Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File:                     v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier:          wFq7tfWzPJ53SCxc7vC8NDWYzf0LI70yNCE/tk46noA=
Subject key identifier:   4D:D0:D0:32:57:14:71:B4:70:81:7A:AB:B3:E6:B2:68:E3:E2:7C:C8
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer:       /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial:       018F8748A1FDAE46214555D892115D84E0B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number:          0BB1
Signing time:             Fri 17 May 2024 16:00:35 +0000
Manifest this update:     Fri 17 May 2024 16:00:35 +0000
Manifest next update:     Sat 18 May 2024 16:00:35 +0000
Files and hashes:         1: Nt1fKtuueUcFvyduNruvB0rsXTM.roa (hash: OadIklbcH6DaiU3mJRMVt9RBv1MK3P63QgxLlQBt6Fo=)
                          2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: 1KYZY6EF9GJQP2ZO999EezGh17pnNWQmeIvHIdtOCFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a1:fd:ae:46:21:45:55:d8:92:11:5d:84:e0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
        Validity
            Not Before: May 17 16:00:35 2024 GMT
            Not After : May 18 16:00:35 2024 GMT
        Subject: CN=4dd0d032571471b470817aabb3e6b268e3e27cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:ee:1e:b2:db:d2:f9:db:3f:19:e6:e9:09:
                    38:7e:a1:c3:b8:be:0c:fa:91:76:86:68:41:6d:51:
                    88:1a:e6:23:7e:d9:15:81:4d:ba:43:c6:91:ed:db:
                    cd:16:36:a9:98:f7:61:e2:77:4d:e1:65:28:58:ae:
                    ec:ca:46:e9:4b:77:4d:6d:65:e3:76:3d:5c:4d:65:
                    83:e4:3a:38:c6:c9:93:7d:de:81:da:89:53:69:4a:
                    c8:4f:63:85:ab:3d:f3:fb:dd:e9:e8:96:22:25:5e:
                    2f:1f:4d:6d:9e:64:e1:82:e6:a5:1e:ae:c5:a8:e5:
                    5e:9e:b0:c4:a8:33:88:5e:55:39:10:b8:c1:4c:c7:
                    51:e1:d8:70:62:e0:db:17:65:42:c3:1d:31:97:cb:
                    c3:d7:d1:5d:dc:95:88:74:ab:d2:ed:3c:f9:db:cd:
                    bd:38:67:7f:36:24:4b:d8:25:c2:21:b0:a1:ab:d0:
                    48:62:a6:e6:3f:73:1b:23:dc:c7:25:74:61:1b:3f:
                    08:c0:79:79:c7:ba:82:ec:7e:ea:cd:79:23:42:07:
                    44:48:dd:d6:c9:4c:43:50:c2:75:03:70:e0:fc:4d:
                    14:58:66:b0:2e:e7:e3:c7:82:4a:8e:6f:1e:4a:18:
                    87:78:3e:c8:61:ed:94:bf:ad:d7:5d:38:f2:95:6c:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:D0:32:57:14:71:B4:70:81:7A:AB:B3:E6:B2:68:E3:E2:7C:C8
            X509v3 Authority Key Identifier:
                keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:80:2b:cb:1d:81:a4:6e:cc:e4:36:a5:21:89:c3:df:ad:
         95:23:90:aa:da:b5:ab:33:03:02:21:38:1e:fb:46:f8:cd:c4:
         d5:f1:c7:89:af:ed:18:3b:4d:10:a7:be:04:e1:42:c8:d1:72:
         1c:9e:f3:19:8f:b6:87:66:a8:21:18:27:01:0b:6f:82:bc:90:
         59:63:b4:8f:f5:4d:34:40:58:32:81:a7:a6:a7:96:84:5b:a9:
         81:b6:bd:32:e5:09:bf:f4:12:2f:f1:0b:2d:cc:ad:ee:7b:40:
         f0:76:88:cf:35:8e:66:2f:b6:1d:ae:66:41:45:3a:69:df:84:
         71:96:40:fb:fa:39:c9:fb:4c:42:dd:b8:84:ee:5c:7d:f1:ef:
         f5:51:95:21:81:49:d4:96:89:b6:69:a6:c6:1e:2e:ad:b4:8c:
         c0:e8:bb:f0:45:70:73:1a:b1:eb:8c:c5:b6:30:ee:42:7a:de:
         af:2b:f2:ab:81:f4:ec:02:7a:3a:40:55:20:58:2c:42:61:6b:
         47:70:bd:ba:63:9d:69:21:93:28:7d:09:bd:fe:ce:31:e4:27:
         c4:28:ec:73:50:4d:97:7b:1b:a9:76:ed:ea:e4:65:b5:15:74:
         d1:8c:3e:b5:5f:42:e2:95:82:a8:3a:94:26:6d:65:3e:4a:7a:
         8a:90:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:13 2024 by rpki-client on console-fra.rpki-client.org