Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
File:                     9CE26D458FF17C675885A05B981A7109B558A39D.mft (raw, json)
Hash identifier:          EtmTuqzLI9auC5qDZjeiGSnJ0w4XbjYPlRjGdiiehps=
Subject key identifier:   F4:39:8F:8E:45:B8:97:C7:1F:7F:57:25:09:64:C4:13:BA:0D:07:4D
Authority key identifier: 9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D
Certificate issuer:       /CN=9ce26d458ff17c675885a05b981a7109b558a39d
Certificate serial:       2B8EF0AB4907E1C3F58288FBD72CEF6E7C293D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
Manifest number:          014A
Signing time:             Fri 17 May 2024 07:53:59 +0000
Manifest this update:     Fri 17 May 2024 07:48:59 +0000
Manifest next update:     Sat 18 May 2024 10:02:59 +0000
Files and hashes:         1: 9CE26D458FF17C675885A05B981A7109B558A39D.crl (hash: dhba5E8GAwPFvjZf9YqEL9JdifnsobQ2CMp/MxLzcAo=)
                          2: AS200351.asa (hash: ljesKDFNsvrZN9DoAA+Niaf5Ar+0NVNA+7Qtt/KQIFM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8e:f0:ab:49:07:e1:c3:f5:82:88:fb:d7:2c:ef:6e:7c:29:3d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce26d458ff17c675885a05b981a7109b558a39d
        Validity
            Not Before: May 17 07:48:59 2024 GMT
            Not After : May 18 10:02:59 2024 GMT
        Subject: CN=F4398F8E45B897C71F7F57250964C413BA0D074D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:5a:69:15:1e:1e:0e:4c:16:c5:20:7d:95:
                    f0:0b:46:e7:41:41:86:dd:92:f5:be:4e:8e:b1:6a:
                    52:33:0c:29:3e:8f:71:2c:0d:c7:b9:c2:20:9f:b4:
                    32:04:74:31:19:39:62:22:df:e7:fa:50:d4:2a:f5:
                    95:58:e1:a4:66:2e:e5:52:18:fe:21:9f:12:e7:c9:
                    67:8b:48:f4:5d:4d:fd:de:8e:3a:b6:72:e8:20:69:
                    2a:9e:6c:c1:dd:8d:80:6d:68:7a:b8:37:bd:64:89:
                    03:4e:12:6f:16:b4:b0:aa:94:53:9a:f1:7f:b5:63:
                    78:45:df:4d:f9:6e:f2:3c:8c:60:1b:83:8d:dd:15:
                    c6:e1:b8:bf:f3:2e:62:14:a2:f8:62:7b:c9:4e:40:
                    92:e7:02:37:b1:61:3b:dd:04:a3:ca:7a:24:e4:32:
                    0b:17:14:3a:79:dd:eb:9b:88:d6:a6:b5:14:3a:c8:
                    65:37:c6:b0:ee:9b:76:bd:bc:ad:f7:95:fa:80:5d:
                    88:5c:64:37:10:89:a8:22:9e:cd:96:bb:8c:19:92:
                    a2:bc:20:d6:e0:0f:34:4c:d5:e7:42:0e:37:0b:77:
                    dc:ae:5c:fc:98:cf:64:e6:a3:23:b4:90:87:05:15:
                    45:a0:78:ee:83:21:bf:53:48:b3:6a:49:f0:04:98:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:39:8F:8E:45:B8:97:C7:1F:7F:57:25:09:64:C4:13:BA:0D:07:4D
            X509v3 Authority Key Identifier:
                keyid:9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:da:73:5d:3f:3e:6e:82:d8:20:41:b7:16:cf:e2:a2:b3:4a:
         9e:c6:a4:d8:50:19:02:63:0c:28:6b:72:f7:f4:aa:d5:bc:61:
         78:9e:fb:df:f8:ae:84:8f:71:6e:bc:8d:c3:e4:c1:47:91:38:
         da:1d:96:65:19:ae:f3:17:34:68:b1:0f:ca:a0:2d:c2:02:83:
         ba:65:04:9e:ba:58:04:56:2a:82:6e:73:03:23:ac:e4:3e:2b:
         fa:fb:fa:ba:c5:74:57:41:32:55:73:d3:6e:9d:32:73:ca:69:
         e1:97:aa:dd:2b:b0:4c:c8:f4:00:80:97:a2:92:42:1a:3d:e2:
         00:74:8d:f2:e2:ff:56:c5:45:42:57:c5:aa:ca:a3:16:60:7d:
         57:f2:ab:1c:c6:38:37:95:cb:6a:98:e6:31:08:33:6b:c8:d8:
         98:a0:b3:c0:36:7e:a3:c4:2f:83:79:58:7c:30:5e:14:a8:be:
         9e:57:72:91:1d:9f:dd:cc:11:0a:5c:10:31:3d:01:5d:77:d8:
         5b:b4:65:71:ea:a6:0c:24:ae:75:ca:6e:49:01:bc:4e:32:ef:
         1f:3c:4e:62:bb:38:fb:70:7e:f2:4e:47:d3:b2:88:9e:50:27:
         2f:ea:89:50:82:34:1e:fc:36:0e:5b:87:95:ee:79:b2:23:81:
         cc:d5:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:15:37 2024 by rpki-client on console-ams.rpki-client.org