Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File:                     neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier:          wnEdLsOi1osBW6Up2GB+mWoiABu9pWhHlVnUsah5gKs=
Subject key identifier:   5F:40:CE:14:34:68:E3:49:29:FE:0A:22:2C:E5:E4:D3:7A:71:BC:50
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer:       /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial:       018F86DA6857E6D0647F5BC51D51F2EDC604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number:          01A7
Signing time:             Fri 17 May 2024 14:00:11 +0000
Manifest this update:     Fri 17 May 2024 14:00:11 +0000
Manifest next update:     Sat 18 May 2024 14:00:11 +0000
Files and hashes:         1: 7njUTwoSyXJyEhxQsw7-PJsFbfc.roa (hash: e9Yz3qtxZvziD2qgKIQInTG+qh78EeELmoa2kN5lXFY=)
                          2: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: 03B0r6H2/I/tGllNtdGl1MhZq6fmqsEdyCpUJtL40qk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:68:57:e6:d0:64:7f:5b:c5:1d:51:f2:ed:c6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
        Validity
            Not Before: May 17 14:00:11 2024 GMT
            Not After : May 18 14:00:11 2024 GMT
        Subject: CN=5f40ce143468e34929fe0a222ce5e4d37a71bc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:0f:f5:21:93:b2:c4:f0:11:ad:68:24:07:
                    81:54:79:c4:96:36:cf:38:04:46:f4:de:7d:29:19:
                    55:94:27:8a:59:97:f6:8b:9f:a8:07:42:5d:5b:8d:
                    bf:7a:7b:01:b7:a4:38:72:70:99:3d:e1:89:ee:24:
                    ec:8c:a5:7a:ff:84:ce:98:1d:bb:56:c0:54:96:87:
                    5c:4b:33:6a:ac:bc:16:cf:5e:a2:27:be:f3:a9:7b:
                    16:74:ea:7a:82:89:aa:35:30:fb:ac:0a:11:24:02:
                    be:cd:b9:1d:76:67:85:1c:61:d3:9a:66:55:78:e1:
                    49:19:4d:7b:b6:7e:36:70:ec:0e:11:49:6c:a8:c6:
                    14:3b:54:3b:ec:f8:01:f9:37:ac:e3:41:6b:5c:ca:
                    e9:63:c7:d0:31:3e:f5:3b:5b:33:b6:93:df:e3:db:
                    22:d6:d7:c4:20:4a:08:b4:4f:b5:b5:28:4b:48:ea:
                    30:0d:5c:0b:d9:c3:f6:50:6c:ee:33:73:8e:23:c8:
                    44:19:ff:68:1f:5a:9b:14:f0:60:35:ac:a6:97:e3:
                    36:2f:c1:a5:68:08:33:5c:e0:33:cf:1c:06:1f:2a:
                    8b:a9:ff:fb:9b:ef:19:68:27:7a:1b:35:4d:a6:cf:
                    19:f2:f0:c7:f2:f2:bb:6b:1a:35:5d:1c:d3:7a:88:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:CE:14:34:68:E3:49:29:FE:0A:22:2C:E5:E4:D3:7A:71:BC:50
            X509v3 Authority Key Identifier:
                keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:12:ee:f3:d3:b3:67:3a:6e:2f:a4:f8:5b:84:9c:4e:6d:ba:
         c2:5f:e4:1b:0e:ec:8b:a2:1d:86:59:88:38:3f:22:5a:96:c4:
         25:6d:94:39:6a:71:e5:2a:b2:5c:e3:fd:6a:7a:2a:53:d9:6d:
         04:2b:f2:f0:7d:5e:e1:9f:97:15:88:a5:5f:38:b2:57:bc:f7:
         08:20:b9:79:f5:96:95:c2:70:2b:96:d1:0b:83:c2:6b:22:e5:
         a7:55:be:f0:46:c0:0a:2b:18:77:0c:63:69:33:67:5e:8c:38:
         89:fb:8f:53:c9:d4:22:c2:83:71:82:42:ff:ff:94:f9:ff:df:
         57:41:d9:bf:7a:ee:db:0a:6d:5d:f3:a3:d7:b4:ef:bb:6d:fc:
         3a:79:05:a8:9a:93:82:88:e9:03:b5:91:34:ae:4b:81:7d:78:
         2d:4e:92:2a:4d:55:12:89:85:ac:14:5b:9b:d8:50:21:2b:eb:
         28:5c:5d:29:b4:4c:fe:78:20:a4:ab:89:e3:ea:30:43:66:4f:
         d5:90:ab:c6:1c:22:57:33:59:91:cd:9c:2e:5a:30:d2:de:75:
         a0:84:34:c2:84:bb:d4:29:2a:0c:3c:81:68:bb:4a:01:27:5f:
         76:f3:8d:57:40:ed:9d:c8:85:fe:78:ab:6c:92:d8:0a:8f:cd:
         95:77:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:40 2024 by rpki-client on console-ams.rpki-client.org