Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
File:                     zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json)
Hash identifier:          aBuGaG7iehwDnUpOlY3xiXExsGpFGytVO24ioX1Od1o=
Subject key identifier:   F3:3E:E9:F1:C6:00:26:66:58:89:5E:23:AB:9A:37:94:9E:59:22:A8
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Certificate issuer:       /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial:       01902ACAE4A897B9FF27D6565C190D807DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
Manifest number:          11D8
Signing time:             Tue 18 Jun 2024 10:00:58 +0000
Manifest this update:     Tue 18 Jun 2024 10:00:58 +0000
Manifest next update:     Wed 19 Jun 2024 10:00:58 +0000
Files and hashes:         1: 0Qt7OjpNfidPxOFab75US5Ul9lo.roa (hash: MwqeILAD2qwWz1AsQSrEMj4S/YMFt+SrZ4G8bzFN9/k=)
                          2: 1XQZ3-ijHPJbcFYb--EtKkAbJSA.roa (hash: G9GzSNAxQjI5rj86Wf7LAMFiVDRRZAsFRlOd4kHiEVI=)
                          3: 26tFgjgcf7yAw77EBfDadbJDTis.roa (hash: RWCxBk3vhvnVCfxrSw1EgBBrAKb5m4lXs72Y9UKfpuo=)
                          4: 2MAeCz_jXQzzf-GDunct4df8rNk.roa (hash: xZgN2VB4k/95iScKJlIkEsDmdbOysGxdo9fT6KXDSYw=)
                          5: 3OmNIoiiapFg1p4ooZN28WxH3kY.roa (hash: waSU7aHw+6khCb7BGI/FjrEVHVnh5FHwSfYCJxXx+RY=)
                          6: 5PCYIBk2_Vkq-R7esvMGrrnVGVM.roa (hash: nMMCamMFIKOP6kiSUlE4m0B6nzz91tK1jjwpPp5W81Q=)
                          7: CHxUr5bzDPnludnyZXt9LDKix84.roa (hash: R7zXfoAIdU0bB+/s7HefYCw1+s5OAmxGD3nObS5LaIo=)
                          8: Dc_BQ7aeiWscTMNJfQAJkXsGC4U.roa (hash: PCQrE53BM44WFQy86ZLdbOn5ruLIXa6tZvAVxJHZTe0=)
                          9: E98USYnzkxVwGeLloyZbJ_L1hiQ.roa (hash: ViUSOr5PdpPu8eMPSICctwpBRqKMB+h66Hew1JW3AZE=)
                          10: HGy0O8L6pfR3V_nIqmRvXJxHX8E.roa (hash: Tf2g1csDzGnewHxvn4K4QdWNDJZS//J9vFO/a+Y6ark=)
                          11: HVK8Qfn4ncFgeifMWGxTzXIxzbY.roa (hash: OnNRj4ii+cmjqcLcRxmg3JEEL+InVhAIOGHvqtTxCpY=)
                          12: IGFZdi20AQt5RH_u_uAm_q4OCOo.roa (hash: dYGq1gqy7BQxbsKVh3Lhvu51bImBIpANaPXpd9JBvRQ=)
                          13: ISi4c69gGa5kEQWMbTeyx3zJGwQ.roa (hash: IShMX+6l8wVICyZf+fK/dBTRgqv9BJuD9/gGwJbcKD8=)
                          14: R1vBdG8FX0LI5_5OPJKVmh2smJk.roa (hash: Nto4i/nJW1GJWb9GY5JjdvPa8pnBbRHFX0QyMvf2ask=)
                          15: T2otlntzY_papWMahPpRtq3xiPo.roa (hash: DSdohlnpfBcACKU95jhR1vlmcHRsiDuzlPJJk9mWte4=)
                          16: eIwRkROJWFdm7eGlSe0zbNujs68.roa (hash: 6ReHo4HR+TzilKFLOtgF4fG0e2xtop5UbJjvocOG1tI=)
                          17: hhI6jqIi9OqIA2OmfFmwwGSMec4.roa (hash: NdSKUwlGopzIj9mDEV6mGaTBZ7JV2mlPQUT7a7nLwKE=)
                          18: iWeUWPVoe6n4PWQDW0PBOab_zt4.roa (hash: 878iwm8fKQ7mw0T0cyU/bWo6BYwH8z/3BItEo1BvS2w=)
                          19: md2Wgn6r7Ad8XFusuP--bYnLgwA.roa (hash: TzKbMGokTLer2FlKwERLxH3TEAAEHT/rRZ+TGIx+1p8=)
                          20: umAwX38iyAwLDFsraAwyfUH0uVo.roa (hash: C1lKA8XAnuuE/vz4GiW+RMO90DZqjwRzClNvxqfHLbo=)
