Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          n6Y9oYUCJE4TOz+kJqjM+4nuqs75zrz6UdoQRQ9vtlo=
Subject key identifier:   BB:C4:5F:E5:A8:55:6B:BE:AE:D3:2C:AC:BE:A8:16:18:89:CC:1A:1C
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       018F8590CC453B58C883AEA3254FC857EAAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          11B1
Signing time:             Fri 17 May 2024 08:00:10 +0000
Manifest this update:     Fri 17 May 2024 08:00:10 +0000
Manifest next update:     Sat 18 May 2024 08:00:10 +0000
Files and hashes:         1: 1ZssSNiBWrK1n7Oax4-OFRwPP-k.roa (hash: PQl0HOUgfpcc433ShGl4KyOwNmb+LNeOb0lgeEicT+Y=)
                          2: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: vp7qKuVTapaZwDCWXTwbct6WjES2Y78fctexfl+9RVo=)
                          3: 5Wi_DvHmhBpXAWghfFVd7Q-H-cs.roa (hash: wi+6zaiucpWowzSLTnVpQfpBtWhiajo1VyZNTLvfFMI=)
                          4: 5xFb2G49X2eC7I-S-imknyCSalY.roa (hash: O58qBeoPFG71u9OBoY5VVr2nAzvgRlfj9q3f5n4XchY=)
                          5: 8M3Ue-WgkZaSjPXybs2qAwB2VCs.roa (hash: hl9nkIk9i9Pr4MTILKtNoQWV9kJAQ/s9efIVSuXpE7E=)
                          6: BeqKaZHIBDsCWjNqjADA82cqxCs.roa (hash: D2EskD6o6WWO9LY5jsgyfeNBVz1TlTTyEtfxQADlAEo=)
                          7: C9Vejok0B-rSCAZxvy-0BP5uHx8.roa (hash: 8R7WVJ4thUhY+WpISdxZy5zrgvpUKIW3PlsFRAPwpuM=)
                          8: DQ6HhpeAviOIg2SFk9auiOKw7RA.roa (hash: Ue7PEpOAQ/qh5DAgYJ1tOkBPLhv4ZmxGXC4xnjVV0nk=)
                          9: DrXIYRGoooC0I-rRdAEGaJd-i1o.roa (hash: C6lDcGsJnTTimORadf2gJJB5ST6J0/on32nhG0WHaZM=)
                          10: E4RjmySUEMtDa8UTvS1XG2UgMj8.roa (hash: /fYLjECTC9znHdZwCwfCWQl13tiXQzwkX5JJdFkLkG4=)
                          11: EY_8UK58CLC_MHOLKQN29XR3SsU.roa (hash: TXLjuUxdVne2hKBZkmT0lLvPS9KvfYEaAuj3zIfKYEM=)
                          12: EhI7qHrem-H8Q_VFcuVEoTvXO5g.roa (hash: RhWBkr2g6nzIwFCs27fscImMIFNjTNoprD3W3we6588=)
                          13: ErZSmRcA-tJ2aDousSuutC0FT-0.roa (hash: B+XEtlW6n6WZOMH7DhgvwgOk/0CxZWeur3IVAcHiy6s=)
                          14: FHlZ21dJhHnXpZLFnWr-BqfX0Yg.roa (hash: O2myHbw02xo4/2AN3ucbSxuBjpsKswd+BQ8oXTdUr5k=)
                          15: FaTE6UIymGghHtYjc2d5JBR4gSk.roa (hash: vy8sx0Yu9lCNzlQPi4lnBdKYMhRLF7E7c5uFi9PFXnc=)
                          16: GuJ8coHlCSdD0UmPWHrqF9Uo9NA.roa (hash: ot3bWSRn8yEmJXy3qzRO38TNfcylAafgPON+5SJh9RQ=)
                          17: H5TlYYqlRGo_PTyai5vbmWkAmwI.roa (hash: LNm3ZAa5iEPuwb+jrdOo7NfsPbxUUn7l4riakg8pua4=)
