Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          iUuBwO0G2O+N+WKdHAsxRvFGJvIVeIZca7yU4+r2SfM=
Subject key identifier:   9D:FB:0C:57:E6:A0:A9:AF:1D:DC:70:51:F8:25:C5:A9:9E:A4:FB:7A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       018FA21B3890429B1B5669A69CB13369E108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          11FB
Signing time:             Wed 22 May 2024 21:00:43 +0000
Manifest this update:     Wed 22 May 2024 21:00:43 +0000
Manifest next update:     Thu 23 May 2024 21:00:43 +0000
Files and hashes:         1: 1-_zG5M3C9a4wRTvrhgSKcxm-SHg.roa (hash: KvXqT2o5OSdvGzkFHtNGs/H4/bFJNlb12hv9/b46lM8=)
                          2: 1-uhELfZn8yj6VCK3atfsCEuoxuA.roa (hash: 6bTVrcalCV5ABkwh85AivNF174VRNH9izQ9Yp0wrxOs=)
                          3: 2-aOOVr7q023Pk3IaV5TPfJ76Gc.roa (hash: 22bUlTVHfB7wqkY2JhUNchX7kmDDrhCiXCQUa3/KJgU=)
                          4: 5QiU4KjHe6rURZgDdGTMl8Zyezw.roa (hash: yuQ/7BQYs9jM3jrH4SGueIzc9M29YlEPUkdg3FNwGhc=)
                          5: 7RgnMPWIFNhlJYDFCkvQw2l56eA.roa (hash: A08+clRBwT/O3Rn7KYPV9Wcni9VvwrepT8LUNLo6Tlk=)
                          6: 7lGBTkKYJ_WPAzyZzTtGImaphjo.roa (hash: efiPd2dZMuMzPfsAapnr7OZ3fhRlGkVsj2SemJKw3Hs=)
                          7: 9V15KokMRLOv3d2QGM6kxqPMjAk.roa (hash: 29UWw21kDH7u2g5Xu4dD7QQgFCTeRuEYahZhzOMMtuQ=)
                          8: 9_b_r8yUwYd4GGeZKd-c_UaSh-w.roa (hash: njPD/RrpUIDyoyt9tCP3WKv97I0fs0muUSblPZ88qqQ=)
                          9: Cpj4CS5Syfv8p1MkSDbM2HHOQIA.roa (hash: QYdoLyP1ugdtttBATb01GlyvniZSmhwbFfG0SubmXXY=)
                          10: HF2XbYjJvu69VXIR3q4532IaQZU.roa (hash: +2prh5szipP2kwDbAJeERLwDz+H2V6Ak1+qQUXS1dhM=)
                          11: Hc2JXlu_-tA5p-ImkeLPBP77u1I.roa (hash: iJnNcLG+UsucKeYTqIJJlXdmpkBm+dz2aj+5d15V320=)
                          12: I_DnOQVHlJ8T7coLU20XPjoT9rY.roa (hash: UrLHl/1NMgxfqJBW/bNaVpZqzGkVqvaSHdGcq/p+fO4=)
                          13: PZoFtIzZ8ZVm4oP5HkVTaJjH3Ts.roa (hash: jsw/QE01H+QXkF9AwZ+rJo9OzcIutemBBR3xgFxYMbQ=)
                          14: QtOqvCh0JDBBovvKx6SNp2pH5co.roa (hash: ftEYpTT0z58NNgBwmUY8IBiVari+rCSJofn9gVyAmAg=)
                          15: SP8AgShzwYjEGMPSvDt3cdNDVi8.roa (hash: rHZFKTf74QNuT5bELYVma7un8SurP5bi6Ari8WD/2MQ=)
                          16: VLdlSoX1beDIU_8vxBCxbHUTHMQ.roa (hash: kHctGKB5vzhvjM+LaeyBciSMiGjsyJrKcJLq/4As12c=)
                          17: VwdRePlDopY7vtWO_rEJOwFPl94.roa (hash: zn1SUxK0kQIFXVlxgB7Vrw6NEyVYkwKhDTGhcDxl6Yg=)
                          18: Z_e71hj2oOgBz5IuU18Wz30iY7A.roa (hash: 6DejAFnrnwgY06QDp0LhDZBWpdvZoFHnL8ARCBk6A04=)
