Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File:                     y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier:          6+A4bqZu2gLekVOJQH/2DWe92GV/zi5TLwK200LI3D8=
Subject key identifier:   74:FA:1F:5B:00:66:E9:4B:B4:76:4D:AA:71:DA:3B:A5:32:6A:D5:2C
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer:       /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial:       018F904BC5D06AED74CC165D454FCA6A51DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number:          1180
Signing time:             Sun 19 May 2024 10:00:35 +0000
Manifest this update:     Sun 19 May 2024 10:00:35 +0000
Manifest next update:     Mon 20 May 2024 10:00:35 +0000
Files and hashes:         1: 7g_OxODexRJyVpuR3jV4We86DM0.roa (hash: Y3ZOCO2ZFGT7Kh2dLOgv73kzDS6NP/Sld5JYuvknJbQ=)
                          2: gjXRue5SdvfWuVByq7F_O00Uo6k.roa (hash: CKTojlBNBVR5zkyw3Gn+4myIvGUB13fa40Es3NqV8lA=)
                          3: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: 9D1nsO/kjkY9fqJIjarRw11VYJKbShr7IILTsn9+O+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:4b:c5:d0:6a:ed:74:cc:16:5d:45:4f:ca:6a:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
        Validity
            Not Before: May 19 10:00:35 2024 GMT
            Not After : May 20 10:00:35 2024 GMT
        Subject: CN=74fa1f5b0066e94bb4764daa71da3ba5326ad52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:01:f2:20:dc:35:88:81:c7:cc:0c:f1:c2:
                    3d:52:8a:85:b7:42:57:78:c4:6a:b9:60:3a:ee:c5:
                    33:b7:82:70:3c:b9:3b:bb:5f:33:0f:46:c7:46:4d:
                    a1:40:17:dd:62:06:5d:f3:cd:d0:87:b0:7e:fd:4b:
                    6e:5c:c4:95:7a:b8:02:06:e9:b7:db:b3:79:81:c1:
                    20:99:e6:b6:9f:de:cd:3d:9b:b1:3f:01:e9:18:04:
                    88:27:ef:03:41:93:81:72:75:5e:40:59:d5:17:7f:
                    0c:82:4c:f2:09:86:74:eb:26:b9:35:ea:24:c7:be:
                    15:66:2a:9e:76:22:5a:2e:d4:5c:e9:d6:43:bc:38:
                    e2:af:e1:39:94:33:fc:40:20:41:96:68:a1:de:68:
                    c0:09:cb:72:89:90:12:e5:d6:02:34:e3:3a:98:98:
                    78:54:aa:15:66:85:dd:ce:ad:5b:8d:fb:93:e5:35:
                    16:4d:60:12:e6:a1:19:6c:80:ff:6a:32:23:99:83:
                    c6:80:d8:82:82:1b:bf:94:cc:df:c9:ad:ed:5b:6a:
                    06:b5:ce:e5:a7:fe:72:e3:09:36:bd:8f:cf:8b:3c:
                    36:23:41:f7:d5:f9:a1:15:65:8a:bb:e4:87:c1:db:
                    a9:75:44:c2:fc:03:41:e8:90:fd:bb:3a:d9:a2:9b:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FA:1F:5B:00:66:E9:4B:B4:76:4D:AA:71:DA:3B:A5:32:6A:D5:2C
            X509v3 Authority Key Identifier:
                keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:bd:5a:6b:79:ae:a1:68:f0:3c:c8:0c:b8:bb:f4:10:7f:39:
         a8:06:29:81:7f:6b:07:45:e5:38:19:0e:e8:53:b9:29:40:04:
         80:ab:5b:a0:64:f7:15:0e:11:58:99:67:fb:14:c5:83:1c:3e:
         a0:f6:73:35:c1:9a:03:65:d3:ca:7c:06:cd:6a:43:66:bc:e3:
         ab:66:99:a9:6e:a7:82:15:61:ff:92:0e:7e:fc:94:6b:7f:36:
         95:f9:ac:1f:af:47:bf:df:6e:85:30:bb:6a:01:e0:b5:be:04:
         11:65:ac:c9:47:06:1b:e0:6f:0c:5e:ce:7a:7e:b6:92:24:4e:
         62:91:ad:27:6a:cd:03:13:dd:fd:af:ab:9c:3d:60:58:36:88:
         c9:73:1c:11:2d:6f:f7:98:6b:0f:e9:1d:48:d0:8b:07:c4:27:
         0e:18:37:0d:09:a0:31:30:17:c5:e8:94:92:9f:ae:01:03:60:
         d7:ad:a4:e4:25:fa:3c:01:46:22:bb:d7:c3:1c:24:31:92:b0:
         29:90:25:2c:75:3d:64:ff:94:3c:b3:db:a2:90:70:89:7e:a8:
         b2:ed:5a:68:07:e8:ec:58:29:bd:75:83:4a:8c:6f:99:32:d2:
         58:5a:5a:fa:46:25:77:93:1f:d5:bc:98:28:b9:e1:9d:8f:c7:
         d7:5e:61:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+QS8XQau10zBZdRU/KalHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy
OTdlMjUwHhcNMjQwNTE5MTAwMDM1WhcNMjQwNTIwMTAwMDM1WjAzMTEwLwYDVQQD
Eyg3NGZhMWY1YjAwNjZlOTRiYjQ3NjRkYWE3MWRhM2JhNTMyNmFkNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BEB8iDcNYiBx8wM8cI9UoqFt0JX
eMRquWA67sUzt4JwPLk7u18zD0bHRk2hQBfdYgZd883Qh7B+/UtuXMSVergCBum3
27N5gcEgmea2n97NPZuxPwHpGASIJ+8DQZOBcnVeQFnVF38MgkzyCYZ06ya5Neok
x74VZiqediJaLtRc6dZDvDjir+E5lDP8QCBBlmih3mjACctyiZAS5dYCNOM6mJh4
VKoVZoXdzq1bjfuT5TUWTWAS5qEZbID/ajIjmYPGgNiCghu/lMzfya3tW2oGtc7l
p/5y4wk2vY/Pizw2I0H31fmhFWWKu+SHwdupdUTC/ANB6JD9uzrZopuviQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT6H1sAZulLtHZNqnHaO6UyatUsMB8GA1UdIwQY
MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt
YjQ5MmQ2ZmY0ODNmLzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm
LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL1aa3mu
oWjwPMgMuLv0EH85qAYpgX9rB0XlOBkO6FO5KUAEgKtboGT3FQ4RWJln+xTFgxw+
oPZzNcGaA2XTynwGzWpDZrzjq2aZqW6nghVh/5IOfvyUa382lfmsH69Hv99uhTC7
agHgtb4EEWWsyUcGG+BvDF7Oen62kiROYpGtJ2rNAxPd/a+rnD1gWDaIyXMcES1v
95hrD+kdSNCLB8QnDhg3DQmgMTAXxeiUkp+uAQNg162k5CX6PAFGIrvXwxwkMZKw
KZAlLHU9ZP+UPLPbopBwiX6osu1aaAfo7FgpvXWDSoxvmTLSWFpa+kYld5Mf1byY
KLnhnY/H115hTA==
-----END CERTIFICATE-----
Generated at Sun May 19 14:52:59 2024 by rpki-client on console-fra.rpki-client.org