                          18: HCdljOpb4fYDb-Y4xKpTxHyjJ5c.roa (hash: zk4MibO0AeHryWidCmnMFIHYC+A7gcMkOXORMCnSuIA=)
                          19: HK19H_Gzxxuw4tLjFK33Dk6smsE.roa (hash: Ow3I5kpCqM7K3KJiq83HPpGwr7mymQs/Zb3SEgRZfgk=)
                          20: HqT4p3_FmBxFDt7kRCjteimW3rE.roa (hash: jefwFEsDaBKuxRtfLxjXVwTV028AyZvnGGPqgktqfio=)
                          21: IC4uo4CCQxmyKilSfuuKRyvPxZk.roa (hash: A1tXdL5yT0SDSW9L1s1RRUPVGtoboCHur/L9qaiVbLg=)
                          22: IatlVZ303XxJCTIZYLxELi4Jj2w.roa (hash: 4EYgsEyy8ks7I057dNtpYHIVTP3/TcKgJUZW5XjADbg=)
                          23: IuV-qoT1eKZtzLbk2i-jSWlQSPk.roa (hash: +brgyaa6JVeXzMUviu33ImdvwxHJ6Iv8iOqQDdfPA3Y=)
                          24: OlIIOfKP1J7zS0wogZCMGm_pKCI.roa (hash: LXberCkVFZwa22H5DTyQo00qu/0MQHR+izRV5Eb1i9g=)
                          25: Q9kZ7ilJffm6E3-ffhmyJP3WXBA.roa (hash: pAc8+7lwpht1pZlvINvycWuILb1k8JqWiXW8n9Q8CUo=)
                          26: QmJYWHf3y0nFkp-6NbnK0b2kkwM.roa (hash: FJEs1UAw/2fWEyd3HQec4Uk3Cub4P5S3Z3JxVhVUvqI=)
                          27: TjdNZ4FwdJ-vmUZ-grXR-ESSvww.roa (hash: AwSWVlculUYDm9vHl7tJJNV97v8ZBzJfXUTEGIxfSjs=)
                          28: VILYjzb1Bl-B52Qb2vXZ8aL4gf8.roa (hash: qDJ2Hyd/88hWlsAILodLKtVypKcWs1+7sRQw6Ql90RE=)
                          29: YPl65i_ZAqJrso7fye8XXCwCou0.roa (hash: xoK7yuvbybyvXFNt6hFV7HcPi8yJ4HyTUHeYqJooH3U=)
                          30: YZr22wospq5rjTGQ7ki-GmoOgFQ.roa (hash: WUAyIZiayv1YKfn5jm8UhFD8eeXhT6RmKxJsH6k+6XY=)
                          31: _Oc2ICeoWFmGdWZcpOn2AsnL8EM.roa (hash: 1Iz5uvPT0ESGjQQqggJOsYLSO31c2tY4nlplDo2ecOg=)
                          32: __aIy9ZzV2fNlUpi3s_6Vi-FohY.roa (hash: bfjFf6F8IOP5N3vg42KoPPSZtq+6T6zWS6Vm2lF2f0Y=)
                          33: aqd6E3npsvP_2D8RuTYpzO-h2hM.roa (hash: ba6De9RsoAyc8VsVoXnKTONKaN8N4OktKWZD0UzGhtk=)
                          34: ccRRhKrMVjSjQouHIjhDfuG5FL8.roa (hash: Ld2+B/q8aAw4l6IlatN0XPLL9J0BqpVjMD91nc3tjxY=)
                          35: fY9e3UDs5Q6_dRWS05zGANbbhTQ.roa (hash: mopDPxXBUHLqCiKPbw1elk/+05at19UTWasX49Qo8to=)
                          36: gRF3Qy_fRVwKNY_dUyNvE_45Hag.roa (hash: V/tWZ2cXGc9aqZYWdxrn3jD/Zj6lB/ZM0RclzRglyks=)
                          37: ha2geyQsEApfQtIFDQBxhoDzMDk.roa (hash: Mv0puJQJ1pF0AuZZM5/UBDqcjWrSXN0xV7t7TwlDF6w=)
                          38: iJeW95zf0jNAJwYzc0Dbtooo2E0.roa (hash: 3R0tpRQpejZ6iCXgwcpzKM15V2RsTOTSI/scQePe1SM=)
