Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          HOnvnNmsqDWqj+BOw/VMdQXTIpY7Z29xBt47gI68qAg=
Subject key identifier:   3F:F0:DD:79:2E:28:61:B4:FF:7A:7E:3E:93:D1:81:58:1E:F7:37:C4
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       018F8F020D62CC156452929077486C9C72C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          118C
Signing time:             Sun 19 May 2024 04:00:27 +0000
Manifest this update:     Sun 19 May 2024 04:00:27 +0000
Manifest next update:     Mon 20 May 2024 04:00:27 +0000
Files and hashes:         1: 1-tVwY66VxOJvWMdWMntVG9WUJHY.roa (hash: 68TTMs50RoTnbvM8uP3PIynEtiEETeXPXT23/dJqCh8=)
                          2: 3H8QrvtI4HxEa3TYtV2oFlO3jGw.roa (hash: k5KrFk0WwK7EdhcxjuOQJaOjuFODFRcU3ggA4ZLuSWQ=)
                          3: 6YLUjYx-9XLfDdWRRYDkTt_LpTE.roa (hash: DTuihjFWQtmWAFX8adAOj1dc+5bgIlj5buoR+zBARO4=)
                          4: D1tjoEa5wuIpOR-5mBMYT5sCRXc.roa (hash: JStlypfpmzATBb4GVMcO++CdR5YvgLH5c2DCdpEBVrk=)
                          5: IGtSOe_HkqoE52mEOPWn_Yb4Q1I.roa (hash: Q7SDcxKsoc9JzLGADvLSyEVZDE5BOfEsCaHrODpSOY4=)
                          6: IOiTz57WBnzsDSfb-wiVVvhiSvk.roa (hash: YBgnytpxEyMKK9bcGjkT9YGjmgxVECxd2kgMS8eM66M=)
                          7: LNRuSE33PV79Sx7lSOXWH08HKJo.roa (hash: M3WwsvE+DO8nxQceiR5foFM1Nf+//xVmHU67Mc+Kx/s=)
                          8: MvTDhS4F8rDjxaNeaFZLh2gDwAg.roa (hash: 3H2TIDBjhsbgt2f4YZSlx+8NpsT4EbPoFbySta94y/s=)
                          9: Pkh2Ck-SqRtpYvh5dH_DM2FIVqo.roa (hash: i26KLvsf9cRqBtfC2acdYE0JwMimRLkg+cJf24Fwm/Q=)
                          10: SRwNPkQ3m9gWuYofoZk7Iz07Arc.roa (hash: eDFYPu1ynjybAg6RPjJgVOSxB2X5pJBsXhfzYgqCVsg=)
                          11: W-sClE13C42C_jjTiDT-NxUznjk.roa (hash: 4E2X93vqacAaaHPB8pVgUxB0DvapUTgRspsaCR2dwK4=)
                          12: crt7l_LYesa9yrkU5qhTu3WVlCA.roa (hash: g31wPLplsCTUAneu8uhuh4VqfIQmI4srSlCceaC0gKU=)
                          13: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: nwtRCWfj2w/O030C/O1yDISVMR+6fOw6jHy3Q/zVKD4=)
                          14: eaWSYlYtTHoUV2T6puoJwTY1yzo.roa (hash: 4EDnzhJ+sngEfgBNbpNFt8hpCgyj82szfd/D0pgviK8=)
                          15: hLpx9n_WcayRIKZ3sUAKK8d1gJA.roa (hash: vrLIFITuBcFjGVIv3ZoUmEtHR8f5FmtJ+lgB+T4YDxY=)
                          16: kaIJ3v6bJMa7_WOSA-9tpwJX8ZI.roa (hash: 24MF8HePt15XNm29GrUVnMlzVaZ+d0n3e3fS3wKI9AA=)
                          17: lbhCVD1dbCpQBFpWptC4DBfRpO4.roa (hash: AfJWtjcLD3NjZSxtYBcOHRFJJhE+HOykW23+eGfrIYY=)
                          18: o4a1dwNfZn2rc490kGx_SV2UXdI.roa (hash: iR1CAYp0b5lDCuwRBAb5a+Y35MnDylm3u3iMtLp4yfw=)
                          19: stsBDF6oDOC1XxO3X2XhqbEP__k.roa (hash: uRw4F2B6y1sgAnzcXcCK/KHTP9KKpE9KxXGjBYmpcZY=)
