Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File:                     5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier:          YJEWJyFsqCUZyU1pMiEa/rvgmlN8A10mrA9s0V+Xqug=
Subject key identifier:   53:AC:B5:55:4C:A5:2F:17:CF:A2:CC:F7:EC:E1:C8:EC:43:18:27:BA
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer:       /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial:       0191FAEE7907264C22A9C43EB8EDE0A9B80D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number:          016E
Signing time:             Mon 16 Sep 2024 13:03:38 +0000
Manifest this update:     Mon 16 Sep 2024 13:03:38 +0000
Manifest next update:     Tue 17 Sep 2024 13:03:38 +0000
Files and hashes:         1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: lk4Bn2GqAQ+2X7jfW24PtpQAwxW+2fQec6SjPh5lvL0=)
                          2: IkxqtZx761Ddz28CKebW5_RIGFQ.roa (hash: 9U6P2CL3lpuZskZ/unMUjh4/W1bmMomSHjNoos/B1mo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ee:79:07:26:4c:22:a9:c4:3e:b8:ed:e0:a9:b8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
        Validity
            Not Before: Sep 16 13:03:38 2024 GMT
            Not After : Sep 17 13:03:38 2024 GMT
        Subject: CN=53acb5554ca52f17cfa2ccf7ece1c8ec431827ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6c:91:3f:c6:64:fb:fd:e9:43:b8:b1:67:8d:
                    e5:77:f5:e8:03:7c:91:21:1d:20:5d:27:cc:97:94:
                    fc:2c:ce:d9:ce:6b:fc:5d:86:45:0c:da:b9:3a:08:
                    92:61:4a:f0:76:8c:b3:1e:8b:ba:54:76:9b:a1:87:
                    df:b6:67:26:1a:96:82:5b:66:5b:87:03:c7:06:ad:
                    9b:38:0f:8f:1f:28:22:0d:10:d9:10:fe:a1:7b:a6:
                    93:e4:85:01:2a:00:10:ce:3a:15:51:c3:af:ef:93:
                    cd:ea:68:71:00:eb:02:e8:7a:a2:99:b0:4f:9a:f1:
                    bd:31:f9:03:15:4a:1c:c6:87:b2:25:dc:ac:1f:9a:
                    3a:b3:16:87:3b:c4:34:01:b3:7b:08:6a:76:a1:16:
                    2a:6b:b2:27:49:77:89:ea:fb:b1:4d:f5:55:4b:b0:
                    4c:17:0d:74:e5:16:95:db:3e:91:f8:3d:50:2b:86:
                    aa:21:35:2f:89:df:d9:c4:ec:67:c8:8c:10:26:cd:
                    65:24:56:41:89:72:ea:5e:5f:e2:81:17:14:32:20:
                    61:06:e9:1c:a1:9a:d1:8c:6d:42:ad:27:c3:bc:52:
                    73:e7:da:79:ac:7a:73:d9:46:0a:5b:fd:22:39:4f:
                    cd:bf:7a:4c:af:43:b8:21:f0:59:de:06:13:08:6b:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AC:B5:55:4C:A5:2F:17:CF:A2:CC:F7:EC:E1:C8:EC:43:18:27:BA
            X509v3 Authority Key Identifier:
                keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:a3:f9:8c:00:12:4f:d4:27:48:8b:10:bb:c2:ac:53:7f:
         09:cb:82:80:13:ec:33:16:6a:75:96:d6:f6:21:25:f2:ea:07:
         b0:99:24:4c:5b:ab:27:39:2a:56:57:ec:4a:52:9f:79:ac:d4:
         e6:93:1e:ac:11:b5:bd:e7:65:45:95:80:c1:48:6b:bb:a1:68:
         9f:0d:3f:6a:bc:e1:a5:7f:be:0c:a5:1a:f7:01:a1:a1:b9:3e:
         4e:42:75:a2:2e:4f:71:8f:9b:0c:d9:8e:2c:64:b6:39:38:0d:
         a3:65:19:76:ae:89:71:87:cc:9c:0c:d4:4d:3b:41:17:2f:97:
         cf:fe:01:44:96:b4:d1:a4:79:07:13:c3:d1:2d:54:32:6c:c8:
         96:cd:76:73:16:03:8b:ad:c7:3a:08:a6:7d:3f:37:71:8a:ce:
         90:ac:3c:8d:83:43:a9:15:ad:df:8c:f5:be:2a:2b:29:60:75:
         f4:6f:8f:cb:81:e9:3b:06:dc:c5:23:45:1f:41:9d:ec:50:a2:
         c1:a8:cd:ae:f8:53:bc:a3:55:ec:20:1e:e0:b1:cc:b0:c4:85:
         cf:b9:04:ce:2f:29:f5:1c:cc:c2:ac:60:a1:c9:81:3f:e1:69:
         6b:7d:1d:65:34:fd:a9:70:28:06:e3:6f:1e:2d:c9:a3:39:3f:
         cb:8c:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:32:06 2024 by rpki-client on console-fra.rpki-client.org