Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File:                     l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier:          +MaHliu6tckhpWxgbCnQ0+c/vcGTgtXQe0z+PZ4KT2M=
Subject key identifier:   06:E9:55:C9:A8:25:94:F3:7C:B4:3E:1F:AF:1A:1E:F1:19:6B:60:6D
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer:       /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial:       018F866CDBD522A5416427C508DEF5A9E4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 12:00:31 +0000
Manifest this update:     Fri 17 May 2024 12:00:31 +0000
Manifest next update:     Sat 18 May 2024 12:00:31 +0000
Files and hashes:         1: RihKQ1DZfuV_tdeajMl20NPjMzc.roa (hash: pvpOVT2u2y7micHnoPR1OO8PmhCVksaJEkRP96rXh6I=)
                          2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: BxiMyc0whDd9hC0JwFRMAJsHISY33hPHQlJmR6yrVyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:db:d5:22:a5:41:64:27:c5:08:de:f5:a9:e4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
        Validity
            Not Before: May 17 12:00:31 2024 GMT
            Not After : May 18 12:00:31 2024 GMT
        Subject: CN=06e955c9a82594f37cb43e1faf1a1ef1196b606d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:c8:b8:72:f1:f6:80:8c:bb:07:59:12:88:
                    5a:11:b1:b5:3a:81:f2:b7:30:f7:51:ec:77:db:03:
                    f9:19:24:eb:d5:c9:ce:b3:24:e8:15:35:29:31:d3:
                    95:f8:1b:01:7e:56:e3:88:d0:da:e7:43:f5:af:25:
                    87:e3:0d:15:d6:7f:7c:fc:21:d5:cb:28:b0:fa:4e:
                    7b:6e:0b:7c:14:df:f8:05:a8:0d:5f:29:73:31:52:
                    a1:d6:7e:e3:32:38:a5:e3:d7:eb:e8:61:ba:6f:80:
                    79:7c:58:87:2a:22:cd:df:2f:a2:83:15:be:8c:01:
                    db:d3:21:42:bf:73:31:2e:c5:6b:33:1f:50:04:2e:
                    16:52:1f:e9:a6:8d:d1:4b:4e:18:df:2c:e6:e5:1d:
                    1b:c7:51:15:e4:f7:99:86:7e:ab:d3:ce:da:92:1d:
                    f5:0d:ca:6b:1f:ea:60:61:e3:0e:6c:35:f0:6d:a0:
                    f6:25:72:74:b8:eb:9e:b8:5e:4e:8c:44:a7:3f:6c:
                    b6:c0:c8:83:f1:d0:30:3d:90:22:21:b3:f6:0a:e7:
                    f5:34:22:f3:bb:8a:df:f4:29:89:b2:6e:17:a8:bd:
                    d5:4c:7e:d4:75:40:89:f9:7c:83:e4:7a:01:2c:9c:
                    89:49:f9:22:ac:d4:1f:04:4e:18:7d:df:34:c4:a1:
                    37:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E9:55:C9:A8:25:94:F3:7C:B4:3E:1F:AF:1A:1E:F1:19:6B:60:6D
            X509v3 Authority Key Identifier:
                keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:b6:79:2d:d6:de:fc:6d:7a:64:30:65:5e:2e:dd:f5:3d:
         3b:c4:81:1f:59:fb:8d:e4:1f:06:e1:51:8e:5c:7d:b7:85:87:
         f0:12:88:cc:ff:e9:22:66:8b:ff:9b:db:f5:c0:37:e2:4c:e2:
         1d:c1:4a:8d:7a:75:59:b8:a6:49:ae:93:49:0e:43:6d:65:e3:
         e4:03:53:d7:5f:3e:8c:9f:b8:ea:f3:bc:20:7a:90:f1:f1:a0:
         aa:d0:3c:22:65:fe:16:0a:9a:a6:74:03:1b:58:b6:44:4a:55:
         ce:e0:b7:c6:e8:1e:8e:db:bf:ab:2b:93:e1:ac:f0:f0:31:3c:
         c4:3f:b7:21:a2:35:ab:e7:b0:03:0e:2b:c5:af:aa:90:40:b7:
         d7:4f:29:77:10:e4:52:ed:23:00:b5:41:c1:12:ef:1b:57:47:
         3c:59:94:6d:4c:d9:aa:55:90:f2:88:77:7b:38:2d:10:4b:8e:
         88:cb:ab:dc:6e:01:c8:ed:8b:f6:ea:19:61:2b:d9:3f:01:7d:
         86:76:e6:a8:2a:17:b3:01:98:60:83:49:66:44:3d:b5:f2:38:
         b9:3b:15:37:45:bf:70:f7:cf:2f:48:3f:28:73:d0:b7:c6:66:
         e8:ce:47:f5:8c:b6:db:19:7a:32:78:53:12:8c:a2:2e:4d:a1:
         a5:66:25:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbNvVIqVBZCfFCN71qeTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmY1YmU3M2YxODIzMjc0NDk4ZGY1MmEzNzUzNWQxM2Rh
NWJlNjIwHhcNMjQwNTE3MTIwMDMxWhcNMjQwNTE4MTIwMDMxWjAzMTEwLwYDVQQD
EygwNmU5NTVjOWE4MjU5NGYzN2NiNDNlMWZhZjFhMWVmMTE5NmI2MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnPIuHLx9oCMuwdZEohaEbG1OoHy
tzD3Uex32wP5GSTr1cnOsyToFTUpMdOV+BsBflbjiNDa50P1ryWH4w0V1n98/CHV
yyiw+k57bgt8FN/4BagNXylzMVKh1n7jMjil49fr6GG6b4B5fFiHKiLN3y+igxW+
jAHb0yFCv3MxLsVrMx9QBC4WUh/ppo3RS04Y3yzm5R0bx1EV5PeZhn6r087akh31
DcprH+pgYeMObDXwbaD2JXJ0uOueuF5OjESnP2y2wMiD8dAwPZAiIbP2Cuf1NCLz
u4rf9CmJsm4XqL3VTH7UdUCJ+XyD5HoBLJyJSfkirNQfBE4Yfd80xKE3/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbpVcmoJZTzfLQ+H68aHvEZa2BtMB8GA1UdIwQY
MBaAFJe/W+c/GCMnRJjfUqN1NdE9pb5iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUt
M2Y0NDUxOTY2NWFjLzEvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUtM2Y0NDUxOTY2NWFj
LzEvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvi2eS3W
3vxtemQwZV4u3fU9O8SBH1n7jeQfBuFRjlx9t4WH8BKIzP/pImaL/5vb9cA34kzi
HcFKjXp1WbimSa6TSQ5DbWXj5ANT118+jJ+46vO8IHqQ8fGgqtA8ImX+FgqapnQD
G1i2REpVzuC3xugejtu/qyuT4azw8DE8xD+3IaI1q+ewAw4rxa+qkEC3108pdxDk
Uu0jALVBwRLvG1dHPFmUbUzZqlWQ8oh3ezgtEEuOiMur3G4ByO2L9uoZYSvZPwF9
hnbmqCoXswGYYINJZkQ9tfI4uTsVN0W/cPfPL0g/KHPQt8Zm6M5H9Yy22xl6MnhT
EoyiLk2hpWYl3A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:58:22 2024 by rpki-client on console-ams.rpki-client.org