Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
File:                     F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft (raw, json)
Hash identifier:          QWOGFhy5k9FWcwIEh6cNzkM5PR2r0JehHMUJq/0OEi8=
Subject key identifier:   E9:55:AA:5C:61:20:F3:6E:21:9D:6B:8B:30:FF:D8:02:B8:BF:C8:E3
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018F847E4260463E8F1A4F33A579F54D517F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
Manifest number:          120B
Signing time:             Fri 17 May 2024 03:00:17 +0000
Manifest this update:     Fri 17 May 2024 03:00:17 +0000
Manifest next update:     Sat 18 May 2024 03:00:17 +0000
Files and hashes:         1: 0S9ZNRormMCfHyDGV8DZGk2Vqt0.roa (hash: AP7+4QwoSv/7DUyrsuxlfZWdRY0GtRKldEaP1UE43kg=)
                          2: 0xZJk9Pu0uMO6BGQ9EI1178pGU0.roa (hash: uM7eNdz/+SbDCCoLJJEutdm79H8gqOvb9hmqjM+kFvQ=)
                          3: 2Sckbqu-D1sYaAT4k4Q68q0cbkY.roa (hash: 6QD/44qIvOWj9Ui1cybQmEuQIVMatO0cEh16lMSF1Pc=)
                          4: 6KDubmDAuMfkB4BVkuovZlQ-iUI.roa (hash: DLuUgaNrnHbzdBu70kgz9oJ71Nw/yVTJLGmKiEVZKCQ=)
                          5: 7pc_wkClsdfEgBlieY81mdhqwfY.roa (hash: rkJfFVlNeeSroRr8c6j0vKBx9QRNsOR2NXThJOJw+PQ=)
                          6: 8aPufEJg6Ffdg8Hbeh6FZ5kePZ4.roa (hash: 15DBw63bFzh6Ok+5ePRqXxEIXp6kW4Ira4ToAQMw5II=)
                          7: 8ty9xCSkSrt5biDetM7k2B8TCXA.roa (hash: XJ92Q9XXloqAJzkH09S60BgCNEgezW+6olBvA1yVqPU=)
                          8: 9Oc6puL6TzwZUDdOWQQeS0BJoRA.roa (hash: TbkrVjO4C91ESxkLNy61v6hjfshd2BwbBigS1TWFV2M=)
                          9: 9_-qqlbCLg4d4WoEum6mxqdubdM.roa (hash: QXRpWeCgnvAMDiSoJKKhDdJSC24dUQC0XmI9yAtT6l4=)
                          10: AJslpwTQJ3Iuuq1s5l-5UCGfaVs.roa (hash: XD+zKIqb3sH5fGMHIqZwA0m9hx/eHacaGSph9LRF+1E=)
                          11: Dk0EbuLwUAP9sm_f1hGcLUSIrmg.roa (hash: fi7ImXWeUeR4q9JCznJIziyv5GNzpD8LiGk3q5flKdA=)
                          12: F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl (hash: T2hYxBTemYAJUPrLCZntcOeogmqwjyBqlCM/a2wGTY8=)
                          13: N_IR9uhY6AusPM3zVJF-RZObeNg.roa (hash: 1SzpVxGU1ucJ4CzIhAlPUxkx79oX6NUc/Sv8vGkD9vE=)
                          14: OzgLp6R3YPOm-oIFrRvuH5rZXBE.roa (hash: VKSensHRu6zIUN4vjqic4U0HmL2nIMG3Z+vMNFKPAT0=)
                          15: Qfc5BTaenFdycdE6ErpO7rBeFDA.roa (hash: LMSAQzDI6rJzitBU/EKIOwiHfP8v7Yy8scDJ1f1CWn0=)
                          16: RDhW-YJosnQuyjh6z3b2-C72rAI.roa (hash: XwGqJW1F+kLe3kmExj2fhuXR9GOg6uDPNegVk8SyrJo=)
                          17: WCp4IlJNMB0VyhUOQnfRPLX95Zk.roa (hash: 3f7CNvnJfvjHXVxhTO+MGMQ3QMXuaTaxcl1PJO69/D0=)
                          18: WEwkhKzRgbDAznl5dzRWkNJVURw.roa (hash: 7X99vKsqJ313WRynGEJUVQ7gmzM5BgPd4GPgBJxXOZ4=)
