Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          03CNKxDpQ4RR2OaMXzGS8aXxhO/LZlG2Oc8ucNAtYQA=
Subject key identifier:   51:5F:CE:54:C5:E0:7B:3A:1F:6F:E6:4B:D3:0C:D4:AF:B5:D8:0E:37
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018FD187A08F2D75E29EBD0F31E4CEDD22DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1268
Signing time:             Sat 01 Jun 2024 02:01:17 +0000
Manifest this update:     Sat 01 Jun 2024 02:01:17 +0000
Manifest next update:     Sun 02 Jun 2024 02:01:17 +0000
Files and hashes:         1: 1-WsKz-qeZHaaRBEkLNMbWmuwJYQ.roa (hash: BSBKi1b1YRk/Q8TUurwQRTIn77SrxEdrKw43fm9dk1I=)
                          2: 3Eix-UwtRpQbhdUfQiygUQrA-78.roa (hash: aWf/DmINwa4IbmBOpczavjj1C/iuumgpZM189/KHdng=)
                          3: 3lcpQffX0t9eyc07gdwz7PQXB6g.roa (hash: WLEJ1EFEaPHxXKgjLTVOb4ulWD7hP8m99/52f/kCzHA=)
                          4: 6fkOqYDe9YJZHpQV720YpwRiEYg.roa (hash: qkDngvuYMlHOsVKZ6/gBG57fscR1+D+gbVuwrjYl8r4=)
                          5: 9jOqmYXOswyEfu-3B7TCy-jC0Kg.roa (hash: 3yzb1bTAGcgcs/CrqrJPpwGo873g8IucmOvfoaAo35g=)
                          6: DvQhNj5cfTC9gGZcAkKYytR52oc.roa (hash: yaj34dQ1iIzF+jF5JB34NKAeiRxr6MqE1n2qk7Zi8ck=)
                          7: EH5HGaec_gYJ-cHrKAW7atbg_S4.roa (hash: jBJ2XbkxmB4jMMsj7oQA4o7g6p3iX/lLlauLXMw1S44=)
                          8: IlIpa2m0MdOmW35Wrw_ZrZYXiSo.roa (hash: ZXQxlmDZ2lNWYa3QJXBF8KCFXckD5TPL9alQIU8ixrY=)
                          9: NqQ8m8-G0S83voqYR2VbwnZRrN8.roa (hash: 8RKHEC8PfdgqHtYXjtXSk6e1DZ83O03sH0ceP/NihsY=)
                          10: U4YNxBXiO6_-utYOU9YT2PIMMS4.roa (hash: RE+sg68W25rX5Mz9/BRnw6d1Ge+YufabyBQnotqMajU=)
                          11: UGHtz0uj3vh0ASEnmPzHbH7qZeE.roa (hash: hKh9RhxSL9SN0z36F2Tqo6QQYBYvzqhM3cUOp5vL1UM=)
                          12: VeNoLIX78zcpZgFJqwvWfdZUWFs.roa (hash: BCp0yxKe/H9nUT/XSGJBWwY702irxETDXHoaV6vX36E=)
                          13: Vp-Y4Fc3mIKHw0OMTfhh63NdCD8.roa (hash: w5aZFaTuUDAiWQEdGZb6KdJVFZlFlEhrVH4o92WHaCA=)
                          14: WN6E2jVf8ke27dbztWiKKZbXrEs.roa (hash: WX3ADsm8BazZHDi9T4QueUNmj+PHtCk5+okEJx1Fm34=)
                          15: XC-C_qwH53TbHfwnSnJJwhqR6k8.roa (hash: 4iF2dwPDW9twB52FpVdSplYisRj//F8pn6TLF2wGFWw=)
                          16: eBO3HfbX9Ua1LeMFAT-NJHSEA4I.roa (hash: vjZfOhL0txDZcuVwz7dgAPqdGMjyJQeiRvFNjwSOWD4=)
                          17: f3GWRhGjZHbkOUY53WGmX9Pbons.roa (hash: 7FFCed743nkyP9y2uZhoR24EK6iebgWz9oDF3eDi7AI=)
                          18: g2SVYp1x6dZOtG7rGogWtYMmNdY.roa (hash: Mrdo4KcNJ6HI66WUXk6713YT2TTaepMGtKTdnFulttg=)
                          19: gaONNO_VBUW-R7s0i5-THeKv1_4.roa (hash: EfBphDLhaGN9ABg6zaMLF1y9f9YPoo56tgT/ianoVZk=)
                          20: h-kw3aLN7LopzKhJjzC16Jwz48A.roa (hash: SBFNd8blDHsf6yqync5s2GSuTVCGjF5oIqj+/wyoSLw=)
                          21: iFlD3NvfC1tQeH0UGEKipokZK74.roa (hash: NLPsfHeAPYTDTXoNOihcSiizP9qMHFCbkEC5bgIsdmQ=)
                          22: jXXIySA5SDlk1APvUPNAsBgU1bc.roa (hash: IqfYu5qOv4IBid2JjWYeuOjGReMULnJw+TOuOhJ4oSA=)
                          23: lyb6aTC3k3Mcpo7WWWzUydyKjqI.roa (hash: mOqwDeTqLKTktwF6larRvtI1Z3xIr5mDIIAcFsC9zvM=)
                          24: pJbAMcK3LKBdaBvvubQGBDRl000.roa (hash: dzPHNMHShQ14u+c+TeCsYXriftE9+O1x+IkjANkEyJM=)
                          25: s-gQOMjgVTDBlQo8WoYzoEbViGc.roa (hash: 9ByvPdqhsvv/wv1mMXsiUvS3pWjR1N10jFlxkqvXVgY=)
