Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          Qi5l0iiJUSHPfkUPvwJB9M6A6NMvzmDZf0YVfroUyaI=
Subject key identifier:   73:5D:21:45:43:8A:2F:05:A8:DF:3B:5A:67:27:1F:C2:0D:36:2B:14
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       018F3CD414E15761DF2F27702BB6410D60CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          0E47
Signing time:             Fri 03 May 2024 05:01:22 +0000
Manifest this update:     Fri 03 May 2024 05:01:22 +0000
Manifest next update:     Sat 04 May 2024 05:01:22 +0000
Files and hashes:         1: 1KKBYWBMUS5MCh1BQzYclwLdV7I.roa (hash: 5E2Z9YXiGti0tHxMXQmIi/Qzfh9GU1Aants/ynqE4mY=)
                          2: 4C71yDOwhhcYrxHr8_rQRIm0mkg.roa (hash: 8rNeBoqXDmev+kSUAbc1iHvMIF1xALOa3RWZy0st5pk=)
                          3: 4n6v_0lJWOGSa_b8C0pZGkRbXZU.roa (hash: enG1lmbTp9zpZtdfN25QryA57OBIqztFNO31tmsoc1s=)
                          4: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: iUfghtR9u/mz1HaD9sHZEi1I1mq6AlpKeKyhmkTfknE=)
                          5: 5cpg3KcXdV1WevzdEWlLTIHOcho.roa (hash: Hp/mQBQ8QFFQ/HcqW5Bj+SOKAsy1z8wLrb5CMjYIT5Q=)
                          6: 8Fd1pZMWC8DrlIdOm8IcRvKU22g.roa (hash: CzFgb6CGBr8ui7CCG+h9nJtSmxylWGFSiiMse5nXS9Q=)
                          7: HK66luxECFUAhH51KTByt0ANxzA.roa (hash: w2SFudKDQO4wdfJeY6ttPGb5URO53m6Rtt81dsss+vM=)
                          8: I1UtTKdBH2HAxszqJU2L6SgMBqk.roa (hash: rgi5RjvynIRdVPHA9w1DugTgyBqgl3uk7/Z8g+9yrFU=)
                          9: L_GtMC90gubdtmoHvGckZT3RmPo.roa (hash: S9njVMxN+40fc/sV+WwHgScxZr1+CZGkr5PjXZLi70Y=)
                          10: M6qCO7d1QDGdMyNm9FwFOXyvFnc.roa (hash: W3Nhl2X6s1kgswWmAGuGsxP/7r0VIhy2glvTSrSAMDQ=)
                          11: P7RJoaRIWKf_bMbITBqWxB7_98A.roa (hash: 96c6JUc4S3gEtVv0u9h0OF+A/AH93f/xqLeQtfdbyjs=)
                          12: U2IKRDdEj4poFCXSltKSdfesDtc.roa (hash: 3WW2GYyc07zbzLSVatsOSewUIy63iTvwvmd0upQ+SeA=)
                          13: YuJaPWHHQ3xs5ZlDqcF_0fc4Rl0.roa (hash: gVvpzcD8Nr4EBN5CUQ+imfAMd9JGF2jUVVoWNZFaOEI=)
                          14: boYQ-MpMFB98KX21TeSH2lzXDDU.roa (hash: +r4BhQxwFTJsy6qge0sRL7a4SzefgzQPdjKkZEZ7p4s=)
                          15: hE_eqix1NaaKP8n1Ks6NaJ5P1gY.roa (hash: WY2HM8F4Mjm2cUgO52dRW3BpYKrM3OZ6aY0S95X5IrA=)
                          16: qjDbXmvLBFYZ4CUkSiDMhgqpR4k.roa (hash: zfXo08ktQr9ARPqZb6ly+xTWNXpTNoCUR0fyjRtcWn8=)
                          17: r3aVxLTMgy5v0rGi7hxs0w-zfp0.roa (hash: y+YCt9z7vCpmN8yKc8oNRHuqKD8RCeG37zDjfysOocE=)
                          18: rJl1ysKRUsk87pyYIdz0obOzEEs.roa (hash: d70nQewH4XHNQQ9uMpQZ088NXWDDIU6wA7BRfhr6ZwQ=)
                          19: wmTe1cr0GzmgeM0jP0NSCR7TCl8.roa (hash: 4R/e61y0hJo46LLbC/7egCyzRCBqPsZ2V94YjDf5mqU=)