                          19: YPoSnXLsNG9pn9IPz5l49Bf3oOo.roa (hash: AjVBz5/KuYNkL9CuOf9COPCjvPS5yPwPiZlR6msNDbA=)
                          20: Zjc5YNbNXDgKl7j7un4JtIotH7k.roa (hash: uHn0Eym7/HbZsVeP1EdA57EmvcpBGJov8eZaPy6TeN8=)
                          21: _0bhTUK7PGGhGHjKwVH1Nepdkk8.roa (hash: 2vDoRsMIMuVxX/vtWJJKexfIAi9QZEiPQYZiwtskCng=)
                          22: dXf_wrd1o5__T6H2QgTkVY6BONI.roa (hash: xzkfta6S+qDPKFZY/B/Qi610VFMc0m1AOis9+yt8slI=)
                          23: drw5s3NMHM2GUe6Ha6KnLjAG44g.roa (hash: 9oKk4O5XllLlwPyVmFENcTJZQre1GGLCh0SawFLRWMg=)
                          24: fQmhUrA8GKWpE-J8Pdyck433s70.roa (hash: VhufXf/sTZPH6SR4ARDmtJHV1ICRgdrrx0Hajfos/B8=)
                          25: gXUXu_Uy7Od5IJ-Xa-0rIQls1IU.roa (hash: x1MKbhxg28kjDIc6W7SekpsAugjPOq+MWgYEsae0m94=)
                          26: hG2EIs_D_kwiW5-m6AD1TU4j_nU.roa (hash: rmlUyKnQxaHl5WmeNaq25mqokGivwMOQUnXm1m4iZ48=)
                          27: j_egABFNr1K2LTpRG1UMe7-ipW8.roa (hash: 1TfY438KwrYp3M5xxWGBqz7KhLwZZMCY1kuX1te8wCA=)
                          28: kQo2DYAcLLwMCvHvkmeNNCptQ38.roa (hash: pN3siJqtVZ1X9eRkdLO6Ia0XEUtQ155zbAbYdkJ6TlY=)
                          29: n_rguI91omyc-eyAcWdptZpZ2v0.roa (hash: 5qucZvPcbJONsTvBmob5sKl0hgaRaEAD62TPVPVGtO4=)
                          30: o3DzQxc2jyFUkViwpiNV9mTH2U8.roa (hash: 3Xc473K+TeINlIlcQ7fgmp50Qw2LNV/5Gs3n1IPeKLg=)
                          31: ovJXIsCP84Pn-omXnyT7-05mgaA.roa (hash: /uhn9WE5eOOQt4QUO9IbACaVj0kt16/MoRGZTAAC6uY=)
                          32: pgoFUVRSJhIpc3Tz3BU1Eeb_iVc.roa (hash: c57g5oz0e/UqiZeJenFsAmx6a8EmsSimMSiJWnsWtaQ=)
                          33: ppTzXgX7sBlrJOA3FggfAH3Sma0.roa (hash: 87EFxnWUgFy/SpFTSQFuS8SFMqH/vi0zmWPTJkH9cVY=)
                          34: rZvHv5_4nt07SBoTokzm7g45z6g.roa (hash: JYMW9qtY84K0bz/drAQyRptela4V6/gxOAkDjUTrdZE=)
                          35: t4bwye2LMmaX6IHFCvTGIDEUKB0.roa (hash: S0D0HcFwTPkd4YIt0UfUZsmGwEAl+MQqR8452UpWAq0=)
                          36: t7CiJdyaOUOkKsyqr5laYdkFlPM.roa (hash: VqVX1b6gQU+CObI7MVWl4WP4Ur3eg+rKt5fcqavWPtY=)
                          37: tWolCzJmGiFbDZpOFFwVI5908gQ.roa (hash: qsuC8zW2ANk8xiXxrpTIYSrBktcbq3QVhx3O446CWGM=)
                          38: tf46ZcyYf611WSnhUuiE0Mu6mbE.roa (hash: ZKxDVlem7auwXFxfPzGAQZmm/60X8uh4nxr8BVN4F6E=)
                          39: wneWyjfgqbYhebIgktOaFNJK1us.roa (hash: dMO0T1M82Fm81YTa6UreSTvt0Xff9XWy+2O//UAfWtA=)
                          40: xDTcKCN3IQQy2tfO9rJ5QY1bOEI.roa (hash: Vpd1f81/qIQIhKM6/Mt5tYzVwUfvsAiV46iEshEDgco=)
                          41: yhWtwozaMyxM4F-eB2jM9uUAvFI.roa (hash: k6VsxXn/LApJiwJeU1qcoYJ45E2mbbUs006tiX5MYxY=)
                          42: ylEbf9nTnxCov9ExoCH0uFtQzBg.roa (hash: LrnNaM3yM0mHbHkxlz38yoWlDOqSkPsv9rllmyCp1x0=)
