Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
File:                     YFgeZz2A90dJNrITN-r8wb3Dhek.mft (raw, json)
Hash identifier:          5vmQzorqV9yezr4mJI4IdtRqvIMnB9Qt7YsJhGSVEwI=
Subject key identifier:   75:CB:81:29:BD:01:7A:E3:30:CF:B2:D5:CB:C6:74:01:F1:0E:CD:81
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Certificate issuer:       /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial:       018F84EC0184867BE944987B8E632D4253A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
Manifest number:          0B77
Signing time:             Fri 17 May 2024 05:00:10 +0000
Manifest this update:     Fri 17 May 2024 05:00:10 +0000
Manifest next update:     Sat 18 May 2024 05:00:10 +0000
Files and hashes:         1: 0T-s-ncP7fxHzgUZ61OwImhh8C8.roa (hash: sz7mLGqijC7c0+YD50x5Z89nUJhMEGZSHcadkRXRcJ8=)
                          2: 1-yGWEDAjD1HPlr-mrAl64S7O8E8.roa (hash: +jI8HJEgWxqefshJhgH3L+eKaIC1+3/irxS9pVi7puc=)
                          3: 4hvKKQwWQhwSBMCcdI9MVzO9dhY.roa (hash: Ucqi9q0b6PX/FE1OxZlfC8z3gcxMlfzZKbAOwzbqiE4=)
                          4: 5b3s4uMoX-RJY6zYeJbW4AZqud8.roa (hash: R+1VdQ+4H28yuJTD7cjJ/kpp/N/Mzt8yjt7buAdxFPI=)
                          5: 6DLO8aK6bBqc2T9_A7FLWsfWxQk.roa (hash: r5M3fJhXehDfUWAUqFjFwsUjGBvZ2kqNK1dq5fGu5Eg=)
                          6: 7oB6DOUA9G1FvkyITzxv4cX5OMo.roa (hash: xvzqPLQfjJ5axjpWFOk7rZmuP+2V/0+uAMhF/k5BYNw=)
                          7: 8R95lcDJnPdrrHbHVP-O7ML_mOk.roa (hash: 1ZqdtB0G2r1LisSbQ3mnv+/eyTsq/6PUyrtC50Yvo7M=)
                          8: 8ewO0kF6IroMWUBBfgE2L_ThOtU.roa (hash: DHZBkahLIu3ewR/elK0J5xiW6qQYR65gwPc6punju18=)
                          9: 8fs3JcP8J1wL3-0w1qbBxUl6Law.roa (hash: MO238A9p3PNFHYfxywIpbuMkWcmabDQXFkOTAyQTxKc=)
                          10: 8otsMGth1S4N0YfEZbZIJpfcM7s.roa (hash: +pU6cLRZeIDg/L1LlosDn2+HeBH3DMp0dQz/xJBYcdo=)
                          11: AyfnL8v8N3x1kZ8SBp2iLWaWZlE.roa (hash: OAjeA5YolUQYQetyssEeK6Z8FCWJ7il8U+3fGUDSMBE=)
                          12: Bc5_73qFvhCgRS_ivyWRRJLjxlU.roa (hash: c/WT2med4B+cpTZKlyoiSkcIMGMNepdyYelHnwG1/Ns=)
                          13: FAtoa3WoCyW8mhbLDD-NP2GQN-s.roa (hash: 7diYIRYqOdZqVTBQGJdSL67U0vPdSmOYxoC+X7HUfRA=)
                          14: FF4YZklL_bkcAkxf0IWaB2CN7Jg.roa (hash: Uf5oZUWiJ4OrU5GuVq5M7O6tjO0+iJsfcrUk4y2FatE=)
                          15: G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa (hash: 27ThFvHk5JZTfqzk05BswlgrcgDHlW8rQUsGE2mFT14=)
                          16: Gbs36tjbRvxGTNp41Zp8U18Dk1Q.roa (hash: Ik0wUUbWOGs9pxG9dma4OgWTqb5K+aw2uHSfxn7l1jw=)
                          17: HCUsN8ijvRpE6W0SYz1D3kKTkmE.roa (hash: Ob0Pz6utJjglaoB0GTLYLY+/Hgba1RWM9ZjIw/P4KpQ=)
                          18: HClk0ncUja2gsX5Nip8rWJmvueY.roa (hash: ajmrxTUSY7X6AEeQEY+m+V/+CII1eAbR+tXii8VfFoE=)
                          19: Hlm6U1wNwdfo26HUBqKingFGX0k.roa (hash: TD++n1jEZMgsext6CN078hB/SThP47hOj7rXsluhdE0=)
                          20: JXa0g7O6BApZkhscDuspJws4Jec.roa (hash: 3V7idOUHrJhUDVnGhJ7PBf/Fz4e/zzGKWCoRv6NVvCM=)
