Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          dlrHMrnyMKgZDu8Fp4xhBpoMMmfF6P/A/4FySXZEkkg=
Subject key identifier:   A3:E9:26:08:94:4B:FE:5C:BE:2E:33:97:34:F2:82:EE:42:9F:6D:26
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       018F8DEF2BDDB699238D198D56CAEA390AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          0EDB
Signing time:             Sat 18 May 2024 23:00:12 +0000
Manifest this update:     Sat 18 May 2024 23:00:12 +0000
Manifest next update:     Sun 19 May 2024 23:00:12 +0000
Files and hashes:         1: 0R3HKPvaLGo5XwxWtv3pb7eMF8k.roa (hash: swWV//Z9e4bsvEizHUmsftfoYcEaDm9hxuX8YLMdbTw=)
                          2: 0RqWxe1Aky2xKh77aAf93lbLo_o.roa (hash: v11ZXAHzlstSf/1fofTn6uP4aK3wB0AkvNvJkKjo0lM=)
                          3: 1-nke-fez5zrZwhNSQ5KOwL1AbQ8.roa (hash: 3FvDtr6anC8P8oZykYNoHJF5fbrylCSBu4bEHVSDKAc=)
                          4: 6rndazStRhujioBo258P1qoEokI.roa (hash: 6wE2CNetUvC2npq5P1oHVbWJr1WIckeukGLMJrAehUI=)
                          5: 8AuhcfEEKRYItTQR2Jzn24jpH0Q.roa (hash: UpDWF5Jm47svdTCLuOJWo29C9tGMJFSEL2+I7wUYfO0=)
                          6: 9UrruotFS7qOEkYxt1B0lLUOzK0.roa (hash: KyzGLXsoGQnJ/wQzvhnn8rIJTHO/Iw4q8l+4NEEYGcs=)
                          7: GgG7mhsdhXiKLzMaykhJkKr7XQc.roa (hash: ThHO0GR2tTK56Cek+hOZF3ZgwKtV1BPggarDdsG/xTI=)
                          8: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: mhibxes/UroInh8o/kiQDUVYs5F5IFAiwbr8A74RTag=)
                          9: LlQ3T9I_EgsQeFFLw2Yh5YAdyOc.roa (hash: tA8jPai58KlNBdFWmiZy7u4vKi7VBfLlMWaP1G9yfAo=)
                          10: Mcr2grpdZ6ceJcF7dJAFb5qY09c.roa (hash: qz8niuYFBYG7dAq3MamzEb9NmZfRLOCRyXOmOfohvVI=)
                          11: R0tAQ9KjIKBc2QiDyFzcE7i5K0w.roa (hash: SVbesCqfYBucQwRnkPBALlRK2xgIi9KhpTB7E9x5VJU=)
                          12: X8i2WUIHeMMAMXhte2eivaCZS6A.roa (hash: CXcpnLAbgNQRrOYKxiexYs2FXHaaspTSzPfgRFKe2VY=)
                          13: Y577KKfqIsp7QDdMBl2F4MY1-G4.roa (hash: 0cmOffiRW3TLrgkplG0Ai0LBg6YXtDmTeyCVkJpysTE=)
                          14: cSepb9T6Lng0m6WYRtjgXpO0YaU.roa (hash: UyEm90Xriuqzt4t95YgibwEyy/yb5W/6O9YIwObAhU0=)
                          15: k7OLCLcGWuJVRPjnSOQ6FqAtJvw.roa (hash: JcPegvpqcZVXptVrRb/xo3V+E78ZSovEhfR1dssN010=)
                          16: lRKEJCWf1G-9fiu8MNvh_SrxEhU.roa (hash: cwPKS0Zi5ojw2cm1hJWLbEhJSDfhkK6HWI0wSMrwbfs=)
                          17: nUmuqQtCmwZJovIT6p8aelgI-S0.roa (hash: oREHW4GSEh6DMeYwrQihMuc4QtcFuWqaZQDWYDWgOls=)
                          18: rCaJXWTXMHeftsm0uha6bLyatyw.roa (hash: fBst+utr/pa+HIrl84EdnssR/80byA9TrB3JxM7TKkY=)
                          19: tOzvSomg2VWv1IjQAXLRHrIVAcI.roa (hash: Oap7WaQ2Oa7PXrx0CSPBJeLX/S5JuZsPryrc+Vh8dc0=)
