Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          DEIdtJCsuNaa5L0Lj/6zBqm4/EjAkUD4S5qbhqD++TI=
Subject key identifier:   15:0F:CA:E3:D1:63:9C:24:C3:A2:F0:46:C0:0F:A4:EB:D7:3B:9C:8B
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       018F83A262B62013C4EF92A6156EF8C0D073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0AE4
Signing time:             Thu 16 May 2024 23:00:08 +0000
Manifest this update:     Thu 16 May 2024 23:00:08 +0000
Manifest next update:     Fri 17 May 2024 23:00:08 +0000
Files and hashes:         1: 0FdlcGaUuRcf2thRcezoBxnSRd0.roa (hash: VKuLct5pGWdsop70amtrbvmvPJUQ8yIua68ahie6XrQ=)
                          2: 44YSwqdsyKtc7GGvYcJFjcCvPpc.roa (hash: g3g30tilO4oE3hC+X7dWr6L8Ary9Ap2/UojHBsxaPKE=)
                          3: 6Ky4RV5w2tCqS7mL3IK_hSRftmI.roa (hash: lBvBMkToSd/ygg8NEqn5bbszaHNkHJ2Go73mY004q9I=)
                          4: G1KtCem18xNVnjqg_i4gYFFnH08.roa (hash: or489x/aFiy9otvfjwnsIAdgsCfe9WYAKyIX4ntgn0o=)
                          5: IFEpMz2wo8FeMCVoBBODfosRFi4.roa (hash: p4vH79l/bBNU46l20JOOwJp8TbJhzDYQOfY0mfmiXgQ=)
                          6: JeN89iha8HnUuEoh21VtDyxOxhI.roa (hash: VKvJdXLNYbUTU4g8yZpcGLOmJ68OgB3qtjRlrikTFW0=)
                          7: NuGhRYAi8rDkFPRRxAFFor1Dxsk.roa (hash: smpepN8sAdz0WvaBQGqb/sfPxCOqcAlIAmm8DVkgz5A=)
                          8: VCmlh7pajkVWkmG_KKbb4mthI5o.roa (hash: 2tp565Iy5ZrHFLLImMFYFu/4A+RetFW6JZJqU4czAhE=)
                          9: XhJnyUwt5f1WjNJBWSLofkpq5J8.roa (hash: o25KFU+oM+St2fQ6mrAGhl/aPRRikrCrzPE9WUJSwrI=)
                          10: XwB_Ca9nI1saYwg65fPD69WCzno.roa (hash: ymp8JzYgoyrmrFp+3lX4SuhWOApOPWhMtBuvq8EoHgc=)
                          11: Zqp5x2-_Sqz4GRqykaz5aiXpkaM.roa (hash: BmUZsVo6sVMqmntpxTmAVMPHIatz2tK57/mG2Oxn5uE=)
                          12: _z1NWtZIMCVFeHm4Mw9QXo0MDuM.roa (hash: m7ypxbyhmwDoexCQsfdbi9jobo86WItA2+Dwhf9R68s=)
                          13: aryV4T6Jo-ABn3ueXOoki0uxGsk.roa (hash: oqXmcAqy7nfbn66n3AnIwIzEyKolV9tHJHBeEo99pRE=)
                          14: dIb4UKpTWpto9-sXYDN-JTVQRXg.roa (hash: +FL+EGgrDGrTQHmwYOlNU7oD8GKfHqxw1UYkYVHXefE=)
                          15: lGTKpj7YoUCGXF2Us2GxX8Ayr1s.roa (hash: XBukNQ76wTgpdaPf5u9zq34gNnhL9GKOolHXf5GIv0w=)
                          16: m6twPfVwWlVTaKMoyvsJk7Mi2t0.roa (hash: lmaStjkS7uKC8MGMePSNXbNGumjkrJOQvos9wHQk1GI=)
                          17: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: PKDPRicENg0cIGQdBSqnsjqslIKsa1izshQDH0EOkFU=)
                          18: ynWzSQjCcrHJR086z85tz57VMtc.roa (hash: bFiiVvqCpVrTVNAZJuV4x217m7y0NqVdcP5LenUwvrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:a2:62:b6:20:13:c4:ef:92:a6:15:6e:f8:c0:d0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: May 16 23:00:08 2024 GMT
            Not After : May 17 23:00:08 2024 GMT
        Subject: CN=150fcae3d1639c24c3a2f046c00fa4ebd73b9c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:34:99:bb:9e:2b:42:50:a0:ec:2a:b2:61:
                    30:36:6e:27:3f:74:ed:b6:14:e2:bc:90:a7:14:fe:
                    af:e3:f0:91:f8:17:ce:a7:fb:5f:93:1b:31:cc:05:
                    4f:43:50:a4:7f:e2:37:38:a4:0f:01:e2:23:7c:0c:
