Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File:                     NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier:          yqY9/w6B5pTJHYFC+2nEMUsexYiSM32pBx3KUHCN1dA=
Subject key identifier:   AD:B4:0F:02:FE:83:E9:E5:89:BD:43:9B:F8:1B:D3:2C:66:3F:F0:CB
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer:       /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial:       01901EC6C1065AD16A0854CAC5C20C0C26EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number:          11DA
Signing time:             Sun 16 Jun 2024 02:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:00 +0000
Files and hashes:         1: 1etTTR5Zupa-rEaJi22kBmuZ3M8.roa (hash: SSaLAojgRGt43M1dfAkdoFdEtO+ZG6jzZq4/+c9t34o=)
                          2: 2P96ZGamF8cnh8sqLrJWk0eYNmE.roa (hash: rvAA0/K4NChfgcbFiJm5Q8+PDKwOpzCYhQYx4zOOz6Y=)
                          3: 2oN7qNENX-73Mp2kXFNBmkhiLjA.roa (hash: T0KdxcykM0xd0nrjwbRpTneRmO/OQHNpAmWRiWkSEPY=)
                          4: 82XcuH-j86YJ3ZZrOfJwqGjuq-s.roa (hash: r2zVSUV9sRri1Cv9PuOjRZXiPrnHbQV74oQMLwlN4eU=)
                          5: BC7ieHX3m3Iq4RDiDoxABauAeYM.roa (hash: rXMakeJzPeg+BdMd3XpJ7NxiNHjzLU2EOibO7UjmOvw=)
                          6: FkUrsPp3r4jbUnbWrjIq3uDlRew.roa (hash: uMEGfdRLyCjtf5hJF3Vv6KDRc6MJliaX8HpExeauWmM=)
                          7: H8LG-Jxo1jQvjPZQ29U1ITbynB4.roa (hash: pAWiZ45UtcjOaDYzLamhUDtPIGPorvbMTlNphEXas70=)
                          8: JHih9UiGKhEy-cF6z9e5m7eTfVg.roa (hash: h16nWP5UP2l+GASvh9DiGb2Jlz+sJ4F8fx1hBl/r5Kg=)
                          9: Kn4Dk7UbLtG9LDbWmUQkOem5YaA.roa (hash: 3ifYlJ9HF1rfeBApRpnTIi3IzPYoflWxV9Bb5zK8v8o=)
                          10: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: jL9Y/tlaFJ9aTz9bvCs2/jHu5xLbn8ZiEuH2l/zsbYQ=)
                          11: OXj5ffsARS0_xCpqBV-euEX9rXQ.roa (hash: tvHmd7rio0zVKa56k3RnGRbgbpK8b3p39aKatd2vhDg=)
                          12: cMW-Zdolm_oqj8UMw8MRuC2DwrQ.roa (hash: D+uvI1F6z81+X+x2rajQx/UmEcxmiGXEz5/6YHJcsbk=)
                          13: e0ZulBvPgTV3r0ljio5PYllRsuI.roa (hash: NQoUX4B1JUqioZjJjw+bp4jHlOO3PUUz/M8Ahoj/y2g=)
                          14: g17VcGIry43b1jhcbCqk6x6GiNs.roa (hash: ZoKEFQaBp3L8DpKqJzThTeCjRKGEQO4KDVlIOA3sy1A=)
                          15: iXDDWCQgNMhB6bA4DR5XGg8Qt4o.roa (hash: I9dPh2bejlLHM2ztxEJ3kI/tfac2p4ouftyReAozhCw=)
                          16: nAhlQGDCg73twYkDSR6TjKNltIk.roa (hash: 1BJ4EotGGfc0sJNtHnCAXiRbJLfjSV68VHjIRxCwZxA=)
                          17: orBDAfSjI1NCg3af1O2rIizGDuY.roa (hash: UUdDrV3WwUhmQqkZLdxfylOh/5wqavyvkkIvaN4OFEE=)
                          18: ro8r807SFlHgEdC0lWiLqwHjeD4.roa (hash: mE0wCqZZDknJbdaExWoon366yl17A1XrryTH35EDcCU=)
                          19: sgVitHDTEgpWPJMX0iarJ3BdHLE.roa (hash: mcBMb+aKk0K4/WRRG84SDy8dFyXjAkwF+q7GFdOTQsk=)
                          20: u9xyCBdP7B_Z_iu_16TbVRl-9NY.roa (hash: IVAQGbqPHsg63piIkLwHuEKbfq3PFMWZHAb5uz7fTTo=)
                          21: vH93SWWaS4Qe1Ew3KcSwrZzjhQI.roa (hash: zYAoUfAQO8ZdTOtiZ+vzuxraJ2d4kH6S+gxmnPa5RSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c1:06:5a:d1:6a:08:54:ca:c5:c2:0c:0c:26:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
        Validity
            Not Before: Jun 16 02:01:00 2024 GMT
            Not After : Jun 17 02:01:00 2024 GMT
        Subject: CN=adb40f02fe83e9e589bd439bf81bd32c663ff0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:55:cc:f5:9b:5c:5d:48:0c:4f:32:fa:c5:
                    eb:76:6a:12:76:7f:8c:2a:98:98:e0:64:68:3b:10:
                    1d:58:4c:0c:a6:39:69:a6:a7:0b:cd:4d:e8:34:98:
                    dd:41:a7:bf:b0:db:78:5b:5f:80:55:67:0f:dc:0b:
                    5a:cb:fb:f9:d9:96:5b:50:79:09:0e:9b:fe:cc:8d:
                    b8:d2:af:3f:2e:e2:0a:4e:d2:2b:e2:08:10:dc:06:
                    78:74:2b:a1:62:54:ee:a3:cd:d0:fc:3a:62:92:95:
                    d5:95:0f:db:72:0e:2a:a0:3b:e5:d9:27:d3:ad:8f:
                    ee:9b:0d:29:d7:43:c1:8c:49:e9:02:16:e7:ee:8b:
                    ed:47:1e:df:2f:ea:52:de:4f:04:bf:af:3a:ce:85:
                    16:e8:f4:e7:65:86:8a:90:01:65:f9:20:0d:9d:79:
                    74:c0:d1:65:84:ca:08:f6:f7:aa:01:44:85:42:08:
                    34:b1:c0:d6:d5:79:33:fb:02:b0:b5:25:76:8c:87:
                    04:51:0e:ac:c3:7e:0a:ea:b5:2a:b2:f4:8e:48:04:
                    cd:7b:b2:f4:68:c7:b0:3d:83:be:bb:cf:e0:57:6e:
                    f8:13:a5:4f:79:c6:77:6f:fb:73:10:63:ee:66:7f:
                    48:f6:96:ee:38:7d:34:7d:3a:60:e1:eb:40:d7:70:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B4:0F:02:FE:83:E9:E5:89:BD:43:9B:F8:1B:D3:2C:66:3F:F0:CB
            X509v3 Authority Key Identifier:
                keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:30:9c:4f:f1:6d:27:50:28:e9:51:ee:87:c6:9c:c2:1a:
         57:84:b1:2a:f0:c8:41:2c:e9:a0:94:5c:a0:c1:01:f4:a6:e7:
         01:bf:7b:96:1c:88:2b:85:d7:f5:48:09:e7:5f:11:b7:26:e9:
         48:d5:c3:10:d7:c6:e3:cb:b5:25:26:7a:e0:21:93:ca:08:b6:
         c5:ae:24:26:06:bc:55:bb:71:15:18:dc:52:9c:81:ec:ef:04:
         d7:2d:99:44:5e:83:7d:bf:b3:03:ef:60:3b:b9:56:27:dc:ad:
         eb:f0:81:62:f7:ef:d0:5f:f6:b1:88:ca:e5:25:ac:65:e3:bf:
         5a:d0:7d:d1:92:43:2b:01:b7:dc:aa:a3:99:cb:ea:b2:80:ed:
         6f:76:88:4b:a9:76:cd:78:13:6a:b5:3f:bd:c5:48:81:38:0e:
         89:3f:a1:f1:75:41:75:01:49:20:ac:c9:ba:63:ce:fd:9a:51:
         2b:25:55:e0:d7:c5:61:ba:d6:7f:44:49:9e:9c:ce:d9:90:e1:
         94:92:43:db:4d:fd:cc:34:12:a8:e4:76:3e:0c:ae:12:54:d7:
         87:33:58:b2:b4:5a:99:63:7f:62:c8:14:d1:cc:b0:b7:98:21:
         5e:87:38:e8:63:93:a0:bf:e5:4d:79:de:ef:10:86:9a:9b:63:
         a4:88:eb:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexsEGWtFqCFTKxcIMDCbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2
MGY2ZjMwHhcNMjQwNjE2MDIwMTAwWhcNMjQwNjE3MDIwMTAwWjAzMTEwLwYDVQQD
EyhhZGI0MGYwMmZlODNlOWU1ODliZDQzOWJmODFiZDMyYzY2M2ZmMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iJVzPWbXF1IDE8y+sXrdmoSdn+M
KpiY4GRoOxAdWEwMpjlppqcLzU3oNJjdQae/sNt4W1+AVWcP3Atay/v52ZZbUHkJ
Dpv+zI240q8/LuIKTtIr4ggQ3AZ4dCuhYlTuo83Q/DpikpXVlQ/bcg4qoDvl2SfT
rY/umw0p10PBjEnpAhbn7ovtRx7fL+pS3k8Ev686zoUW6PTnZYaKkAFl+SANnXl0
wNFlhMoI9veqAUSFQgg0scDW1Xkz+wKwtSV2jIcEUQ6sw34K6rUqsvSOSATNe7L0
aMewPYO+u8/gV274E6VPecZ3b/tzEGPuZn9I9pbuOH00fTpg4etA13D5dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK20DwL+g+nlib1Dm/gb0yxmP/DLMB8GA1UdIwQY
MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8YwnE/x
bSdQKOlR7ofGnMIaV4SxKvDIQSzpoJRcoMEB9KbnAb97lhyIK4XX9UgJ518Rtybp
SNXDENfG48u1JSZ64CGTygi2xa4kJga8VbtxFRjcUpyB7O8E1y2ZRF6Dfb+zA+9g
O7lWJ9yt6/CBYvfv0F/2sYjK5SWsZeO/WtB90ZJDKwG33KqjmcvqsoDtb3aIS6l2
zXgTarU/vcVIgTgOiT+h8XVBdQFJIKzJumPO/ZpRKyVV4NfFYbrWf0RJnpzO2ZDh
lJJD2039zDQSqOR2PgyuElTXhzNYsrRamWN/YsgU0cywt5ghXoc46GOToL/lTXne
7xCGmptjpIjrCg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:17:12 2024 by rpki-client on console-fra.rpki-client.org