Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File:                     V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier:          Kd2uPE242OmrnCp+IcfCNdOnd57fVeZRSSWWy/Fbkv0=
Subject key identifier:   1A:5D:AF:D3:5C:46:34:14:E2:02:A1:14:F3:07:44:F6:BB:A6:70:22
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer:       /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial:       018F889240447A2397A631B295D6B8DE5A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number:          0D58
Signing time:             Fri 17 May 2024 22:00:37 +0000
Manifest this update:     Fri 17 May 2024 22:00:37 +0000
Manifest next update:     Sat 18 May 2024 22:00:37 +0000
Files and hashes:         1: 2LnANCmZTbpadddbrFSPBUyEDOE.roa (hash: 7s8iSjYP/cr5b7IfxuKrUtUnmwPdLJbK+IywAs6fVwE=)
                          2: 4olGylfgClyFfKS5MSyS46IHgcQ.roa (hash: La1fX0ez9hLCEyGs5dfiRGT1prxZULnFPfeEzzi5ejU=)
                          3: BLwpiB3hxxcOyiDTZaDpJ9Iz9n0.roa (hash: m9RNZ6oNZoLb+AaZ6wcH0QvWSAJjhpvBDH+AqWtHYvo=)
                          4: BqqHg8U68Zjl0sJBCXZCnyXoyUw.roa (hash: VjfmMjEUVWDqT0ls5C+9t5CykMm+/6/G22axRu+r0BE=)
                          5: MKp5wxptpR0jJY0hTpFdY1ioOBU.roa (hash: 9OUXIgnVMmGWdUFeLmTLMwINc/5biMcv0tYgped8Pv4=)
                          6: MuNj6Tmq_I8EffoJFwt2bhBnzCg.roa (hash: b8VgMDzcm3PvdusGhXoS1+19dE/nYxa5skqgW7ZjJV8=)
                          7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: 9rIlKDbOtGE5DfkXCc87ptrV4XsTAYzCmBcz8PY37VQ=)
                          8: WNY5xL141lWbXznFBWmOqN_q6vc.roa (hash: 1FGVq8ZsLLjdbgExKEUK/FPa1R+SqyIhK37cbyq6JwY=)
                          9: WtLZPB3DecHjhnVYNbqnLSk16Ug.roa (hash: UdCdKNzhCKqmZhlhKllDD7uEQUpM496HVxVc6VZLi3Y=)
                          10: YRGdlutKEpALjWRJGbzCKIPbwbI.roa (hash: QPCqSd2e8C17WPdDZNJavq3oJ3pBTK4cfWdGz0+vvo0=)
                          11: qgMogcgBsFlPHZ0bRh-J4o62kZc.roa (hash: K4tq64TiK2AB18XBi7OZeZqXDcATB5X/WSLTK2Nm7Aw=)
                          12: z5jU9P6R7-jJexy8ebZ4LRWbACc.roa (hash: +QKdIWrg0GckBDsKAllkSG44cLt630sleey4LOCcjYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:40:44:7a:23:97:a6:31:b2:95:d6:b8:de:5a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
        Validity
            Not Before: May 17 22:00:37 2024 GMT
            Not After : May 18 22:00:37 2024 GMT
        Subject: CN=1a5dafd35c463414e202a114f30744f6bba67022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:01:d1:58:21:54:67:33:63:2a:3b:46:7c:
                    e0:c9:1c:2a:87:34:b1:d7:7f:a9:01:16:3c:1e:4f:
                    4d:ec:bf:1c:7a:73:68:4e:6d:93:aa:9e:22:9b:34:
                    2c:0d:5b:79:12:ce:e0:73:85:73:13:13:de:21:8b:
                    6c:ad:21:4e:e0:66:26:13:46:70:15:ed:8c:42:3e:
                    e2:d9:b0:c3:f9:04:6e:e8:c0:d9:bc:a5:26:b4:08:
                    92:0f:39:c4:c5:0b:f6:85:f4:c6:47:15:13:0e:51:
                    df:5b:9d:b9:c9:7c:20:db:f9:06:8e:4c:fa:61:de:
                    e7:5d:ff:7f:be:82:a5:7d:81:da:01:7b:0f:17:be:
                    67:2c:96:05:b3:a4:70:c0:27:69:72:ac:3a:55:29:
                    67:e7:fe:34:07:9f:20:d7:e6:40:c9:34:70:22:84:
                    ff:74:0c:8c:4e:6d:95:85:e3:c1:63:66:d6:fe:67:
                    12:9b:12:b2:14:d7:d9:7d:ee:66:b4:70:7a:9b:94:
                    a8:ba:25:52:1e:c8:d1:af:51:ec:d7:8a:0c:ed:40:
                    41:4b:a0:26:8d:2c:9b:da:7b:6f:0d:9b:0d:49:c0:
                    59:14:67:da:eb:55:db:f1:54:dd:b5:00:a7:86:1b:
                    e0:de:4d:ac:2c:04:09:56:ae:ac:58:09:c4:28:bf:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:AF:D3:5C:46:34:14:E2:02:A1:14:F3:07:44:F6:BB:A6:70:22
            X509v3 Authority Key Identifier:
                keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:97:df:d5:b8:bf:13:ae:31:32:c0:c9:8d:61:3d:7d:c6:08:
         b8:1b:2a:16:54:85:20:3d:7c:85:de:2c:37:9b:8b:52:74:b0:
         2d:ae:0e:ac:a6:b7:e2:a2:60:c0:11:12:ff:43:87:81:4c:39:
         b8:db:ae:f9:6a:77:d4:1a:9a:5a:86:a5:55:8e:53:69:8c:ba:
         c6:e7:2c:df:3b:57:9d:bc:c6:54:97:b1:bf:17:b8:a9:8d:9c:
         cd:dc:b3:58:e8:ee:ae:fe:fc:f6:6d:2f:6f:c2:2e:1d:19:d0:
         90:28:f2:03:61:1a:52:59:4b:b9:92:95:f7:84:65:7d:4c:a7:
         b6:09:a8:5d:72:73:18:90:25:81:67:82:ca:77:0d:61:de:b8:
         a9:63:df:b6:fc:20:3f:0f:08:42:2d:cd:0b:6a:b9:23:f0:23:
         79:30:4d:5c:1d:93:13:f9:a3:11:79:34:3f:1b:95:8d:b2:61:
         a8:b8:90:7f:75:bb:e8:a5:88:89:f8:4c:59:23:03:5d:77:1e:
         d9:ad:9e:f6:42:b3:b0:64:5f:93:0c:dc:e3:58:c4:f6:c6:cd:
         7d:0a:f4:52:a0:61:41:f7:5f:7d:c4:3d:6d:94:f6:1b:1c:b7:
         6c:a1:cc:75:f4:99:42:f5:40:51:12:a3:83:b9:fc:b3:6a:35:
         90:2a:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:48:01 2024 by rpki-client on console-fra.rpki-client.org