Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File:                     NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier:          SPoYzOn21HZOpiOwFhVy8WdzFNWtqssr4Hzcg6+3Iik=
Subject key identifier:   B1:CD:34:B6:8E:2D:F8:B9:B7:98:6B:74:5C:A4:EA:E0:81:2B:41:5D
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer:       /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial:       019049437791E04589D409CC3688C7EE154A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number:          11F0
Signing time:             Mon 24 Jun 2024 08:01:16 +0000
Manifest this update:     Mon 24 Jun 2024 08:01:16 +0000
Manifest next update:     Tue 25 Jun 2024 08:01:16 +0000
Files and hashes:         1: 1etTTR5Zupa-rEaJi22kBmuZ3M8.roa (hash: SSaLAojgRGt43M1dfAkdoFdEtO+ZG6jzZq4/+c9t34o=)
                          2: 2P96ZGamF8cnh8sqLrJWk0eYNmE.roa (hash: rvAA0/K4NChfgcbFiJm5Q8+PDKwOpzCYhQYx4zOOz6Y=)
                          3: 2oN7qNENX-73Mp2kXFNBmkhiLjA.roa (hash: T0KdxcykM0xd0nrjwbRpTneRmO/OQHNpAmWRiWkSEPY=)
                          4: 82XcuH-j86YJ3ZZrOfJwqGjuq-s.roa (hash: r2zVSUV9sRri1Cv9PuOjRZXiPrnHbQV74oQMLwlN4eU=)
                          5: BC7ieHX3m3Iq4RDiDoxABauAeYM.roa (hash: rXMakeJzPeg+BdMd3XpJ7NxiNHjzLU2EOibO7UjmOvw=)
                          6: FkUrsPp3r4jbUnbWrjIq3uDlRew.roa (hash: uMEGfdRLyCjtf5hJF3Vv6KDRc6MJliaX8HpExeauWmM=)
                          7: H8LG-Jxo1jQvjPZQ29U1ITbynB4.roa (hash: pAWiZ45UtcjOaDYzLamhUDtPIGPorvbMTlNphEXas70=)
                          8: JHih9UiGKhEy-cF6z9e5m7eTfVg.roa (hash: h16nWP5UP2l+GASvh9DiGb2Jlz+sJ4F8fx1hBl/r5Kg=)
                          9: Kn4Dk7UbLtG9LDbWmUQkOem5YaA.roa (hash: 3ifYlJ9HF1rfeBApRpnTIi3IzPYoflWxV9Bb5zK8v8o=)
                          10: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: UDQY6KapW0SfRHQMaFDzgdmpDbEgw+ws2TIgz/MszcU=)
                          11: OXj5ffsARS0_xCpqBV-euEX9rXQ.roa (hash: tvHmd7rio0zVKa56k3RnGRbgbpK8b3p39aKatd2vhDg=)
                          12: cMW-Zdolm_oqj8UMw8MRuC2DwrQ.roa (hash: D+uvI1F6z81+X+x2rajQx/UmEcxmiGXEz5/6YHJcsbk=)
                          13: e0ZulBvPgTV3r0ljio5PYllRsuI.roa (hash: NQoUX4B1JUqioZjJjw+bp4jHlOO3PUUz/M8Ahoj/y2g=)
                          14: g17VcGIry43b1jhcbCqk6x6GiNs.roa (hash: ZoKEFQaBp3L8DpKqJzThTeCjRKGEQO4KDVlIOA3sy1A=)
                          15: iXDDWCQgNMhB6bA4DR5XGg8Qt4o.roa (hash: I9dPh2bejlLHM2ztxEJ3kI/tfac2p4ouftyReAozhCw=)
                          16: nAhlQGDCg73twYkDSR6TjKNltIk.roa (hash: 1BJ4EotGGfc0sJNtHnCAXiRbJLfjSV68VHjIRxCwZxA=)
                          17: orBDAfSjI1NCg3af1O2rIizGDuY.roa (hash: UUdDrV3WwUhmQqkZLdxfylOh/5wqavyvkkIvaN4OFEE=)
                          18: ro8r807SFlHgEdC0lWiLqwHjeD4.roa (hash: mE0wCqZZDknJbdaExWoon366yl17A1XrryTH35EDcCU=)
                          19: sgVitHDTEgpWPJMX0iarJ3BdHLE.roa (hash: mcBMb+aKk0K4/WRRG84SDy8dFyXjAkwF+q7GFdOTQsk=)
