Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          qMKggjVtw7iwWD4BG4uScjqvl//66Qpw4t6dfjekqIo=
Subject key identifier:   51:DD:1D:43:5B:63:29:EE:F0:4E:F5:D0:70:97:AC:1C:62:70:D0:5B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018F99F3FABD06F7D2E48DD812B5DB0D08B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          0D3E
Signing time:             Tue 21 May 2024 07:00:54 +0000
Manifest this update:     Tue 21 May 2024 07:00:54 +0000
Manifest next update:     Wed 22 May 2024 07:00:54 +0000
Files and hashes:         1: 051CAfqgahSNIJ43aAQK8JnhapQ.roa (hash: M7dv4vjEV13X1ydwsxDX0i0FqoW8ruEEV79Z0bg8qB4=)
                          2: 1UuH-YmHxee4Zdc2l3IFy6bZGyA.roa (hash: KNIdFnwytmLK5suf304Rt/g8sWB93+74sVawD1uCArI=)
                          3: 1ZQgNfPCI3VE6bmC6F5-UlZBkbU.roa (hash: bRCkQNEMbQgIeIDgYRlkiIF6UB+2tTVCL9JysaCgsac=)
                          4: 2CgFmOGP717oALUaAiVYARg6t9Q.roa (hash: kP+qqT/fr+AmSGmJhlEX1wwhusi+sKSYE0FYaGsMvfo=)
                          5: 3r_7_I5EyrLtSzaQ5lcoUl_8cfo.roa (hash: gK5csNTCLCVAHvXtd8vBb/epC94IeLIsn42fgTtOjdw=)
                          6: 4WnyhfjykOj621CQlufCcZHBuCg.roa (hash: oGnM3NvhaZihCXjTzb6AD84igoQDNAjj1nD4yrt1/jE=)
                          7: 4w0OcNBMbXySdlTzmnDGQgBU9a8.roa (hash: HOVgOjXWlde60TLoL13QmDFef+tA0GiODY8tGT7zA4U=)
                          8: 5FkLY2MkCly-7mySOnuhbSNHlog.roa (hash: P6qockQ1RdAFxoCj5LLSxiagKZbK6XklXMKAFRKHwdU=)
                          9: 5XRCkC80QuxhWS7D8KqdZeFlCE4.roa (hash: P5RWfpxEdm9qreWz+zwfKLLdVMpXM1+jBLGxJuy2X+A=)
                          10: 7AcNt2n4Mpm-Ui2I1wutrc3wxq0.roa (hash: /4UYCP+3htwXErgd13lA0T8hFEOMzoJRIAGnRSc5dCk=)
                          11: 7Db53WugGAmtWMjiFbToUVtXcKk.roa (hash: KbSwvPoa0g2J9n4DdSCsAsxFK5lG0SaSrb2Lv8T0Wtk=)
                          12: 7_915I9BaMxhWVRqxi0K-riVXcs.roa (hash: EYThhlAo+o4AAJJxXtdVAzdgcRyyGEJIsdBRPQK0yBw=)
                          13: 7yOhaWvFF32W3vcomgagglxLPhs.roa (hash: x7Vj5Ftn3a7Pj4ewehU1p1hq9NAFQJaHmOnOCktkV48=)
                          14: 9wKoRGhrw4r6gRw1LKJhx2iqnfk.roa (hash: cNj3iLLPG68j8OOInCEj/DZKxl1jkvhm6J8y/yBvpF4=)
                          15: BXfVa2yvr8d4UgS6BJpOXIOYYnE.roa (hash: a0UYFro4OxTbS86nE/yM6BZCNHOXyRGvPDdROxCQln0=)
                          16: D1f3uH7gwk7D4TBJhYlVuS0iu3s.roa (hash: vRNc/Fs3kEqWDlsBb+p9HMndkwWj6OEE/XiFfzmVZyc=)
                          17: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: p9hBlyf8JGCsZEcMzRFV9557v+xV2MNx+55LOct1OZs=)
                          18: HDRlvwIO4YUjxEVsuQnLMpKNgAQ.roa (hash: b0PaPQWeqsSNNI/WQtMsoRBGdnCSXPDpd4W6V76/T/g=)
                          19: Ig4_7CucWp7qisllK9WAT65yGR8.roa (hash: BiQjnihwbkqTaoVBUlw3F/Rzk52nkK2a/znpLsbhw/0=)
                          20: IotrmkD74TRXdhwR9tUzwOHJFsw.roa (hash: 7NGddAJdcylbpiDnlfktvLJ2IUoPKS8RJoFLcU2qVuU=)
                          21: J67T_Jr41olFdA0uHKR6Uyz75Gc.roa (hash: NJ+9DNxkDtm2ctNxxpiE0bTIO3S2ZV4U9yIojqKDF3E=)
                          22: Jhg8rgrV7Dkn26YP4m241zaXoC0.roa (hash: TUJYVysFP3Ci+7zGWztzt5l3uQCYwXfGHf6rKXg0vRU=)