                          26: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: yPDJ0Di6H48brPjHF1He+pBFZcXDLbCmgvpscuK0/Fw=)
                          27: uUUEcvwUIvp3Jncpj9HJXUdtK-c.roa (hash: VXvrZisIq56EuPBLZ44nKKdrYvXSweQy69G+Q+PRI4Q=)
                          28: wTHLZFMXvwxDuAFCwW7tKoKFnHA.roa (hash: Bg3c8MiJT3kTFwjpghpUZqGO0Z4NWgCWLSRlHaaox/4=)
                          29: xE7Q8OCqn4ei2XgxO2P2YZmP9Fs.roa (hash: 92aMcKDk/mRiyPqVfV5pTiMhKOBPJ2kjt6TjnG97CvY=)
                          30: zHwaXjTEYhK-Evi08UeQqSiuagE.roa (hash: 5WmEHmpFNOa5ndJITO93Ijm7P9HVZd4EAl/9OP0XtPE=)
                          31: znqNvYotuKxqYRM9ObzeMI8aBAE.roa (hash: m0kF/ZVKSi25jHkmTlL8N7xrxEbAS/b1expSgG1fUdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d1:87:a0:8f:2d:75:e2:9e:bd:0f:31:e4:ce:dd:22:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jun  1 02:01:17 2024 GMT
            Not After : Jun  2 02:01:17 2024 GMT
        Subject: CN=515fce54c5e07b3a1f6fe64bd30cd4afb5d80e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:88:9d:f3:cc:5f:13:f5:b7:72:8c:10:1f:
                    13:00:db:08:81:a9:70:11:cd:16:91:b7:61:91:3d:
                    78:94:c8:00:13:30:f9:68:0c:a1:ef:a1:cd:47:72:
                    e5:df:e4:ec:62:ad:ee:19:03:a7:d8:5b:15:6b:8e:
                    1f:b9:fb:78:8c:62:9e:ee:7e:23:40:12:e3:f4:4f:
                    0c:5d:bf:d4:a5:b5:72:ae:e1:72:be:12:c0:40:87:
                    1b:3a:e0:fb:30:19:db:bf:6d:ff:93:7d:79:97:7d:
                    4a:38:5b:a5:b1:40:e8:2c:bd:88:cb:fe:09:bc:e6:
                    28:c1:b0:a3:a2:58:9a:2d:8e:9e:9e:b1:1c:c1:44:
                    cf:b7:06:90:54:81:c3:8e:53:fa:70:45:c3:d1:2b:
                    77:c5:49:69:85:ac:f0:c8:ac:bb:9f:2f:80:c0:bb:
                    f0:05:b3:84:c5:dc:44:2a:33:65:11:8f:cf:3d:49:
                    59:91:c4:57:cc:ab:31:d1:c5:a3:23:80:59:73:76:
                    48:f1:65:88:11:69:65:3a:e3:06:e5:19:b4:a7:2a:
                    e3:13:0f:bd:3f:50:54:15:60:f1:c9:09:51:c8:a3:
                    b3:01:dc:20:af:99:9e:36:89:e0:62:88:1f:a0:f4:
                    27:7b:e9:99:80:0b:04:cb:c4:11:55:4c:da:dd:46:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:CE:54:C5:E0:7B:3A:1F:6F:E6:4B:D3:0C:D4:AF:B5:D8:0E:37
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:71:fb:2e:7e:a8:41:cc:2e:f4:72:52:46:4f:ea:14:b4:
         c7:77:ff:dd:85:a0:0f:31:2e:ca:87:56:bf:ec:31:1d:6a:2c:
         aa:ca:71:bd:f4:2d:92:1c:81:af:5d:46:b2:b8:f4:9f:a8:76:
         c7:a6:39:14:57:09:5d:2c:66:bd:79:6a:7d:e3:a8:d1:2b:3e:
         f1:ee:db:92:68:a6:b4:ef:ea:83:54:6e:80:15:7e:9e:34:8c:
         06:99:c4:62:a7:8e:80:74:02:19:37:05:ca:d6:bb:9a:c7:68:
         d0:6f:9d:04:51:66:e6:d8:29:74:6f:15:1b:da:47:99:5e:58:
         b9:bc:9f:77:16:73:be:fb:87:16:1b:4a:e9:34:8e:43:24:76:
         6f:d4:5b:9c:d5:27:2f:35:64:8a:10:1b:ea:f6:76:0b:7c:ab:
         5d:64:fd:12:25:25:26:68:2e:54:03:cb:3e:65:b0:0d:06:b9:
         5a:1a:aa:c3:24:ba:39:56:86:2d:b3:97:df:41:b5:4e:44:9e:
         a7:ce:bc:e8:4d:ca:6e:f1:38:16:8c:77:22:84:73:99:8c:3a:
         f5:c8:f7:94:2c:5d:58:9b:69:1a:fc:8e:21:b6:f3:41:c6:46:
         d5:db:0f:cc:58:32:f7:1f:3a:d0:be:d4:e5:ca:4f:80:f7:54:
         ee:2d:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:33:08 2024 by rpki-client on console-fra.rpki-client.org