Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
File:                     TxQRLQXp2HYUnSd41I7aqjJNsKU.mft (raw, json)
Hash identifier:          ijFqQm44qcG7jPiRN241C3Hc8Eajb/pJwiTE2gXNEOc=
Subject key identifier:   E5:95:BD:B7:B0:B4:00:B2:49:6E:F6:A3:A0:57:F9:2D:71:0E:6C:B2
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       018F6675B31C292D72781B56F84DE8092B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
Manifest number:          03CB
Signing time:             Sat 11 May 2024 07:02:20 +0000
Manifest this update:     Sat 11 May 2024 07:02:20 +0000
Manifest next update:     Sun 12 May 2024 07:02:20 +0000
Files and hashes:         1: 3huATurZ3i_KLdA1uv119pYXGIo.roa (hash: YxIWBka+RlO7Fs2Imf9EdYWtQpdZWZVHFxC81CKRsh4=)
                          2: 638uFnBf9u-CU1TBNMi5L2_XhTQ.roa (hash: JWiCRFLKaF7VVrb17k99niihe0/X3aU+vgdBiT5sPCw=)
                          3: 7EYf6YyjfRxu_fcxczuN0BUWHcA.roa (hash: GIA7t4WLyENpU3aw+4IDfAARphudaOvnhWXVOGazYFQ=)
                          4: 86qI8bwkdnCHQ5moUQZ_3ZvEYCw.roa (hash: ZtFF6n15mm4L/kmQRoha3OP1imk2mGcTulDHnRxPfBc=)
                          5: 9L4cVualG0nrDdbGWVKhSG4JBqo.roa (hash: nKRP1ikJ2uAXuca1cZgic0RY+Exa29MgsQpQMS+MelE=)
                          6: 9TFFKUlnXHBTxv-oHwJMp7dDxkU.roa (hash: 0iI/jDQZonalsRJvT1KkSfy+K9s0PwhitH0CUj3CIaI=)
                          7: B1zx_UWm_PcBt5AbDZ2HD4SBcKw.roa (hash: jrlhYATchvw8JktGPJsWssOvXUYR+g9p7Lj1fycV2o0=)
                          8: BgbIZI5e5Gw1j3B8O4gauhej0m0.roa (hash: e4HJDhzejcXCWnPGU88e3WKrgNMSVnRdFHj9Tqc8sug=)
                          9: CLuLFTU9ljDWZJ4YtoMi9jJx8Uo.roa (hash: 2ngxTZ5iuvwBnCEL6MhD15UfFSbV4M+9ovtHV56DvnI=)
                          10: GdZQZiJ-70Im8CPbPKPsbexlJUw.roa (hash: n6DRS8kdmXuign9yQeJxK6omzEvaCtyEvYeqVVV/l0s=)
                          11: GiihIXdlX56grT4aZpOndH2k7eY.roa (hash: gjqIlxgd5M3a+Oq0+WZ6LMs01IF+5DYA9r2D9hS7SR0=)
                          12: IXIeMJZxqVdh14FS9WnIqrXyB0A.roa (hash: GqmAr/fi11YL5VMSoLszvVUj2fHU88DXXr2bDgReudA=)
                          13: Ie9PdLLTtI6tHc-bsqlVqPjNU8g.roa (hash: sSKDRLWMsmoGKQvBuMd9dVASvuPesgcvE/o7BpGmHfo=)
                          14: JQQorahg0r1mBUDVBhyWorB2awE.roa (hash: RXcwU/9qelDghIlvoGLXBCl9WiXr4U0PnmvH58gxIGw=)
                          15: JzAV7DuU5JO32pmPKUmg1wPkqP0.roa (hash: WFfxhT9iPy7srJ4mGD3dVv0ayyDa4Y9y1MCV0u6GzTk=)
                          16: K-M8tcrgMEUU1kmDP9aMRVpLvZo.roa (hash: cVX3+vWSKxCSuaQA2b010nkjlzsvlUt7vaYJb61fPVY=)
                          17: KyZ7V1ZDOAh08qGuUSci98IKSm4.roa (hash: OdIyIzqHEIcYVyTdaSLalgdeRp7VxQiTSxmnL0QbSHw=)
                          18: Lb6QKf4RjGNcv3kC5RltZkE3E7I.roa (hash: nYx/6eBcnV0Mou+6gpb8sUeutWMFSNItxmR9obT951U=)
                          19: N0kTkemaawT7zu4zdvvl6S_NNEM.roa (hash: K/ZfZ9D/PFbDo5lDKSJ7bYTAGx3HpunTlm5t4EasIxg=)
