Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
File:                     KsPaobFIUPLmHFkrIZGRWl5lpHg.mft (raw, json)
Hash identifier:          JRrhNOnRaxWlyFrodeRpZhoSp/OiuKFnNnVldPHEhts=
Subject key identifier:   46:6D:3D:49:4E:B0:6B:49:55:8B:1B:59:70:31:A1:E2:A4:DE:58:87
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       0193512BA7B7968190AEDB2AD9B5BF273329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
Manifest number:          1532
Signing time:             Fri 22 Nov 2024 00:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:35 +0000
Files and hashes:         1: 0FKhVhAow14sa58JpowTK-O3YXQ.roa (hash: 1u/PqmPBZSvmpSebdw+SZZQjCq9rbAcdlXCt4tWqalg=)
                          2: 1-dvKt40ll1cIp1trtY_JrFckVtE.roa (hash: Uzmw6nPvRdM8va26r7y7HisL6qg94iXQNxzVrMu2HSs=)
                          3: 15Z71_QctdA8FJ6IAQca-xi6zUA.roa (hash: 0sqaxekOPZUg/MJHno/rvF5Vmpm9RcBqR2qVbO5VQ8I=)
                          4: 1EYYhC1YAcY-gOKqNoMuegsg82s.roa (hash: /ktSa3X/9fGyBK0GzLGTbzCCeI6s9kphP7KRH6tFcpA=)
                          5: 1zLZHJEezHH7N6rNOG6oWU5wwWI.roa (hash: DWBbaDTbMXhe529fjUplfw7TUSG/7NGnaxBaUiylBa8=)
                          6: 3rq-Z-bG_yL5D3y9IUrKbsyzuz0.roa (hash: SatCsKYgmw8h5NBfpZH83IULi0d2QVpcAt7GuVGni8c=)
                          7: 6cgHinPEp1s-Npb99WEMPfgaZE8.roa (hash: +4Hpxpo93i5MnmFme2KQN5rJYW0sPi1gB0/GTnv08Dk=)
                          8: BVBQIXEajc59H-aOalkOI6tCRvk.roa (hash: NfZP3p418w62gnkyUn/m/cQXZViYvytPq5eqjeMxzic=)
                          9: E4E8FaS6fp3VOQreF5OqkNravjA.roa (hash: /UP7hJtKBKY6+tLd9FDz7UgYbHwUYFPDjz8khlXoV9I=)
                          10: Eqmtue-M9THkXshGZ8ImOYtg_uE.roa (hash: k61PL/C2YFzEUsSov0nswKXu2SjpSlYJ9udNp+Qx+eM=)
                          11: FHu848aJQ4c7A6t4HjDwijti_5Q.roa (hash: YHWn1qPt5H/13LhL681L8Xl4qxGHgPZVPx1pEYsFx08=)
                          12: H3Qth0cf7gR81WfdxKbXnnxjI0w.roa (hash: ZRxi0m0082wOG0W6QJ/cadztjnoHokMJzOLacuBOqlQ=)
                          13: JDyfPjuu8O21XuPbVBlEgME0ovs.roa (hash: JVnJOUEz0c15IMtFNsCdpIT356uFvFJeqovZJKicjvA=)
                          14: JmKqTrVrJjssPKmw4hDMJTr72YI.roa (hash: HFbXc9r8HILPmA338MuiUlwg47hn6ftCy+NHSVW6mzU=)
                          15: K0IxHICNOe7bKSQhVHGjdsBvy5E.roa (hash: zW7/NLDRCzcLHtQOD07ItB27kGa0KjD85xlVuJdpShM=)
                          16: KYmbfN0nXJ3lsMe5CzqorriNptU.roa (hash: 1ws1csJQ+EZyj7EGYPKTGwNtesx2Uk83lzzEG2BvIgw=)
                          17: KsPaobFIUPLmHFkrIZGRWl5lpHg.crl (hash: SBuKi8UPRbVid9SYXLzeYzu21glriGQT/572ioFNIPQ=)
                          18: Mg73Jgr4vsOmNjQRMNrlgFhlkgU.roa (hash: ESNX9iTiyNTxuyg88/CA30/c7Po9blaV9ejWIodjKSs=)
