Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File:                     yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier:          Eop0cmiXJroFYKJOYCNlLbM0oCLUVlRqarFDaMV18ZQ=
Subject key identifier:   B0:88:D0:22:A1:7E:F6:6B:74:57:E3:F1:4E:42:A7:88:32:0A:28:29
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer:       /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial:       018F86DA509973F6411F0E75E96B84C07E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number:          0EBE
Signing time:             Fri 17 May 2024 14:00:05 +0000
Manifest this update:     Fri 17 May 2024 14:00:05 +0000
Manifest next update:     Sat 18 May 2024 14:00:05 +0000
Files and hashes:         1: XX1gQ8j5ek29CW55tdKFjDpoMiY.roa (hash: cyWnLOSFFncIEkf0MX0WeNPZhUV5jIgX06jd9naGUpo=)
                          2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: Y/yededYUjza2vhBi1sNDD8nT+k4JwYZTHCCxIzoWus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:50:99:73:f6:41:1f:0e:75:e9:6b:84:c0:7e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
        Validity
            Not Before: May 17 14:00:05 2024 GMT
            Not After : May 18 14:00:05 2024 GMT
        Subject: CN=b088d022a17ef66b7457e3f14e42a788320a2829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:be:14:54:d4:30:34:bf:a1:da:1d:5f:01:
                    80:19:a9:72:3c:a2:de:d4:38:b6:85:46:ff:8a:ba:
                    74:8e:26:34:b6:46:7d:50:fa:68:80:1c:93:e6:54:
                    02:36:b9:f7:f7:e9:9c:d1:b0:5c:be:06:13:94:97:
                    7c:07:d2:d7:e3:af:ea:60:27:46:4d:ce:26:07:72:
                    ff:04:37:f4:64:7e:51:e0:ca:5e:9b:3f:b7:7e:12:
                    60:f7:f7:9d:45:c3:c0:90:06:66:69:ee:c1:6c:aa:
                    c9:30:91:89:53:40:a9:6d:3c:ef:ef:be:6d:a6:49:
                    81:9b:29:ac:7e:ce:46:56:84:cc:ea:3f:4b:ac:db:
                    6a:f5:dd:e2:e0:4b:bf:6b:c2:21:cd:0f:76:62:a8:
                    d3:e4:27:37:9c:f7:ff:5b:81:ce:4f:d5:39:91:30:
                    11:e6:f7:ad:e9:33:67:08:86:d3:e6:eb:b3:cd:7a:
                    cc:b3:22:36:10:ec:e1:91:64:61:76:65:a8:9c:49:
                    85:9b:2d:06:3f:d0:84:20:47:a4:17:35:26:e2:91:
                    91:a3:27:20:7d:14:29:c2:33:a5:22:84:31:60:8c:
                    eb:f2:85:53:d6:12:34:5d:50:6b:dc:55:f0:ca:7b:
                    b0:5e:91:ca:8d:4a:dc:75:f1:51:44:49:a7:c9:0e:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:D0:22:A1:7E:F6:6B:74:57:E3:F1:4E:42:A7:88:32:0A:28:29
            X509v3 Authority Key Identifier:
                keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:42:a9:e5:aa:26:2a:88:f8:4d:69:92:21:e1:09:5c:7d:7a:
         76:99:b7:9e:2a:a2:55:2c:ac:1f:e0:44:64:29:05:16:50:93:
         c2:74:49:a4:34:0e:d0:99:46:ac:59:db:ad:26:96:1b:6e:02:
         3e:4b:b2:89:84:ef:09:f0:b5:a3:3f:e8:07:8a:a2:62:3d:98:
         c7:ce:44:cd:74:b9:52:74:fb:87:23:d7:45:e8:8e:ba:3d:9c:
         5f:61:f5:ab:f6:29:25:d5:61:3b:f1:52:5e:ff:3f:af:f0:4e:
         92:b1:b7:8f:b1:f0:6b:25:63:3c:5a:69:f4:4a:b7:be:58:58:
         90:bf:f0:29:5e:8a:6b:1c:be:ee:1a:a4:f0:05:1b:5b:c8:6e:
         15:0d:8e:31:40:d4:74:93:f1:dc:98:3b:71:d3:59:ff:65:5c:
         28:94:37:6f:a6:5a:1e:28:fe:05:e0:d4:f6:a4:58:7d:72:ff:
         3e:45:63:e0:a6:37:9f:f4:86:12:83:d3:13:5b:3c:8a:b9:70:
         db:53:f6:67:91:e4:91:c0:3e:0f:88:9a:6c:e6:35:7e:f2:f2:
         28:91:a8:cd:f0:63:91:bc:74:d7:ec:ff:74:91:f7:4c:b9:b8:
         24:00:bf:b8:6d:dc:6f:2f:5a:92:e2:f7:8a:46:cb:d5:50:37:
         15:af:84:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2lCZc/ZBHw516WuEwH5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWVlNTc5ZTAxMzIxOGY1NzEzODY0MTNlMmM1YjJiYzI0
NWE4MzYwHhcNMjQwNTE3MTQwMDA1WhcNMjQwNTE4MTQwMDA1WjAzMTEwLwYDVQQD
EyhiMDg4ZDAyMmExN2VmNjZiNzQ1N2UzZjE0ZTQyYTc4ODMyMGEyODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAS+FFTUMDS/ododXwGAGalyPKLe
1Di2hUb/irp0jiY0tkZ9UPpogByT5lQCNrn39+mc0bBcvgYTlJd8B9LX46/qYCdG
Tc4mB3L/BDf0ZH5R4Mpemz+3fhJg9/edRcPAkAZmae7BbKrJMJGJU0CpbTzv775t
pkmBmymsfs5GVoTM6j9LrNtq9d3i4Eu/a8IhzQ92YqjT5Cc3nPf/W4HOT9U5kTAR
5vet6TNnCIbT5uuzzXrMsyI2EOzhkWRhdmWonEmFmy0GP9CEIEekFzUm4pGRoycg
fRQpwjOlIoQxYIzr8oVT1hI0XVBr3FXwynuwXpHKjUrcdfFRREmnyQ7LSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCI0CKhfvZrdFfj8U5Cp4gyCigpMB8GA1UdIwQY
MBaAFMqu5XngEyGPVxOGQT4sWyvCRag2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQt
YTVkMTE0OGYyNWJkLzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQtYTVkMTE0OGYyNWJk
LzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkKp5aom
Koj4TWmSIeEJXH16dpm3niqiVSysH+BEZCkFFlCTwnRJpDQO0JlGrFnbrSaWG24C
PkuyiYTvCfC1oz/oB4qiYj2Yx85EzXS5UnT7hyPXReiOuj2cX2H1q/YpJdVhO/FS
Xv8/r/BOkrG3j7HwayVjPFpp9Eq3vlhYkL/wKV6Kaxy+7hqk8AUbW8huFQ2OMUDU
dJPx3Jg7cdNZ/2VcKJQ3b6ZaHij+BeDU9qRYfXL/PkVj4KY3n/SGEoPTE1s8irlw
21P2Z5HkkcA+D4iabOY1fvLyKJGozfBjkbx01+z/dJH3TLm4JAC/uG3cby9akuL3
ikbL1VA3Fa+EfA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:54:14 2024 by rpki-client on console-ams.rpki-client.org