Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
File:                     JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json)
Hash identifier:          niD+rhlea9HIr+HIAlvK+dj7uua1daddeZ5mgKZRv6Y=
Subject key identifier:   72:44:61:D5:7C:57:15:BE:91:8D:10:AB:0C:29:7D:E1:6C:8D:C7:66
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       018F8E5D72A76B39848B845C26A40AC0B3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
Manifest number:          0EA9
Signing time:             Sun 19 May 2024 01:00:39 +0000
Manifest this update:     Sun 19 May 2024 01:00:39 +0000
Manifest next update:     Mon 20 May 2024 01:00:39 +0000
Files and hashes:         1: 020fUQ8kHEOBNC9vpkjMaLo7P8g.roa (hash: WQ7B8z58/qRtjh6o6VwTXEkXispKzB6lD4kimo3u6a8=)
                          2: 0Hyzo0hnpiHBxDW04br4Ws6_FwM.roa (hash: TnF21hPVFwWeFBh7Z+3PzalMv9cO4yneAnDPRQJ2X9o=)
                          3: 1-3t0l6vKJ3YJQBoNhsWcts2xk38.roa (hash: aw10dc5u2WmCUbSCJ/Su/yGmh686bqLSTUaFeKeZvJY=)
                          4: 4N4Vmd5Lt3tIPh_lY6QrUE-_k88.roa (hash: +NAXP/k192GmPSIcIIb/4YdbMvPVxnVIttB+9OiCBEs=)
                          5: 6QOuKs0pMLbn-D819bdL94c7DZ0.roa (hash: 5MiCB4ztBfjeiy7KXReIjp1Vkjr2ojZ2YPHAMJ6rzb4=)
                          6: 6nRRVSolaovwlTQuWDZP_DQXN1I.roa (hash: yw6jk74biX7RSqUMdW6HGI7HKmDFs2fZvqomRaf5cIc=)
                          7: EtDOiSCXoeNNTdnRDfE7baHiANc.roa (hash: ILTv3h8y3j+59ZTzCWgoMK6NKqix40g6GigeeisktW0=)
                          8: FJiZaMUBtAUUCAR7GnrCeKRKaiY.roa (hash: 82c//JgDtlzilUCwfHn76Vm7Sb7ZZYLIJ/9BrLfCwhg=)
                          9: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: E191Ccstc32LQyu274FtjaYd/beaLoUV3vkrwg63yMI=)
                          10: Qc-vdaxHHC2qzqiVtbU3NtwhIEc.roa (hash: wVyehcP8j17dziTYbaWirEAmJhgDZnn/ypyZbyof4dI=)
                          11: QwHW9zRKSDjOPhyCEFmchZNk7yU.roa (hash: myBEZglhsWmrzvYGGPciDpLziFkofoV2gasp2JNcsNM=)
                          12: V2I353X9c6UPJJCcNKACwjU9uDo.roa (hash: Q52qzpu1g5L7Lxt0kixPoC8hflYnsk0ZDAAzDKk5FVQ=)
                          13: YXRKToY-ZkTEgteHDgYDSvF3JbA.roa (hash: HF4vLOpBuvyZR5vL5B5Quw46sVIRX2RSRh0XG+FuUuM=)
                          14: YuqEz1HB2ioFIYZl_5hwn6B0Hqs.roa (hash: 2BpszuLKIT3iT5RxUEMOOwCLK/oDiNrEcdijJTq5nxU=)
                          15: _xV_FRMPC-f9tb4epiPoXsfhrUE.roa (hash: NRce7z8XiWC81Uj6f3Fx6iRBnPGYQZW82LCK+OQvR60=)
                          16: aAd3eu0aAgou1_tDcCmo2DILPkM.roa (hash: 09a35DRtLryUI5G+QSL9aQFU0gY/vQQq/WSG80rjUgk=)
                          17: fHrKntuVADMl4AM_u6m3kI7wuH0.roa (hash: IYv8ppflUBnm7Y0ZOXopl+eOWCIIM2g3WX8U1khYU4Y=)
                          18: iHl9M9dD_Q4GMUfJ48BHVZYAO9Y.roa (hash: 5ajkJVPU2aNKACUypGflrQtIm4VQ667e4Q3OVKtR3Qo=)
                          19: jhlVJdEq5CSb7xeEJJluyO2cD4U.roa (hash: Y5BoZbliCSJMGLNrnV8LMOT4HfFNdC4CnHxcWDylkIc=)
                          20: n3aSDa0wSjG8DGNhKTdlur88OGE.roa (hash: VPcJk8WusHu4dtmr76P4oTKPvI9HQCWwgtPmrWQcNek=)
                          21: nsOo67P1pOxIhOHap1kvjAR1RMk.roa (hash: tXPzP2r5oOkRIIGaSeFIaz/0I3DrQz8utyF4G0BMg9Q=)
                          22: oLorp9_iFDp4cXGfuxdzhRgZ9LE.roa (hash: 4pwc7NCQP3MEy6N+c5Z/ph82JWsbo5yUQspJIn6/VRw=)
                          23: q-LJzW3zeJvFle2xuCTtWpfW_S0.roa (hash: qy+ODjFK3x6C+8FYYflREP+Tl/VJYMt3q1d6F1RciK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:72:a7:6b:39:84:8b:84:5c:26:a4:0a:c0:b3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: May 19 01:00:39 2024 GMT
            Not After : May 20 01:00:39 2024 GMT