                          43: yuIbuESH0LPna2JXSMDtlcXFcS8.roa (hash: ccQG7kw+YcwVOKA0JxzrbqM51QuMq1Zvehsu3nb2zcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:42:60:46:3e:8f:1a:4f:33:a5:79:f5:4d:51:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: May 17 03:00:17 2024 GMT
            Not After : May 18 03:00:17 2024 GMT
        Subject: CN=e955aa5c6120f36e219d6b8b30ffd802b8bfc8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:de:4e:d9:f6:c0:f1:d8:54:63:80:ac:fa:
                    69:c8:6b:10:fe:7e:56:ba:f1:84:d8:99:0e:b0:88:
                    e4:6e:8d:15:e3:2c:83:50:41:6f:f3:63:d2:ed:28:
                    08:af:a3:6d:d3:0f:35:78:97:ea:77:11:21:7e:e6:
                    37:1d:c8:66:eb:31:35:eb:ed:52:a1:37:24:cc:4d:
                    b4:b8:6f:24:fb:b7:77:f3:38:1a:80:81:0a:08:cb:
                    2b:14:bb:f9:1a:df:3f:62:76:ed:4a:ba:d5:e2:b7:
                    75:ab:ff:5e:d7:9d:9d:43:24:07:a8:00:3f:51:75:
                    62:88:6f:d2:8c:8f:e2:9a:7f:3b:a6:a0:a3:28:55:
                    f9:9d:28:40:49:0d:55:a6:e8:19:4b:5b:84:39:93:
                    15:10:03:73:6f:31:d3:25:72:65:f8:1e:c8:b7:97:
                    ab:49:43:dc:81:9a:00:27:78:b1:2d:11:12:ff:2a:
                    02:9f:e8:90:64:ac:8e:9d:61:14:b4:a6:27:64:f5:
                    38:6f:d7:e6:72:63:74:a1:34:dc:21:75:e1:aa:31:
                    03:73:a3:24:c7:6a:e4:f7:73:e5:20:46:d8:48:03:
                    2c:cc:00:4a:cc:fc:2d:6a:56:13:cf:19:de:d6:39:
                    ed:bb:48:55:f0:e7:8a:10:45:d4:09:90:e9:36:c0:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:AA:5C:61:20:F3:6E:21:9D:6B:8B:30:FF:D8:02:B8:BF:C8:E3
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:42:f1:7c:21:e9:55:d1:0f:d7:77:5c:19:bf:69:32:be:c9:
         72:b5:03:58:b6:d0:71:f4:70:88:84:99:8d:f6:ae:26:6c:6d:
         83:b2:56:eb:83:ec:4f:7c:e0:67:a3:83:9e:cc:96:04:07:7a:
         5d:51:08:60:26:97:8a:7c:da:71:2b:96:54:1b:aa:51:49:06:
         9b:90:8a:bb:f8:61:9a:65:9f:70:c5:6c:fc:92:aa:3a:f6:46:
         b1:4a:8f:1e:fc:3b:1b:38:ed:cb:37:9b:ed:ba:5b:5c:8c:b8:
         42:27:5b:82:4a:72:ba:41:54:e9:ef:2b:50:58:a1:70:b4:05:
         4f:2c:22:cf:f5:49:34:6b:f3:7e:9b:6d:66:26:2c:b6:c0:b6:
         91:df:81:69:95:fe:58:88:99:04:5e:2d:b4:d4:bd:0f:30:67:
         b1:36:52:9e:2a:20:06:0c:c8:4b:53:4b:93:0a:29:ff:6b:4b:
         b9:52:d9:1c:97:3f:e4:ec:60:5f:19:35:8b:cc:ad:85:54:84:
         9c:da:93:91:94:6a:25:37:71:dc:68:26:68:fe:11:3c:2a:a4:
         63:63:27:df:d8:5b:6d:d6:79:16:f9:91:40:80:71:5d:c7:7f:
         25:16:ce:4b:20:79:92:a2:71:23:d9:c4:c7:a6:5a:0e:eb:6e:
         99:cb:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:26:40 2024 by rpki-client on console-fra.rpki-client.org