                          21: JdFIe2sXA04XD3r7c9RCWxpV7YQ.roa (hash: KVtYkHtVqxniWbztFARHQSPN8ExGofypYYz9u7MKtAc=)
                          22: KDiIHfei2fYIwn1eRMCSjJqTi5k.roa (hash: IC7aZtCOHeJ5weDJxM2Eni1tz42ir4zvTEdTUZtO1pY=)
                          23: LMzC_blljRHvAQYsdtSOyye2zn0.roa (hash: G9P56csuLUhWmEm3XroO0sStAQlHww7K9cQkPna4nX4=)
                          24: MghAPluvx32zcSIwpyI4QqfxfzY.roa (hash: YcXJNQSyqVmykVkvTqltoOTqXMuNd7RcdFc0ZJm5t7Y=)
                          25: N8ulU-vFTgu3VsvgelydQBAMiQ4.roa (hash: lfRJniN1LNPAMoObejC1geAvhZI8YKAgbklp6Mfau24=)
                          26: OelyGdV-bmqdPAQxs2ZV09Kdfyo.roa (hash: RSX6PKmxZ7PtZYpQVpAMnqycuU/1ZdOdtgYTkMD5u1k=)
                          27: RIax74QrouYR3G8EuZnS6CBVrMU.roa (hash: M6s6tTvytpsTedCvBb5V+tEJLg5OsfuQe9dSglOp/j4=)
                          28: RsUWnL5wDXE4XkDzTr1ZD1Erj4k.roa (hash: cfUPai0ZUyj4qPOsj0nQd++UAnFF37EjV+2rwCi7KAo=)
                          29: TYQeQD1ysn5li6VJeZeQK_3erL0.roa (hash: dzi+R7+ToyVVvJOw2iGEvYCWff6UR0ILPu26gb5MVQE=)
                          30: Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa (hash: bSaEVpBrBTluPKrKtZFObM4ahdqClvbYJomIJxU1WuI=)
                          31: VO8aSMMyE1Idk1H3CaNaJldXInk.roa (hash: a/yC2ZWIDpsLnaqyGX27KmyFjwGhs1Y/l9dc8cJpoB4=)
                          32: WlexZI9HfgbsdmMCeQPpTefTMao.roa (hash: c0DjiwxT0XmzycOy0gdf2/nxp28/74OpC67WqR9X6fM=)
                          33: YFgeZz2A90dJNrITN-r8wb3Dhek.crl (hash: Tz3RNTtY+jQuSSjHwG1U4FZRZCYHtM9F9Zyp4WzJ8jw=)
                          34: _kfD9qLa6o_YJ1S0qFCLjn03DnU.roa (hash: LopMBWxG0MhDF1XJbA+b9B7YQhsls7AiNx5KscCAr6I=)
                          35: _uvGzh8ejF-GEMArLmZAoZwby9I.roa (hash: f2OaoBRcg50nfVBG7yu6b+t9wBD2ET7EYn5JauyAiAk=)
                          36: as2ouzTkFaYBFJR_GvEZGfbT-5A.roa (hash: e5AnOgFhaNar7V574CalAnloXzQnPpgES2lVG8RNJ/c=)
                          37: c93aNeFuIBq67DLTDtzGrbYVmws.roa (hash: sOrFOFGdSscumi0ANhVQjRfll3emtq1pkCkfbQrvgCA=)
                          38: cZUD51CHqsQn1UPp84zHrugIJWw.roa (hash: 7KPwaObmJO7IoeNMJpn2AxqB+8q0pzt5J4OjPKhxazQ=)
                          39: ccgXeOEWSJRFv5lfvWnlj7VgbyE.roa (hash: 4kw1OcmXWV15WCSnoHMRDTNfP5eKgwTiqMN6Gg4M5wY=)
                          40: ez5wDyYGi9w0DRw-3WQkXYbBQx4.roa (hash: p8EoqwloZwEOjer6ahz9NEOm4eLiOy7gFcAa3kP3QbA=)
                          41: gKXToOCXWGhDYi3ZHv8ThkFEZ2Q.roa (hash: Vj4UEf6oL2ec4eCk5J0yzfYd0dusFxPLMFxF7Ovyi+I=)
                          42: i8Mwi0GK1eRkxR3JO_mEXIip19w.roa (hash: jIgFHPikOCv4OzsrWTEdZ5MA9K+zVQSu5RFE24idWLs=)
                          43: l1BaaqWuFkWH-PawRGEseQ3m8Qc.roa (hash: nFmEbv84OkR8oFvno/OryTBPdNdBDW1/wEQUlML44ks=)
                          44: l6LoUqLoqriKRFQXErP2Qc1uVzw.roa (hash: 7N76w9pifDbPMTKiXVMiFfk4w9FJFbEfnQdYHSw00Ek=)
                          45: n35rgtMJSLTvy0_x6zm60m0eeW0.roa (hash: lYkmfD2zjlIGyFWxLRGAJcsbSY3tllDj9JCJIPVG1TY=)
                          46: nbtlFmVz8ck6IaseaLKx4hSFELk.roa (hash: JN9FepzBXbTvAQlT6m849/appCf+1DShX5CyOz4oBZw=)