                          19: MtqbBpOPOT8b4ddIscdbLN8y9CQ.roa (hash: EFFUrg9Te/mqFGRL+OhivuQIXVFzziiG7GL7AW/Y8Tw=)
                          20: OL-8O7wBJfCOyBQwEWnHoZnAub0.roa (hash: dbGnquqE7wlbUOXsaRgCiqCsbsbOy3bwwtK2kGwTdJ8=)
                          21: PgzpZiCOnztbEiXtzZcuWJvcUuI.roa (hash: wYJr/wbr1Q5kXyKlLogtXPN8ZIJYTLWLnqoUigDoyX4=)
                          22: QhE2phiG-7gCrqRF1i_PGVkj7Q4.roa (hash: xoG3YfzVh03sGcJcOUVhqbIULwMsiC/PT252U+Jy7zU=)
                          23: RUCZCCJ6SA2kVf11N_rIhN-E82w.roa (hash: ZlDIyq9sS+xRGEdQhcQoz/ChPf3UE5OoHMGzaAgnlVk=)
                          24: RobpS4S7Dbcnvc3CA2vSfY_NdO0.roa (hash: SqEdHm0Zs5FXOBuwhZewX+obuo5uwfq9X4801ZhrI6I=)
                          25: RtISySXRlKud111IXRIbuQ4e2zw.roa (hash: Hfvz7w/fjJtnj1PBcXgTwIp4rD+wLeBluh0BoefHV9o=)
                          26: Sz_nRSwcvvnxGaU-s2z8ziuiY1I.roa (hash: 7Slxnvvj7pb5wbJ4unfy+kM8eQaEgPLoJluqhkCnB8s=)
                          27: T3Pi1MlSfK0VXGGV2FkAaWxKF2A.roa (hash: 13t2156ZnJXZ6rujQzQ4XVSiSzfINzUXZTgtiRIzK3c=)
                          28: TCC2cO8NAfEE3ZyezePSlvhcDHc.roa (hash: ccyxzb7AkXkdPOxFm8m73FoPq3sCe4leXxrKRd8C6t8=)
                          29: TTlv_4G1jpBSWA43275BPZaNzXk.roa (hash: Uzor0uouOCzhTu0QL3WZU17tjZL3h7miGxlQrKxf/4E=)
                          30: UPLzG0TBw-rX7HWjZDA6-gcxATg.roa (hash: sUaTYq3YOAzI0iP3OGsMicy+8IF9hEdyTbaaDYtCfis=)
                          31: UtakY68bOQlmdjM4wSTyRJfLlx4.roa (hash: wwxjctg8iwtb5OSSBnvqLR4rfoDj10d9ahERA7y9yLg=)
                          32: WMbSM4FaheLpF2EtBwn0CLZDsV8.roa (hash: XPVUYfHebgV5SqO5f/qhOV6aYtXZRvCHc/CXg+Q0QJo=)
                          33: WiysFDv-uyPnPV8K3RVTHcqkr3c.roa (hash: K47iyiXJgYcraMQXpYqcNCSBCkIlcIFDDrRKfZd1q9o=)
                          34: WzD6wwxp9KsF3z8cupOwnHuyDC0.roa (hash: YLmBA19iudLZo8dlvPlp3psQuBsYwtSpKpVBgbO9OzI=)
                          35: Y9EIHhMPnKXuif-FS0PtQidKeEo.roa (hash: YGQSklfQLJbCAQgOe4Zu7uxSfRcK00D3oGqljpllN/0=)
                          36: _zXSI0ol7X85qPvho_BfxdlQdcw.roa (hash: wTi8offYU+6JCuoCWBP9IF2/Fw1KFlnZ7zqpZ2FBTTM=)
                          37: avXlMA1z60hG950zPS7u_9owxDg.roa (hash: 1M6zSLUHHbu08ab/Tz8EoeS/uBvTxOxe8ZxiZuqCrCI=)
                          38: cWz3AwryQSCnBhoqKeNBT6zbhiI.roa (hash: ow8h1LzY4J5LKDjFPGsmOsRHgniIqsIZESgBSMj2z0E=)
                          39: chtSFJ7kPvIV9tFGJRtLXasLERQ.roa (hash: qMJZm+41eV9sHi2EPEUwCzpXMs9xfJZVh3fGJVsMBls=)
                          40: dujHmv0L92g0R_ZKa-ZsKJGA8g4.roa (hash: mKrUY7lsbPXD4ibei9Px1eojbzHaQiZQdw2oahoJ7ys=)
                          41: eYlapWnUhSg9-Qxqh9_ljL6aCoU.roa (hash: IW6WMrPrr0g6EoZrxkkj3Jd256jzfwa8vHozP6mCZC8=)
                          42: gbPG2km3pofjP5PAcCU3CR_Tn5Y.roa (hash: FGPdHIjRG7xzl1Muhoaj4DORss0UUUUOXDAMNaUZpOI=)
