Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File:                     xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier:          4y0Mgw2Yg1W8XqX+aardd/NgOPvZ1NkJstTQN7AykiE=
Subject key identifier:   16:87:0F:1B:D4:DC:5B:5B:08:BE:83:81:26:FE:31:C1:1B:95:4F:88
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer:       /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial:       018F874B17A03D081C85B54D3BCAC81A8145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number:          09FB
Signing time:             Fri 17 May 2024 16:03:16 +0000
Manifest this update:     Fri 17 May 2024 16:03:16 +0000
Manifest next update:     Sat 18 May 2024 16:03:16 +0000
Files and hashes:         1: kh430Vnkr4XKM4T9B3-kUBrZjec.roa (hash: y0Fp/AIwNmXKomzVskUgNoiX6JAUnSGlSU9Ch7o0oWA=)
                          2: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: c6cqY0AKTPtogJERcstXaqiYpcS6VY5I3d4sEje4Dao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:17:a0:3d:08:1c:85:b5:4d:3b:ca:c8:1a:81:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
        Validity
            Not Before: May 17 16:03:16 2024 GMT
            Not After : May 18 16:03:16 2024 GMT
        Subject: CN=16870f1bd4dc5b5b08be838126fe31c11b954f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:ef:7e:0f:0e:1c:57:35:9d:b2:e4:5d:b1:
                    6f:ef:c9:d4:bd:71:73:7c:71:f4:c8:01:ce:8e:89:
                    f9:31:d1:ca:99:07:5d:8d:82:39:f7:a6:c6:6d:ec:
                    25:57:83:6b:9f:0c:25:6f:ed:10:f7:44:d0:87:2c:
                    8d:e4:75:f4:dd:6e:1f:fc:63:be:8e:ff:25:cc:d5:
                    a1:90:24:84:72:d1:63:1b:91:63:cb:bf:f8:5c:93:
                    36:55:5f:93:52:83:20:13:ef:0c:20:52:0c:4b:ba:
                    b5:95:59:6e:cf:0a:f1:46:15:85:77:fe:21:2c:ad:
                    fa:c1:00:84:44:8a:1a:a7:da:35:f9:44:c4:cf:1e:
                    8d:c4:c8:f2:f7:68:20:9d:2d:49:49:ba:20:59:2f:
                    2e:3b:51:31:0f:b1:b9:e4:06:b5:56:e3:f7:78:3a:
                    9a:83:54:e7:90:f2:8d:61:f4:15:99:d6:81:2b:16:
                    cf:79:8b:a8:b8:56:c7:e7:39:dd:41:43:99:ad:b1:
                    71:a7:16:b9:08:e1:1f:66:77:57:28:bd:1e:18:02:
                    13:b4:a0:c9:24:32:30:7c:11:d3:2d:b1:a1:40:58:
                    2e:7e:20:50:98:69:c9:1b:76:c9:77:2d:9b:e5:ce:
                    2d:95:e1:da:75:ef:ab:64:a6:70:d5:89:18:4d:2a:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:87:0F:1B:D4:DC:5B:5B:08:BE:83:81:26:FE:31:C1:1B:95:4F:88
            X509v3 Authority Key Identifier:
                keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:ac:72:5b:93:42:5b:3f:71:48:17:ab:00:14:0f:d3:2a:
         82:54:f0:72:c9:26:76:a6:73:45:df:33:30:e1:c7:97:4e:d5:
         60:09:c0:f9:ca:4a:43:93:98:4d:f9:45:68:63:e4:aa:e2:a0:
         48:93:ed:39:8a:22:7e:42:ac:e3:c3:6d:ef:dc:7c:ac:c6:09:
         51:4b:0c:0b:3a:5a:64:46:f6:4a:cd:f2:40:83:d3:d8:74:b8:
         79:bb:4e:9e:fb:53:00:0a:fc:7b:9b:11:76:c4:66:30:18:5b:
         a5:56:31:d8:f1:1e:03:63:e3:65:a3:16:dd:64:76:44:de:a7:
         f8:0f:19:e2:e5:25:e9:58:e5:3a:46:1a:35:d6:16:84:7b:09:
         c5:65:0c:b2:40:29:4b:be:02:3a:bd:d4:6c:24:c1:38:b4:f1:
         4b:8d:aa:08:6c:00:14:3a:fe:89:a3:2a:17:7c:fb:c7:a3:90:
         da:69:71:47:dc:79:fb:ed:7d:61:1d:73:56:49:a7:08:32:a3:
         f7:fa:08:65:32:93:76:6e:ca:b5:06:2c:04:ce:f9:99:51:f5:
         f3:6a:d5:fd:77:94:71:4c:62:ad:ee:95:5b:df:8a:98:bf:d2:
         28:f0:09:d4:d4:b2:9b:18:9c:32:9f:07:86:5b:db:8c:10:a6:
         60:40:96:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSxegPQgchbVNO8rIGoFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzFiNjNkMTFhNmNjMmQxY2U2OWUxMzExYzg3YWMxYTZh
NzA3MzMwHhcNMjQwNTE3MTYwMzE2WhcNMjQwNTE4MTYwMzE2WjAzMTEwLwYDVQQD
EygxNjg3MGYxYmQ0ZGM1YjViMDhiZTgzODEyNmZlMzFjMTFiOTU0Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Pvfg8OHFc1nbLkXbFv78nUvXFz
fHH0yAHOjon5MdHKmQddjYI596bGbewlV4Nrnwwlb+0Q90TQhyyN5HX03W4f/GO+
jv8lzNWhkCSEctFjG5Fjy7/4XJM2VV+TUoMgE+8MIFIMS7q1lVluzwrxRhWFd/4h
LK36wQCERIoap9o1+UTEzx6NxMjy92ggnS1JSbogWS8uO1ExD7G55Aa1VuP3eDqa
g1TnkPKNYfQVmdaBKxbPeYuouFbH5zndQUOZrbFxpxa5COEfZndXKL0eGAITtKDJ
JDIwfBHTLbGhQFgufiBQmGnJG3bJdy2b5c4tleHade+rZKZw1YkYTSr36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaHDxvU3FtbCL6DgSb+McEblU+IMB8GA1UdIwQY
MBaAFMUxtj0RpswtHOaeExHIesGmpwczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEt
ZGI4Y2FiY2VlMjFlLzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEtZGI4Y2FiY2VlMjFl
LzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbyscluT
Qls/cUgXqwAUD9MqglTwcskmdqZzRd8zMOHHl07VYAnA+cpKQ5OYTflFaGPkquKg
SJPtOYoifkKs48Nt79x8rMYJUUsMCzpaZEb2Ss3yQIPT2HS4ebtOnvtTAAr8e5sR
dsRmMBhbpVYx2PEeA2PjZaMW3WR2RN6n+A8Z4uUl6VjlOkYaNdYWhHsJxWUMskAp
S74COr3UbCTBOLTxS42qCGwAFDr+iaMqF3z7x6OQ2mlxR9x5++19YR1zVkmnCDKj
9/oIZTKTdm7KtQYsBM75mVH182rV/XeUcUxire6VW9+KmL/SKPAJ1NSymxicMp8H
hlvbjBCmYECWsw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:48:57 2024 by rpki-client on console-ams.rpki-client.org