                          20: y4Brw4Fm-iYe79YtOEOWsL_I48E.roa (hash: SFd3pqBKOOS0OrCqb6zS+VqynxEahbGTprHyceuUYrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:14:e1:57:61:df:2f:27:70:2b:b6:41:0d:60:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: May  3 05:01:22 2024 GMT
            Not After : May  4 05:01:22 2024 GMT
        Subject: CN=735d2145438a2f05a8df3b5a67271fc20d362b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:91:37:f0:b0:a2:e3:b1:9d:15:b5:4b:37:
                    40:65:89:ec:86:f9:77:25:28:b1:72:34:6e:60:4d:
                    37:75:f3:40:af:a0:d2:a3:a4:7c:41:b0:89:fb:9d:
                    19:5a:37:e0:36:4d:5d:77:f7:66:8c:a3:5c:0c:72:
                    6b:1b:5f:73:ff:ed:71:4c:db:bb:ae:6b:68:9f:b6:
                    ab:89:2c:37:ec:c7:40:0f:0f:c5:1e:68:9c:16:d8:
                    a4:4a:82:bd:e4:8e:8a:35:fa:df:04:37:57:11:fc:
                    2a:3d:a9:b6:90:54:06:14:a3:d8:4c:6c:11:c2:c2:
                    8c:f8:93:d8:e2:0c:e3:f2:78:ed:f0:84:26:4d:d8:
                    8f:ce:dc:2d:4b:80:91:e7:22:b6:d4:fd:1b:a2:20:
                    f7:48:8a:cb:6f:26:06:75:b8:24:c9:f7:1c:82:cf:
                    aa:39:d4:cd:bd:4d:a8:14:45:31:56:45:07:8e:7b:
                    1d:0e:e3:28:5b:18:b5:8c:15:6d:d5:0e:15:7d:50:
                    0f:1f:4c:72:42:5a:89:7c:b4:bb:ce:d6:b8:1e:72:
                    fe:9d:58:b5:8d:fc:80:fa:58:f2:e3:b1:ae:a6:8b:
                    b7:77:99:63:e4:e5:38:54:c9:51:e8:7a:83:48:ae:
                    0e:68:ca:1f:93:2b:d8:5d:90:87:3e:31:0f:a8:54:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5D:21:45:43:8A:2F:05:A8:DF:3B:5A:67:27:1F:C2:0D:36:2B:14
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:b8:96:f2:0f:65:f5:06:1d:1b:41:f4:3a:2b:cd:e7:78:
         f5:17:ab:a4:c1:98:32:5d:13:f1:d5:83:49:f6:1c:c1:43:ae:
         76:86:80:45:72:83:a0:85:bc:bb:85:0e:6a:ca:d2:02:bb:b6:
         b0:c9:b8:f4:9d:0a:d3:84:af:2f:7b:91:0c:b1:4e:e2:d4:d4:
         8a:2e:d2:97:c9:54:92:b5:0d:d8:bf:69:01:a0:92:2c:1b:02:
         34:ad:81:13:47:f2:1d:7f:f4:ab:62:53:92:8b:5e:44:57:1d:
         f7:24:99:4c:5a:dc:2a:60:58:42:1a:06:2c:66:58:e1:4d:30:
         48:09:2a:b2:7d:83:73:b5:2e:e8:4e:50:34:6f:f8:74:dc:9e:
         31:c9:df:cf:04:7d:96:98:2b:2a:bd:18:80:ea:7a:dd:7f:47:
         f8:f8:16:4f:75:f6:2f:e7:78:78:ab:77:d6:6a:7c:ae:32:ec:
         06:48:2f:ee:5c:dd:03:c5:c3:ce:5c:4f:29:34:d2:79:a2:34:
         66:5f:3a:e2:ed:af:69:85:26:1a:6c:55:99:6d:ad:90:ac:32:
         6c:21:16:f6:cc:c3:83:cb:16:a6:93:3a:bc:85:d5:61:e7:35:
         65:4d:b3:18:08:c9:58:55:2e:5d:29:49:74:64:13:c4:60:80:
         1f:da:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:22:18 2024 by rpki-client on console-ams.rpki-client.org