                          39: jk8BFGcHJ-pvbPScDqwGjD2gd2A.roa (hash: oE8qGBDTStXDymAI06GJqbemXIrolL1Awvx1nmpaXmI=)
                          40: kCGg57lqsn5R_T0U6vlFfa575Uk.roa (hash: MTKxuf/cX4UCoCa1GaeVHXlfcTF8xSWLo2ADx62wWDA=)
                          41: lCy-FhBsqCJbMoXwguQxuOMMLo0.roa (hash: XLCCftB8y2vyNunp/dlW6/gtszKNO9Ob7OGcXxXWXM0=)
                          42: pDGMQMLTHhnarT3l6CDaubqDMJE.roa (hash: X9dIg5xiXe4nWrAjox1AHru4JkV8uHdX3J+gEb6oCNM=)
                          43: sXQNdqJYXc8Sduzd9C-9IcnXAPE.roa (hash: BmsyOYwWH4+xJmi5QJR/GNayYfqHgv+Q6CWNF20asN4=)
                          44: taYmOKM_zoKnTGD087-63pS9n3g.roa (hash: rjDZRrsJ8UOAFZ6DM/Izs4tvDX23jcDWDBOiLBi/w6U=)
                          45: ukFjoYAWgcleNCkUhqHBS-CEwdo.roa (hash: QtZJcOFRWFO1fsBdMiHZCaWC5qYtcnGAvv2Wnd0dEQo=)
                          46: xanp85TeEWkcfprdDLuZU3kn1Fg.roa (hash: DXdeulNiScMkA465+O+rdlMdQTzMwEvXrucyfKTgvbo=)
                          47: xzscnoo2KqefZ6wW1bGLGJhonAI.roa (hash: wrfPop2Q8NokpNpPgAN+Qz6dw0qxNF15SCvDyOZr4FY=)
                          48: yaLE9HprcRN1g5oZ9S75Tblqpss.roa (hash: ODAu97GcvWqgHhbdNB2RrkX1OVE0JJ7kBaT0Zybbp5M=)
                          49: ykQ3li33hJt3GElAKLdJiKdFf7w.roa (hash: oLOdH5JAtUyb1CHgwGrxs+XpnjPdVqL8zvYyDuzpPXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:90:cc:45:3b:58:c8:83:ae:a3:25:4f:c8:57:ea:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: May 17 08:00:10 2024 GMT
            Not After : May 18 08:00:10 2024 GMT
        Subject: CN=bbc45fe5a8556bbeaed32cacbea8161889cc1a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:f5:b6:e8:a3:a3:a6:40:77:6b:0b:f0:66:
                    d3:06:87:3d:c6:58:eb:9a:9f:10:ce:20:7a:5d:b0:
                    4a:1e:ef:11:90:b7:75:8d:d3:eb:03:b4:ed:16:98:
                    02:3a:d1:5d:d3:a7:dd:d4:5c:c6:e9:6b:60:3b:96:
                    b4:91:87:41:61:23:9d:f8:c2:89:da:97:43:ec:fc:
                    07:c5:a0:b8:45:28:9f:9d:60:50:c2:d0:4a:08:87:
                    d0:74:c5:24:85:f1:3b:6b:59:3a:2a:3e:3b:12:aa:
                    bf:f6:84:05:aa:eb:5d:4e:44:56:bb:9f:71:f3:d2:
                    a7:46:15:6f:80:fc:8a:c8:b4:bb:ef:81:a6:24:fa:
                    49:bf:94:4b:a4:b3:d3:86:ca:d9:3e:e7:16:6b:ff:
                    1d:33:d1:98:db:8b:74:97:b9:ad:5f:19:9c:0b:a8:
                    b1:67:c9:f7:39:93:4a:39:bb:ae:f2:0b:3c:64:85:
                    52:9c:39:aa:13:93:eb:63:d0:68:53:5f:83:f1:e8:
                    dd:98:9e:37:b7:92:bf:7b:c1:57:bc:e5:8a:d0:67:
                    e7:62:e2:03:8b:bb:d8:fe:4f:3f:b7:81:27:f7:eb:
                    00:16:45:70:80:6d:a4:45:87:ec:33:e1:0c:69:5b:
                    d7:c7:f8:d0:75:bc:ef:d0:9e:a1:81:e5:d5:5e:48:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C4:5F:E5:A8:55:6B:BE:AE:D3:2C:AC:BE:A8:16:18:89:CC:1A:1C
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:fa:6c:f2:ad:80:02:e3:e6:bd:dc:7b:c6:52:71:40:22:14:
         c0:2a:5f:15:01:9f:6d:16:0e:7f:a7:6e:1d:f2:bf:29:63:6c:
         21:cb:d9:d3:6b:38:5d:21:f3:08:86:f5:c6:69:8b:eb:12:9a:
         04:a6:38:ea:ee:d7:93:f1:4b:85:10:da:c6:e9:8e:09:fa:7f:
         16:d0:76:07:50:50:93:1c:3d:4f:5e:1b:f1:1c:73:6a:00:9d:
         fb:06:fb:d5:6c:a3:00:fc:49:09:78:52:3b:cb:b1:22:e7:6e:
         cf:30:8d:e0:cb:9d:6f:c2:ce:10:9a:2c:86:d7:b4:de:f8:3d:
         95:e1:d4:be:43:36:51:5f:26:82:f4:40:d0:28:4b:9e:9d:d9:
         1a:ca:91:59:9c:0a:00:e5:80:5a:98:4b:4e:e0:0b:52:ae:b6:
         91:39:99:32:f5:6a:66:4a:15:78:11:2a:11:3b:5e:08:a4:b4:
         d8:76:f2:86:26:8d:4f:34:ef:c1:83:ea:4c:f1:3b:f1:79:1d:
         62:39:09:e2:8d:0e:1c:82:c8:4c:7f:68:47:8f:ce:e6:2c:7f:
         c1:2a:1c:2e:c9:27:ba:2e:ea:7a:c1:ff:7f:53:c4:39:28:d0:
         6d:f4:5d:bd:1d:f4:98:ad:7c:37:a8:b9:75:2e:a8:a7:72:04:
         d0:d5:fa:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FkMxFO1jIg66jJU/IV+qtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjQwNTE3MDgwMDEwWhcNMjQwNTE4MDgwMDEwWjAzMTEwLwYDVQQD
EyhiYmM0NWZlNWE4NTU2YmJlYWVkMzJjYWNiZWE4MTYxODg5Y2MxYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4z1tuijo6ZAd2sL8GbTBoc9xljr
mp8QziB6XbBKHu8RkLd1jdPrA7TtFpgCOtFd06fd1FzG6WtgO5a0kYdBYSOd+MKJ
2pdD7PwHxaC4RSifnWBQwtBKCIfQdMUkhfE7a1k6Kj47Eqq/9oQFqutdTkRWu59x
89KnRhVvgPyKyLS774GmJPpJv5RLpLPThsrZPucWa/8dM9GY24t0l7mtXxmcC6ix
Z8n3OZNKObuu8gs8ZIVSnDmqE5PrY9BoU1+D8ejdmJ43t5K/e8FXvOWK0GfnYuID
i7vY/k8/t4En9+sAFkVwgG2kRYfsM+EMaVvXx/jQdbzv0J6hgeXVXkgkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvEX+WoVWu+rtMsrL6oFhiJzBocMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxfps8q2A
AuPmvdx7xlJxQCIUwCpfFQGfbRYOf6duHfK/KWNsIcvZ02s4XSHzCIb1xmmL6xKa
BKY46u7Xk/FLhRDaxumOCfp/FtB2B1BQkxw9T14b8RxzagCd+wb71WyjAPxJCXhS
O8uxIuduzzCN4Mudb8LOEJoshte03vg9leHUvkM2UV8mgvRA0ChLnp3ZGsqRWZwK
AOWAWphLTuALUq62kTmZMvVqZkoVeBEqETteCKS02HbyhiaNTzTvwYPqTPE78Xkd
YjkJ4o0OHILITH9oR4/O5ix/wSocLsknui7qesH/f1PEOSjQbfRdvR30mK18N6i5
dS6op3IE0NX69w==
-----END CERTIFICATE-----