Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
File:                     zNdhWb_Z4zdSPukw898RHWuucwY.mft (raw, json)
Hash identifier:          wk3nGyDul210QAIffahUgd4MjWJ3uefKjE5bxsfgetU=
Subject key identifier:   92:08:D4:F9:0F:99:21:1B:3C:34:62:3E:EB:D9:A1:9B:4A:EA:4F:FD
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       018FB0B31D2E863987406FD9428E13288ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
Manifest number:          114E
Signing time:             Sat 25 May 2024 17:01:19 +0000
Manifest this update:     Sat 25 May 2024 17:01:19 +0000
Manifest next update:     Sun 26 May 2024 17:01:19 +0000
Files and hashes:         1: 5LOjIq-3yd7hw4pT3lo56aj_ga8.roa (hash: Y/WZghkZ/7xQ5qFzFAFEWHEqRXKLclQ8G7V6awR4F0w=)
                          2: 6jiIsQZvMwZeCTocqGzoFi-Q05M.roa (hash: vNmY2xNN1MlTCkx4qqRxXBrGH8sASyFCxPYouD7KAqs=)
                          3: 6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa (hash: p645s9VERW1Ef0opHp6vl7h5I41i7L3NWWr3wTxcUVk=)
                          4: 9rNpUbLwKA3gYn0hqgoutw3fV-Q.roa (hash: TVUr3ENRWy3Rj1ZGSC9LwooUXRSPARD9upMwIkPr6j8=)
                          5: AiYDAuHWWTbYGdA9r5q3PIbIRL4.roa (hash: 7S953/WdZ9j9UM9PASqBEgriBcpm4uT5STbABwaS3+c=)
                          6: KTjrig58iCiDtCXLyYl4meXMdCM.roa (hash: BdXNjrhrST6rMpLc+0llzb1KPIvY+J2WR1/ZtLpfNGk=)
                          7: Qd_B5EHX12KFdpT6SPCDchylQE8.roa (hash: +ccD5p6/2wvJzVqs43c+TQiWwS5USs33/h3rJMRwqr8=)
                          8: U0FQgrVnP50XmOXLYcQm46KtpM0.roa (hash: XXW9ntvwFXoEBbWYdUYEL33ubcoxwCDsWgnzE/wZmb4=)
                          9: YtZsgEdY6FChVZRVChbos9M0M0A.roa (hash: VF+P/RnqGVvfb6m5T1SH78Y1omoNr4I/TXpZBN2ccoI=)
                          10: Z-S-K2tkLQH88XimL8U9JLX7zVQ.roa (hash: p2scXI7JgF9jrJ1YD7+kgEcAU4CT8qylmFuzEng/+UI=)
                          11: Zg9y5VE1ip1W_zr3sJGo7UKwSBA.roa (hash: 3lblbwQKf5+qO1hOF2taPaUqeneGedzIAZ0mvWfe3Kc=)
                          12: _vBxre45pVTpkbWV06I321guIPI.roa (hash: A1nSt1/4K3o3CvtNDdcZb3lXzzt5C3KdjR9KkaLf3Zg=)
                          13: boFPMYXgCDAkmz6kJBD8McMUm5c.roa (hash: nwNl+8VSInfmDNadnUNpXvz29gZpqiOuI3WmejBrWnk=)
                          14: cr_1DRKVT-LLYaA6GelGxbLuCTg.roa (hash: MiGxhxRR1TCmVQ+iN8kWCERB4ybg9ZzuxMx4qxHXctI=)
                          15: d6ByhanaxQlbQW2apBiZT2sfMnw.roa (hash: js7Aw1ZoOAfaeV/ZACQ4ZQ4ADwN/dO0WjKflH1hqz4k=)
                          16: fi5aq6IMrHYx0xvqOLsMO1cD1Go.roa (hash: z8lVeFgUlbbAao68sltw9h1KUSjuNb0TJ1VMUv8/qC4=)
                          17: hcjkkYdDMvDTB6awXKaDITEAwpo.roa (hash: KEMvpzPBZgpdi1pREzI+OtXwdb2E3WocfCFjJRmZEqE=)
                          18: njVN5zyy-e7-zkeIDLdDxPJFHyE.roa (hash: bJtSMwqBmK8wKLU7SX73PY2FCnbv13ySsR61Dg73HJU=)
                          19: ppFFSdvlJSrA1YPhZ0g6f2cv0K8.roa (hash: EUA2qNT42UtK7xh1mGKDYMthctX+asIlFomL7NYSF6s=)
