Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft
File:                     5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft (raw, json)
Hash identifier:          C9Q6U9ywKrJlDdsxWQfxC3OpEDaZDQUevDI+yw/X8TM=
Subject key identifier:   E9:C5:E7:D1:44:8A:15:96:AD:C0:9D:86:09:DE:33:1C:07:B8:96:6B
Authority key identifier: E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
Certificate issuer:       /CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Certificate serial:       018F4E6C804B2B478BBF5377AF788B43D3E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft
Manifest number:          10EE
Signing time:             Mon 06 May 2024 15:01:24 +0000
Manifest this update:     Mon 06 May 2024 15:01:24 +0000
Manifest next update:     Tue 07 May 2024 15:01:24 +0000
Files and hashes:         1: 1-_fifNqSA6A9Pw_nLwr3o963EIQ.roa (hash: cpsPH1VkLU0s5gWfXpHcgQDpqP7Fth9+U2GXwplZeuE=)
                          2: 5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl (hash: 4FK6T3CbdvwznlSFIsx7w2pIeLEjIlTYFzWPLYhxRZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:6c:80:4b:2b:47:8b:bf:53:77:af:78:8b:43:d3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
        Validity
            Not Before: May  6 15:01:24 2024 GMT
            Not After : May  7 15:01:24 2024 GMT
        Subject: CN=e9c5e7d1448a1596adc09d8609de331c07b8966b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:4e:42:1a:1b:9f:ab:00:69:29:9e:6f:cb:
                    02:04:94:f4:8a:e0:86:b6:9b:67:24:25:71:f7:4d:
                    9e:80:28:e7:44:a3:4c:74:72:86:f2:47:ce:d8:d8:
                    c0:ce:0c:3b:ce:ec:6f:77:1c:c6:bc:08:0d:12:56:
                    36:45:6d:ba:4a:24:c3:88:2f:0c:01:1b:8f:3e:ae:
                    94:ca:f9:ba:45:d1:4d:76:83:f5:b1:b1:82:fe:5d:
                    4b:88:eb:c0:43:79:64:a3:3e:5f:c5:77:87:bd:dd:
                    0c:e1:f3:73:ec:ab:82:dc:08:c4:19:74:e8:29:8d:
                    01:fe:dc:ff:24:52:5b:7d:b8:94:38:68:d4:b2:a1:
                    e0:da:55:c2:88:df:26:c1:21:60:fc:37:e7:df:af:
                    92:ea:5d:88:c0:74:7d:31:ab:7a:db:f2:35:07:74:
                    b9:c3:00:37:72:bc:5e:87:1f:5e:34:2b:3e:c4:fd:
                    a5:48:1e:5f:f4:2a:a2:4e:45:d4:b1:b2:f0:b7:90:
                    b5:94:f8:f0:67:a5:72:c3:39:80:b6:6c:ac:57:d6:
                    8f:71:23:c2:a5:74:28:8f:85:86:ec:ea:6f:2e:f8:
                    c9:7d:c6:f9:16:e1:c1:6b:8f:d5:35:69:73:c7:30:
                    ad:7a:34:06:c4:32:e9:19:db:de:79:ab:18:f7:cf:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C5:E7:D1:44:8A:15:96:AD:C0:9D:86:09:DE:33:1C:07:B8:96:6B
            X509v3 Authority Key Identifier:
                keyid:E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:29:b2:58:79:0c:44:b3:de:cc:19:92:96:3a:c9:0f:e3:80:
         a7:a7:90:7d:53:72:d4:c6:f7:d9:16:2d:c9:10:54:6f:80:6f:
         10:14:7b:61:37:41:36:66:a2:3e:31:fd:3e:2d:ef:e5:95:62:
         55:a8:bf:e3:6e:18:24:3a:cd:60:f6:f5:47:62:fb:14:26:e9:
         df:81:28:28:a7:a4:8a:67:78:fa:96:93:3b:d6:bb:92:f4:a2:
         9b:04:d0:51:9e:3d:ee:38:91:4a:40:42:bd:c1:c2:bf:ed:aa:
         f5:c2:7a:c2:67:a9:a9:e0:57:6a:20:9b:35:64:b3:72:83:d0:
         d2:6f:d9:69:f5:11:31:a4:1d:7d:29:c2:b9:34:65:6a:eb:92:
         50:f7:8b:f8:b4:22:c9:81:53:94:f4:4d:fe:cd:79:49:47:75:
         69:f7:9f:e8:8b:cf:88:1b:cb:00:07:3c:7e:89:3c:18:fe:da:
         51:21:5e:f0:ed:0f:29:19:68:28:a2:41:65:2d:2d:ad:93:31:
         84:fc:27:a4:f1:00:1c:dd:97:0e:18:3e:5f:34:dd:41:83:5b:
         6e:90:be:b9:e4:09:67:c0:60:8d:7d:bf:a5:56:4f:4e:24:1a:
         7d:16:19:e4:a2:1c:1c:01:a3:ff:d5:c1:5b:e5:17:9a:5b:d0:
         08:dc:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:51:29 2024 by rpki-client on console-ams.rpki-client.org