Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          0is7IhJ8KYwr0Bg3FMElSyANtt+ozY+mX6cczyvtYpc=
Subject key identifier:   CD:64:33:14:FC:10:6A:BE:50:B7:91:45:7E:44:D3:3A:DC:E3:DE:FC
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       018F7C20CC696B39506F65BA4E35DFADCDA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0961
Signing time:             Wed 15 May 2024 12:01:15 +0000
Manifest this update:     Wed 15 May 2024 12:01:15 +0000
Manifest next update:     Thu 16 May 2024 12:01:15 +0000
Files and hashes:         1: 1-hsDF_f_fN0aFFMo9DMoJkT8Vhs.roa (hash: z/On7Q8ZDzFjs/tR1ayNEhjDDzzMP/xOdb1bgzL4s0s=)
                          2: 2CbgenPAyht217Ui4afxF_SwM8s.roa (hash: AhljtxIqIsmnrmOO26jlNU4taxnGtvfmx5v6QEgKSLs=)
                          3: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: uKjh75bNj6vqtJ9L/ST6ivQQSVIKcx6uoq6KdR3ALeo=)
                          4: 4zI7dDK3rm3W-R55D-PK1iR7bXE.roa (hash: 2zuM78wwPM132vlOwIbTdPoiR13t6HfrLViS6IOZa2M=)
                          5: 77JUDhH8EUkY6HFWuvF4p4cE7eQ.roa (hash: 7GBXpTdSDDFcGYnfJvpghA/DWXSdlJyjsm9sNU9GD20=)
                          6: 90v0nQ7L-k1A_w98RHS4hv5mJoE.roa (hash: Hiv14erj7b8LFY4jjmzRPQjqHcx1ga6R5Sk/lpO9/9k=)
                          7: B1Zt58VKuLyfFdABRPJuGZ_jB48.roa (hash: PyHeJ5FG7zsioyJqlN9YKxtPgOzyJKVLxNtekwjHca0=)
                          8: C4MW5yzzQptlkxxEMmuWXdshUho.roa (hash: Awwl9nf0G3rtcFCYN/hjgJd7/BRCHpf8p7lewgXiaPU=)
                          9: CBeTSzD-ZGKawQFk_aQ2xOm9v8A.roa (hash: a6xiF6y37M2vqFhADADxBhQckdQWcdyChJa9tAu80w0=)
                          10: EpFbf1kRyHYGQtA9csoIbUdImOI.roa (hash: rRBk6rtDnOQ0IXuOkOGWUpeK+fD7i8/ke3punad7AOc=)
                          11: FG9OY5v9Y1IP-c1jIjwcuhI1grg.roa (hash: NvwPRAq5zC24tyTsVeMQBuEldKKppAT8v25VKInZiLQ=)
                          12: I2Zp3O9GuDESzIwxuBXNNbCUHWA.roa (hash: i4xbPROXGr1QwiuclNofMJ1nTFliZgNrRGwoO4JJ3bc=)
                          13: JY3hfx3uYUv1djoeyNtgDrFNC7M.roa (hash: LXSs2r7Fvg+vwLwTsPEEVBqnIAMOo+mitynaziNmHSI=)
                          14: LGsOjs3yWE-FDla1bdWsVzurcs0.roa (hash: 59ZskWSWomtq3lh+aLLNSVyS21P9fo8oOf/9J38okSI=)
                          15: NSsE053xCucfXB8V94HiBFPQwAU.roa (hash: rqvV8paoypRg7IbdfLuRRJyCzsZUpHS4EX6hYaD2vNg=)
                          16: Q4mADwVo1b5mdZB1zJ6Ch4-F3TM.roa (hash: 4yaI+JDllp3/4UCDHquNH3ZAK3hEI5fOLBzHF/lT568=)
