Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File:                     9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier:          /5UcsJeg46iEKCKjRry2Og58ykhV7Pmck2O93HzyLFM=
Subject key identifier:   BB:ED:5B:13:2C:6F:24:23:9F:77:2D:72:B0:03:03:BC:F9:4E:CB:89
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer:       /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial:       018F20EF925F6BAAAA68D02739439E01210E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number:          0E30
Signing time:             Sat 27 Apr 2024 19:02:02 +0000
Manifest this update:     Sat 27 Apr 2024 19:02:02 +0000
Manifest next update:     Sun 28 Apr 2024 19:02:02 +0000
Files and hashes:         1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: a7WOOGZLHjeA9opnZJPux2Ism+S+oGEFmst6pecVPzg=)
                          2: BYZsNWIkgKY5Louvq-KOADvWKWI.roa (hash: y0YgQhTOl4efaQVlb0q4HTreznlP38S6C3rQLXI80D8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 19:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ef:92:5f:6b:aa:aa:68:d0:27:39:43:9e:01:21:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
        Validity
            Not Before: Apr 27 19:02:02 2024 GMT
            Not After : Apr 28 19:02:02 2024 GMT
        Subject: CN=bbed5b132c6f24239f772d72b00303bcf94ecb89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:38:c2:ea:46:76:5a:7b:5a:ef:9a:d2:cb:
                    ca:2b:3b:07:25:eb:48:9a:d8:40:4d:37:d2:64:8e:
                    c9:71:cf:26:6c:88:15:69:b0:40:07:09:83:2f:aa:
                    f3:52:90:e1:93:7a:ed:98:08:d0:af:74:47:3f:b5:
                    bd:b3:ef:f3:e4:d2:96:79:ad:83:2d:2d:85:78:ef:
                    30:d3:3a:36:5a:9a:ef:c5:be:22:c3:07:d5:42:99:
                    e4:45:d3:f8:bd:ad:12:78:c0:4f:b2:75:19:a8:2d:
                    62:a6:82:f6:b1:33:ff:59:7a:01:8e:58:d4:19:9f:
                    6c:9c:65:20:90:f2:7e:ec:06:a8:51:9f:af:01:2f:
                    ca:4c:fd:52:eb:ad:35:ab:ff:1a:27:c9:15:93:d5:
                    97:0e:58:8e:ea:bb:e9:03:a9:52:f7:38:aa:70:d5:
                    7a:f9:e5:06:71:b7:01:2c:b6:22:c0:24:60:5b:1c:
                    b8:e2:7d:e3:78:4a:05:23:b0:48:08:b8:b1:6d:55:
                    30:c8:2c:69:b4:37:ab:91:60:e3:5d:fd:2a:19:8b:
                    eb:62:66:34:ac:98:3e:8d:36:09:64:fb:22:72:81:
                    e3:a1:de:49:ab:af:cc:44:d1:01:65:3e:ef:b1:c6:
                    50:e3:6f:06:d3:18:f3:20:69:fd:88:df:fc:f3:2b:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:ED:5B:13:2C:6F:24:23:9F:77:2D:72:B0:03:03:BC:F9:4E:CB:89
            X509v3 Authority Key Identifier:
                keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:82:38:7e:61:d7:ca:a9:e9:ed:68:88:ae:02:d4:56:55:b9:
         88:69:8f:32:a8:fc:44:fe:98:a6:76:03:f0:f4:56:a0:e9:4e:
         8c:5e:d0:81:26:45:99:24:c8:84:68:bc:96:77:0b:65:10:a8:
         91:db:42:17:13:5b:19:8a:7c:47:d3:48:cb:aa:5d:b4:d5:8c:
         bf:af:cd:24:b4:20:9c:5d:96:a7:31:06:b4:8d:fb:fb:94:16:
         b4:e3:8e:6c:62:cc:56:13:a6:27:7f:58:c0:e9:32:ec:a3:2a:
         b3:d7:20:1b:d0:0b:f8:8c:6f:43:06:31:05:f2:fd:95:36:e2:
         06:45:c0:72:5d:81:cb:50:5a:a9:f6:b7:69:f6:a4:ee:06:b5:
         d8:63:c0:bf:ab:b8:0e:7a:4b:96:77:bb:d9:be:bb:48:0b:65:
         a3:26:da:50:a7:ee:d9:6d:0f:43:a3:78:b9:c4:f1:df:46:c6:
         1f:d5:78:9c:30:a8:54:70:80:57:85:79:ec:66:7a:35:4a:29:
         da:a9:8c:d8:b6:80:58:d3:04:c4:d8:72:8d:68:9e:7f:01:51:
         e0:e5:e2:01:b6:57:13:d3:cb:11:82:a2:f2:39:42:84:6b:31:
         5d:da:0a:70:13:81:25:35:f0:89:df:d6:eb:8f:2c:18:21:d0:
         a9:27:a2:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8g75Jfa6qqaNAnOUOeASEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz
MmMxZTgwHhcNMjQwNDI3MTkwMjAyWhcNMjQwNDI4MTkwMjAyWjAzMTEwLwYDVQQD
EyhiYmVkNWIxMzJjNmYyNDIzOWY3NzJkNzJiMDAzMDNiY2Y5NGVjYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YA4wupGdlp7Wu+a0svKKzsHJetI
mthATTfSZI7Jcc8mbIgVabBABwmDL6rzUpDhk3rtmAjQr3RHP7W9s+/z5NKWea2D
LS2FeO8w0zo2Wprvxb4iwwfVQpnkRdP4va0SeMBPsnUZqC1ipoL2sTP/WXoBjljU
GZ9snGUgkPJ+7AaoUZ+vAS/KTP1S6601q/8aJ8kVk9WXDliO6rvpA6lS9ziqcNV6
+eUGcbcBLLYiwCRgWxy44n3jeEoFI7BICLixbVUwyCxptDerkWDjXf0qGYvrYmY0
rJg+jTYJZPsicoHjod5Jq6/MRNEBZT7vscZQ428G0xjzIGn9iN/88yvbnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvtWxMsbyQjn3ctcrADA7z5TsuJMB8GA1UdIwQY
MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt
YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1
LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaII4fmHX
yqnp7WiIrgLUVlW5iGmPMqj8RP6YpnYD8PRWoOlOjF7QgSZFmSTIhGi8lncLZRCo
kdtCFxNbGYp8R9NIy6pdtNWMv6/NJLQgnF2WpzEGtI37+5QWtOOObGLMVhOmJ39Y
wOky7KMqs9cgG9AL+IxvQwYxBfL9lTbiBkXAcl2By1Baqfa3afak7ga12GPAv6u4
DnpLlne72b67SAtloybaUKfu2W0PQ6N4ucTx30bGH9V4nDCoVHCAV4V57GZ6NUop
2qmM2LaAWNMExNhyjWiefwFR4OXiAbZXE9PLEYKi8jlChGsxXdoKcBOBJTXwid/W
648sGCHQqSeimA==
-----END CERTIFICATE-----
Generated at Sun Apr 28 02:11:21 2024 by rpki-client on console-ams.rpki-client.org