                          20: NQGu67d_KGZmkLOQ0K-q_5tZYHs.roa (hash: F6Lq5HJTu8Nd0w0MO9reifB1cCzq5i1+YvTF3ad6TsU=)
                          21: OuENi860pzGwFyzTgHJwTu1oo0Y.roa (hash: k/QcAmovD/blJtBZE/ymFrJg2aGmVuvbsUGMupFjg5s=)
                          22: PG7oPkEMZMiC5yj1sbtiqOMPnWo.roa (hash: RzhSt20UHcMvc7BDfNUSVP+kgyF+xhSltXrM0/FfmzE=)
                          23: QZdNq9asDJKrK93Op_usnZhs_WE.roa (hash: 0P2ocwclFuNVSG+G3FQxglfRkbzZ7oh0eXfFBPuZHQs=)
                          24: S-jvUnhJBX2ESxv5cQgmuooY--8.roa (hash: kp4ux+gu0o2uAzWjISYINSZfwRDgIT+4ojEm/t/QxC4=)
                          25: TxQRLQXp2HYUnSd41I7aqjJNsKU.crl (hash: boegc1gDY5xEPIiQOF/w7yDt1FCztZCf61Nf4R8guGc=)
                          26: TyuDcTqaP_iiIDkoEs8gsKGQYqs.roa (hash: 7COu5IVG6ezdE9FD9NxK9dKCFzJijkO7m27ZxOTCXjk=)
                          27: VmSVyvi3lyudcnmBWmJFeCYTV6E.roa (hash: wAQhZuayAXBnSuyxtOB+CVFlqGztTG/JfcgHkNQhnvI=)
                          28: WJ3NiCG3ZHF3sx7x7kP0nSA4WW8.roa (hash: WF3/ZKtEDprUrzp6KXvVA2+uLnDQbhBfGHUpcuvtRXg=)
                          29: WRUsVkfnXHn7piBYQWbHh9qLgYU.roa (hash: 25KB/FTgSZrYuOeJGOuK/G+p9I9gzXWI5/rnb6Tobdk=)
                          30: XrVcR1cVzzUj52za7vLMllNCVD4.roa (hash: rpFcna8/YV6QXlBcLG5k6C9E5WkGzGXG4rdnWjRPIDc=)
                          31: ZI4YHAyCqjfjaoUZWL63dzsFL10.roa (hash: yu6Gn7Q3U4qVlxl45DD6m8lfY144fEaYodsGHxKY7hk=)
                          32: af-0WBEu5EwFIwfa5chxW7RbPG0.roa (hash: c5/wt6qXZJKiroNkG+FqekJayKgzCSyvc+VxM5iE/a8=)
                          33: cHkRc5kwNXyuG2IbB9oR1Mm89T0.roa (hash: hANc7YiJTuzN38SxNoxkCR1RuBnuyTlF1FnhKg50cT4=)
                          34: gnrfaQ-gSASXJ5d_f1sOxBaOzW8.roa (hash: /LUsqZl4SPXYOY8oo4xoJ03hnVxeC7M83kfenlwohkk=)
                          35: gta_yO49iUbqws4_9uBqkgI8pdY.roa (hash: hkGYrs8SoZkEnsrZhE45XuDiIEA+62dOBW6ABctRHWs=)
                          36: hQIWT_A6MhzTGpydLTY4eEsK7d8.roa (hash: swcx5MaZIEOhQIDBXQgUvNHiBAJDSKaOgJ/JfV5DLHQ=)
                          37: hvZMCm5ea6xviCVx9HsikRdAofE.roa (hash: ClQ4LCOSM0wZPwgtAQSGTvQeJnLts2psHb3f+xovmx0=)
                          38: jftlOxAHhXgqoXmX2eHUWgCmJeQ.roa (hash: D6eGXQUWoYacCB0EB1x63M52DENv/ReW3ly3U9/2l7E=)
                          39: lO05xTKDIixWp_wTm0U0CkxTRFc.roa (hash: 2tMzyMdKNOTAqqMYKj0b5p/qYDnWblosOOiNhUxi16Y=)
                          40: ohiM_yvSP1_9Y3cvHiELANqJvD8.roa (hash: wTwYYG9t5wy8B7c7ycYnMlTqGd4EJ7bw/l5FctmXKAA=)
                          41: ooPN7IntxwDI1YPXEA-ed8lTPQM.roa (hash: RjCSCrWJkqtkYoEyf82brR7t/ZSwjh8Gc1RzxQc+ftA=)
                          42: skpute8fJQToweA-nCsYUxwsVeA.roa (hash: 6qSD+1g+XCGSYWl7qOuxOawOs8/5ZH4Ptq+v2lHzW2M=)
                          43: vAI7VsgpesjcJ_wah32WZvz3ryw.roa (hash: uiEmnSl6UuSzD7V4GK8EE+kXvrh/RKCxSP6Unn8TS/I=)