                    b3:1e:92:3b:57:c4:45:7d:af:8f:cb:79:f6:4a:79:
                    cf:93:a4:78:d7:fc:bc:2d:3d:ad:cd:fa:29:96:50:
                    30:a1:91:6c:90:ae:fb:0a:f2:d6:9a:38:ee:03:99:
                    a5:b9:bc:ac:e3:83:30:71:55:91:7a:06:f6:2c:80:
                    9d:7c:e3:fa:22:7b:71:f4:4e:38:e5:58:5a:d9:6b:
                    a1:7a:e8:45:03:27:ec:34:ff:4e:d1:12:77:c2:df:
                    63:f9:51:03:4d:3b:13:34:d4:e8:56:54:62:ad:8c:
                    a0:11:62:28:91:47:47:92:46:81:59:48:f6:39:5b:
                    97:d0:68:45:4d:9c:4b:7e:c0:b5:f8:88:77:72:64:
                    50:4f:e1:8b:71:23:1a:52:9f:0e:92:bb:e9:47:64:
                    ea:35:07:0d:d2:d7:21:44:7d:8f:0a:18:40:dd:9f:
                    03:6c:76:82:d8:fd:a6:6f:2c:50:99:80:b1:dd:3a:
                    2d:1e:f1:ef:7d:28:71:8f:f6:45:91:b0:fb:a0:eb:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0F:CA:E3:D1:63:9C:24:C3:A2:F0:46:C0:0F:A4:EB:D7:3B:9C:8B
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:5b:ff:69:52:73:de:9a:a4:cc:24:e0:93:36:fc:e3:cf:
         7d:06:3a:27:7e:c8:f8:48:06:cc:47:1b:ed:42:74:5a:07:e0:
         60:87:9a:aa:10:4d:5b:b2:3f:80:29:5b:32:17:52:23:58:33:
         49:f4:f5:86:51:4f:28:23:05:b0:83:c8:3b:98:08:66:60:b6:
         8f:62:da:da:7d:c3:7b:c0:74:34:9b:30:16:b6:ab:d5:a3:05:
         17:f3:e6:9d:19:b3:4d:89:f8:07:ad:e5:5a:ed:c6:c0:20:09:
         1a:b3:b7:b1:71:78:0f:32:49:47:d3:d6:46:ef:e3:df:cf:28:
         c7:5e:8f:3a:f3:a6:8f:2c:f0:47:fb:3e:77:39:83:68:f9:41:
         00:38:01:bc:f3:71:9d:cc:44:a6:04:0d:5a:c5:57:ed:0f:f1:
         76:c3:7e:77:7c:cc:10:a8:4b:72:0c:39:ca:3f:d1:a9:73:bb:
         24:43:52:49:a7:55:03:9b:f1:c0:42:9d:e2:7a:3d:1b:af:a5:
         a9:7d:a0:1d:1a:13:6f:22:a4:71:87:13:28:0d:9a:26:08:10:
         c4:a0:1a:44:d6:97:91:5e:5e:4b:58:19:8f:43:a5:a1:ea:89:
         d7:3c:77:58:19:f8:81:76:22:c7:b5:7e:87:2b:7e:2d:97:a6:
         b6:ba:2d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DomK2IBPE75KmFW74wNBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjQwNTE2MjMwMDA4WhcNMjQwNTE3MjMwMDA4WjAzMTEwLwYDVQQD
EygxNTBmY2FlM2QxNjM5YzI0YzNhMmYwNDZjMDBmYTRlYmQ3M2I5YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUQ0mbueK0JQoOwqsmEwNm4nP3Tt
thTivJCnFP6v4/CR+BfOp/tfkxsxzAVPQ1Ckf+I3OKQPAeIjfAyzHpI7V8RFfa+P
y3n2SnnPk6R41/y8LT2tzfopllAwoZFskK77CvLWmjjuA5mlubys44MwcVWRegb2
LICdfOP6Intx9E445Vha2WuheuhFAyfsNP9O0RJ3wt9j+VEDTTsTNNToVlRirYyg
EWIokUdHkkaBWUj2OVuX0GhFTZxLfsC1+Ih3cmRQT+GLcSMaUp8OkrvpR2TqNQcN
0tchRH2PChhA3Z8DbHaC2P2mbyxQmYCx3TotHvHvfShxj/ZFkbD7oOtUyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUPyuPRY5wkw6LwRsAPpOvXO5yLMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvxb/2lS
c96apMwk4JM2/OPPfQY6J37I+EgGzEcb7UJ0WgfgYIeaqhBNW7I/gClbMhdSI1gz
SfT1hlFPKCMFsIPIO5gIZmC2j2La2n3De8B0NJswFrar1aMFF/PmnRmzTYn4B63l
Wu3GwCAJGrO3sXF4DzJJR9PWRu/j388ox16POvOmjyzwR/s+dzmDaPlBADgBvPNx
ncxEpgQNWsVX7Q/xdsN+d3zMEKhLcgw5yj/RqXO7JENSSadVA5vxwEKd4no9G6+l
qX2gHRoTbyKkcYcTKA2aJggQxKAaRNaXkV5eS1gZj0OloeqJ1zx3WBn4gXYix7V+
hyt+LZemtrotEQ==
-----END CERTIFICATE-----
Generated at Fri May 17 08:44:42 2024 by rpki-client on console-fra.rpki-client.org