                          19: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: ELVYOB8jLzDca969qLb2qJCy9+Az4HXGZtDCDv68F+E=)
                          20: aW5hqrLFBdSddb2iPsz0JuxckWk.roa (hash: DefnT8kH2WacGi1UN8M831HLtvl06Zmw+v/hVR9j4zo=)
                          21: b8Gb7e3T5_fbCDzBvMO1glwFKuI.roa (hash: 95BghHc+/HJ72K1yVMIF1HltsRax/pcXKtykbvEXW30=)
                          22: bSKT2MCA_M7qJHOiW4ucyAHsHFM.roa (hash: q/ouXvQxioEERidFIndLeBbWbz5eUw/WW1LmTk1RXDk=)
                          23: cps1vnPS3Gi9mMQYaO12hTBpBBs.roa (hash: lgsGGPiuWmrm/7M+9vlFMSiTrIkVU3fdjmwdxGoUW28=)
                          24: f3kz1XK82k7nZ9c_VJO00J_IYWo.roa (hash: R4KrzIMz0JnJH3vYw54vRi44kV7CXnTPuVDwpmZ1A10=)
                          25: jX2JlTW3XchnQbt8IttFMh24sAQ.roa (hash: 75xNEjMhGOrrMY8PEWTGcgkAeyIY1rdxcVhmBgq3NS8=)
                          26: k2y0dbclqfkDR4RCHMrKPPkanuM.roa (hash: /PhTPQdai2pCCi6fhus+cushWk0wKvSDPiyzlkIqwtE=)
                          27: k39x78AVA0gK80-nbdMSfIX5Bus.roa (hash: 6gYKw9/Qlj9wkc3r/sfGRP2dol0HzVQhQJPRLKWuhRU=)
                          28: qdB6ySjssDrDY_OxXc7ZMcVmN6M.roa (hash: JZLcbl/ymjaWpxqj0LsWUKquCMckGbVF6EYLCxhiqC0=)
                          29: sh3nf_nGdks8JWQh7FW8iC7EIUQ.roa (hash: ehrLBrdlvej8R+tlB7+lo35JcEhfDbs29RZM2Lb8vI4=)
                          30: tMoGrs2rNXzZX_qyeg_HYoZKFS8.roa (hash: lIEHf9mP1TE6iFZ1/kstbUEzK64oGn0ll7nmaklh5WQ=)
                          31: ulmcDkBAdFprabTWHwD5Al4TJjk.roa (hash: PuoPpEKjSjeLUIfYu2Kq+ArbgIVDxKmZ5fT6jRTSXD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:1b:38:90:42:9b:1b:56:69:a6:9c:b1:33:69:e1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: May 22 21:00:43 2024 GMT
            Not After : May 23 21:00:43 2024 GMT
        Subject: CN=9dfb0c57e6a0a9af1ddc7051f825c5a99ea4fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:eb:58:f0:57:b5:03:dc:02:8e:aa:b6:8f:
                    af:ad:53:55:85:32:b6:1d:15:e2:b4:b3:08:b7:89:
                    af:f6:51:45:65:22:18:0d:a4:02:b0:60:5d:10:ba:
                    32:ce:65:64:69:61:06:f7:b0:56:5d:ae:90:ca:a2:
                    2f:6d:0c:36:9b:0c:40:c4:bb:ad:9c:f8:c4:bc:9b:
                    45:c2:d8:8b:2a:f5:83:a4:75:5d:37:3a:71:69:4e:
                    74:b1:6f:1b:f2:e8:6b:ee:17:5c:25:be:96:34:32:
                    5b:da:99:03:15:0b:e6:ad:38:5a:41:95:78:0e:49:
                    ad:d2:09:48:c5:f2:1e:aa:3a:ee:fa:41:e5:d1:76:
                    d6:a1:13:8d:0e:ae:c9:6a:f1:26:42:fc:59:be:ae:
                    cf:1e:8d:18:66:c2:2a:5c:ec:4e:b1:19:e4:1f:c8:
                    99:5a:de:e5:ad:7c:e5:3c:0a:14:09:a1:07:00:6a:
                    c8:9e:cf:45:2b:62:1e:91:d2:83:63:aa:a9:ca:60:
                    08:d1:8f:f9:89:05:e5:90:d0:f0:cb:10:bd:f8:94:
                    b7:86:45:9f:70:b8:7b:90:d5:66:d9:f4:f2:7d:b9:
                    63:c6:76:63:3c:02:5d:25:f0:92:ae:f0:9a:49:54:
                    f9:20:47:94:fa:bc:09:1b:27:c7:32:00:21:94:69:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:0C:57:E6:A0:A9:AF:1D:DC:70:51:F8:25:C5:A9:9E:A4:FB:7A
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:5a:37:33:fd:12:0a:90:a3:b2:1b:9c:95:c8:4a:b2:85:
         79:51:f4:87:bb:0d:0b:f2:3c:37:c0:ed:bc:e1:17:89:52:83:
         71:bb:8c:7d:35:93:6e:0c:81:92:93:52:95:5e:f5:a0:99:a4:
         76:48:52:92:f3:43:f7:1b:df:f6:3c:69:6f:46:90:89:9f:20:
         72:ac:a8:5d:00:6b:53:e9:73:0d:4f:b3:1a:d8:c0:07:6b:27:
         ca:83:59:9a:b4:ea:7e:7f:8e:b9:4d:0e:2b:ef:91:a2:2a:aa:
         d2:45:de:1f:fb:ed:c6:e2:33:ef:a9:5a:cb:0e:ea:ae:eb:78:
         50:b1:b3:53:60:57:ec:7f:56:1d:4b:1e:db:8e:aa:cc:72:b9:
         f0:5e:31:8e:ce:1b:00:50:8b:dd:73:90:06:41:c6:c2:fc:5e:
         3d:5d:ed:b2:24:c8:08:b2:f2:22:94:8e:9a:88:58:94:6a:2d:
         1f:8b:fe:a7:cf:91:4f:52:c6:da:40:c1:12:f2:2f:39:d3:a4:
         bb:c3:a0:a8:b5:52:59:96:41:2f:9b:44:48:ba:7f:52:0c:fd:
         c1:37:39:bd:74:ff:df:be:cd:d1:21:28:35:c7:1c:a8:b7:98:
         62:62:12:f6:de:f1:7b:4c:e2:84:22:8d:c1:4e:db:42:be:8f:
         ae:01:57:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+iGziQQpsbVmmmnLEzaeEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjQwNTIyMjEwMDQzWhcNMjQwNTIzMjEwMDQzWjAzMTEwLwYDVQQD
Eyg5ZGZiMGM1N2U2YTBhOWFmMWRkYzcwNTFmODI1YzVhOTllYTRmYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pzrWPBXtQPcAo6qto+vrVNVhTK2
HRXitLMIt4mv9lFFZSIYDaQCsGBdELoyzmVkaWEG97BWXa6QyqIvbQw2mwxAxLut
nPjEvJtFwtiLKvWDpHVdNzpxaU50sW8b8uhr7hdcJb6WNDJb2pkDFQvmrThaQZV4
Dkmt0glIxfIeqjru+kHl0XbWoRONDq7JavEmQvxZvq7PHo0YZsIqXOxOsRnkH8iZ
Wt7lrXzlPAoUCaEHAGrIns9FK2IekdKDY6qpymAI0Y/5iQXlkNDwyxC9+JS3hkWf
cLh7kNVm2fTyfbljxnZjPAJdJfCSrvCaSVT5IEeU+rwJGyfHMgAhlGms0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ37DFfmoKmvHdxwUfglxamepPt6MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7laNzP9
EgqQo7IbnJXISrKFeVH0h7sNC/I8N8DtvOEXiVKDcbuMfTWTbgyBkpNSlV71oJmk
dkhSkvND9xvf9jxpb0aQiZ8gcqyoXQBrU+lzDU+zGtjAB2snyoNZmrTqfn+OuU0O
K++Roiqq0kXeH/vtxuIz76layw7qrut4ULGzU2BX7H9WHUse246qzHK58F4xjs4b
AFCL3XOQBkHGwvxePV3tsiTICLLyIpSOmohYlGotH4v+p8+RT1LG2kDBEvIvOdOk
u8OgqLVSWZZBL5tESLp/Ugz9wTc5vXT/377N0SEoNcccqLeYYmIS9t7xe0zihCKN
wU7bQr6PrgFX/Q==
-----END CERTIFICATE-----
Generated at Wed May 22 23:49:43 2024 by rpki-client on console-fra.rpki-client.org