                          20: u9xyCBdP7B_Z_iu_16TbVRl-9NY.roa (hash: IVAQGbqPHsg63piIkLwHuEKbfq3PFMWZHAb5uz7fTTo=)
                          21: vH93SWWaS4Qe1Ew3KcSwrZzjhQI.roa (hash: zYAoUfAQO8ZdTOtiZ+vzuxraJ2d4kH6S+gxmnPa5RSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:77:91:e0:45:89:d4:09:cc:36:88:c7:ee:15:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
        Validity
            Not Before: Jun 24 08:01:16 2024 GMT
            Not After : Jun 25 08:01:16 2024 GMT
        Subject: CN=b1cd34b68e2df8b9b7986b745ca4eae0812b415d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:d0:84:24:6d:0a:b8:51:94:ad:82:cd:1e:
                    c3:ce:42:5e:ff:6f:e4:d5:ef:fc:4f:e5:2b:bb:fa:
                    e6:11:c9:5b:cc:6a:5c:a3:c0:99:45:b9:f9:8a:c1:
                    e8:da:cf:54:cf:29:25:2b:c4:dd:21:b8:38:00:57:
                    0a:1b:c8:7a:79:c4:f0:8f:cb:66:75:c0:ce:5f:69:
                    8b:e3:25:0f:24:e1:ec:b5:87:64:43:19:68:3e:a1:
                    04:5a:a1:cc:c7:cc:f4:9b:b1:83:8a:a9:86:b7:da:
                    3e:27:a5:31:0f:92:b1:f4:80:5f:e6:47:e1:71:0b:
                    47:54:7c:01:ff:e6:49:02:4b:dc:c2:d7:ee:dc:96:
                    8f:5c:f1:0b:57:58:ee:dd:7b:a1:9e:e7:e7:20:a2:
                    d2:df:2b:1f:a5:01:08:9c:02:eb:2b:09:82:84:00:
                    8a:dd:a2:06:5b:b7:a0:01:56:9e:7e:c6:7c:19:a4:
                    ba:8a:e2:ba:80:85:f1:ba:a6:f7:2d:0c:a4:86:56:
                    84:e2:9e:2c:81:2b:35:8b:47:dc:c7:74:58:38:59:
                    ad:93:85:1e:13:2e:67:5c:3e:6c:5e:a4:7f:86:b6:
                    e9:f6:18:31:11:00:0d:ae:a2:0d:07:00:f6:58:3e:
                    8c:77:6b:fa:3b:67:04:66:08:ef:86:d7:da:80:1e:
                    d8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CD:34:B6:8E:2D:F8:B9:B7:98:6B:74:5C:A4:EA:E0:81:2B:41:5D
            X509v3 Authority Key Identifier:
                keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:5c:06:52:b7:5c:3f:36:7f:63:a5:73:3e:4e:0b:99:d5:
         22:ec:84:cd:c9:e8:72:5d:97:23:17:4e:4d:5a:a1:64:0e:48:
         48:58:ca:18:fb:c4:a9:e7:c4:aa:49:48:3d:cd:5b:c1:9d:c8:
         dd:a1:08:0c:39:ac:26:ed:a6:bc:d9:1c:96:7d:55:f8:2e:21:
         35:6e:2f:3d:e9:88:72:70:6d:f7:6e:4c:7d:1c:bb:66:64:25:
         b7:4b:d3:b3:8e:3d:cb:51:77:ee:45:5a:cc:4d:5d:e9:7d:96:
         31:90:b1:a0:30:aa:14:3a:20:9b:80:32:86:23:80:93:46:f0:
         14:9f:d0:64:1c:15:a2:a6:3b:e5:b5:df:d1:49:f2:a8:6f:d5:
         a5:ad:31:69:00:87:63:a4:e9:82:90:aa:79:1a:b9:b0:56:51:
         65:51:93:70:5d:d1:92:33:ae:b8:34:34:77:05:bd:ab:46:db:
         12:35:95:be:72:74:1d:b5:7a:16:35:c7:2d:0c:69:fe:ec:54:
         0e:70:b4:c5:79:b1:9f:76:02:f4:cf:74:2a:ec:05:5b:82:45:
         ff:9f:26:04:e8:bf:3d:bb:22:67:74:5c:b4:8f:f4:8d:f1:e4:
         e1:f9:c6:1e:05:2d:94:3f:f7:67:5b:0f:1a:45:58:9f:04:87:
         92:e5:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:09:08 2024 by rpki-client on console-fra.rpki-client.org