Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          5tccESm13hx+FAJVTF+e0qQrNOtIUB+vTi038z/4NAY=
Subject key identifier:   2D:0C:8D:53:FB:F1:84:59:84:D4:C1:85:08:01:C9:9F:F7:85:96:6F
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       018F86A3C6427FEDF784B786B221B0E78DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          119F
Signing time:             Fri 17 May 2024 13:00:31 +0000
Manifest this update:     Fri 17 May 2024 13:00:31 +0000
Manifest next update:     Sat 18 May 2024 13:00:31 +0000
Files and hashes:         1: 3YKwlMveisSzPbn-tW0PvzxMseQ.roa (hash: NbGrqi0fCFPs/E1UO0vxHp3LOom6BAEbB4LWqLM6GQI=)
                          2: 3v9J4vNv-7iiTXeav5Q8DbDTSIg.roa (hash: qtcattQJfesVSQRY0z4xm7Gm0X2Xf1P1AAcjb3Z+U6I=)
                          3: 4iq8k8F6CxojtdZYaD9M-GDcHQw.roa (hash: Pqx1NuZddDbhMPi+xxVWbSh3UolUsBJFTp1v2POhUsQ=)
                          4: 7sUybcmEI5DrMe92GoSGvF2zA30.roa (hash: IzUeuPL9Zn0w/ZiFVif4BsWrzBiFpupoUSS83ZxJMhw=)
                          5: 8lmNy5Yj60QUcRGQEadeJre2rk4.roa (hash: AlUF45g3noekUknA4pLJPQakHJF5Mt9ZC5CZFQlsxDc=)
                          6: CiJcK7EQ0Gz47UhtNcw1iWkXG0Y.roa (hash: 8o+mgYx1R3Oq4nEthcc94hVk3VmKjwnVl8BZ/KkLG2k=)
                          7: N9bjWdW6-2JBdmplLKEKg2vGJfw.roa (hash: jdYO6joQzp8tGnqIL0VDI+YEamqrJGPpE1G1krM9wSE=)
                          8: PfuIQJWGnoXGniszOGoPQXpH8Cw.roa (hash: HLrae4M2pNt3W33D6G4C8E1K2PZcSc3Mg/Q3RdLjONk=)
                          9: Q-S-6ZgE8VweKZfKKNFTCD6kEE4.roa (hash: TNselkEV7RWcqnUkwrsO9JVAbXIV5dX6GuAW6+wxzFQ=)
                          10: WPiBhM-qmXw7kCLlIqNvgIf7Xww.roa (hash: zfrcLIK3f+w7enlTL1bhx8vNgA1/h9MJcl16s7QD9r0=)
                          11: io4wdCRfEoltjJlS55OCRO39VaY.roa (hash: of5zdEsNXsVZ/neVFXW7+CuegUZIK1xVhSw42YrxI7o=)
                          12: kxlDti3ix_hut0QkXajce3eXvkk.roa (hash: weyz9vOzqEaCQEYaW0jCB4yrOXC5veMhv/Zu3f+QEvs=)
                          13: noeycDSAU8aLwrndfpkxrIvBumM.roa (hash: i1R+Ow6WzYakFfYy5nYc1v6ep91jj5lukG1kJ5nkFkM=)
                          14: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: T3jg9yTKWIDUTrqnHKperzrPrj2tpO17Slx6kLasHmU=)
                          15: u1nzbmJlHanwi550hpGS3Ome9L0.roa (hash: XMajDyqBCKkX9KuBNec3ZveKETO74oJnseFatDGN770=)
                          16: u8y2W6ZelwDhs7n1Jfv6XoJcmD8.roa (hash: iVmbJYahdlW78WeO7rXXaZEmg/SKM519kRqE20SkRtg=)
                          17: uqziA4FOaduBcPwd0ZOmX9IkNOM.roa (hash: DGR/kQs/IVAz6B7nA8WISuMp9LMyswW8ML6PVxofMAQ=)
                          18: wvyPvAKuwc-ET04gJXDvs4UeTP0.roa (hash: PObyliJf5xS576pVGMB70hrJjon0XWBBON131Hwz3HE=)
