Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File:                     TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier:          4y5nvjOAJtZ6BgBuwl6ixEbV4G7NlZhqDQ3Ci3Ps+GE=
Subject key identifier:   8F:C2:98:62:B6:0A:4B:1A:BE:77:E1:8A:70:74:B0:6A:90:A4:38:36
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       0190448B2088F43799E6243EC5909586FB59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number:          11F9
Signing time:             Sun 23 Jun 2024 10:01:26 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:26 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:26 +0000
Files and hashes:         1: 02HcPtPfECDB46FwVnUKldpukZQ.roa (hash: TtOufFcg2LX67lD1gmfZ6Uhk8HaY0JyuUZA2t3vQtn8=)
                          2: 0QYQvmVhgY8fHxwpDhjjkHqTUsc.roa (hash: a/Etd4yVGnVihCDZXW5D/KOysk3eFfb2eIjBlzz70hg=)
                          3: 40uOc8fzMoC7OpbqEKMrVJU00Rc.roa (hash: PCcOdhCuq3dJ8wuFVaNAtRUgMLGjjZLLd/y/RX+XY4Q=)
                          4: AKvyC_ZJBSo8bu8Ji2tAERDc7FA.roa (hash: nyeNHAuiwqAhjLExCY7F2K/so0t/yFRpvlXOsNfCufI=)
                          5: BmYmhagUQ9q_rtxCeXWJy2Ag1WY.roa (hash: S0CDxkjEHunaaCBV+8OKTt6vVwl500p3sBwJIxdveSg=)
                          6: CNY6yXWXgRVxZvk9zMGAEX-VCiI.roa (hash: oAcmAP8eaQ2say9VCiIgS1sskzd/482Y0xoD7eTMp44=)
                          7: E2tWxKbX3A0132-oiWAReSGLPLE.roa (hash: 3T+tTA66hNZ7RQ7ctuZAwTDXFRHpsdF3y1SKAWC50cc=)
                          8: Hjq4NBkOSSTHCZca05Zwqpt7lc4.roa (hash: o8drUsYV0dNiIbOpjwSS3DBHPkivmenzUo5cZ2B3iEI=)
                          9: JE-tGR0kP80vpqc3jvrvRP0_Sd4.roa (hash: BfG46qaYZUjbChwrjJ/BU520uhdW0at5Ws/3M5P7gf0=)
                          10: Lvb6L7LGXm4-nCkhySVpft5zjtk.roa (hash: kA6Tzi/HJIsarD78IIROFiXCuLvXDWV+rg2OhEO6hZQ=)
                          11: MB-x_-HToWLURuhzyI2W-RZIRKY.roa (hash: IqZAV/Uey3yYoqvXiJ3wJMAFChT9RTun9kcPkFC21Pg=)
                          12: O4ZJsF1ZttF0eNnj_84xdHD914g.roa (hash: mG+q/FoM3PPe1S1SUuipUmlglhgxjyEUwS7R+O4NKFE=)
                          13: Oruqp_-VsbDULCBBfh1Cdk4Jzqk.roa (hash: N2WQbrEgXU2YLaDACSQSK+21Zf3fN6esOf+ry1j01+I=)
                          14: QvcAa__rqiZtX9AwsXEv5UYiCeI.roa (hash: o3WUNQ31rmLoxE/mUKgX/Nv+l3fh61cGYUTA4il0onE=)
                          15: Qy1qD0ZlMKv8w29CO7u2go1xRng.roa (hash: 98lOCdIWdvmyh0ofx4tBkWZ5+8JiSjrXsCx/f7jn7eU=)
                          16: SfqBOgC-OVC9cbLO6FjoYrdgY1A.roa (hash: z08elAL6YlqpBLz9Uz6KyxiYxxogqP33uJJM4Rzv4a4=)
                          17: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: F3hoyoiHHI5wxeA1AvXqenPg8H8Ade3yn2ThLK4MZPk=)
                          18: Uh8NfV6vByce58ziWyEyb7R5EfY.roa (hash: /a/EqQRr21nDqVeB0mJ9uRNfVJpZWbo6iC/NnXTKZjU=)
                          19: ZONyg8OM3t--uctbjqMgZ6B3hXs.roa (hash: YivsHcnBm7JBVxNFX+vZn5/kp0lFzmCAKPYRpVz6yDU=)
                          20: _3wPtC_StjLM9iyOjz3MiQvA3Tw.roa (hash: Cs6VWv4VvG1KjtaKIuXuR7VhPzdVbT9h2YFUbZWwnzg=)
                          21: cug377GHKyRnXerIRZmull_8wvo.roa (hash: IxNsay94By86aM/+bn9cOHol3sZyJ69Yy/jhl0itHu4=)
                          22: i4hV2A65IeHohLh2YK4F0CaRzpY.roa (hash: /fpnt1+vePN1fcA/2rIiLevMQcaQxreQtbKIXisvBKA=)
                          23: k5DY5RUjAUWi7NYlWDIE5TaT-Q0.roa (hash: dCJ3NUhf7ZfioMcZ4kTUXzfQlVlChd4EM9Wuk4gyYlk=)
                          24: oKegfjSQYVAAwzijVJTioyn78cQ.roa (hash: BqwzoGlA6R5gAwM59BpT7V7IMuzUckinXaIESywt2hU=)
                          25: xte_zZL6qDViq-RXAwMu9HyRPUI.roa (hash: z798amzVLPdwPm1RNpBKehVKSE6ZDaxq0jwir1l/4zk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:20:88:f4:37:99:e6:24:3e:c5:90:95:86:fb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Jun 23 10:01:26 2024 GMT
