Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File:                     f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier:          eB+DaQBiUv+0ZpmwijOr3ov1zHNpWkh/QH8qfb4/wqg=
Subject key identifier:   9B:4C:28:D9:94:35:BE:AF:9E:79:CF:54:37:25:1B:13:6F:28:E3:BC
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer:       /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial:       018F87ED24847DA31C38D1ED2E682709ECBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:16 +0000
Manifest this update:     Fri 17 May 2024 19:00:16 +0000
Manifest next update:     Sat 18 May 2024 19:00:16 +0000
Files and hashes:         1: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: hGfEu6fwZEtJTmX0PeK2STQbGpY3qL5/Tf/vVDSy6vk=)
                          2: gabteveofeU_XQ1bf06jRA9fsog.roa (hash: EZFkoV6FmK0+tHNXLof/Xn/A4Ny+nefMZB4qXLc9MSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:24:84:7d:a3:1c:38:d1:ed:2e:68:27:09:ec:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
        Validity
            Not Before: May 17 19:00:16 2024 GMT
            Not After : May 18 19:00:16 2024 GMT
        Subject: CN=9b4c28d99435beaf9e79cf5437251b136f28e3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:1d:4e:7d:bf:85:a4:ea:a2:5b:61:c9:dd:
                    d5:27:8b:31:db:98:ce:ce:0d:27:5c:06:ad:84:58:
                    28:2d:fb:2b:c2:c2:82:f8:2c:c3:a8:97:3c:3c:95:
                    e7:91:b6:93:c9:bc:c1:09:51:b7:b0:63:02:3f:e5:
                    54:41:b1:55:09:74:48:8e:ee:f0:69:fc:2a:83:1c:
                    5b:03:9d:31:8f:ea:95:d0:1e:0a:d8:3b:bb:d4:35:
                    0a:8b:f6:d0:9d:ef:68:06:fb:54:11:08:49:8b:08:
                    c2:72:a3:39:d1:d1:51:84:c0:fd:ec:92:0a:95:d8:
                    ff:5a:09:32:00:10:ee:54:e3:f2:dc:81:70:d7:54:
                    f7:41:4f:19:fe:80:e7:ed:b5:da:d2:66:1e:5c:2e:
                    f6:c2:98:5d:5b:87:d9:da:01:fa:fd:5b:f3:06:b8:
                    56:ed:81:d5:40:19:29:2c:b3:f7:d5:31:8f:6a:7c:
                    a6:23:d8:da:51:59:82:fd:e5:e7:17:ea:cb:6f:98:
                    b4:20:53:e7:af:dc:b9:41:65:7e:bd:7f:a1:fa:64:
                    03:be:9a:6b:cc:37:c3:54:87:d9:fe:c4:36:cf:14:
                    b5:80:86:d6:f2:fc:99:5f:52:7b:0a:55:2a:66:f0:
                    9f:84:6b:b7:39:d0:0b:e5:72:c1:a4:8d:29:d2:cf:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4C:28:D9:94:35:BE:AF:9E:79:CF:54:37:25:1B:13:6F:28:E3:BC
            X509v3 Authority Key Identifier:
                keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:73:7a:29:83:f6:2f:73:d3:1d:16:a5:a9:f5:59:8b:82:4f:
         fe:ce:fc:0c:6c:b5:89:25:13:d0:a9:fd:de:eb:de:79:c8:14:
         21:c9:95:9d:70:22:48:ce:0b:ff:ac:d7:92:35:94:3d:49:d4:
         44:44:a5:5f:c1:dd:95:b1:bb:3b:80:62:a3:02:02:84:26:f5:
         73:f9:c4:e3:8d:6b:c0:10:a3:16:de:0d:b4:6a:dd:c2:77:06:
         0f:aa:06:02:45:fd:f4:12:a2:63:4f:e0:f9:df:12:90:9f:a1:
         36:b8:60:f3:68:34:a8:cd:fb:be:e8:89:5f:ed:f6:59:98:12:
         73:ae:f9:ea:0f:3e:b9:de:12:38:a9:00:da:b0:aa:da:e1:99:
         4d:c9:aa:f1:bc:39:e7:49:49:cd:b2:f7:f3:8d:2e:16:5d:cb:
         c4:da:79:d9:0d:46:7f:6a:2a:d6:bb:b1:6f:6f:00:84:f6:11:
         86:06:f5:45:ac:38:23:b7:99:a6:1f:43:9f:27:e2:f3:07:1c:
         a3:2a:2e:0e:c4:41:aa:44:7e:5c:ea:53:c7:ba:d5:e8:4d:e6:
         e5:0a:31:be:b0:04:93:33:7c:6f:30:2d:7e:a1:c8:cc:92:bd:
         59:6b:ae:55:ce:81:92:ee:dd:04:6f:b1:b1:d7:c4:a1:fa:67:
         65:9f:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:08 2024 by rpki-client on console-ams.rpki-client.org