Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          cKQCiuen/Y2V1M5IG93Pw3RiFy8fig8+SwoJ6LZPFcs=
Subject key identifier:   7F:81:39:28:F9:73:7D:C6:D5:DD:93:5E:7D:5A:A5:A9:61:FB:18:AD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       018F847E8888440B01FBD41DF9F0E20C5CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          0E37
Signing time:             Fri 17 May 2024 03:00:35 +0000
Manifest this update:     Fri 17 May 2024 03:00:35 +0000
Manifest next update:     Sat 18 May 2024 03:00:35 +0000
Files and hashes:         1: 1-OWKSJFglonOJCCsgLwugDQzSB0.roa (hash: jSwsXvxCrFx3Iz4zVm/DH3SiIsFn1mXF0oaHlNkwn7c=)
                          2: 2XFCTZ3mRs8j1pLvNITQkps2A08.roa (hash: T400REz865XrUi6QIVJknhZnbxrV7lR4Srm9xiMOeoA=)
                          3: 2yrL66P0evELXgf9xzJi21a7V6U.roa (hash: nqDlU9Fzx+3L3oQf3CyBdhlRuATW5IluM6zWdSCh71c=)
                          4: B03hxoCLKDqZrBrm478nVnwuOk8.roa (hash: 7SA+/2qQ/Uk1c0f4M6ZbS3tNtYMglA7T/ks8kJCIN90=)
                          5: FfSoXY3nl4Ub9B9YVof82oq7WZ0.roa (hash: Ol0ByCam/OZkP+cL5YdeiL0g3QPWZVNXosKoqbryKm4=)
                          6: GQWSjOsaceCi7QSzncHDsAV7YU8.roa (hash: 4TLZut2CmyGC/gUY5ZpKW2NuSTjFov+IvfWZY+BykvM=)
                          7: KJNGjPkcmIFOzP_uINRLs1xoz9Y.roa (hash: glnyJFBp57pliTzR7vvfipC69mbxLAn260n51iwiKuU=)
                          8: KrJZjiYOQ88jPV27toB3jM5jzTA.roa (hash: jk+bJPjch+IAHCOaujCVBbrK+knSr6BnnFu+BZ3CGso=)
                          9: L-0dfd52kruky9GH0M3bYnymR-U.roa (hash: pUSBwlTxJ1RQafini+6Cg16/4wUBvdy49Ziyr5zX/xY=)
                          10: MVQTAo-L1NKctTJ5DIG9aQEMkBQ.roa (hash: EJFBDyjqtYKpUE9+AZTVzM9nvNJnUy3e7nuzVli1TDM=)
                          11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: w/CdpihKDrTBo9myh8mhEEE+qattUffP/zaKxwa4d1Q=)
                          12: OsR5Xm3iO7MvaMCoVKaf5Gc99oU.roa (hash: kAuge366XUeJ1ybK0hLcaDC/T5/vR3TLswOFQdjXp5s=)
                          13: QMyNStVjkgaXA7ce_rkP1h3ww1k.roa (hash: edgb8NXX//stm8W3wTSemtpOK8a2d5S06d3hkiKwuew=)
                          14: To4APUO3xFL2AKl-kSFjb5OFfFc.roa (hash: 6Me0zI3MkJgNELCDa27WQ214ikluJm327/ZMSHqfzH4=)
                          15: VONprgM4PVX9IVzNqQ_SgcEQv0I.roa (hash: CI3/zNMQc91luKXaGnOmjjd1A9rchxaYk6Vi+tN4u3g=)
                          16: XEUVhr4HcMU_y5vNfTwO6bYAg3E.roa (hash: j4h58VfjBIFWRrgdnti71I++vFng26rgNoegc8ALnuM=)
                          17: _BDgBKrvmKDGs9-fp37WELNW9zY.roa (hash: QwzBYMRzEyWfNAD52wadIrr8gzpdB8nWl3iJD4pPBuE=)
