Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File:                     b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier:          Qavx7C/K3rJcab68PwBU4+04T5/3HY11LunybL0X+rU=
Subject key identifier:   95:E7:D9:D3:9E:46:E3:20:F0:D2:36:5C:C1:AB:E5:D1:84:1E:AE:77
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer:       /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial:       018F912739EC487B5E92D9C1F4E9145E921A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number:          08AF
Signing time:             Sun 19 May 2024 14:00:18 +0000
Manifest this update:     Sun 19 May 2024 14:00:18 +0000
Manifest next update:     Mon 20 May 2024 14:00:18 +0000
Files and hashes:         1: 04DvboAfEMS4bua_G1JxxtdFNrI.roa (hash: +occGkUNU4pP1c+ydoXyKlVUgc7SpgacVJrMaxf0bFE=)
                          2: 1-2w1YwU4KwtW90wJfcOxA09ywdE.roa (hash: p1X+SCV6LnzHPQjk+kjWLpoVujFSuJ/3Xr0IAVcsoK8=)
                          3: 1-gppERqxc7RG9AnlK0q4X1svNWE.roa (hash: /Q2CRTquhQfdmw4BeQUTL868NwpjT1MEWuay1pcEFlM=)
                          4: 27pr4Qs_44dX-NPAViLBFcqWAsY.roa (hash: fzJfbstEnDxHIwP4qQDR9IRtnIHbpV7KTaVbNgMRiCM=)
                          5: 7nnqkMDij59LJpu56X648t1XkuQ.roa (hash: QQJecVDc9ts8khp+cjXiArCDnAGSgRzkxHld7zSeO/0=)
                          6: 9bAjHDc5wyEiR9lvXh50heL0R1Q.roa (hash: z1hBieiSkATtPY0EhQR79LdD8796BNe3NglY7A/YYfw=)
                          7: A25Eao0n0mXKM9cUeQZ6Tz53Qjc.roa (hash: 6pzs7czlf+Zi8Gx3vnVsa7WBG1Go/E0eb+i6NUMxsEI=)
                          8: Ewkt-CLF0VopP9bH2dWCr3v4b44.roa (hash: ZqGP0uiTNvYAloqQ2mCEtCY4KrJc44+r+8em4VPwioQ=)
                          9: L-ot-e2lRM7FRNjpFZnVOagiu7M.roa (hash: KvA/0tofwHydf3CL1x8FocFS1dZlgoy3nzjn+UEoSOA=)
                          10: M_mmETJCmuaMDgnTYLsw8HBHk7k.roa (hash: QrUtIENrtmAHno0H7xjuKAxCvhE6/euDpbArFMR3K/Y=)
                          11: NI8EIpLNyXvkps8FaloX-nUgNY0.roa (hash: O1+gk36+/YKlL+NfXUy4LjdFB3IqusdA12lEeEEwV+o=)
                          12: PS7VcVrODfyWrueN840Oyaw0HB0.roa (hash: FgcummYvwL5RgmjdMqcg2t6VABAPIqTVet7OTbF/cyU=)
                          13: Ppj1X1A3qjSwi_tykVoTxWaMSwc.roa (hash: +1eGu3svDefhhkKRt0+88MGpZYKQ1K7V5O9EZ4wr3m4=)
                          14: SwpsQIohJ5-uqhezc6fRHu8vDZI.roa (hash: 96JbmNw/DNYPpJkAC3HA1XT6lEOAvXYqxzvf3xGJlB8=)
                          15: WBtyH3xIh85ZZBrTcxdAkOqLh0U.roa (hash: Nze5z+bOBRkL3xCF0RtTEc5oQLu9PgceLl5A2srU0nE=)
                          16: WKZVBfiH3D-TaVNaT-guvBGFp_0.roa (hash: 7I4NYsd4EqSm/aWgUmyrlHRu1UUyGZmKClM66rDJf4U=)
                          17: YGKEDkI6ZwYOi7YWMP3al0X-c5c.roa (hash: Ro0YO0BSVNxI2Ska3Gp7bxO6Lu/+T2yso10XY63itjo=)
                          18: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: l2GQ1uFh2bhZHLn67QgXXNhqJ/8L+fJpISFTkdoMQ4o=)
                          19: d7P5Bq3TIG8eQBq_MgO4sLnqZEM.roa (hash: P+Ic2NHYAHDXXqXks+xuGxIUO37RpnDAP1ww2dwsxXQ=)
                          20: hRVFR9p2Ja0CPV7IBwreRbO0O5Y.roa (hash: mXA0bpe60i95mdpfgmLput8XWxdWyaGyNvEzmxqHEDI=)
                          21: mV2EQMpp60mRbBmezJbkX8cVF8w.roa (hash: b4ONzzDPop5ZwdPNezqW5jPBQ3B3ygSAOVWpsymelpI=)
                          22: mr0Qmg6B1Dp0nUYB8mL2kDbIwGw.roa (hash: ERgCSQN4c5MdCicHq/TzNWqkbQXrvPDz+0NRhXqUSG4=)
                          23: mzxJVlkKDe2wgWqWW_FFTIL29Tc.roa (hash: fLysEB5d/I6/3nepjz6gZjbZ1Uy4H3/Gb3DHllAujLo=)
