Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File:                     dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier:          u7U9xF076gldXKH+Ftd1bOYUhThKJVGUr0BOl4gCsvE=
Subject key identifier:   67:F7:ED:03:BB:71:7D:FC:E5:D5:DA:57:20:0F:A8:9E:37:99:CC:CD
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       018F3B8A2811822DA24E3E0013B634418CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number:          11A6
Signing time:             Thu 02 May 2024 23:01:00 +0000
Manifest this update:     Thu 02 May 2024 23:01:00 +0000
Manifest next update:     Fri 03 May 2024 23:01:00 +0000
Files and hashes:         1: 0kF2wRoUOkLUKmrAqdCX4R1J0AA.roa (hash: i8o21B7TyFcFxgOiEsnIcGxiJyZTYyg93qdsgJee32M=)
                          2: 1-uEe4tCvpv9TXogVnzKuyk4EkVA.roa (hash: JFATtxle7Ua5lbhgcJmA/cH/I23jCep4XKv8WL93ym0=)
                          3: 1zu8HPFtIDmKvPLz3iS0xli5HPI.roa (hash: jRshAkiGSlad8DbCSTEwQtu2VCyyEf8r14A45Qvzy7U=)
                          4: 2Pi0No-o2M5_k3Fw42pdZeqvSbQ.roa (hash: 9M/W1RbMU+HnkeekKN0NIyVjNoo85jPxSfLQcBjSqQE=)
                          5: 2WiSYSTZY0NArSxNilTiRMxcsYc.roa (hash: lASIA9d2PkT0l8C+oe7mezW6YHawCvy0NzT0CuCrEGI=)
                          6: 3okcH6dSItYnE9DclsLLJRCf2F0.roa (hash: K9Uah8YXP3Sjk5e9RvVckCs7WCGDHQNzGLVgAgj07Oc=)
                          7: 6D4t59QNnNKPnnyqNarBaCmlHbw.roa (hash: wpRURc3LdqMvq3vWJ4E31vv/Y0NXQHjc/4yIADETfsU=)
                          8: 79BOLEXRc1axf16yU7SUacPUMlI.roa (hash: E01MGziwxipTYRKFcRoRWSzpqxMRvTjblvC93Cxp7+k=)
                          9: A_fRrRaVZhvPeeWTwjL1xHP2KEw.roa (hash: 2otm8DpSoKtMUkXeVleVYHxEWwltE23mhySKeWZ8m9Y=)
                          10: CPzhMPg4KqjlNqqZ284gCHEOnpc.roa (hash: MEulMPfyYWYw2yW7y2gijStH0rdYBh1fIiD1yH/l4Sk=)
                          11: E9FfpYHRo1YkVzZHEm_XhRwM2hs.roa (hash: WXyd/hjgOOWQI+sc6uQlbBQ0GFQcfTNf0dRCsuvYsOQ=)
                          12: EFvtSqtQ68lw9VKB_EtKNLRvgbE.roa (hash: Rv6XheDg3i5HvlnNPLkCmYuspUhOycy6wPiDPIt5sYw=)
                          13: FO85FFxHI7Mrb0n6MpUu3rJ3wEM.roa (hash: D3AtVoNF2rj7PikgoyusHzjXeIBlzcYwGsUXr5png+I=)
                          14: HEJdIihbFGcssaI-FDUZc1Y7YvQ.roa (hash: y/Qy1GfZcaZSQkZ1S2edciL5+lshVuVUhXt+RS9xeg4=)
                          15: IBR7S1BdJZw1sWxQyQ5JJOYa2qY.roa (hash: unWs/SLTaVpa3ikmVcWMaHbvxbZbEh8tLP9P8hX79O0=)
                          16: IiQsYb7UlC1ykm13iaowhBMA5qc.roa (hash: UNIx7i51Uwea8kdqKcwhhbRC27qRDs6lXBUh9dRPe/c=)
                          17: Q4b1Nst-lgI9ICoENbB6a4cpbPA.roa (hash: 9kEo9nbGhbQEFY0sQoi7yUV3oZwV22SAI22V2BXJx7Y=)
                          18: RImNjDQRcuWrz5x1oeYnAgAV3z4.roa (hash: 0PzxSBNO2HrPEGjUFNmYPkf5xNBNyOLoKcYavy+oYR0=)
                          19: RMdb6lsnYeYvYQ630jd-81XnEdI.roa (hash: BXqwzUHDrwGf5tTUBI0egxMpWpAF6D2q7BbD25l8vyI=)
                          20: SQTGeLChd2QQwrxSouxicN3qSV8.roa (hash: iUa+wZeBniO/21ixSO7Cb6C471/AjWsIrx/uU9uaMoY=)
                          21: Y81fJoWgWovg7DEd79ICrz0gWuo.roa (hash: 9Ouac1AZGRjwugaHm2lHTMUN7KE2XNy9dvBbbaIqeQM=)
                          22: ZsQwmaC9P1dPOW9E7iR7sVlgLUQ.roa (hash: GQRPsurZ1exai7zWVFdAXvu56RaJ7u2qJbOGGTVPy2k=)
                          23: _gnfbDoKocmclE0qNHiR50xyJj0.roa (hash: XY4FcluS2d0tHsDrdbGvoXXryQUTObJSUhuh0MkmXTY=)
                          24: b2v9zuI0-E3_o9zjRPCtjRR6wp0.roa (hash: x7iW+LIPfgneHNji2l0tpKxY9+r1UNofeKeCApdsnhU=)
                          25: d0LdSOjOTB7k4B61BN6K04kgjEc.roa (hash: Jqro2IvRWlii8yoVXk/DotoPA8F0mbN0TZAVfamHJ1U=)
                          26: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: jccA5pdH1TiuT9VUTCrBqTuTbir/o8lTzf28oX7IVTk=)
