Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File:                     ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier:          nyOrWZKuULiwAuFxJjf+4mugB59nnMWS8iNhg6jzUUM=
Subject key identifier:   53:3A:86:3D:4D:80:97:64:6B:C5:44:25:17:0F:A7:53:2C:7F:93:32
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer:       /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial:       018F9270A6CE51177943CEBEA6A04DDA0596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number:          117E
Signing time:             Sun 19 May 2024 20:00:06 +0000
Manifest this update:     Sun 19 May 2024 20:00:06 +0000
Manifest next update:     Mon 20 May 2024 20:00:06 +0000
Files and hashes:         1: Y_Td3tRryL86DtqSbFW3QgUHdew.roa (hash: YJGagO+9Xo+r/fLrCF1ZvlJAYk3zuUoj7QuDMfshiRA=)
                          2: hQt7MbWrlCbyLRTUqkR73w1UYrY.roa (hash: RsyE+dHZ0sX/pGe6sONCTutRkQpOMfRkxhnpzxfaAXs=)
                          3: jP8H1ojEACltRTZkla3_yetVdVA.roa (hash: bgSYSOPG8ivUYvml8OIwBc5hEMTcp9N+4kpcb1T4Z88=)
                          4: nE4RAyUyUQcYAJ2aLCwDxd6PG94.roa (hash: 4hvD8fr8xTv+jvZ/OQm8Af1dQ7aZhEMvn3MegEga9VI=)
                          5: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: +uJExK+BdOTmBZWs0reBYH0KdlIFWvXhkawWQZH59QQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:70:a6:ce:51:17:79:43:ce:be:a6:a0:4d:da:05:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
        Validity
            Not Before: May 19 20:00:06 2024 GMT
            Not After : May 20 20:00:06 2024 GMT
        Subject: CN=533a863d4d8097646bc54425170fa7532c7f9332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:1e:43:10:9e:f9:79:13:08:4b:6e:7e:28:
                    5a:fb:34:8e:ec:3c:b3:9c:b7:ea:0f:9f:ef:70:93:
                    81:3f:63:74:26:fd:af:93:06:6c:eb:24:0e:a0:5e:
                    91:2e:dc:48:85:3e:18:70:9c:19:2f:a0:c5:f3:46:
                    cb:42:f6:39:2d:38:23:17:2a:f4:e6:c7:df:dd:f5:
                    0b:02:8d:8d:84:38:e2:c2:b2:e8:de:e2:74:fc:78:
                    d1:9f:9d:67:f7:49:7d:40:83:8f:85:8b:c7:0e:d9:
                    d8:4d:82:58:a1:14:f5:ec:1f:d3:2c:83:be:6a:bd:
                    65:62:84:2b:73:5e:0d:a4:cb:13:6d:34:ff:aa:6e:
                    24:6d:b0:39:b3:df:ed:d2:b8:0b:e5:b5:96:75:5f:
                    03:ec:05:54:e1:fb:f5:76:86:cd:e8:a5:af:db:07:
                    29:ff:c2:11:92:cb:12:e9:ea:54:c5:88:c9:15:e4:
                    90:76:bc:0a:1b:44:8c:9c:bb:c2:75:4b:e8:cb:b5:
                    4c:cd:cc:6a:af:e0:8c:c0:68:5d:9f:f3:de:8f:5f:
