Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          vKCIriQjdjpAdueO2kBxGTJg+CZN2uizRMliCkKO1/8=
Subject key identifier:   55:63:67:D9:71:52:10:C3:F1:3E:46:94:26:2A:73:2C:18:7B:0E:28
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       018F86DA51133897FD82E03BE65F113C6084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          0F7F
Signing time:             Fri 17 May 2024 14:00:05 +0000
Manifest this update:     Fri 17 May 2024 14:00:05 +0000
Manifest next update:     Sat 18 May 2024 14:00:05 +0000
Files and hashes:         1: B26BmjlvFx2VhTLYFipYKjz95Tg.roa (hash: 7zxwHkcgj9cAKNKc6v2DHdt9L5ra0kgjVZQ3ev83Imw=)
                          2: CzyTJ_Ns0DcjPQDjL1G00EyyDbM.roa (hash: 7qiemVbRLeq+9scMJ2CZh9suqqOjnW0YO3P3rOMG2KQ=)
                          3: e4uQmAUQkEeylpEyBl9FPTIAEkA.roa (hash: sVSsrsZX/H/UlpvcgJIVrhXmt+G3Aidanzii2dawldQ=)
                          4: esrU8GEtQyIsveVI8rzz91xERdg.roa (hash: qI8vL56ubJ5ukJ+hic/VbEQRmdp8/BNinr+8fuV5Sd0=)
                          5: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: ksinaKMEklnkjrVCd2DyJ9bqBxC+nPTZZNXlzizsjH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:51:13:38:97:fd:82:e0:3b:e6:5f:11:3c:60:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: May 17 14:00:05 2024 GMT
            Not After : May 18 14:00:05 2024 GMT
        Subject: CN=556367d9715210c3f13e4694262a732c187b0e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:56:cc:c8:b7:4e:03:fc:49:b4:7c:d2:ea:
                    f2:23:db:0c:9c:b4:f5:2f:40:ff:29:17:be:02:49:
                    d8:73:c9:9e:2a:e5:d4:05:82:7b:cc:0b:eb:01:bc:
                    44:f5:bf:e8:4c:6d:74:82:5b:79:17:37:ce:4c:82:
                    47:5e:29:98:25:91:2e:e7:3a:2d:e0:2c:67:1e:51:
                    19:df:df:58:7c:a7:c5:cb:87:69:f2:e1:7b:65:2a:
                    ff:fd:3a:14:5c:46:17:05:74:c3:2e:f4:9b:24:c2:
                    72:29:77:02:24:9d:85:e9:12:b1:b6:e5:6d:9b:4d:
                    4e:18:af:1a:98:c7:24:d8:43:e0:d3:7b:7d:dd:e2:
                    80:eb:ba:ce:41:87:ef:28:d1:28:cb:45:7d:7d:37:
                    64:dc:3d:4c:f0:c3:a9:6a:d8:57:e3:cf:d1:f6:f4:
                    ba:05:95:ce:84:b9:0e:01:2d:38:7e:f9:da:11:46:
                    d2:96:e8:cb:42:93:5c:55:fe:76:35:cf:c4:b8:cd:
                    4c:f8:c2:0d:ab:9c:f8:af:53:e6:c1:de:a2:f5:f4:
                    40:5b:c2:63:73:02:46:38:3f:77:7d:14:41:42:06:
                    e7:36:2e:88:b7:fa:04:01:17:b7:31:83:47:1d:46:
                    2d:30:53:4d:66:16:ae:f1:42:5c:4f:e5:cb:b3:44:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:63:67:D9:71:52:10:C3:F1:3E:46:94:26:2A:73:2C:18:7B:0E:28
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f9:7d:01:62:38:a8:bc:da:62:44:48:c5:df:f2:98:1e:e4:
         3f:18:55:af:66:6f:b5:d4:4a:d8:92:49:47:68:f3:ec:67:32:
         db:84:76:3b:1b:a6:8d:77:5e:d2:99:ff:d6:ef:f3:5b:06:a7:
         fa:ab:e2:73:5b:24:3e:48:d8:e4:c8:87:9a:c2:4c:be:7d:e5:
         c7:93:04:71:44:4c:25:82:d7:a9:23:75:dc:6c:0c:fe:25:8c:
         39:b3:c9:2c:ad:a7:e4:22:34:a8:6e:be:1b:c3:36:34:6b:ab:
         bd:c9:88:98:dd:2d:b2:b6:b8:7a:0e:19:27:37:33:f0:e6:34:
         b6:df:dd:b7:58:fe:ea:d5:63:df:c2:39:04:e3:45:08:a1:99:
         f5:a1:24:46:f5:d4:9f:81:03:a8:cb:ed:ef:37:4b:64:91:7b:
         45:50:c7:25:7d:73:f9:89:22:f0:43:44:56:b1:cc:19:5b:18:
         04:10:63:30:b9:a2:19:da:44:50:34:5e:e1:cd:c6:17:f6:55:
         cb:83:13:a6:df:aa:50:c1:0e:47:7d:6e:0f:d0:b2:7f:17:e2:
         94:ab:6b:4a:8b:13:91:4c:9f:08:3b:ce:9d:58:81:71:93:14:
         26:47:48:f0:96:14:3a:20:a4:3b:d7:1d:e9:e0:06:b8:e9:6c:
         aa:3c:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:35 2024 by rpki-client on console-fra.rpki-client.org