Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File:                     TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier:          SftuGm8clBvcYl6+aPqdzktzPkSg4Jd0+uKA5caAgTM=
Subject key identifier:   69:8A:0A:B0:2F:4F:29:17:91:24:6B:06:3E:88:91:96:4D:59:E1:18
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer:       /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial:       018F885B2CAD9EDCE1184C7D2A1918B15858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:27 +0000
Manifest this update:     Fri 17 May 2024 21:00:27 +0000
Manifest next update:     Sat 18 May 2024 21:00:27 +0000
Files and hashes:         1: IUx_6LFkWuSLpMHj4cQ_q0X1r6Y.roa (hash: cd0qJPkA9IZstp02JbQpJXxkA7hcZQ0HWdydObcJrpA=)
                          2: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: Q8D0uKCinsiU0HICr5vdIzHy8Zn0Wkx7k5ppzkV2xNo=)
                          3: XVIOaY56ACjByfQ-N6xJxbAoMyE.roa (hash: O94YJlb7VXLt8LCyVmZ5wLmCG8PvfHdqdzdESXbLnBA=)
                          4: g4ot4ivotgh6joubaGEqHMUNqeA.roa (hash: wavW+7m6zcBrZxIZnToDZylg0t8L0LzYUToFBMdL6Ik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:2c:ad:9e:dc:e1:18:4c:7d:2a:19:18:b1:58:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
        Validity
            Not Before: May 17 21:00:27 2024 GMT
            Not After : May 18 21:00:27 2024 GMT
        Subject: CN=698a0ab02f4f291791246b063e8891964d59e118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f5:f3:56:4b:d6:e4:12:97:91:97:6b:b5:fb:
                    e9:ea:8b:9c:e2:f3:0a:84:0d:de:35:b2:5a:5b:87:
                    39:7e:31:89:cb:de:12:f7:86:1c:59:46:ac:af:f9:
                    9c:08:58:73:37:54:f5:2c:ff:45:2e:25:ed:c2:b1:
                    27:17:e1:b6:fb:84:30:91:8d:f0:35:a8:62:7c:01:
                    0b:9d:ee:24:a7:0f:41:87:08:a9:ee:ac:81:04:e9:
                    5c:ec:44:73:51:56:81:4b:cd:4b:42:50:98:78:b0:
                    4e:41:97:ae:f5:af:1f:d5:6f:c1:28:38:d4:43:4d:
                    55:96:0e:5e:16:1e:27:b4:2e:f3:0b:a9:da:95:bb:
                    82:23:35:c3:52:d0:31:36:fa:dc:a9:b4:4c:6e:6f:
                    f3:6e:77:73:70:81:a5:c4:0b:5f:37:8f:25:7f:16:
                    59:93:76:69:68:43:86:14:80:e2:cc:8d:4a:7d:38:
                    b7:a1:d5:dc:e4:db:4d:b3:9a:d7:b7:5d:d4:80:4d:
                    e0:03:51:2d:9e:9c:80:c1:da:25:3b:f5:c2:fd:cb:
                    4e:30:c3:8f:05:2e:e0:5c:db:cf:4c:a3:e7:79:46:
                    05:56:46:dc:34:d0:f8:fe:fa:a1:d1:22:0d:ce:74:
                    53:94:48:8a:89:17:4a:bb:59:ee:4c:28:5b:9c:54:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8A:0A:B0:2F:4F:29:17:91:24:6B:06:3E:88:91:96:4D:59:E1:18
            X509v3 Authority Key Identifier:
                keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:8d:27:0e:84:95:9c:2e:26:04:6e:29:ee:d0:40:7b:0c:4f:
         80:c0:f7:9f:8f:c1:e7:b9:65:d2:80:c5:04:66:eb:a3:4b:c5:
         50:97:a3:24:74:a5:c4:c3:df:2a:a5:a0:71:b6:33:4a:80:ea:
         65:52:de:02:f1:d7:5c:1d:c0:28:e0:a4:d6:25:5a:5d:d4:34:
         ea:36:51:1b:5b:4d:92:2e:b4:b8:ca:07:43:31:3f:77:0a:6c:
         02:3b:fc:cc:f6:2f:bc:c0:eb:f9:3d:d3:73:ba:80:e6:96:4b:
         b9:c2:80:84:a5:a3:e3:5c:38:27:b9:44:b3:88:71:60:9d:49:
         ff:93:db:ca:1e:a6:a7:3d:f6:5a:88:d4:d9:13:47:ef:1c:26:
         ff:58:60:01:c5:77:5c:c1:58:b0:2d:24:b6:43:c9:d6:31:9a:
         01:d4:6b:d2:66:fb:0b:38:ab:c1:35:57:8b:28:8e:19:65:7f:
         6f:98:57:49:3e:93:10:fc:b7:dc:d1:31:41:aa:b7:ab:7e:d3:
         fb:54:06:94:35:c6:6a:ba:3b:b9:7c:04:6c:b8:14:c4:4f:16:
         eb:93:7f:eb:ce:94:69:b0:b8:a6:4f:f7:95:45:b8:b4:6a:cd:
         51:4b:87:0a:65:24:c4:46:ef:03:2c:ba:38:73:18:fd:4f:75:
         74:ef:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:28 2024 by rpki-client on console-ams.rpki-client.org