                          20: vgIt_iq9tk8qxfV4W9y72m3p1HU.roa (hash: 7WFvQ6efwirSO3JkbFiAbpThAv21zzWe2sNIe1tPU6w=)
                          21: wblRrkdqz0BMoHYQYXIoLYR3D9c.roa (hash: mQNcivvfX1lIGQUZpX1rBGtJeKuQbVQmWKE71aDxB4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:2b:dd:b6:99:23:8d:19:8d:56:ca:ea:39:0a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: May 18 23:00:12 2024 GMT
            Not After : May 19 23:00:12 2024 GMT
        Subject: CN=a3e92608944bfe5cbe2e339734f282ee429f6d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4a:55:8d:b5:9b:83:e1:38:17:63:86:f4:79:
                    7e:5b:11:38:8c:9a:a2:d9:d8:35:15:af:2c:3e:cb:
                    46:37:70:af:b2:ec:d2:2c:f7:0c:1a:9c:ee:77:69:
                    74:df:d4:47:24:c6:6b:db:d5:fc:06:4a:ac:63:44:
                    0e:6e:4c:5a:64:42:82:96:c8:47:e3:66:4e:0e:67:
                    cd:67:68:ed:ef:ac:e3:5b:78:34:12:54:2e:16:5d:
                    db:e5:cb:79:4a:c3:ae:0f:df:98:9a:60:31:08:2e:
                    b0:2d:99:1e:f5:83:5c:a3:cb:04:30:2f:75:ad:20:
                    65:d1:e9:23:cb:48:52:18:1a:c6:63:09:14:a1:c1:
                    58:dd:55:f8:46:4f:ec:41:1d:16:42:e4:a4:d0:f8:
                    47:37:d0:c6:5e:3f:3a:e9:24:b8:30:d9:da:db:60:
                    d6:67:7c:2e:01:d3:86:b6:3c:ee:45:ae:55:cf:f5:
                    c8:95:db:3d:2c:ff:ad:c8:e7:27:c0:07:6e:75:7e:
                    35:13:5d:8d:f0:97:cf:a9:73:55:8d:bf:89:c7:b5:
                    bb:83:ff:f8:32:38:ca:cd:3c:bb:cb:3d:b2:dc:bf:
                    e6:77:a1:7e:68:f9:31:3a:93:55:be:c7:69:eb:32:
                    3d:76:3f:fb:2f:bc:2e:ec:8f:b1:65:9e:93:7d:a0:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:26:08:94:4B:FE:5C:BE:2E:33:97:34:F2:82:EE:42:9F:6D:26
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:b5:f6:a8:96:68:3d:c4:e5:23:e9:ef:1c:17:6b:27:b2:
         dd:00:a6:ba:7f:ca:36:3f:4a:6a:8c:57:59:6a:0d:c3:d4:54:
         11:e5:62:1e:18:5c:a1:cc:cf:60:0f:ca:2b:98:67:6c:20:bb:
         8f:5d:69:4d:57:b4:d3:50:2e:19:c4:5a:21:53:f7:f4:ee:12:
         b4:97:88:08:21:2c:fb:55:ec:8d:01:52:f1:5e:02:2a:68:54:
         b7:51:49:e8:21:05:b5:66:75:f5:5c:7f:a5:0b:d8:85:9c:2f:
         4c:ac:56:21:aa:f9:e6:37:d6:f6:e2:5f:fe:78:88:ca:ea:0d:
         87:96:1f:c5:60:da:bb:11:e9:58:82:17:1f:22:d2:8b:d1:27:
         61:9d:8c:64:5d:6f:d6:26:42:c5:49:57:a2:c3:9a:9d:64:48:
         48:f1:fd:b4:05:3f:26:73:38:e9:56:97:25:33:24:88:28:42:
         2c:06:88:a2:e8:84:93:a7:c1:74:8d:9a:82:c0:12:9c:b3:6a:
         68:39:bc:e0:5f:ef:a8:33:4f:18:ab:e6:33:d5:23:ad:46:d7:
         1e:46:4e:09:02:ba:20:60:0a:ad:ec:f3:3b:30:0b:dd:e2:91:
         a4:64:17:fc:d1:5a:8f:be:4d:a5:01:9f:6a:1f:c9:e1:b2:9b:
         8d:98:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:44:42 2024 by rpki-client on console-ams.rpki-client.org