                          23: KZgEecQxE_N1dF_qgByTv9EkVAU.roa (hash: jseKOCPr/wdUS6C6gQocciho2H9ngvqSW9iw6yGoVSI=)
                          24: L3wCSAD8yC0tq7ZF53nRo-RtlmQ.roa (hash: hf9t4djwLI0GUJk25PpPCO5nTGJgZYlqoP5wjy3fTpQ=)
                          25: LKeErzl1NzFYUq5retAWPH6U4SA.roa (hash: Y19JBpoAcChmaLaLIQb4geSMpwyT8KwKUCxiL8MP76M=)
                          26: Mvyiwculd6CoS7xAAhl2nq2pp6c.roa (hash: 56eKDWiI6SB3+pedS9joaA90ql8sQPgiklB8odxaRJU=)
                          27: PHZIJDdbpE22dXHOEvu9J_4dzIs.roa (hash: YmogY8dOnX4HsXKogh5Pl4FGeUeZYVDbaseokMr9Wf4=)
                          28: Q-PoiEkBAFL77EgYbfNw2JO83SY.roa (hash: hjDWtvwBL5uNPTkwOprJb2MTh5HCRBO+IS81YCbWwE4=)
                          29: QcD_T-Ad--Ab7TjOQRcCf-qC5Ao.roa (hash: jCo+E/HBRVfurkydftatiL1m8P27fTEj6VniFHl2EL4=)
                          30: RKrtDJsonf_eT-X_IWBtsRe3S-A.roa (hash: TkaGTCWLvkcQK97BPrYga1BHRS8pGF27lYrNhY2SNQw=)
                          31: SeFrYTxhrtNHB3i1jD1ma55Hses.roa (hash: UZnrvl6Xc9X0NeRIvMLWBQ68YRjIjpTKrkcNWr3Vu+g=)
                          32: TRIHx_DPDYf6C4onyuUKBqifAT8.roa (hash: a2tRU8v2kYnDZYo/ALYEavrPZCfyKNmCoKCuhz/GELk=)
                          33: UeJXWIATgnFXFlNNUwXHPxq8kAU.roa (hash: q/rqUsbH91q3aaYS0eW01VXIUFBDIIHuO1tZkUbzUrw=)
                          34: UhN-unRDxQtkBaN34dLB4srWylQ.roa (hash: tMf4lxF+jQRKIX26LQP/WJS8wL+YK2sJibMcJ3TIRLk=)
                          35: W97-yB2Mbwg73ap0BnNK9GZ0CBc.roa (hash: n9zsdGXPxROsClABiuww+dgCxSrw0pJQphR5ctWazd0=)
                          36: Wv-X4NTr3nu76CNtRlIVV0yXTKY.roa (hash: XuUyzdTgVu3xCxfIHZcxirG5zPuJxEHQf7HyhhhgsyM=)
                          37: _LtgdUcu7zginvTyxzPpcACrhOk.roa (hash: iBJdEXh97VxnZ/BVnKSf9x14+j5ckuabM3tw6t5RIag=)
                          38: aRL9FoEBg7BMj05sWh1OuHWG_JA.roa (hash: xMhJwojo944cMXD8MesrnUbAOEDQp/Q7R1IenKTmrbg=)
                          39: afITdHRcGcdwKOtAWEJ8LG7qr2A.roa (hash: pt/XmGY1uC7OSCHtALrB8P9sjn1cIkuA5g1w/3lQjJk=)
                          40: d5Fm6KrDpkF1Y1t1tyzybSpWWvk.roa (hash: CTN71J8wiZZWx8T3NL49HrVZvdmjk3ZG/40s/50Pnm0=)
                          41: fD8E8A0sQR2MWdNFfcD-BAFnboI.roa (hash: Xeu0Bc+3H8ET3ldgLZi5OuvqTT9anGF5psIxrujIbHA=)
                          42: fUXtNvBdAArjI8jciJ2jNK0w7i4.roa (hash: h66wz9JK9kxTKFkdWMVSSu9K3ezgxx10iUfh96d7G+M=)
                          43: g2bqt8Auc3XOeq9M3fFJg8AXDGk.roa (hash: 4ut8boddAmaSovmvF46dOMje5EM/yTOdohYOZZl6ywk=)
                          44: i0o96JO76KUtJGvtgXG6LgLrGlA.roa (hash: kVOyOHKj7lp2Rn/Yf8Dk0G4I7SXGDwOUJ434G/ejkhU=)
                          45: ibFxBG7dXlbb6vkuxzpj8aFPW9Y.roa (hash: y/2gh96vV7NoVV/3aZvzkY+4+mY1wFJEbah0HG6tQZs=)
                          46: jlvYhHUl_tINr9DvbuRTQ2-Nn2U.roa (hash: zHfvfzIpGyZaL87/Bw/C5E1ZbrhmKTMyoed2TyPvM08=)
                          47: k-3G9NpV3nECMGbmHT7NAf3BQbk.roa (hash: NQvLASGXF6GMI5TYXCnDsPjcaTxKFJHcAabDEzWLYsk=)
                          48: oG-oEMumAlaFHJhrCOzgLx3SiP0.roa (hash: t9vaQAefmH5HV/8fi1nSg829hNR3Wfla2hADeO5C06k=)
                          49: sgqA9dDyEjB2dxnBjKekJlXaVxU.roa (hash: x7OVigOPBx0IQrekW/6kznohUbrxdLPbfH+tBzUhCyA=)
