Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File:                     iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier:          t10LbPFDsfeIMsjzY8dCxpnMnLvzU0RAjpyHRELIsQw=
Subject key identifier:   5A:60:D1:F5:83:8F:F6:FB:59:1F:DD:A1:AD:49:DB:71:57:51:B3:36
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer:       /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial:       018F855B62D0464AB3BBDF56B553210E59F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number:          02B8
Signing time:             Fri 17 May 2024 07:01:49 +0000
Manifest this update:     Fri 17 May 2024 07:01:49 +0000
Manifest next update:     Sat 18 May 2024 07:01:49 +0000
Files and hashes:         1: 1-hWKwQ4VmMaTLDs6uF86znL85XM.roa (hash: krBqvBlqM/Uxcg3L+TVuQzMw+XFx+qvjy2ONGjWk3Vo=)
                          2: VlvHox6eCEruIB8_jSleU2BRQNY.roa (hash: yotlHm1ZoKHXu1SLqxVylVdZlHJ/Gozvd3iQ7pyxEBk=)
                          3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: IQM3WHo184NMR0s0viFrxN7cTXSSAOcgZsNZqRCgF+8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5b:62:d0:46:4a:b3:bb:df:56:b5:53:21:0e:59:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
        Validity
            Not Before: May 17 07:01:49 2024 GMT
            Not After : May 18 07:01:49 2024 GMT
        Subject: CN=5a60d1f5838ff6fb591fdda1ad49db715751b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:9a:12:52:b0:c4:ef:34:4b:fa:67:de:b8:
                    c1:0d:e0:7b:49:f2:90:1d:78:2a:b6:1f:d4:6a:a6:
                    a1:c2:af:d6:d4:28:23:a4:be:29:f2:0e:c9:64:27:
                    1e:2d:e9:20:26:0c:a6:71:e1:1d:02:cf:46:e6:5e:
                    49:dd:b0:6a:f6:58:31:77:79:79:ef:17:90:c8:09:
                    7e:3d:59:b9:f6:7a:e2:ee:d4:2d:32:83:b9:cf:ea:
                    7a:4d:76:94:cc:34:28:d7:bc:d7:62:3d:cb:5c:79:
                    87:e2:c6:41:64:22:d6:23:ec:b4:56:12:20:e5:ed:
                    5f:ae:60:e5:ae:11:98:58:81:d9:94:23:cd:55:d1:
                    a5:94:2f:c7:7f:18:a2:64:13:09:b3:a1:ec:c4:cc:
                    58:72:c2:bb:f7:01:16:4f:49:13:65:d3:56:dc:d9:
                    9b:2c:02:40:34:b3:98:98:99:14:96:11:77:1b:43:
                    89:9d:8c:ba:b2:07:ec:e3:41:81:af:4a:97:95:ac:
                    59:3d:d4:84:2d:08:79:a6:3f:0d:f8:be:38:d0:ad:
                    ff:50:26:88:c7:ef:82:24:94:7f:f8:f2:ed:b6:ba:
                    b7:32:f0:25:d3:04:78:c5:2f:4c:94:ad:87:b2:76:
                    33:d8:1d:eb:57:0f:d3:e0:79:a5:b4:cd:78:85:56:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:60:D1:F5:83:8F:F6:FB:59:1F:DD:A1:AD:49:DB:71:57:51:B3:36
            X509v3 Authority Key Identifier:
                keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a6:74:43:ee:2d:83:db:c8:0b:ff:25:fa:38:d1:36:90:4a:
         2f:af:20:c0:c8:88:6a:75:73:f5:b6:fa:54:b2:d1:b7:b6:0b:
         81:94:a1:96:df:ef:f2:3f:5b:ca:f2:73:55:26:57:0f:11:a4:
         88:9e:ff:e1:97:44:62:53:ad:77:cd:44:21:43:a8:b3:31:1a:
         96:05:be:7c:48:60:ad:d5:9f:2a:25:ec:12:12:b6:65:9e:70:
         70:8f:e8:a6:a1:57:87:cd:f1:2e:f9:4c:ec:f8:f6:0f:6a:27:
         6e:d9:af:39:15:b6:bc:b6:b3:e8:9b:b6:66:54:aa:49:a6:aa:
         94:23:c7:72:56:d4:3c:73:56:68:39:a3:63:d5:4a:30:12:a9:
         c9:cf:6e:45:73:c0:80:af:91:d4:2b:03:9c:5c:42:18:e5:49:
         a2:0c:c6:86:b6:1b:57:c1:1a:55:d7:87:42:df:03:25:1a:c8:
         a7:20:47:03:9c:03:e5:31:b4:ea:0e:40:35:a3:02:0a:c9:0d:
         bd:ae:31:93:6b:f9:99:01:94:71:aa:4d:94:2b:18:58:40:a6:
         08:78:a9:9b:bd:b2:32:11:5b:62:05:02:1b:55:ac:c9:d5:26:
         89:90:87:a2:b1:1c:21:d7:8e:b1:17:19:9b:4d:80:e4:b6:9d:
         ce:f7:a9:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FW2LQRkqzu99WtVMhDln3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjQwNTE3MDcwMTQ5WhcNMjQwNTE4MDcwMTQ5WjAzMTEwLwYDVQQD
Eyg1YTYwZDFmNTgzOGZmNmZiNTkxZmRkYTFhZDQ5ZGI3MTU3NTFiMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJmaElKwxO80S/pn3rjBDeB7SfKQ
HXgqth/Uaqahwq/W1CgjpL4p8g7JZCceLekgJgymceEdAs9G5l5J3bBq9lgxd3l5
7xeQyAl+PVm59nri7tQtMoO5z+p6TXaUzDQo17zXYj3LXHmH4sZBZCLWI+y0VhIg
5e1frmDlrhGYWIHZlCPNVdGllC/HfxiiZBMJs6HsxMxYcsK79wEWT0kTZdNW3Nmb
LAJANLOYmJkUlhF3G0OJnYy6sgfs40GBr0qXlaxZPdSELQh5pj8N+L440K3/UCaI
x++CJJR/+PLttrq3MvAl0wR4xS9MlK2HsnYz2B3rVw/T4HmltM14hVZsTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpg0fWDj/b7WR/doa1J23FXUbM2MB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6Z0Q+4t
g9vIC/8l+jjRNpBKL68gwMiIanVz9bb6VLLRt7YLgZShlt/v8j9byvJzVSZXDxGk
iJ7/4ZdEYlOtd81EIUOoszEalgW+fEhgrdWfKiXsEhK2ZZ5wcI/opqFXh83xLvlM
7Pj2D2onbtmvORW2vLaz6Ju2ZlSqSaaqlCPHclbUPHNWaDmjY9VKMBKpyc9uRXPA
gK+R1CsDnFxCGOVJogzGhrYbV8EaVdeHQt8DJRrIpyBHA5wD5TG06g5ANaMCCskN
va4xk2v5mQGUcapNlCsYWECmCHipm72yMhFbYgUCG1WsydUmiZCHorEcIdeOsRcZ
m02A5Ladzvep2A==
-----END CERTIFICATE-----
Generated at Fri May 17 12:13:59 2024 by rpki-client on console-ams.rpki-client.org