Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          +9JDlYXT0XVuLA584CKoRp4Jn4r89e3NKMy7qHdVLng=
Subject key identifier:   29:8B:75:22:D7:34:47:71:FA:D4:E5:65:0E:DC:1C:AF:BC:96:89:31
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       018F31064969DFCC33887644A55185A2C868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1154
Signing time:             Tue 30 Apr 2024 22:00:46 +0000
Manifest this update:     Tue 30 Apr 2024 22:00:46 +0000
Manifest next update:     Wed 01 May 2024 22:00:46 +0000
Files and hashes:         1: 427a0uWYI64ABL3qoX2JnLY9XSs.roa (hash: tfWLrwknvwpa6KuUYS58/0mxIx5m8ybJPgxBqGUiKg8=)
                          2: 8gPhKheXwCBhy0_FdHqN_jUSWBc.roa (hash: 0wFxDp+sf3/Urv0gFkRVg1d+Mor6Xl2jIm/sKdOjNIU=)
                          3: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: 7xkeZB0/r0owTB6FNb5AKDXaRouGhDSUtHXIP4Sl9QM=)
                          4: x9ZzBVcbmaAuHBV29y6JgRXSk4M.roa (hash: fB55gl0dIZUumtqVothDq82RCTuuegDK8zz7R8ns3w4=)
                          5: yKDce5_ZNzkEQNRDCdTC3CL48z4.roa (hash: MuhX3JfYFxbw+ytoczPgteUROe87NgC8FgsqM9UoCaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:31:06:49:69:df:cc:33:88:76:44:a5:51:85:a2:c8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Apr 30 22:00:46 2024 GMT
            Not After : May  1 22:00:46 2024 GMT
        Subject: CN=298b7522d7344771fad4e5650edc1cafbc968931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:f0:69:f7:c2:7c:fd:5e:23:3b:cf:17:7a:
                    81:40:fb:9e:04:87:bf:1f:25:cb:c4:4b:18:5d:a7:
                    75:e6:20:91:b7:a2:e2:a3:78:03:27:a3:8c:ff:ae:
                    80:8d:9d:d8:bf:9b:24:67:45:a2:32:b2:38:a0:86:
                    7a:62:35:fa:34:2b:fe:c7:99:62:46:31:c3:62:59:
                    d6:12:6f:14:38:6e:43:dd:f4:b0:d9:0b:ce:80:06:
                    e1:0e:57:d6:cf:ea:de:9e:7f:74:33:b2:d2:63:bb:
                    a8:49:10:ca:51:19:52:ea:a1:b9:f8:80:10:7c:33:
                    e7:0e:a8:05:aa:2d:29:6b:76:6e:08:94:2f:04:a4:
                    25:f6:a9:40:c2:14:9d:f0:92:7b:ab:7d:c1:a4:0c:
                    3e:01:cb:b9:89:81:fc:81:88:5d:2b:8e:03:24:be:
                    1f:66:e0:e9:d2:03:c8:27:a1:af:bc:7f:a3:ef:e1:
                    9d:1b:eb:b0:51:14:f7:3e:f6:01:e5:ce:16:a9:a0:
                    81:5e:1a:59:2e:b2:be:10:7d:82:f0:a0:bd:bb:b3:
                    29:ca:7e:54:a2:8e:1d:8d:bd:8f:4d:f9:05:f6:9c:
                    0e:39:d3:45:72:dc:05:53:ed:c5:3e:5f:d7:75:ee:
                    78:cc:d9:23:4f:20:cf:4d:c2:d9:53:00:73:f0:f2:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:75:22:D7:34:47:71:FA:D4:E5:65:0E:DC:1C:AF:BC:96:89:31
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ae:05:20:90:9d:cc:bc:f7:fd:46:61:25:82:e9:98:b9:c1:
         58:6f:f1:89:da:e8:cc:dd:82:da:dc:1b:c5:d9:34:21:e2:75:
         33:e7:b1:e5:5b:f2:8c:6d:77:5c:d5:f8:77:fc:20:d1:d3:08:
         38:a1:b7:f1:07:04:f8:37:0c:8d:9d:08:bb:0b:12:c5:41:0c:
         03:8c:5e:ee:de:84:24:5a:19:ad:ee:94:09:2f:e3:c5:70:44:
         02:a0:8b:84:e8:3c:c4:0a:90:e5:e0:8a:c0:f3:04:60:d1:59:
         0e:d4:9b:d7:5b:f1:ac:fa:89:22:d7:5a:fd:5d:63:6a:ce:44:
         8b:62:1d:98:13:dc:f6:94:a8:6e:fa:18:96:07:fb:fd:b4:8a:
         10:81:70:44:01:8a:22:79:cf:6f:ff:df:46:18:61:49:42:da:
         9c:f9:47:49:8f:1e:bf:2c:0c:ff:29:a7:96:fe:79:af:d5:6b:
         87:97:51:75:9f:5f:03:1d:d3:80:61:2a:08:7b:4b:2f:90:48:
         1a:1f:4d:1a:1c:d2:27:ef:e2:0f:5c:0f:a3:da:02:58:82:02:
         3f:30:a1:06:d4:2c:91:5d:a6:b6:27:fe:1b:38:c5:c7:98:e9:
         de:e9:cd:e7:dd:4d:e2:bb:8b:c9:15:e1:05:f3:87:c0:15:47:
         d0:fd:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:40:18 2024 by rpki-client on console-fra.rpki-client.org