                    a8:e1:f8:f2:56:85:80:37:44:55:28:9e:45:eb:05:
                    bf:0e:4c:3d:98:30:3b:c6:75:ba:c8:6e:f4:f7:52:
                    71:56:c3:85:e0:34:76:92:0b:74:99:34:de:b0:46:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3A:86:3D:4D:80:97:64:6B:C5:44:25:17:0F:A7:53:2C:7F:93:32
            X509v3 Authority Key Identifier:
                keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:52:06:f7:f3:b0:21:fc:c3:55:9f:28:5e:71:9e:1c:df:
         b6:ff:d7:29:02:d8:38:62:09:1c:dd:fa:1b:89:70:63:6e:1d:
         89:15:28:0c:bb:c0:80:e7:29:ee:00:db:1d:58:8a:6f:54:33:
         ff:2b:32:e0:0a:21:80:b4:aa:fa:36:b4:2d:ec:92:d9:a7:7a:
         ac:6a:60:9b:52:37:4e:b5:53:a5:0a:4c:9e:66:92:55:98:b0:
         3b:41:21:ed:76:1b:75:7d:57:bf:80:a3:a1:17:c9:08:bc:24:
         1b:e6:bc:cb:fb:29:64:e5:6f:c7:e8:cf:2b:50:41:cd:7b:b4:
         74:98:d5:cc:a5:1a:66:df:ce:86:12:64:3a:2b:91:8b:a2:0e:
         3d:a4:bc:4c:5b:09:ed:f0:c8:75:30:26:53:d3:f4:ec:2a:ea:
         f0:31:f5:1a:ac:1b:1d:4e:53:d9:f6:b3:d2:07:fd:46:3a:25:
         cc:f4:aa:ca:db:0b:50:a1:43:74:70:f4:57:3f:71:ca:80:71:
         b2:35:6d:7e:af:32:b2:62:43:1c:e9:a6:b8:0c:fb:0d:eb:65:
         34:1d:e4:37:a7:f5:e3:39:74:90:d6:34:2a:a0:99:89:fd:2d:
         82:84:b9:85:60:e5:b1:18:a1:28:38:bd:8d:72:6b:e3:48:d3:
         f8:3d:d8:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ScKbOURd5Q86+pqBN2gWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjQwNTE5MjAwMDA2WhcNMjQwNTIwMjAwMDA2WjAzMTEwLwYDVQQD
Eyg1MzNhODYzZDRkODA5NzY0NmJjNTQ0MjUxNzBmYTc1MzJjN2Y5MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9seQxCe+XkTCEtufiha+zSO7Dyz
nLfqD5/vcJOBP2N0Jv2vkwZs6yQOoF6RLtxIhT4YcJwZL6DF80bLQvY5LTgjFyr0
5sff3fULAo2NhDjiwrLo3uJ0/HjRn51n90l9QIOPhYvHDtnYTYJYoRT17B/TLIO+
ar1lYoQrc14NpMsTbTT/qm4kbbA5s9/t0rgL5bWWdV8D7AVU4fv1dobN6KWv2wcp
/8IRkssS6epUxYjJFeSQdrwKG0SMnLvCdUvoy7VMzcxqr+CMwGhdn/Pej1+o4fjy
VoWAN0RVKJ5F6wW/Dkw9mDA7xnW6yG7091JxVsOF4DR2kgt0mTTesEaLwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM6hj1NgJdka8VEJRcPp1Msf5MyMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlhSBvfz
sCH8w1WfKF5xnhzftv/XKQLYOGIJHN36G4lwY24diRUoDLvAgOcp7gDbHViKb1Qz
/ysy4AohgLSq+ja0LeyS2ad6rGpgm1I3TrVTpQpMnmaSVZiwO0Eh7XYbdX1Xv4Cj
oRfJCLwkG+a8y/spZOVvx+jPK1BBzXu0dJjVzKUaZt/OhhJkOiuRi6IOPaS8TFsJ
7fDIdTAmU9P07Crq8DH1GqwbHU5T2faz0gf9RjolzPSqytsLUKFDdHD0Vz9xyoBx
sjVtfq8ysmJDHOmmuAz7DetlNB3kN6f14zl0kNY0KqCZif0tgoS5hWDlsRihKDi9
jXJr40jT+D3Y+A==
-----END CERTIFICATE-----
Generated at Sun May 19 22:15:39 2024 by rpki-client on console-fra.rpki-client.org