        Subject: CN=724461d57c5715be918d10ab0c297de16c8dc766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f3:be:7e:3f:20:7e:dc:13:da:c9:c6:8e:05:
                    a9:b5:82:0c:7a:c0:2f:7f:c5:9d:b1:76:f6:04:ab:
                    d0:fa:11:ee:d7:aa:52:d5:53:ca:90:8b:cf:d1:bd:
                    12:c2:0f:dd:d8:21:1b:f7:7d:af:ad:fa:68:84:b5:
                    6c:ee:a4:90:c0:06:49:4f:b4:9b:91:6a:da:6f:65:
                    09:1c:cf:1d:7f:c5:fd:ba:e1:c6:b8:05:17:a1:4b:
                    4f:2e:f7:56:fd:25:a9:c1:c9:c5:d4:44:2c:d6:43:
                    c7:d0:3e:5f:56:a6:6a:fc:14:f3:35:5d:42:bf:44:
                    d0:61:70:22:e2:74:5c:24:75:94:90:b8:06:f0:70:
                    de:82:c6:05:ba:43:82:c6:b5:85:36:43:bf:26:fd:
                    61:32:97:5c:00:7b:3f:47:25:35:4d:b4:a6:58:66:
                    ef:c2:ba:14:ec:18:0c:c0:b0:68:ba:bf:73:ec:f2:
                    6f:e8:f7:8c:17:2b:a2:dc:40:a7:3a:db:5c:52:8b:
                    76:07:fe:98:1d:d6:28:01:d3:ca:cb:13:12:83:f0:
                    7f:1c:61:d1:b1:6f:e3:ca:dc:25:af:96:ae:8f:ce:
                    c5:26:b4:b5:63:35:8c:b9:46:b2:da:8d:86:72:1b:
                    f6:88:f9:0d:64:90:0b:9f:ef:d3:d3:1a:ee:5f:0b:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:61:D5:7C:57:15:BE:91:8D:10:AB:0C:29:7D:E1:6C:8D:C7:66
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e8:a9:cf:94:21:9c:f5:f6:7a:db:31:42:7c:5b:dc:85:63:
         62:dd:4a:fb:3e:ad:1a:49:3e:50:94:49:dc:10:ac:d4:ee:47:
         b2:4d:46:d8:f2:67:ef:b5:98:f9:7e:71:16:f9:db:8d:e8:2c:
         25:7d:d0:77:15:2b:76:1d:bc:2d:1e:3e:7c:95:82:71:8e:c3:
         94:98:f4:44:b8:51:11:f9:30:63:5a:1b:30:b5:9a:38:54:aa:
         c7:cd:8c:d8:61:33:d1:7b:09:b0:b0:29:9c:0e:5c:66:70:3f:
         32:51:6e:01:07:83:fa:7b:05:4b:6c:d9:6d:3d:3a:07:48:1e:
         38:fa:0f:81:38:da:d5:9c:97:ea:22:9c:16:bc:f0:dc:3f:d9:
         d3:1a:13:b2:11:a1:2d:0f:cb:4e:12:3f:e9:46:85:ce:06:d0:
         f1:e9:18:35:b2:a6:1e:9e:aa:78:30:e1:48:73:44:ff:2b:d6:
         8e:99:1b:29:5d:c4:c7:0e:41:66:77:9c:3a:15:22:05:5d:01:
         ad:ea:21:5c:c5:a8:7b:d3:70:53:65:08:19:00:c6:8c:3f:83:
         97:d4:5e:54:9f:97:ec:a5:55:58:ec:c6:6c:90:9a:ff:1d:de:
         f9:03:f5:b9:69:52:96:47:25:98:2e:4e:7a:0a:da:2f:0b:30:
         ed:07:29:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+OXXKnazmEi4RcJqQKwLO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjQwNTE5MDEwMDM5WhcNMjQwNTIwMDEwMDM5WjAzMTEwLwYDVQQD
Eyg3MjQ0NjFkNTdjNTcxNWJlOTE4ZDEwYWIwYzI5N2RlMTZjOGRjNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/O+fj8gftwT2snGjgWptYIMesAv
f8WdsXb2BKvQ+hHu16pS1VPKkIvP0b0Swg/d2CEb932vrfpohLVs7qSQwAZJT7Sb
kWrab2UJHM8df8X9uuHGuAUXoUtPLvdW/SWpwcnF1EQs1kPH0D5fVqZq/BTzNV1C
v0TQYXAi4nRcJHWUkLgG8HDegsYFukOCxrWFNkO/Jv1hMpdcAHs/RyU1TbSmWGbv
wroU7BgMwLBour9z7PJv6PeMFyui3ECnOttcUot2B/6YHdYoAdPKyxMSg/B/HGHR
sW/jytwlr5auj87FJrS1YzWMuUay2o2Gchv2iPkNZJALn+/T0xruXwu9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJEYdV8VxW+kY0QqwwpfeFsjcdmMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOipz5Qh
nPX2etsxQnxb3IVjYt1K+z6tGkk+UJRJ3BCs1O5Hsk1G2PJn77WY+X5xFvnbjegs
JX3QdxUrdh28LR4+fJWCcY7DlJj0RLhREfkwY1obMLWaOFSqx82M2GEz0XsJsLAp
nA5cZnA/MlFuAQeD+nsFS2zZbT06B0geOPoPgTja1ZyX6iKcFrzw3D/Z0xoTshGh
LQ/LThI/6UaFzgbQ8ekYNbKmHp6qeDDhSHNE/yvWjpkbKV3Exw5BZnecOhUiBV0B
reohXMWoe9NwU2UIGQDGjD+Dl9ReVJ+X7KVVWOzGbJCa/x3e+QP1uWlSlkclmC5O
egraLwsw7Qcp4A==
-----END CERTIFICATE-----
Generated at Sun May 19 01:58:31 2024 by rpki-client on console-fra.rpki-client.org