                          18: fV4j2IOBHAyXj13oGc9x6zSxmqo.roa (hash: 8Z1yBOXd0v2IpXwZmoRuMO3T+WlU1TNJDxgzarj1xZ4=)
                          19: f_Hn5Chp90gAcnNIxknYo8S1rh8.roa (hash: Yn5KmO/foWN5gOePWfTaEc9lW3Qi9T7jvi3/jdaP0eE=)
                          20: gM9YKH8sgoOTd3-WQRdT6H4O0Cg.roa (hash: mlWCXV90nTN3MXKtEiBTm3VE80kTKpVrE35mCc75/9U=)
                          21: krmM4076JJCwvyvM2NtHUlGmOAk.roa (hash: nOeDhtT+Bqfl24DdPU8DbUpDoJyw9LlPzZ92ftVNwz0=)
                          22: lAQHDq5zTPDbs3M3K7RFYu5ggL8.roa (hash: Zyep0SbAikhAjCLzDwVcvS0XsfMvxpI8q8ST3VPj8/g=)
                          23: o2Au1SbBVbM6OyN60nzOqnYGP1Y.roa (hash: iOegUEAVufMc25AkMAftJiJS2bh7//aUOv6cS95EG7o=)
                          24: rfiBh9Ur8LsrKSxrWKki9dZFhgA.roa (hash: 421UcktGZbucN7CNAx1gM3dvBN6LFdY4n8JdJpVzOr0=)
                          25: vriAmgqdhCjlVj6tHBu5ZpaKHzw.roa (hash: gWD8A7kq+28wk1Y2/KgDP9PMgAU+nRR+N6elMBWeuBs=)
                          26: w663BNB7nSn8oAWUbQXe2-gPXUQ.roa (hash: Y0iwqp2iS8mCE8oi/OV2DyvOzYaaStSB74t7oh3AX2k=)
                          27: yQlBg7dz21eqJ2u0KuBSgd7Nu40.roa (hash: k9g3ksd7S9frgZIJ7bYxAGdwZPRCgqHHPmdbtfBrc8Y=)
                          28: zeR67-A8yMRRltQ9GkqNT3xiffM.roa (hash: 1yRNALm2g7wq3LWV2rlx7sYWCLoQKbwqX872ne/rGsQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:88:88:44:0b:01:fb:d4:1d:f9:f0:e2:0c:5c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: May 17 03:00:35 2024 GMT
            Not After : May 18 03:00:35 2024 GMT
        Subject: CN=7f813928f9737dc6d5dd935e7d5aa5a961fb18ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:ee:79:2b:6c:a8:28:d7:98:14:aa:59:c2:
                    da:c8:4e:df:db:a9:fb:9d:f6:44:6f:94:67:ff:c9:
                    71:95:c8:81:33:c6:f8:19:d1:db:e1:cd:46:c9:f1:
                    bc:69:a3:0e:a2:46:2b:94:2b:40:2e:60:3e:05:80:
                    c4:39:30:c6:80:3d:c7:ca:dc:d1:c7:75:69:b4:88:
                    69:61:cd:2f:8b:44:2d:dd:70:91:3c:a9:2a:3c:c8:
                    d8:42:e0:9a:4f:7b:ae:b7:e4:b7:13:1e:ae:8e:5b:
                    af:a9:6d:c2:4d:b2:2b:e0:19:68:c1:9a:00:97:df:
                    47:fb:bf:95:c7:ea:4d:db:e7:ae:c3:e8:de:03:a6:
                    f5:4a:1d:e3:12:cb:c1:03:77:fb:1c:92:2d:b9:fd:
                    b2:3e:2a:2c:f1:93:b3:97:f7:09:ff:34:84:b9:3b:
                    d1:b4:69:b1:97:1b:03:36:ca:95:53:57:d6:7c:88:
                    dc:ac:ff:18:97:6c:a4:60:ff:20:64:cb:78:5c:22:
                    23:5d:c1:b4:ab:aa:b7:90:35:5d:03:05:10:63:87:
                    91:7d:69:30:5f:3e:e9:ae:a6:18:e4:a7:3a:c6:f0:
                    38:c6:42:ec:7b:1d:e5:d6:1d:81:1e:af:8a:12:b5:
                    43:39:8d:96:9b:4c:04:9b:eb:36:c1:92:04:20:da:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:81:39:28:F9:73:7D:C6:D5:DD:93:5E:7D:5A:A5:A9:61:FB:18:AD
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2e:81:ac:12:a4:c3:0c:d5:72:93:33:23:f6:f5:83:47:1d:
         ac:f6:d5:e0:f4:a0:3b:2e:9f:30:ba:70:61:85:17:f0:f4:5a:
         84:d7:f0:20:8a:e2:ee:1c:d0:14:9d:c1:09:15:8b:12:bc:55:
         31:71:7d:07:2a:62:bb:28:a4:59:b4:07:ff:c5:4d:34:7d:7b:
         58:a1:97:06:6b:05:17:20:e0:6b:95:7e:20:6f:14:e3:06:7a:
         70:e4:60:0b:66:73:e1:d9:c7:7d:81:3c:05:82:b3:0e:13:ae:
         95:f0:a8:23:aa:d8:f2:5c:60:de:f7:51:eb:17:5b:0f:b2:67:
         90:7e:6d:67:5e:15:87:89:a6:71:ac:f4:80:4f:43:6f:91:cd:
         90:be:40:90:9b:b9:05:fd:37:85:88:b5:6e:d9:62:f8:ab:ae:
         3a:54:60:8f:df:46:55:6b:d2:fc:67:40:68:21:47:72:f2:b3:
         c0:80:b7:2e:66:12:5c:41:83:80:6c:6a:99:e9:fa:b4:e9:19:
         55:9c:93:3b:bb:59:33:4c:f9:d1:8f:26:44:a7:ec:04:1c:81:
         0f:62:04:8a:8f:22:c6:83:93:b6:7a:c7:c8:bd:df:0e:27:bb:
         7b:f0:5c:f4:80:80:03:ab:cd:7e:fb:83:68:d0:17:f7:e4:bf:
         c1:00:50:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+EfoiIRAsB+9Qd+fDiDFzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQwNTE3MDMwMDM1WhcNMjQwNTE4MDMwMDM1WjAzMTEwLwYDVQQD
Eyg3ZjgxMzkyOGY5NzM3ZGM2ZDVkZDkzNWU3ZDVhYTVhOTYxZmIxOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK7ueStsqCjXmBSqWcLayE7f26n7
nfZEb5Rn/8lxlciBM8b4GdHb4c1GyfG8aaMOokYrlCtALmA+BYDEOTDGgD3HytzR
x3VptIhpYc0vi0Qt3XCRPKkqPMjYQuCaT3uut+S3Ex6ujluvqW3CTbIr4BlowZoA
l99H+7+Vx+pN2+euw+jeA6b1Sh3jEsvBA3f7HJItuf2yPios8ZOzl/cJ/zSEuTvR
tGmxlxsDNsqVU1fWfIjcrP8Yl2ykYP8gZMt4XCIjXcG0q6q3kDVdAwUQY4eRfWkw
Xz7prqYY5Kc6xvA4xkLsex3l1h2BHq+KErVDOY2Wm0wEm+s2wZIEINqzvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+BOSj5c33G1d2TXn1apalh+xitMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqS6BrBKk
wwzVcpMzI/b1g0cdrPbV4PSgOy6fMLpwYYUX8PRahNfwIIri7hzQFJ3BCRWLErxV
MXF9BypiuyikWbQH/8VNNH17WKGXBmsFFyDga5V+IG8U4wZ6cORgC2Zz4dnHfYE8
BYKzDhOulfCoI6rY8lxg3vdR6xdbD7JnkH5tZ14Vh4mmcaz0gE9Db5HNkL5AkJu5
Bf03hYi1btli+KuuOlRgj99GVWvS/GdAaCFHcvKzwIC3LmYSXEGDgGxqmen6tOkZ
VZyTO7tZM0z50Y8mRKfsBByBD2IEio8ixoOTtnrHyL3fDie7e/Bc9ICAA6vNfvuD
aNAX9+S/wQBQww==
-----END CERTIFICATE-----
Generated at Fri May 17 09:06:15 2024 by rpki-client on console-ams.rpki-client.org