                          17: QIRJHo2ndsf7zMpZPv9Uc6FS-R0.roa (hash: roBAczBPI1k7l1+MBUUz8IhGGTITI5y/Ju+TQSpXPxI=)
                          18: SLZ7-qihqL4z_SmgYOCziC5P8Do.roa (hash: 9XVJTFiMgeCDFK4SOrE9WEjUnjqbiXfJ8PTpCBfb8xg=)
                          19: UGPbah7Ip6qmGYI4eSxLSRz5Bz0.roa (hash: gRYRd941eJkSZsjLA6+8Qb9UDtKsckujbrFdTUZIeg8=)
                          20: VbB6IQc5Gp1Diz8AeLhWSAL_-G4.roa (hash: 0YEgmd1TeejrgUVz2J51SMN5zpkE4It/qHYb8UKkwLo=)
                          21: WkVDmgwVU1-N4A81_j0ACrVzO54.roa (hash: JYg6O430YjatSgllfgnM1tG/RZBv5K+v1ivPzRnXMC8=)
                          22: WkWmbvD5DEGbmuNrOwspSsGHL1o.roa (hash: r+LZX22QV4pgM1K+3iVTmmGJsYaqfqDvNl48S29PWQ4=)
                          23: YvO-0OLN1uDK5t-OIFEnDqGspuU.roa (hash: lgP24ptYbIcti4fK9nNdGyjivRsPV9l+lx47sI4WIjI=)
                          24: eFfRN4l9gOo7MbGQkTS4K3pZuSA.roa (hash: XZMnTMSULrW/9I6r1Jm/VOLX3yaybq6tigRDzhRskrM=)
                          25: hc6tQW5glga8K1PZo0tjz2zwBF8.roa (hash: CYS0AtwmX2wi+FVuw/zjCX9Ow8ZJcsdvZ2qudCG+RG4=)
                          26: hwyE9cy7FqEc8VS1Rvv-XAyDvkg.roa (hash: c0PzPVLA479ekHYGUakjUxIAUuAP8mNUWUlWRIksplA=)
                          27: iElkk6TS_4Ay18EZsxpWyINijA0.roa (hash: wU4HNGwEOxRxCKuFwyhG/mOlt249WHnxB3qVflMrR9Y=)
                          28: iznsD8RBPhq-9hPNM4qZM_aDnzY.roa (hash: 7i03RU985Yty25evXCX9O60uGQ6mKCAZPjff88feFrM=)
                          29: k84M63oTMcwqEhwbcdgM_dM2tpY.roa (hash: /kgnBUjpaWt6OyaytWLzaLXSze5fAoWOZrcHZNONDo0=)
                          30: le8GCJRrdqHNCNAoW_re0x8Rrw4.roa (hash: U6ASm6Q2t/cWZLCxnIMcVeb4S15eRCPeDhlGqAOWMLk=)
                          31: nQxTSf3M9BpGJ3aOa440JySTOVk.roa (hash: HfpgeUYSrhVLwnnrtKDut+UOcBjV+uRKkS3Y6x6K6Xc=)
                          32: nUe7ir7j2OZjQpgmC72h9ZS4qHE.roa (hash: eHreNn2l+ib+ipIPYrvV/Lt7VMr2WwW5e2gLlA5rzZ8=)
                          33: w3U4RGD-RR7pfqM-x5GLo3NEI6k.roa (hash: 4w41hRAcla/qvSZOMsfe9VIf0Pp8cdA1Zp6+AEIFBkw=)
                          34: xgLQQo0PkwidZXDS8lVtdfsCVps.roa (hash: P29mkBM83FbxRTNqjXyshz6hM3VFVvfzu3aQrsQ0ARA=)
                          35: xmEhM5C7hFuqdb2pOA8MbISINgk.roa (hash: v1ZF0PRMFjK5ktaggR5rDepHA55+YKF2Dz7f/5bWbaw=)
                          36: yurkFy014D6W7ziEq0QdZLSv9Rg.roa (hash: DDqQ3LFI+1A0OW1QmMMIUroJuO4qF3YrI4Oa6yJ8n0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:20:cc:69:6b:39:50:6f:65:ba:4e:35:df:ad:cd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: May 15 12:01:15 2024 GMT