                          47: uZnv2LnHOamJti_NgFYnoYRaF6c.roa (hash: VyRVbVsG809hIE3ZF3Mv/bAol4jy6sYVk94pLGjD3vA=)
                          48: xJ_tafogDHqHn5lhuFnJSLFmhFQ.roa (hash: 313JR6HKaqGfGycK3Og3ltlYxw5auPIqKS4jsqVgjvk=)
                          49: xsApzOxLukUzdkXA9S1sXl93VDE.roa (hash: ncTBqBOt1YM0Jy29350mzqf/AxTM4V/6AUZVqREJ+Xk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:ec:01:84:86:7b:e9:44:98:7b:8e:63:2d:42:53:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
        Validity
            Not Before: May 17 05:00:10 2024 GMT
            Not After : May 18 05:00:10 2024 GMT
        Subject: CN=75cb8129bd017ae330cfb2d5cbc67401f10ecd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:c9:bc:5e:d7:19:4d:06:ae:84:60:6d:20:
                    e0:9c:ed:55:f5:f8:81:0e:b9:9f:cb:76:0a:34:42:
                    a4:3b:f8:73:55:49:a0:51:69:0b:1e:4c:99:25:12:
                    21:1c:53:4f:85:af:f0:fd:f6:a1:9f:d6:a9:43:d6:
                    b8:15:24:5e:6b:13:75:9a:17:20:89:7c:26:a0:e1:
                    56:e1:47:f3:d4:8a:29:db:78:1c:4e:69:2a:c6:83:
                    db:42:f7:53:28:30:ae:39:8f:56:d8:4c:f8:86:15:
                    8c:ee:57:2b:e6:c1:13:01:29:b1:41:8e:44:72:60:
                    c3:1f:b6:80:38:de:33:3e:e4:0a:ec:b4:e0:fa:3a:
                    58:e5:22:7a:38:1d:97:42:09:68:25:56:2b:90:a0:
                    af:50:b0:a9:64:93:0a:5d:3a:ff:89:86:0a:be:de:
                    86:92:7a:be:5f:7c:18:b6:bc:c3:a5:9c:c1:84:6d:
                    8e:1f:89:99:54:09:a2:dd:a4:a8:6e:59:aa:85:81:
                    dd:fd:67:1d:9b:7b:02:ba:61:ad:21:de:b1:9f:83:
                    41:78:76:90:c9:13:6b:13:67:ef:64:5b:48:a4:72:
                    05:0a:50:68:14:21:ed:e7:2a:09:62:77:2f:40:d1:
                    2c:13:77:1f:ac:d9:f9:a8:08:9f:de:5e:9f:a8:01:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CB:81:29:BD:01:7A:E3:30:CF:B2:D5:CB:C6:74:01:F1:0E:CD:81
            X509v3 Authority Key Identifier:
                keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:4a:a5:20:75:5f:04:27:1c:c6:23:5f:9b:8f:fe:b7:05:
         0c:f5:df:99:be:98:c4:f7:d4:a2:a3:af:81:d4:ed:b9:af:03:
         b1:68:2f:71:0a:1c:02:ef:15:6e:4e:ad:fb:cc:3f:cc:4f:98:
         30:c5:4f:ac:43:5d:7d:25:41:5a:98:72:b2:f8:c7:49:10:2c:
         c0:0e:d4:7d:1a:7b:99:14:2b:00:b1:42:95:d5:8f:43:e8:70:
         54:8e:4b:0e:ea:51:a1:2b:0e:65:02:70:90:99:31:52:94:8f:
         14:67:39:89:46:52:42:ce:57:76:bc:09:ca:9c:d9:4a:d6:37:
         b2:70:07:5e:06:0c:81:ee:36:36:c5:75:90:10:90:38:53:16:
         55:9f:01:59:cd:49:8e:88:b7:f5:e0:07:db:02:d9:41:2c:32:
         54:3a:f3:aa:65:40:93:01:07:1f:5b:94:e0:d5:ab:cd:d2:9a:
         eb:94:b4:8a:72:d7:47:71:d4:38:90:78:28:b9:da:26:19:fe:
         84:4a:d4:d5:42:14:e8:26:99:af:52:d6:73:51:e4:82:21:1e:
         0f:5b:ed:c4:b2:b8:88:b6:23:b7:74:fa:bb:ff:fa:a0:90:52:
         f7:17:d2:c2:e6:ca:dd:e2:59:69:47:02:8c:64:ee:91:1f:ac:
         b0:55:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----