Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File:                     NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier:          uMl6gRi4x4Pg3aSm047VWXBfmQxOEIG97I5vsPHzs2w=
Subject key identifier:   87:F5:35:DD:24:32:F6:5C:A0:33:0F:54:76:EF:79:A7:FD:C2:B6:03
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer:       /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial:       018F919599918391BB79815C815B7D5398A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number:          1192
Signing time:             Sun 19 May 2024 16:00:51 +0000
Manifest this update:     Sun 19 May 2024 16:00:51 +0000
Manifest next update:     Mon 20 May 2024 16:00:51 +0000
Files and hashes:         1: 8qpCI0vcqvQfOrCy7xDbAlGfMiw.roa (hash: balnX1TT3LLMLgMcMZ/dra9bMdjmjJSnxz46wdaIazo=)
                          2: A5FxtElQLl-RBCXSEPljGrkCDA4.roa (hash: 8LRm0fgAtL8iG/EMt6XCgZNYlVSbeUOkBronYqbSl4M=)
                          3: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: VqpPhTxjJ5hHiBXuMynMJwznQtD1X9cxQYFCxuT5QqY=)
                          4: QU3JAvPGHx6Fi3ztK-qewLh80qo.roa (hash: XVW4p0SRVe9E/QzqAVLa8xgU6jhaI7QWoeTixrkQveI=)
                          5: ZYuWYCPAyuKuPzZcZgGYbzjOjkU.roa (hash: HOZKCm4znhX+AoU/T+xzLKeD6jZQm/HATXFvYvHktw0=)
                          6: jDt7u2twT7csb6qf0qeLdE5sAvE.roa (hash: iAHCFrZZt/cvZ+wiCQ6x/qWsz+ydMgJzqcHW2Qc8EeA=)
                          7: zosyD68uq9hZU5tVU4ktw4j8Vm0.roa (hash: ZjeSnAuWJ2/vEgIUdYR+KBUgskDzb3oxXjorNcTaTxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:95:99:91:83:91:bb:79:81:5c:81:5b:7d:53:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
        Validity
            Not Before: May 19 16:00:51 2024 GMT
            Not After : May 20 16:00:51 2024 GMT
        Subject: CN=87f535dd2432f65ca0330f5476ef79a7fdc2b603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:2f:5c:1a:9c:98:e2:d5:64:33:eb:f3:3d:
                    56:29:d7:60:9b:76:4a:79:b6:3f:b1:7c:35:3a:09:
                    09:94:6c:11:ba:76:54:e0:1b:73:b2:58:fd:b0:26:
                    65:64:eb:93:73:c6:38:59:e7:8f:b7:9e:33:89:e8:
                    b5:13:ab:c9:de:91:d8:ec:95:8a:7f:72:70:1f:5c:
                    7f:b5:13:16:05:65:1a:d0:22:0f:58:a0:20:f4:2b:
                    fe:db:ba:a6:af:be:e4:f5:b6:97:b2:d1:32:f1:b8:
                    cd:e4:31:5e:2f:6c:88:a9:c3:ac:bf:a4:d2:84:1e:
                    56:e4:ab:7e:47:fb:4d:d9:70:1f:9a:4d:28:ce:47:
                    a8:e9:00:9e:9c:0c:64:ae:f8:c6:fc:dd:76:24:44:
                    45:23:d3:d2:9a:c5:90:7f:6a:58:78:e0:ca:81:a8:
                    21:7d:aa:50:24:b4:fd:3a:37:0f:1c:55:f2:e3:8b:
                    4f:9b:91:80:13:68:f3:d4:35:5d:08:28:28:61:e8:
                    a6:d9:6d:3e:4f:1e:d4:da:d7:d6:ba:cf:73:22:f7:
                    d0:53:ed:bd:f5:4e:f7:ee:4b:2f:06:f0:68:7c:c0:
                    a8:07:97:e6:ad:08:49:3e:58:64:e9:ed:e1:7f:2c:
                    a2:01:81:d2:a7:1d:f7:4f:4d:3a:1b:b2:be:91:ec:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F5:35:DD:24:32:F6:5C:A0:33:0F:54:76:EF:79:A7:FD:C2:B6:03
            X509v3 Authority Key Identifier:
                keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:03:b1:86:e1:88:b8:2d:f7:6c:dd:0d:8d:2b:39:fa:80:33:
         85:3f:c6:1e:ca:af:7d:5d:70:b6:96:db:81:2b:31:98:4a:5c:
         b7:eb:94:c5:82:79:7c:d9:af:f2:7c:4f:af:93:05:d0:c3:ce:
         6c:55:f9:a2:20:0b:be:d2:e6:c6:17:4f:74:bd:38:26:aa:e3:
         fa:21:42:c4:f8:c9:e1:3b:5b:00:cb:ab:91:d4:82:41:27:23:
         5b:06:a1:7e:e8:4c:0e:98:07:56:92:d3:ca:28:9d:c1:97:b6:
         f9:d7:4e:6c:23:1a:0b:5e:0d:d8:33:b2:56:15:1e:aa:94:f5:
         59:2f:d5:aa:3d:5f:65:5d:8c:94:88:81:ba:d1:07:be:53:e7:
         77:13:88:0f:30:45:5c:55:04:a0:1f:78:d5:3f:a8:16:74:a5:
         15:ef:d8:86:0c:2c:12:e2:2b:d8:52:c9:f4:00:6e:b2:63:ab:
         86:fd:26:b9:92:cd:ea:86:4e:77:66:cf:e3:2c:4f:a3:88:8e:
         b5:5d:ed:05:1e:b9:4f:4c:87:82:5b:b1:b7:87:4a:56:df:81:
         62:4f:6a:2b:5d:5e:41:70:84:89:ec:ef:6f:ff:f7:5b:35:e0:
         85:31:60:f1:50:83:f6:d8:03:50:66:97:5e:87:f7:75:24:ef:
         84:d6:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:47:01 2024 by rpki-client on console-fra.rpki-client.org