                          24: n3ME6MtmxhMIzZ3i_FiCjmxp3h0.roa (hash: 1tWdiLPcN+SGyC50nFcPRp8+LEW+yORNLatwjfFEkaQ=)
                          25: nbYaNMw-WvyaH8ik8DImWgNrNN4.roa (hash: ttuG0dJsujIOcptK4bp4xNMyJlxTec7+ORDZE4AqqXg=)
                          26: ohhdzqY0wcxt_AEEAXkTi2W2luk.roa (hash: r20QXj4VFYQBRe7uFP7Gwbqr1aSX3q3StIecQZczbNA=)
                          27: ot3Y4WUV4u-P_HzBvjvO80lMqJ4.roa (hash: nZy/k7oAU7bueEGDY3unTpU3xp/jE5QNAK2beggKwP4=)
                          28: pytrsninCrNeVplORdqx4uIBL1k.roa (hash: VWIWArUS2SOAFFIQDTPcjPkfFGMK2lUXf2Jes62KpK8=)
                          29: vm-ClgML5_3uleEv-rgUmiKQ17Q.roa (hash: wPgFJqtkHxyxEYqmqaIEoSjSPVtpqoL38aKzCAHEwFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:27:39:ec:48:7b:5e:92:d9:c1:f4:e9:14:5e:92:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
        Validity
            Not Before: May 19 14:00:18 2024 GMT
            Not After : May 20 14:00:18 2024 GMT
        Subject: CN=95e7d9d39e46e320f0d2365cc1abe5d1841eae77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:cc:41:c5:96:91:32:15:bc:4d:74:59:30:
                    ca:42:b4:87:97:0f:ee:d2:aa:48:bb:c7:f4:04:71:
                    9e:7c:34:05:fa:07:9e:27:22:5f:f4:26:53:75:f5:
                    96:34:ea:8b:c6:05:c9:c1:cc:79:f5:b4:65:08:12:
                    59:54:05:ab:9b:ab:c2:30:af:a5:0b:a1:7f:1c:e5:
                    be:5a:c1:97:9d:56:b6:86:88:3e:a5:b2:67:ed:bf:
                    25:68:76:1e:17:88:30:4d:e4:d4:6e:6c:d8:4d:b1:
                    b2:c1:d1:8b:71:3c:13:9c:c7:e8:3e:07:97:0d:95:
                    94:06:b4:78:0e:48:62:23:e0:8f:6c:b7:b8:fc:29:
                    b7:13:51:a2:99:5f:7d:43:43:2d:75:31:ed:d4:f6:
                    cd:08:f4:99:cf:f1:7b:3b:44:26:0c:cb:35:77:5a:
                    f0:4e:fc:8f:87:8b:c0:24:03:55:c8:7e:4e:ef:ab:
                    0b:56:7f:9c:10:a9:c2:12:58:51:f5:69:f2:39:11:
                    c4:17:af:fd:80:4f:0e:65:a8:e2:4b:92:02:88:94:
                    65:2c:8b:18:2c:15:d9:46:f3:49:b6:86:27:fe:2d:
                    49:2a:87:5e:6d:01:d0:af:59:d4:52:3c:f2:8a:f3:
                    3d:db:30:10:83:24:18:f3:e0:f0:6e:3d:aa:0d:4c:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E7:D9:D3:9E:46:E3:20:F0:D2:36:5C:C1:AB:E5:D1:84:1E:AE:77
            X509v3 Authority Key Identifier:
                keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fe:76:73:c3:b3:ed:07:09:43:65:f6:f1:fd:f4:61:8b:7d:
         6e:fc:f1:5e:f9:04:a5:97:cc:73:b1:79:9f:63:01:3a:e4:c8:
         39:5d:f6:b4:4a:5a:e2:77:37:c8:e4:c9:06:ec:6b:ef:f2:83:
         5e:22:74:37:ba:ff:69:78:7e:c5:d4:55:f6:82:38:43:da:69:
         01:3e:8c:38:d1:f4:f6:ba:88:99:17:ea:31:08:ac:fe:fe:55:
         30:b5:f2:85:5b:fd:db:39:fb:e6:91:35:65:0a:63:8e:07:99:
         7c:32:80:44:92:eb:18:c8:ac:0d:79:e7:b4:c6:2b:f3:01:33:
         85:36:e0:1a:47:21:b7:7f:f0:4f:52:39:85:f5:2e:b9:a7:93:
         04:7d:20:dc:84:c1:89:15:bf:a2:c4:a1:6d:09:08:06:2a:55:
         7e:dc:f0:87:98:a9:2c:2f:8c:7b:73:98:f9:79:6e:0b:32:95:
         4a:f8:d4:7c:e2:b9:c1:28:1d:ac:cc:49:34:fc:2b:d7:f5:c8:
         39:30:8a:ba:b4:f3:4b:7b:52:89:44:44:fa:98:28:3c:76:5a:
         f9:5d:63:6b:d8:c8:8e:60:02:e7:d4:0c:d7:0a:28:50:06:26:
         bc:95:5c:a0:8a:e8:24:63:11:ba:11:02:bc:d0:85:05:8c:c6:
         b5:74:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:09:40 2024 by rpki-client on console-ams.rpki-client.org