                          44: yMTOQRX0eAgzJ_y9faawQzoV00o.roa (hash: 1wSqEElgdbYnrvrLqhCigOi+CubMzJKnoThW0Pp8U+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 07:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:66:75:b3:1c:29:2d:72:78:1b:56:f8:4d:e8:09:2b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: May 11 07:02:20 2024 GMT
            Not After : May 12 07:02:20 2024 GMT
        Subject: CN=e595bdb7b0b400b2496ef6a3a057f92d710e6cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:90:c5:d8:cb:8a:b3:c5:4f:89:58:84:eb:
                    12:3f:e8:1f:52:66:90:06:f3:b2:91:a0:0c:a9:f7:
                    87:31:f1:37:7b:1b:f5:df:97:29:e3:ce:cc:9d:d0:
                    fc:87:de:08:21:e2:1e:ee:4f:a6:81:2c:8b:c9:82:
                    34:95:94:a9:2c:40:3b:b5:7b:b0:cc:bd:0a:c8:b4:
                    8c:c6:61:1b:99:9f:38:c9:91:67:e3:19:1f:aa:8e:
                    c5:f6:64:d5:b4:16:dd:fe:d4:4f:aa:73:e6:8a:55:
                    37:f1:ff:a8:32:f8:b3:aa:05:be:97:66:7b:e1:aa:
                    f9:1f:41:b8:31:17:bc:7d:dc:86:18:79:3b:fd:ad:
                    17:f6:5d:64:da:c0:e5:03:48:cd:2f:07:07:2a:a7:
                    e2:67:62:c4:c1:27:d5:3f:26:37:8d:04:12:c1:7c:
                    0e:6e:ae:5c:80:b3:2f:d7:37:46:00:76:80:2d:a9:
                    dc:d5:ee:12:d0:e6:4f:d1:11:69:74:a7:98:40:44:
                    9b:a5:7d:db:df:2f:4b:3f:c4:86:77:60:d6:3a:92:
                    8f:33:39:3c:3e:1d:2b:25:8e:d0:b6:74:6a:11:94:
                    4b:64:e8:71:dd:be:b1:d1:f0:38:a2:f9:d2:24:76:
                    1c:3c:12:ee:81:66:d9:95:30:8a:aa:45:67:3b:26:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:BD:B7:B0:B4:00:B2:49:6E:F6:A3:A0:57:F9:2D:71:0E:6C:B2
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:36:17:0c:95:07:d4:64:2e:8b:60:24:2d:7b:38:34:52:f6:
         6a:a6:11:b0:a8:70:cb:73:68:81:96:fc:34:85:23:cb:f1:58:
         1e:ff:21:bf:f1:6b:c8:4f:8e:b7:b8:12:91:5b:95:65:86:64:
         48:a5:b6:55:70:b7:f9:7c:95:1e:ff:79:ef:d7:c5:82:fe:44:
         fe:f8:23:fa:a2:49:ed:72:60:e7:bf:56:c9:9d:ae:91:d2:0e:
         c3:2c:26:b1:5a:cb:37:63:ec:dd:c9:66:4a:9a:99:f2:ca:5a:
         77:46:18:cf:33:c8:86:e5:80:99:7b:4c:3b:fd:35:9c:b9:d3:
         80:16:0c:b1:a4:bd:c9:a7:fc:ec:92:87:cf:72:b9:c0:bb:b1:
         50:4c:41:63:e3:31:53:d6:14:bc:3a:f5:de:52:34:26:50:63:
         26:4e:63:1f:be:3a:88:16:58:e9:f6:c0:1a:1c:6b:85:5f:3c:
         34:e1:bb:72:5d:cb:6b:f8:04:ef:d8:6a:fa:db:ee:a6:67:01:
         0d:68:4f:91:9e:c3:aa:3e:af:38:59:a9:2a:54:93:54:2a:4a:
         a0:1d:bc:69:87:b0:1c:a8:d5:bf:2a:fa:bc:21:47:08:12:4e:
         37:83:de:1e:ad:4d:db:4c:95:85:a9:ec:c2:0a:36:e0:a6:e6:
         72:40:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----