                          21: zNX-Ae2isnWa7soBl8S7pb8AgKw.roa (hash: Adzbes2p8lJHJhW00rztOUjXLdlw77fjrJskXALz3uQ=)
                          22: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: +JwWnstdNSYelGhpcD95sTzagAzlrv/e/yJW4ZfiIn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:ca:e4:a8:97:b9:ff:27:d6:56:5c:19:0d:80:7d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
        Validity
            Not Before: Jun 18 10:00:58 2024 GMT
            Not After : Jun 19 10:00:58 2024 GMT
        Subject: CN=f33ee9f1c600266658895e23ab9a37949e5922a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:28:14:94:a6:d5:74:53:e2:44:e8:20:ba:
                    41:49:f8:a6:80:69:c7:e1:f1:b5:c2:60:a2:4f:be:
                    7c:9a:be:f2:e9:76:e1:58:6c:90:dd:9e:f1:eb:cb:
                    05:a5:86:68:30:7d:59:69:39:e6:9c:5c:ba:84:e6:
                    22:7c:6c:72:4e:ce:17:3e:e4:6f:06:42:17:b9:43:
                    d8:ce:6d:61:b7:cd:c2:a9:31:58:35:46:a3:25:b2:
                    39:4c:9c:ee:44:31:53:c1:e2:25:ef:9f:61:5d:f3:
                    10:bc:ca:e0:78:10:da:dc:8c:58:5e:49:2c:6f:1e:
                    02:3e:02:3f:d6:79:39:1b:a4:37:c4:e3:4f:e4:81:
                    1f:d2:cc:d2:1a:79:ce:af:98:0a:9b:89:e3:63:76:
                    04:a5:ee:03:33:d6:77:2b:74:a1:91:b7:a8:c8:b8:
                    07:d4:80:cf:47:17:58:1b:7c:7e:4f:d7:66:c4:29:
                    a8:e6:69:3f:f3:66:b4:ee:7a:8e:fa:c8:1a:81:64:
                    6a:4a:64:8d:09:78:46:a6:73:9e:8a:d8:61:0c:ae:
                    d0:c7:24:f7:29:51:db:0e:88:94:cc:fd:48:fc:ee:
                    7f:6c:51:e3:5c:c9:c2:6f:ef:37:7a:24:ff:2e:a4:
                    db:39:96:41:e8:46:21:b2:3b:99:5f:ac:9f:81:9b:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3E:E9:F1:C6:00:26:66:58:89:5E:23:AB:9A:37:94:9E:59:22:A8
            X509v3 Authority Key Identifier:
                keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:5f:36:c2:dc:11:fb:a0:05:55:9d:09:a5:3c:01:03:a1:
         0a:a0:2f:c8:fe:5d:b8:13:3d:6b:3b:a8:9e:03:28:46:d1:89:
         04:e0:6d:be:93:3a:4b:9c:2a:dc:97:b2:1a:ac:f2:dd:98:bb:
         1d:b5:94:9d:3f:e0:d5:1d:5b:f0:df:aa:70:85:ab:6a:88:fd:
         76:18:4e:17:33:67:83:b8:92:81:51:a7:b2:7a:ad:58:94:0b:
         da:d9:1d:2a:44:9d:d1:89:b4:0a:22:ac:0b:d2:27:f4:32:e8:
         26:bf:49:8d:83:79:40:85:5a:d5:70:41:44:63:4c:8b:2e:a7:
         6a:d1:f9:44:bf:c0:d4:6e:3c:04:57:46:e8:c0:6d:cb:bf:53:
         97:fc:a3:cc:8b:ec:83:31:85:f1:e4:d2:35:86:fc:35:6c:0c:
         f7:64:68:1f:db:19:e2:83:bc:7a:5d:31:82:1e:e7:03:3d:c4:
         72:b3:2a:93:70:13:c5:47:3e:9d:c9:e4:f6:49:7a:27:ee:0d:
         0b:ed:e0:5e:43:f7:4d:f9:18:21:e0:9a:b3:17:2a:3b:10:ec:
         a0:41:b3:cb:cd:8b:5b:7d:7a:fe:87:1e:c3:c6:01:e4:a9:53:
         cf:a6:b8:56:60:41:a6:37:e1:33:4d:e3:9e:fc:78:71:80:15:
         3e:54:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:46:32 2024 by rpki-client on console-fra.rpki-client.org