Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          FBimIu0WX/36FMB9txETb7JVLyN7qEelE7HgHe2LB5s=
Subject key identifier:   29:64:D5:EB:BF:7C:E5:50:A4:4B:EE:AB:FA:33:90:19:5E:05:AC:B8
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       018F2501E12F77E7C7E50187E9B8D174F60A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          06EB
Signing time:             Sun 28 Apr 2024 14:00:31 +0000
Manifest this update:     Sun 28 Apr 2024 14:00:31 +0000
Manifest next update:     Mon 29 Apr 2024 14:00:31 +0000
Files and hashes:         1: 1-dvDKQatG6LmsS2Gtl2Z0jXN0q4.roa (hash: OCwcRLqLzU9MoTPH0YxVzqGg6rAnP7Th744fLfnYz98=)
                          2: 2iKMaej0Qwb156Ese8QeWKw_kfY.roa (hash: GXUH8cLs0jU0uSo35N8w5xGqjhs9j5lcYaSu9e87T0E=)
                          3: 77dUyJ4MeSsZD5mHQ2GEP5BtfSE.roa (hash: jHJDtgJVQyrEHnuCV5zBliauO87wSta2I3ITNS58r6s=)
                          4: 97e3-j6MG3_NTsW9GJZrzZ-bH9U.roa (hash: 35Y8+qS4Gg6yYQslCQB5sKFKZ2loZF8q/vwem72l73c=)
                          5: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: VhQ7C7oUXXtgUUX/CcudPl0q4fHBHJz7L+nFebf2RAw=)
                          6: n3z1A2DEm-KGeP2OraasJHGdDDw.roa (hash: I/k8sT2KO2Rh2JlyR+DXuUSQyeMMLtDUuATn+1Tj/iw=)
                          7: y0KAEcvqGynBC8ilQTh3z6kcneE.roa (hash: o/XRI7AGCunPFZNTEFxipZPUsi/owiH2iW/Oii/o5vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:25:01:e1:2f:77:e7:c7:e5:01:87:e9:b8:d1:74:f6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Apr 28 14:00:31 2024 GMT
            Not After : Apr 29 14:00:31 2024 GMT
        Subject: CN=2964d5ebbf7ce550a44beeabfa3390195e05acb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:45:58:5e:cb:72:4e:7d:8c:90:a2:60:8a:
                    1d:f9:8c:6c:d4:7b:32:ec:d3:d5:9a:0b:4c:0f:c8:
                    8c:5a:d5:48:a6:e8:b5:91:52:ae:03:29:06:1d:46:
                    99:1d:87:db:7f:49:0b:26:de:e8:67:6e:20:09:90:
                    81:ab:5c:e0:c9:60:12:c7:c3:39:51:64:4e:79:8a:
                    aa:ee:52:c2:5a:37:ca:df:75:b1:17:44:1e:5c:af:
                    40:e2:2d:e4:42:10:6b:d6:96:42:51:38:36:9c:f3:
                    ec:c0:a0:f2:b2:94:de:bf:d4:63:fd:78:53:0b:fb:
                    aa:5a:a0:ce:15:69:79:4d:1f:c1:da:d4:0e:ae:89:
                    03:02:d0:9b:94:4d:91:bd:f3:7b:3d:62:1d:24:47:
                    23:19:7f:51:67:ba:61:fc:f9:17:c4:7e:d8:65:a7:
                    8d:57:51:cd:88:56:42:6b:8f:31:e3:6a:3f:8e:3b:
                    75:b0:ff:a1:12:54:fe:f3:ff:41:50:6a:cf:ed:c7:
                    b3:f9:34:a6:4a:db:99:2d:6d:b3:d2:6d:56:82:44:
                    7a:6b:90:51:78:df:77:a3:4e:82:3e:b9:50:5a:ba:
                    41:91:23:cf:bd:4d:c8:b3:9e:16:13:dc:98:60:ca:
                    a5:13:c1:a1:e6:45:f4:60:5b:6a:cb:4b:10:4b:9e:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:64:D5:EB:BF:7C:E5:50:A4:4B:EE:AB:FA:33:90:19:5E:05:AC:B8
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:19:b6:76:49:6d:11:a8:76:8d:40:2d:fe:39:ce:53:01:c0:
         f7:56:6d:c7:39:7d:4d:c1:f0:e8:55:7b:b7:6e:a5:90:38:41:
         61:11:e1:b6:78:9a:01:d3:6a:d7:97:a3:17:c2:66:9e:b7:09:
         76:51:49:f1:bf:64:40:a6:c3:24:bf:fa:58:9e:0f:9f:6d:52:
         39:46:5c:65:ec:cb:ad:ab:2f:17:a9:13:6c:94:ca:dd:6f:61:
         6d:e8:51:25:67:21:83:ee:a5:de:54:e8:86:76:58:56:b0:0d:
         ea:11:91:04:25:1f:29:53:df:6f:f7:4e:bb:26:b7:f9:06:81:
         06:79:73:df:b6:5f:ab:37:be:02:61:89:42:ce:71:14:5f:b9:
         1d:48:02:21:5c:65:78:d2:04:b5:13:c0:7b:13:fc:3a:1f:04:
         c8:df:65:d6:2e:73:6e:0f:8a:54:ad:16:27:b9:dc:c1:09:16:
         ce:e4:dc:e9:fa:2f:75:d9:37:b2:dc:14:31:0d:a0:93:1e:cc:
         93:0c:2f:bf:da:6e:2e:e1:f5:8c:fb:0e:ee:d0:28:63:11:16:
         e7:8b:db:f5:da:e5:91:13:4b:9f:2b:a1:9e:d0:49:7a:42:12:
         3c:24:29:cd:2c:45:f2:50:16:9c:53:f1:fa:2f:fe:4e:b6:66:
         d9:4f:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:20:35 2024 by rpki-client on console-ams.rpki-client.org