                          20: t5BMQR_Bs0AEYmrbpL7lxFUYnMY.roa (hash: Piypz/OE+SCfk2VY2P3nPOEtASav54KuLE68ilZgsFU=)
                          21: zNdhWb_Z4zdSPukw898RHWuucwY.crl (hash: AjRdb1WCG7AAQQB6Pw60HEfvb0CTREKtD+Rft0/8pt8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b0:b3:1d:2e:86:39:87:40:6f:d9:42:8e:13:28:8a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: May 25 17:01:19 2024 GMT
            Not After : May 26 17:01:19 2024 GMT
        Subject: CN=9208d4f90f99211b3c34623eebd9a19b4aea4ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:d7:1c:cb:c5:7d:e9:b6:ca:26:6a:c2:f6:
                    f5:83:9c:51:7b:a4:7f:d0:57:b6:c3:0a:c8:4a:36:
                    67:31:22:65:5b:5a:6a:70:68:d7:5d:2d:f6:32:f9:
                    69:4a:ac:49:06:07:d1:41:f3:fd:39:5c:6b:31:0b:
                    2d:52:00:a4:60:3d:24:68:2e:fa:4f:6e:56:e6:29:
                    2f:ec:9e:68:4c:60:35:c6:04:be:d4:f2:e1:84:04:
                    77:8a:b7:a0:9c:7b:0f:c1:3f:f7:a7:0a:7f:90:71:
                    c4:e1:77:12:dc:83:13:06:bf:fb:17:41:8b:7f:4c:
                    13:78:5a:6f:8a:4b:7d:cc:e1:5e:9a:a6:c3:49:cd:
                    83:d0:30:5f:9e:3b:8c:f2:89:30:47:7d:e7:6d:6e:
                    3a:a5:42:2a:8e:e3:e8:67:0a:51:ac:b9:98:aa:3a:
                    a6:dd:2d:8d:d7:b9:83:9a:63:ff:35:41:57:7c:c7:
                    63:8e:58:a5:22:2b:ef:3f:ac:aa:cc:39:90:04:bf:
                    b6:28:27:3f:a1:6b:c9:15:fc:41:09:01:22:ec:0f:
                    94:a6:f3:6e:c7:f2:08:fe:b0:89:6f:a7:57:71:94:
                    c9:60:ab:9a:35:e2:dc:a4:d9:f1:c1:a5:7c:59:19:
                    ec:43:b4:10:9d:69:ce:3b:43:41:21:08:3c:6c:3c:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:08:D4:F9:0F:99:21:1B:3C:34:62:3E:EB:D9:A1:9B:4A:EA:4F:FD
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:84:d4:1a:d3:41:fb:3e:6e:3d:ad:13:ee:88:1a:7b:b2:
         b1:a0:00:5d:b3:c8:15:cc:68:38:87:93:92:07:56:7e:66:d5:
         be:db:06:45:8c:92:cd:40:6f:9c:f1:7c:50:a6:dd:87:d9:d1:
         62:17:ff:3c:1d:a4:cd:3e:1a:2c:83:87:32:62:2d:db:0f:53:
         01:70:a8:d5:7d:5b:8c:63:6f:06:83:94:c7:8d:cb:63:bf:5d:
         10:6d:66:7d:09:0d:9c:2b:ad:f0:56:3a:09:c3:58:94:de:a4:
         64:e2:12:d0:27:2b:b0:4e:34:0d:0f:8e:af:8a:73:4c:ad:aa:
         aa:d1:ab:7d:c4:dd:b0:f9:a4:c8:48:f0:c0:d2:1f:21:bc:05:
         3d:7b:fb:ad:ed:46:8c:71:2f:59:34:cc:2d:34:16:76:c1:36:
         8e:c1:aa:fb:71:ab:7a:3c:5a:d3:05:97:7b:fb:35:50:c6:40:
         2c:26:36:19:7c:81:83:9d:98:55:78:c1:2e:b1:ac:35:f1:f4:
         08:4c:85:4d:8f:64:ba:1d:8b:70:e1:eb:98:76:c9:aa:54:e4:
         92:64:04:7c:be:8e:dd:49:f0:8a:1d:17:83:da:13:29:c7:eb:
         9c:c6:e7:6d:3f:ae:38:07:3d:c1:fc:46:c9:73:4f:a9:c6:ad:
         65:38:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:03:07 2024 by rpki-client on console-fra.rpki-client.org