            Not After : Jun 24 10:01:26 2024 GMT
        Subject: CN=8fc29862b60a4b1abe77e18a7074b06a90a43836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:e1:65:a2:af:32:b8:bf:2c:59:78:69:41:
                    57:1b:2f:cc:4f:02:e1:73:7b:c5:65:fc:29:40:b1:
                    ec:98:35:b2:06:e1:df:e2:5f:9d:83:6c:07:22:ae:
                    12:5b:ec:82:44:5c:44:ad:6e:21:fd:13:f6:c3:b3:
                    17:6e:3c:de:27:27:04:82:77:4c:23:c0:b1:a4:4a:
                    e9:42:04:81:55:b5:fb:3f:eb:48:f5:29:09:0a:f9:
                    38:be:60:95:92:b0:b0:3d:a1:64:63:8f:be:9e:48:
                    29:47:26:ce:bf:ef:f1:f5:e6:3b:bd:d9:93:d5:a9:
                    06:ab:65:3f:d7:82:7e:39:a6:5d:d5:86:de:c6:0f:
                    67:73:1d:09:0f:6a:35:d9:7d:85:06:e9:cc:23:f2:
                    4a:6d:47:a7:c5:87:dd:f4:08:d2:86:b4:ab:ce:fa:
                    d1:c2:3d:7e:fe:86:c3:28:47:c1:58:ea:ce:c5:db:
                    0b:8c:2d:6e:33:48:5e:50:e4:4b:3f:5a:1b:d1:23:
                    50:a2:1a:47:88:44:af:92:63:5d:23:63:b8:84:80:
                    2c:76:6b:f9:18:1c:ca:21:8a:f9:80:6a:d0:8f:e0:
                    13:08:8e:f6:1d:c6:5f:d2:7e:78:ca:20:42:2a:82:
                    dd:ac:31:c2:25:87:65:a9:b9:7f:4e:7d:48:3e:ab:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C2:98:62:B6:0A:4B:1A:BE:77:E1:8A:70:74:B0:6A:90:A4:38:36
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:af:40:ad:db:ac:47:7a:11:ec:ea:fe:53:6a:09:5e:e4:
         8f:31:0e:36:be:d1:e5:4b:43:cc:61:e8:6b:a1:b4:a6:f0:56:
         00:69:f1:67:8f:2d:34:f2:6b:ae:a4:e8:f7:c0:09:24:58:e6:
         5b:27:09:83:47:a6:80:86:ad:b2:b4:c2:16:44:48:e4:6c:b7:
         3a:a7:57:ae:43:52:14:09:ee:10:eb:15:8b:77:f1:59:ef:7e:
         5a:b9:f9:78:37:6a:b6:e3:95:c1:67:8e:3f:af:36:24:8b:12:
         a9:d7:99:c8:bd:74:ea:b6:38:5d:34:cc:6c:df:d0:6a:1d:96:
         87:5f:65:01:52:52:f4:da:c6:ce:67:ed:c9:72:a0:61:69:15:
         4f:c0:ce:f5:2c:d7:1b:ed:ad:33:07:dc:f4:83:e8:fa:03:6b:
         07:65:e4:97:8d:23:8c:f3:0c:4c:db:53:0a:61:17:1c:3b:19:
         93:53:1d:5b:f8:1d:2e:72:82:d3:7d:5d:9f:75:67:50:40:c0:
         82:30:ca:f3:9f:a9:e2:36:ea:67:a4:ad:23:f9:81:79:fb:f7:
         c7:88:4f:51:04:91:3c:1e:15:30:05:72:35:83:ba:f7:a0:0b:
         75:63:3f:01:96:54:db:d5:04:0b:bc:ef:a2:b8:6a:da:43:72:
         b1:7c:7d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEiyCI9DeZ5iQ+xZCVhvtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjQwNjIzMTAwMTI2WhcNMjQwNjI0MTAwMTI2WjAzMTEwLwYDVQQD
Eyg4ZmMyOTg2MmI2MGE0YjFhYmU3N2UxOGE3MDc0YjA2YTkwYTQzODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQThZaKvMri/LFl4aUFXGy/MTwLh
c3vFZfwpQLHsmDWyBuHf4l+dg2wHIq4SW+yCRFxErW4h/RP2w7MXbjzeJycEgndM
I8CxpErpQgSBVbX7P+tI9SkJCvk4vmCVkrCwPaFkY4++nkgpRybOv+/x9eY7vdmT
1akGq2U/14J+OaZd1Ybexg9ncx0JD2o12X2FBunMI/JKbUenxYfd9AjShrSrzvrR
wj1+/obDKEfBWOrOxdsLjC1uM0heUORLP1ob0SNQohpHiESvkmNdI2O4hIAsdmv5
GBzKIYr5gGrQj+ATCI72HcZf0n54yiBCKoLdrDHCJYdlqbl/Tn1IPqvSZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/CmGK2CksavnfhinB0sGqQpDg2MB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5avQK3b
rEd6Eezq/lNqCV7kjzEONr7R5UtDzGHoa6G0pvBWAGnxZ48tNPJrrqTo98AJJFjm
WycJg0emgIatsrTCFkRI5Gy3OqdXrkNSFAnuEOsVi3fxWe9+Wrn5eDdqtuOVwWeO
P682JIsSqdeZyL106rY4XTTMbN/Qah2Wh19lAVJS9NrGzmftyXKgYWkVT8DO9SzX
G+2tMwfc9IPo+gNrB2Xkl40jjPMMTNtTCmEXHDsZk1MdW/gdLnKC031dn3VnUEDA
gjDK85+p4jbqZ6StI/mBefv3x4hPUQSRPB4VMAVyNYO696ALdWM/AZZU29UEC7zv
orhq2kNysXx9yg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:24 2024 by rpki-client on console-fra.rpki-client.org