                          20: vHYP4M8z0CLWHbTGXn4wPDeqYig.roa (hash: rsElQMAi6mo2GaTYEo8xkA8tUcMTBB9iZ4FMTkthLGE=)
                          21: ynzfeNrLTxp6f426C-w-ucH4hMs.roa (hash: W+8cI0EPRGQJRELg5mrHzk00+ZQDPzVcvLumdp+Swso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:0d:62:cc:15:64:52:92:90:77:48:6c:9c:72:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: May 19 04:00:27 2024 GMT
            Not After : May 20 04:00:27 2024 GMT
        Subject: CN=3ff0dd792e2861b4ff7a7e3e93d181581ef737c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:b6:f0:01:ec:29:ad:78:4d:ea:b3:0c:39:
                    ed:86:7e:3a:f7:7e:b1:16:2e:25:8e:39:52:99:f4:
                    c1:af:38:eb:e9:f5:45:52:bc:73:c2:a7:d7:66:a1:
                    ea:50:78:63:99:29:97:5c:4f:58:da:1c:1c:b1:78:
                    bd:e6:62:84:ed:a8:89:45:67:00:fd:c0:d0:71:a4:
                    5c:d2:c2:f4:32:b5:21:5d:93:fb:7f:40:f5:54:be:
                    e0:07:9c:3a:5b:86:9c:2a:44:0d:11:a2:1f:b1:ae:
                    a7:6f:46:b4:04:d4:33:a8:8b:fc:3e:ec:3e:36:ba:
                    05:54:f8:5f:7a:7d:46:fe:29:00:66:a2:f3:55:a0:
                    f0:b0:5d:fa:b3:61:a0:d5:fe:b8:46:8f:db:1d:51:
                    39:60:95:05:e7:34:e5:cc:69:ea:62:b9:be:6c:6c:
                    80:6b:dd:69:ec:cb:dc:1d:ca:d2:b1:de:b2:b7:bd:
                    2f:39:2d:8e:46:ed:74:2b:a0:5a:e6:d4:4e:15:58:
                    bd:7a:00:67:92:a9:c7:c5:2e:ba:90:a8:9a:97:d0:
                    70:8d:32:1f:d1:4f:82:54:80:10:7d:0f:bf:f5:63:
                    2c:e3:a1:34:7a:52:20:75:c2:8a:76:00:79:93:38:
                    03:6a:69:80:d5:9c:2b:d8:32:08:38:d8:7f:ad:8b:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:DD:79:2E:28:61:B4:FF:7A:7E:3E:93:D1:81:58:1E:F7:37:C4
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:1d:df:6e:31:ff:94:47:cc:9e:3e:55:a3:20:6f:10:4b:
         bf:b9:62:3d:7c:71:95:e2:1f:eb:31:0f:8e:a7:45:18:0f:eb:
         59:93:16:ee:e4:1b:11:d9:81:39:70:e5:36:bb:63:06:a7:3e:
         82:b5:5f:3c:dc:c4:4d:34:ba:f8:78:83:1a:41:ad:78:42:ee:
         38:c0:42:4e:fb:d4:50:57:e1:59:90:aa:24:a3:c1:bc:81:0a:
         a3:a5:7e:5d:4e:35:1f:27:33:8b:1d:f0:6b:78:84:9c:bb:3d:
         a4:53:b5:0e:3e:e7:51:99:55:d9:1f:08:1b:01:77:90:88:93:
         e6:dc:1f:b3:1b:6d:e6:29:95:b7:43:44:eb:9b:44:7c:c8:19:
         a2:ef:57:07:7e:60:03:16:e9:05:b1:e6:50:59:d2:dc:25:a4:
         e2:20:62:c6:92:1c:49:51:6e:cf:1d:20:cc:7a:63:18:91:c2:
         9e:06:dd:47:37:8e:a9:c9:f3:e0:6e:09:dc:8f:2e:0f:4b:d7:
         f6:34:d7:d6:a3:b6:e4:c1:29:6c:77:94:4d:87:e2:49:e3:49:
         5f:50:3e:e0:f8:ed:f6:cd:41:2b:5f:1c:2d:ca:08:0c:11:53:
         e9:6b:18:dd:89:39:72:0a:3b:b1:fb:77:ff:7c:01:ef:7c:87:
         ce:42:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:01:50 2024 by rpki-client on console-fra.rpki-client.org