da:2e:49:1d:6e:
                    bb:4d:fd:5f:31:bf:ba:d1:d5:ae:e4:46:45:de:43:
                    9b:15:b3:db:1f:20:bc:3b:e9:0a:3c:c7:a0:aa:e4:
                    ae:3f:05:c6:9d:12:30:11:69:66:14:88:ff:d7:f5:
                    04:15:6b:41:62:aa:72:d0:b4:2d:2a:57:38:cd:ec:
                    9d:ca:bd:a9:cc:a7:db:a6:2b:e9:87:7e:3a:48:df:
                    1a:42:f4:91:47:de:08:e2:52:ee:38:aa:3d:28:56:
                    2c:58:d0:9c:09:77:3d:a3:4e:a7:8d:99:eb:ef:a1:
                    e3:f3:3d:34:be:ca:e6:0d:5b:47:29:18:7a:01:9b:
                    a4:30:af:83:96:56:01:a9:b7:8d:41:f0:96:0e:b3:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8E:EB:B2:31:6F:43:3E:F4:C0:5D:CB:41:F8:E6:D4:F0:01:37:F4
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:e5:1c:cb:b2:76:93:8e:70:07:79:94:f3:40:cd:3d:da:
         a5:5d:3a:b1:10:6f:90:b0:bd:c9:10:ab:58:82:17:8f:10:0a:
         65:63:3d:27:c5:cd:81:2b:31:43:72:87:55:99:9e:48:1a:de:
         93:d5:41:07:0e:fa:65:6b:b5:4f:6a:8c:c8:e8:4f:a2:12:de:
         68:a2:37:c0:b6:25:96:b3:e9:50:8d:2b:c7:05:af:18:db:17:
         6f:54:ec:b6:23:ff:0c:95:00:a8:b0:7d:25:3c:d9:a9:5f:5d:
         8a:c0:60:34:d0:6b:4c:a9:57:ba:8f:e1:08:14:52:74:05:cb:
         9d:e5:eb:2f:88:fe:40:ca:3e:89:22:cf:e5:f1:67:2b:66:4c:
         6b:db:cf:bf:47:69:88:50:48:b8:7c:1b:b4:bf:8e:77:57:f4:
         0e:9c:85:28:4f:04:d8:ab:c1:71:57:b5:0e:22:31:a0:3e:2d:
         09:32:49:ea:f7:ea:03:18:97:8c:4f:64:a0:0f:c0:a7:57:32:
         83:e3:1c:ba:58:cf:27:1e:b2:8f:84:40:f4:7c:95:27:2c:58:
         4c:7f:fe:05:df:18:5f:87:d8:a4:d3:a2:e8:9a:1f:b6:20:72:
         7a:f5:9e:fa:3a:8f:1f:48:93:84:e8:d0:67:00:5f:31:b4:a6:
         79:d9:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 08:01:49 2024 by rpki-client on console-ams.rpki-client.org