                          50: v7dy_mb7YZoaDUFEBuwa_jnPSJU.roa (hash: qMbDJJjc0Lg8e5UME+LO+TcqIgbebI00FO/ng7YkPkA=)
                          51: wRiDHiDNQ0yhxdflLsJrih8UC7Y.roa (hash: jxqdyrm/ACaS3cdbVRl+qj1oX5dEFF6jugcZUowqa8c=)
                          52: yk8QvcHQfMmoizYXS18sEr3Ur1w.roa (hash: 1wnA8zGH8L/1dd3DsK7khrrK8zzgX+7vJx5UGKfzVHI=)
                          53: zElyXVkaUDhTaEIcmfcsZoqBDjo.roa (hash: dXoNwAHTolpfSeJKnVz7tdk8PPnI889vUICT6jyT5Zg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:f3:fa:bd:06:f7:d2:e4:8d:d8:12:b5:db:0d:08:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 21 07:00:54 2024 GMT
            Not After : May 22 07:00:54 2024 GMT
        Subject: CN=51dd1d435b6329eef04ef5d07097ac1c6270d05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:52:b8:16:2c:73:4e:97:05:44:b0:79:06:
                    41:fd:11:58:41:c1:a1:bc:93:f3:7b:94:d4:5c:bc:
                    dc:6e:a7:93:cd:1b:fd:0a:2b:13:a0:58:b5:9b:2c:
                    76:e4:fd:c0:53:26:b5:3d:c4:f8:9b:52:18:a6:54:
                    12:43:51:9e:73:74:8d:f6:7e:22:36:20:21:38:1c:
                    d1:94:46:ad:c2:44:63:1d:6d:b1:0c:7d:8e:a5:a0:
                    53:10:9f:51:df:4f:ba:94:3a:fa:1d:22:d2:61:aa:
                    f6:54:30:fb:de:5f:ae:ba:83:bf:65:8c:9b:44:78:
                    1d:59:45:21:a7:c2:02:9c:3b:54:83:cd:4a:9b:2c:
                    48:93:7b:5b:44:75:00:7f:c3:0e:9e:53:b8:66:24:
                    91:2d:e5:ef:95:db:a1:e3:1f:a0:63:cd:18:90:a7:
                    20:d4:fc:29:f5:a0:a8:56:c7:59:2a:b4:14:d3:d1:
                    4f:15:bb:1f:19:3a:45:30:b4:bf:62:11:b1:b1:19:
                    93:e8:28:8a:1c:72:0d:fe:c0:83:20:1e:02:2d:42:
                    c1:3f:a3:8f:da:e5:34:05:5a:29:ff:c0:57:ae:f0:
                    3c:15:23:38:b5:83:ac:28:81:eb:6d:49:0d:e3:78:
                    c2:66:73:1e:5f:de:4c:11:d1:52:7d:12:4c:ba:1a:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DD:1D:43:5B:63:29:EE:F0:4E:F5:D0:70:97:AC:1C:62:70:D0:5B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:bc:c1:43:cd:b6:bd:01:a9:67:93:a7:3f:b3:db:d6:0a:
         cc:67:14:d6:99:de:88:b7:79:a8:42:f4:c3:4e:7d:ee:5b:97:
         8b:ca:97:40:e4:97:77:0a:52:b7:3d:47:7d:c3:4c:06:c3:44:
         73:26:6b:53:8f:6a:46:ba:56:20:1d:99:d1:b4:ff:98:81:62:
         0e:8e:5e:04:a8:01:80:d2:2c:04:22:78:58:af:a1:60:cc:7a:
         df:e6:88:ce:fe:97:ed:f2:de:5d:02:1e:48:80:ee:1f:23:b2:
         1e:89:a1:92:49:93:10:4b:cd:66:60:c5:ac:33:19:ac:bf:31:
         ab:2b:fd:19:8e:54:49:48:5b:5b:64:16:82:5a:4e:3c:d4:35:
         9d:3d:81:cb:9a:4f:71:c5:49:39:54:ba:cd:0c:da:4a:9c:8e:
         de:60:0c:6e:82:29:de:eb:a1:63:ac:33:0c:b7:9c:8f:7a:18:
         c3:eb:f8:04:38:cc:06:bc:f9:e2:58:8f:eb:59:6e:6f:e4:75:
         80:99:67:4c:1c:5a:d9:5f:29:a5:21:11:b7:93:98:9f:74:05:
         0c:e1:77:dc:c5:66:c5:59:ae:41:f2:35:e5:12:bb:81:0f:10:
         5c:be:67:ec:d0:34:8b:91:28:84:6c:9e:83:cf:29:a8:25:a2:
         05:fb:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----