Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File:                     Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier:          CKofK+rp2ke4OzXFuzxCbRwduPGBfDhPwJp+SVpwiIs=
Subject key identifier:   2E:C9:0B:28:E8:2F:1F:06:0F:EB:D5:FB:0C:C2:FD:73:75:12:C8:38
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer:       /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial:       018F94288CDDBACDDF253686B30916F1AB1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number:          1180
Signing time:             Mon 20 May 2024 04:00:36 +0000
Manifest this update:     Mon 20 May 2024 04:00:36 +0000
Manifest next update:     Tue 21 May 2024 04:00:36 +0000
Files and hashes:         1: 1-Nt8kg212gQqDNDcPEOVp5cNj10.roa (hash: TyGECCs5bxm5N9DmczmFmySNePRb6cPX43nViE8V090=)
                          2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: Y8YtBxBtRcIZp1joHjSwTuegsrVtlhIkfQsKqzD5+oQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:28:8c:dd:ba:cd:df:25:36:86:b3:09:16:f1:ab:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
        Validity
            Not Before: May 20 04:00:36 2024 GMT
            Not After : May 21 04:00:36 2024 GMT
        Subject: CN=2ec90b28e82f1f060febd5fb0cc2fd737512c838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:b3:97:89:90:df:1f:6f:eb:ea:cc:76:99:
                    34:4c:72:15:37:36:6f:5f:4f:d2:35:02:40:12:25:
                    4e:c9:a8:15:1d:63:34:6c:15:86:dd:d8:0f:5f:a2:
                    9f:35:d3:c3:0d:ec:36:ff:78:6d:c5:98:04:11:f5:
                    bc:c1:88:8e:72:00:fb:1c:41:b3:c5:dc:05:1e:85:
                    aa:4c:1f:8c:0a:01:bc:0a:37:dc:e7:28:52:09:0f:
                    8a:61:b2:5b:02:e7:d8:ae:ca:5c:21:83:a0:65:95:
                    34:08:c4:35:d6:c6:ec:c6:dd:82:8e:16:dc:23:0c:
                    99:43:75:5b:de:17:25:8b:c9:d5:80:40:74:64:53:
                    ed:c8:0c:31:f7:d3:93:f1:81:c2:db:60:62:64:95:
                    63:79:62:1a:b6:ff:cf:9f:d5:af:a3:fa:73:ad:70:
                    47:49:79:5f:c2:5f:f7:12:0e:9a:89:8a:5b:1f:7b:
                    6f:d4:9f:71:d0:8c:c9:86:33:07:1c:ca:62:3a:90:
                    c4:48:3c:24:58:eb:e9:80:af:02:e9:73:71:38:da:
                    d9:b0:a8:c4:a9:44:cb:38:52:63:44:b6:84:de:c6:
                    d6:6e:fa:53:68:36:e8:a4:1a:f9:8e:89:c6:50:e1:
                    d8:22:67:32:a6:3b:c0:0a:c9:bb:6b:3f:46:21:48:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:0B:28:E8:2F:1F:06:0F:EB:D5:FB:0C:C2:FD:73:75:12:C8:38
            X509v3 Authority Key Identifier:
                keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:bf:85:e5:6b:a4:e0:1b:6b:88:3a:49:6e:ea:b2:9f:ca:
         bd:67:45:7f:b5:09:08:bc:34:67:73:7d:03:3f:c1:b6:cf:49:
         5d:0b:54:e1:8e:52:cc:f4:f6:d8:27:a2:bd:00:cf:ed:73:b7:
         7a:f7:f2:4b:e7:f7:06:48:9b:8a:06:f3:a1:a7:31:10:55:d9:
         db:e2:03:ae:4d:0d:f3:62:1d:e3:39:8c:da:39:b3:e0:e6:fe:
         0a:81:bb:6e:f2:02:eb:61:e9:4e:31:f9:54:17:22:a0:53:84:
         d6:93:c8:6d:cc:60:db:8c:a4:cd:f2:a3:97:46:15:4f:0e:63:
         ea:21:b0:4e:b2:61:ef:be:29:12:bc:64:2a:cb:6a:b1:9d:c3:
         56:74:d1:5f:66:2f:e0:d0:4c:a1:5c:64:a3:40:d2:65:04:e6:
         3d:0a:81:ba:2b:63:64:58:91:66:2a:c1:fb:ae:fd:ea:04:3d:
         e5:21:cf:11:a4:0c:b6:e1:90:41:a0:38:9a:e2:61:72:f4:23:
         8a:6d:af:a7:53:ca:f2:45:50:77:d6:a2:da:8c:44:fc:b6:cb:
         1c:6a:2b:09:65:75:54:1b:b0:8e:c8:1f:5d:37:98:7c:32:09:
         d5:fb:de:88:15:17:97:d9:13:d0:0b:93:4f:d2:0e:72:cd:96:
         fb:18:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:15:51 2024 by rpki-client on console-fra.rpki-client.org