                          43: ghX1ypJwA1Xf35Hr15tNF4xm7-w.roa (hash: Ax+DGp6eAYETfoLT2Xl0+P8H+a15nTssEKJ/YsTuTHo=)
                          44: iZJCyADvsiWXuFZx5oSXg7n-qmk.roa (hash: 3aX1LAu6TP4WjUbtoIvqNHLI1NNmP2/I2lYKWgYe0TU=)
                          45: iqMXOYd-T5repqniYyepQU3FOhE.roa (hash: stdhFmijk6NZ+dERlM4PcifFJXfLABQUeBx03S8mM8o=)
                          46: mWk29FwNr2HY0a-u2RXpcr1jBcw.roa (hash: GviD9IhYcWUWbTWYS0Iwuuge1RXedqmz4V6Z1MImYek=)
                          47: pIbBqbiQDTBynabOdmuhuSOUeVM.roa (hash: kwIH3zbm4+1/kn1A1NazKNUJ325KMrjiy4Jbty/G6b8=)
                          48: pMNjzfsOU1ZjncErr4l9SrBLu-s.roa (hash: Y8RuUSg6pbhRxcsHTbMEoVGqY7iWXPAZEKQRKMp8/+c=)
                          49: r4Eaj--rFMB9wD8kdGoigBut7Bw.roa (hash: KCqy8YkMTkhA91IbnEh3vbgp23oF7sxxnYRptoSOEAM=)
                          50: r6tKbat-GCPmxEVKD-lQsCJmkRg.roa (hash: EnNWDEGB56oOsYhuCjlZzxCnJHfCRj7E/Ihb756Y/js=)
                          51: rT0S07sUuh3FTk3l9w_9QxVxnT4.roa (hash: NVrojadN7eFjH8x0CRwe/41x0R7JvroHU158O1ALjpA=)
                          52: sbpH_k3HU2nFTejfY5gmv-qAXt4.roa (hash: M0Cl2slCnZ5YXg8pR1/cOyxD+3LRpJhXJTOoKzzVR+U=)
                          53: tNwdP70jzlTV9xZoFigwMfc-60Q.roa (hash: 2MhvZ1Sw2mDQdv6NCYer9vtcwq+Si1VNGQZwXyAUc0w=)
                          54: v3iLdDVFlVLK4zkQDEULWLPb2mw.roa (hash: 55LxVJKD+qUdYUz5nbxwoPwowaYGU/ldvPsjKtXA2vs=)
                          55: wn_xahVVNbMLVDvY68SSeFsrLqo.roa (hash: G584Y0mUHbZj6/+vHrTgpOrZdLRzEq/LUBKoSCzAuuE=)
                          56: xCoQoW-n5NoTLRQ0YJcZEWlym4U.roa (hash: uNXcmfV/3xoKULMHzm4MJKtxEYv5gCQBpUaQqAE6gf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:a7:b7:96:81:90:ae:db:2a:d9:b5:bf:27:33:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Nov 22 00:00:35 2024 GMT
            Not After : Nov 23 00:00:35 2024 GMT
        Subject: CN=466d3d494eb06b49558b1b597031a1e2a4de5887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:33:ee:c4:9a:65:ed:82:8f:56:57:29:e0:
                    f6:24:f7:c5:e1:6c:f5:a1:43:70:da:3a:fa:4d:1d:
                    3f:d6:30:b2:1a:35:9a:54:12:b8:6b:8d:05:76:15:
                    c7:f9:a9:3c:9a:65:15:fd:e8:2a:1c:24:12:83:f7:
                    e5:5f:d9:c5:71:13:1f:db:17:65:a5:3b:48:85:26:
                    14:4a:d5:9f:ca:26:54:35:4f:40:1f:0d:08:ec:cf:
                    57:5f:f6:3d:89:d9:1a:85:4b:0b:2b:11:6e:8d:83:
                    1c:71:c3:01:a8:28:ee:b2:c0:24:64:db:b1:17:e3:
                    ee:03:90:c0:8a:fa:3f:3f:0f:ee:7d:a0:e5:fa:35:
                    8c:c2:a6:2c:b6:ab:75:80:dc:0f:e5:5a:59:7c:cc:
                    17:e8:4f:22:c7:a8:bc:89:91:b5:9b:57:4b:36:63:
                    29:6a:ad:d0:00:9c:9c:93:77:2d:27:84:68:78:f8:
                    1e:df:f9:67:b3:e9:67:0f:ee:20:d0:2a:9f:97:04:
                    87:22:50:25:d8:55:24:20:47:c5:d5:f7:ca:d0:d2:
                    1b:a2:cd:64:93:14:c8:f0:a6:73:dc:86:04:97:09:
                    bc:5c:d2:aa:57:65:82:70:b3:01:de:9b:16:d8:97:
                    9b:4b:dd:8e:93:25:e8:a0:fe:d7:2c:64:6c:3f:3a:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6D:3D:49:4E:B0:6B:49:55:8B:1B:59:70:31:A1:E2:A4:DE:58:87
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:bc:fa:32:88:2f:33:c8:17:cb:b1:59:02:d5:30:96:81:
         3e:3f:c5:44:3c:8c:7f:7c:6e:d3:7d:bf:09:2f:c1:08:e8:69:
         9a:f4:f4:2d:73:fc:62:e4:8f:a8:b7:f3:c2:7c:93:5b:ca:ef:
         f6:50:06:ea:f5:a4:a0:a3:b2:b3:d1:2f:6b:f1:88:1c:c0:e4:
         5b:6b:44:54:80:8e:7f:a1:d8:78:19:f6:15:ad:d4:0d:54:aa:
         23:4d:35:74:d4:72:76:a9:72:28:c5:d8:9b:95:ad:32:4e:26:
         a8:18:eb:9a:63:77:4d:04:d8:40:15:c7:9d:ea:d3:d0:18:6f:
         99:7d:77:7f:2d:a7:4a:c0:f2:fe:8b:33:d8:52:31:84:10:2c:
         01:f6:02:8f:62:31:08:d5:15:52:85:ea:d0:4f:37:ed:bb:75:
         8c:01:1c:b5:fc:2e:fa:60:14:ee:93:c9:06:5c:a1:aa:76:d8:
         d1:87:08:76:93:6b:91:83:7d:b6:c8:ef:33:3d:cf:ae:33:ff:
         3b:96:2e:1e:c5:dc:a6:ae:0f:b5:45:84:e5:c6:59:be:e9:d0:
         b5:f7:3b:36:96:4d:35:2b:af:ae:8c:b5:23:f4:51:54:c5:a5:
         c3:3f:65:d8:bc:cf:c1:36:0a:6b:a8:fb:11:7d:06:a2:d6:27:
         22:06:63:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK6e3loGQrtsq2bW/JzMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQxMTIyMDAwMDM1WhcNMjQxMTIzMDAwMDM1WjAzMTEwLwYDVQQD
Eyg0NjZkM2Q0OTRlYjA2YjQ5NTU4YjFiNTk3MDMxYTFlMmE0ZGU1ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWkz7sSaZe2Cj1ZXKeD2JPfF4Wz1
oUNw2jr6TR0/1jCyGjWaVBK4a40FdhXH+ak8mmUV/egqHCQSg/flX9nFcRMf2xdl
pTtIhSYUStWfyiZUNU9AHw0I7M9XX/Y9idkahUsLKxFujYMcccMBqCjussAkZNux
F+PuA5DAivo/Pw/ufaDl+jWMwqYstqt1gNwP5VpZfMwX6E8ix6i8iZG1m1dLNmMp
aq3QAJyck3ctJ4RoePge3/lns+lnD+4g0CqflwSHIlAl2FUkIEfF1ffK0NIbos1k
kxTI8KZz3IYElwm8XNKqV2WCcLMB3psW2JebS92OkyXooP7XLGRsPzo9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZtPUlOsGtJVYsbWXAxoeKk3liHMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxC8+jKI
LzPIF8uxWQLVMJaBPj/FRDyMf3xu032/CS/BCOhpmvT0LXP8YuSPqLfzwnyTW8rv
9lAG6vWkoKOys9Eva/GIHMDkW2tEVICOf6HYeBn2Fa3UDVSqI001dNRydqlyKMXY
m5WtMk4mqBjrmmN3TQTYQBXHnerT0BhvmX13fy2nSsDy/osz2FIxhBAsAfYCj2Ix
CNUVUoXq0E837bt1jAEctfwu+mAU7pPJBlyhqnbY0YcIdpNrkYN9tsjvMz3PrjP/
O5YuHsXcpq4PtUWE5cZZvunQtfc7NpZNNSuvroy1I/RRVMWlwz9l2LzPwTYKa6j7
EX0GotYnIgZjdQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:15:21 2024 by rpki-client on console-ams.rpki-client.org