            Not After : May 16 12:01:15 2024 GMT
        Subject: CN=cd643314fc106abe50b791457e44d33adce3defc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:4c:39:a6:37:75:13:a3:93:5c:d4:5d:5e:
                    c6:ca:67:ad:33:98:e8:6e:f3:72:9d:c2:91:46:44:
                    64:5c:53:58:d6:db:42:50:e5:d0:be:86:d6:cd:8d:
                    4f:ca:71:bd:a7:6a:7a:9a:11:1e:17:38:b0:82:c8:
                    f6:bd:4e:50:ad:f2:53:3e:0a:0b:ae:11:26:5e:76:
                    ed:5a:d9:f9:19:a4:a7:d3:c4:b3:0f:ae:e3:26:16:
                    cc:5e:a5:12:6b:38:4b:c4:d1:97:05:64:25:e6:ff:
                    54:64:55:d2:a3:f4:ee:fc:ff:b1:09:35:63:a1:b0:
                    da:70:71:d1:1f:e1:90:f7:90:37:30:88:a7:ce:59:
                    2a:69:52:7f:9d:18:69:be:ff:f6:54:df:73:1d:30:
                    74:cc:9c:92:c6:2d:b8:ff:24:9d:ef:61:98:e6:01:
                    46:0e:0c:4c:c9:0b:8c:f7:14:10:de:98:34:d4:c1:
                    b5:75:54:4b:75:7e:47:24:e0:25:42:a4:bd:5a:d2:
                    0b:66:78:8e:34:f5:66:4d:30:7a:93:53:9d:f9:ae:
                    c6:8c:63:26:8f:64:f6:ac:28:09:26:47:b8:7a:94:
                    30:bb:75:20:d2:24:fc:ce:88:a6:a6:20:50:65:ad:
                    73:98:b3:84:68:cd:e8:55:fd:be:ed:45:3c:4f:29:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:64:33:14:FC:10:6A:BE:50:B7:91:45:7E:44:D3:3A:DC:E3:DE:FC
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:b8:ea:e4:ca:b2:6f:64:5e:db:0c:76:e4:8d:55:fe:ff:
         24:07:7d:c3:df:26:42:82:59:df:0c:a4:08:15:dd:29:db:08:
         1f:33:90:33:c3:9e:ae:2d:10:8b:2c:8b:a1:65:0a:7d:50:6d:
         93:68:13:1d:9e:b0:3b:f8:de:a2:2a:a0:1a:51:8b:27:52:2e:
         52:ae:d8:36:49:ea:d3:1c:66:25:30:67:da:d2:ca:a6:f9:6c:
         17:39:c8:77:18:a2:52:fe:7b:fe:a6:35:39:f8:20:9b:f4:f9:
         3d:bf:af:b5:97:e6:a0:cc:32:d9:2b:1e:8e:ea:60:b0:da:40:
         87:52:21:67:29:80:89:2f:4c:a9:05:20:f7:61:a1:ab:36:06:
         db:05:63:3a:38:a5:79:30:79:97:37:a5:80:90:fe:57:25:e2:
         6a:39:a3:c6:af:cc:13:2e:26:44:fb:6d:40:d5:aa:a1:36:1a:
         17:17:b6:43:e7:4f:e6:5d:35:b8:9c:c2:0d:e8:ee:89:a9:f8:
         3e:88:d2:7b:2e:85:dc:e7:fb:2b:6b:39:d6:91:4a:ba:6d:9a:
         44:9f:18:6e:38:75:5a:2b:a3:85:d6:f8:e2:a6:94:8e:9c:96:
         21:63:c3:81:65:7c:ad:1c:ab:72:4d:c0:32:13:ea:c8:67:08:
         f2:28:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:39:47 2024 by rpki-client on console-ams.rpki-client.org