Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File:                     rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier:          MlTRUqud4VJ+KkejvGfBttdsQFDliNRFcnVfiy5YCNY=
Subject key identifier:   67:7C:34:66:F3:B2:60:F4:EB:99:D0:8A:18:B5:AE:C1:B1:27:9F:BB
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer:       /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial:       018F87488D3560C2E137C5A0981AF760B253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 16:00:29 +0000
Manifest this update:     Fri 17 May 2024 16:00:29 +0000
Manifest next update:     Sat 18 May 2024 16:00:29 +0000
Files and hashes:         1: 68hMY9hh5lw56Kw_wL7oRNQT4Dc.roa (hash: kzXaF8FjIY6GUfbcvlIKWmr+kZWMSYWCUR1CBzVhKqQ=)
                          2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: jxjer5pUbpHwSwjdfT+6X0+yynw2B777WtUUefKJ7z8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8d:35:60:c2:e1:37:c5:a0:98:1a:f7:60:b2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
        Validity
            Not Before: May 17 16:00:29 2024 GMT
            Not After : May 18 16:00:29 2024 GMT
        Subject: CN=677c3466f3b260f4eb99d08a18b5aec1b1279fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:40:e5:dc:a4:4f:d3:4d:e1:30:e9:65:33:
                    91:c2:bf:6d:70:42:9b:2e:d0:dc:2b:34:9b:ec:bb:
                    b6:15:39:33:25:4d:90:f3:7b:f6:75:39:96:bf:f8:
                    1f:0a:90:3a:73:ec:63:7c:c7:ff:70:09:80:d1:1d:
                    20:d0:be:d3:00:8c:7f:86:0e:54:12:cf:32:03:02:
                    91:0c:32:34:42:b2:0a:a8:cd:d6:f8:b0:0c:fd:14:
                    33:57:2f:60:96:dc:fd:31:f0:85:dc:d3:27:ef:e2:
                    9e:12:a9:72:53:95:b9:06:94:59:7d:8e:46:be:00:
                    e6:9b:30:36:1a:80:08:e2:1c:e2:41:c4:d3:02:56:
                    00:8e:3c:7f:75:83:a2:f0:0e:20:52:8c:ce:20:68:
                    36:98:f6:ac:6c:1b:05:c1:1d:78:ef:b7:ab:b4:67:
                    04:6d:12:ce:30:09:f8:22:d3:98:77:5c:42:b0:ee:
                    78:35:f9:1d:38:2c:0c:b6:3f:cb:c2:ef:98:ca:c3:
                    77:98:1f:e0:41:cc:c2:c8:51:07:dd:92:57:24:c3:
                    f8:8a:79:ef:b5:da:18:aa:f2:83:8f:c1:d4:87:c4:
                    5e:93:00:86:eb:4a:2e:34:46:22:c4:5b:10:bd:8c:
                    15:dc:38:50:a0:45:a2:a6:34:85:34:9e:75:1d:3d:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7C:34:66:F3:B2:60:F4:EB:99:D0:8A:18:B5:AE:C1:B1:27:9F:BB
            X509v3 Authority Key Identifier:
                keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:7c:b5:ce:fd:84:a7:8d:46:e7:8c:c6:12:d7:8c:4d:5c:
         18:ed:7b:be:87:7c:26:7a:09:39:c4:ee:eb:5e:d6:8c:dd:cf:
         48:d6:d1:6a:47:81:77:53:04:06:f5:50:30:75:8a:ac:eb:6b:
         ee:91:fe:36:f1:40:e4:12:01:ba:61:c7:14:41:aa:e0:54:04:
         76:08:bb:12:25:6d:58:7c:9b:1b:a3:f2:a6:4b:2e:3f:13:8b:
         7e:29:2d:af:dd:8f:8d:9a:bc:99:d1:a3:6b:fb:f6:f8:98:3a:
         25:bc:4c:1a:94:ca:3d:f7:99:ff:56:0d:a3:ed:30:59:7d:7d:
         de:ff:2d:ff:26:9b:82:48:31:b5:9e:0e:6d:69:73:a0:80:c6:
         fb:3d:e6:a3:1b:30:8f:02:ed:7b:19:c5:4a:7a:43:c5:a9:ce:
         b5:6b:81:59:24:2c:d9:23:ab:ad:ca:d0:34:7b:27:46:04:de:
         d7:cb:db:71:41:61:b9:e4:ba:0f:47:9b:9f:4d:6e:4a:27:25:
         86:c4:c0:8b:2d:d4:24:dc:b9:8d:43:5e:db:ca:e2:92:84:9b:
         85:92:ff:40:dc:f0:0f:9f:87:45:06:3c:b9:e8:b8:8f:06:5a:
         f1:e2:e8:ba:ee:f1:3e:47:1d:ca:f9:c3:7a:5a:68:7c:c2:23:
         e3:5b:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:19 2024 by rpki-client on console-fra.rpki-client.org