                          27: dsOaWjOvc1ojbUR4_bJsY1maUo8.roa (hash: v/L57SgDtnR4rwcCmZVEesxuwop+ueLTQ+1H86XyRj4=)
                          28: jlGixnjS0U2-N2_wiUx2bZ25eeY.roa (hash: jfAlpgZ8u8PDEwdG+CQSbtq2BmlWlz5IwacknslNhZ4=)
                          29: m8QXttxFvmKj-Fr_Ymund_VIKBY.roa (hash: chTUM3mZk/A7+AxTG4VgVZ6WM5kKbQUlW9gFEbTyv7s=)
                          30: ocChZoHpZumQ0sIabJMHuMzVOB4.roa (hash: IyQkFnsPyPRge3dy0PJKLxbOkOZuhBZaA4ecbQ/YayE=)
                          31: u2YP42CcwDHaIlW0eVcEcLGTkoI.roa (hash: ntzj6ZYZSfpEvLoMsUU5nfrMzyNrTfWu3roCCE3PSrY=)
                          32: uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa (hash: hqV8FgxsrXINgskWma19v2UbCR88aZpdO7lM4BvJvGU=)
                          33: x4jQ4JBZuzerr0IP285lLAfDLdw.roa (hash: YvLJF9l30xSqixTYo0UJa2oAFjbmQ0Cqfyhtl9KD5Wk=)
                          34: ziYj5tkCeyjmn6vH88MdqNG6wBg.roa (hash: um7DhealZCFT5o2g/8K11OuGrOcFWmjViC4wYvodGpY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:8a:28:11:82:2d:a2:4e:3e:00:13:b6:34:41:8c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: May  2 23:01:00 2024 GMT
            Not After : May  3 23:01:00 2024 GMT
        Subject: CN=67f7ed03bb717dfce5d5da57200fa89e3799cccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:56:7f:e1:6d:ac:77:3f:87:7d:ea:4c:cd:
                    d8:03:cc:ba:d3:bf:0b:bc:97:99:35:18:f6:3e:6f:
                    9d:fb:f1:31:91:e0:5b:db:c2:35:c5:e9:69:06:4f:
                    0f:67:b0:db:eb:a3:ff:95:e9:f0:26:18:6e:b8:d3:
                    d2:cc:75:ce:02:81:35:dd:94:a6:61:28:30:4d:b0:
                    d6:bb:31:ed:01:cd:64:d9:67:a5:b0:bf:bd:76:c4:
                    e0:37:0b:1f:1b:0e:08:f9:3b:19:82:92:31:52:05:
                    46:7a:27:43:15:ec:46:cc:ed:3c:b9:d2:c6:c9:07:
                    fe:c2:9a:3b:6d:5b:ab:29:7b:b0:5e:f3:e6:6b:b5:
                    4f:1a:68:ae:34:65:a8:1d:b3:62:2f:d3:d9:44:4a:
                    37:c9:a8:b9:55:84:30:1b:e1:c8:20:07:58:9e:b4:
                    8e:ff:ba:b6:6a:00:9d:0a:b4:65:79:14:1b:7a:b6:
                    95:37:62:d2:65:28:26:d8:4b:d7:b0:24:39:7b:b9:
                    39:85:1e:a0:66:ba:5f:5a:0e:a2:9d:4b:15:94:a3:
                    e3:5f:50:52:fc:0f:58:15:8c:de:27:2f:2f:e0:7f:
                    87:99:03:ca:bb:7b:6e:c9:4c:e2:82:0f:95:ec:a5:
                    4b:cb:ed:25:24:0a:a9:56:b6:3c:b5:57:a6:60:88:
                    fe:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:ED:03:BB:71:7D:FC:E5:D5:DA:57:20:0F:A8:9E:37:99:CC:CD
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:98:cb:41:9c:ed:bd:8a:93:ff:0e:74:dc:cb:8d:b9:25:34:
         47:20:96:3a:a6:13:2d:01:77:5c:59:f3:5a:74:c5:11:71:7c:
         06:68:ff:5e:4f:43:24:89:c1:f0:40:22:f3:28:68:6f:68:45:
         0e:db:1b:55:39:bd:d7:a2:d4:7d:1c:3c:46:68:fa:a5:96:ac:
         b0:95:3f:de:16:1f:41:83:75:9d:26:f8:19:d1:21:2f:a5:55:
         31:f6:2d:ef:2d:0e:3d:b9:3f:0b:f4:20:3b:14:33:cd:c8:6b:
         0a:97:43:1e:00:45:1e:7d:4f:f4:43:80:64:5e:cd:22:92:fb:
         14:33:2c:9a:8d:ec:6c:2d:df:44:83:3c:ed:c7:32:12:cd:67:
         0c:d3:44:b4:6f:06:38:f9:e8:56:fe:11:ce:fe:b6:8d:d5:58:
         5b:fe:51:3a:ce:60:03:1c:fe:c8:8b:d2:39:01:d3:b5:6a:4e:
         06:13:ad:19:7c:19:3c:41:cf:d5:a2:60:1c:7c:f7:71:f5:77:
         cc:74:36:46:6a:af:21:84:7b:3f:65:fc:78:07:35:4b:d0:d6:
         0e:47:03:96:ba:29:b0:e3:ec:25:35:01:56:df:7e:48:4a:4f:
         4d:50:6a:50:f6:68:88:3d:77:2a:69:2c:b0:13:06:ad:ad:38:
         29:ff:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:23:08 2024 by rpki-client on console-ams.rpki-client.org