                          19: ymfWan-OZeBzZXEY7kxmiChnV9c.roa (hash: 3WnvSaXg36b0BA8jyjsISz5Eqtrec34yMkA0dhT1KQE=)
                          20: yyCQh0xu9DGhWMiQNmPsH4XUCkg.roa (hash: LL1HdLP30LFwtFKZncvgRBTsUxfcvh+tFLF1k1q/EmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:c6:42:7f:ed:f7:84:b7:86:b2:21:b0:e7:8d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: May 17 13:00:31 2024 GMT
            Not After : May 18 13:00:31 2024 GMT
        Subject: CN=2d0c8d53fbf1845984d4c1850801c99ff785966f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:82:bb:0e:0f:5d:ee:df:9a:82:88:f5:c7:
                    1e:00:ad:01:6e:33:a7:78:49:24:56:2d:e0:d6:1e:
                    cd:59:97:40:4b:93:d2:18:fd:41:f6:87:29:54:18:
                    71:08:5f:2a:c2:93:5c:93:e8:3a:9c:ed:e7:d0:7d:
                    d7:d0:0d:0d:8c:ee:31:89:27:31:98:17:4b:6a:27:
                    21:56:e9:a8:fd:97:af:44:1b:fa:d4:54:1f:29:41:
                    9d:2e:91:ca:95:8a:7a:12:cf:4b:c7:b6:c3:9a:62:
                    a1:14:78:9b:54:16:f9:bf:dd:66:82:7d:2e:11:d4:
                    14:ab:99:06:49:c7:f7:16:13:52:62:e3:32:b4:d4:
                    9d:7a:1e:6f:5e:c6:3b:cd:a3:2d:39:9c:91:dd:21:
                    87:2a:e7:05:54:5a:bc:f4:d9:59:b4:a4:33:e9:20:
                    9c:97:a3:96:98:d0:28:b7:a6:22:b0:41:30:55:2b:
                    cb:bf:0c:b8:c5:3d:be:74:ed:5d:e9:da:f6:2f:94:
                    e9:ce:b5:29:07:db:d1:a8:c7:36:e5:71:48:31:88:
                    30:5d:b6:ee:12:50:af:f8:b2:6a:61:df:bd:a4:6d:
                    a4:b2:92:60:74:01:17:8b:f5:de:f4:b5:13:8f:bf:
                    35:e7:23:0c:9e:ca:4a:f2:ac:dd:09:57:ef:b9:e5:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0C:8D:53:FB:F1:84:59:84:D4:C1:85:08:01:C9:9F:F7:85:96:6F
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2a:01:36:cd:b3:ef:67:59:dd:dc:d6:8e:85:8f:a5:96:08:
         92:00:5a:4f:b4:9e:1d:5f:5d:bb:c7:aa:0e:ac:d2:9e:9c:c6:
         98:05:e8:82:34:99:91:07:d4:38:78:7c:e5:bc:0a:47:d1:4e:
         cc:9f:25:2a:f3:58:9c:62:1c:df:ee:b5:44:91:92:ed:a0:ac:
         03:2a:b7:6b:1e:83:eb:52:9e:64:74:16:1c:94:25:c5:47:4b:
         7c:20:54:7c:aa:a8:f2:76:6b:cf:74:b0:03:cb:19:06:b2:c9:
         09:d0:16:08:74:20:51:dd:39:49:0f:51:4f:db:25:48:85:ab:
         0d:da:92:f4:67:39:98:fd:19:51:7a:83:68:d7:21:ce:1b:2a:
         a4:b2:4b:e0:7f:16:cd:a2:57:20:25:c8:88:73:72:0e:b1:c1:
         2e:99:b3:19:f0:41:d0:6e:cb:fe:96:be:b1:0b:3b:6c:be:d7:
         79:98:56:fe:8f:5d:6a:e8:9e:2b:3c:c2:ca:fb:a0:31:c2:13:
         c1:38:98:c5:7c:05:78:db:4f:e6:92:83:b0:13:39:7c:37:d3:
         e3:03:dc:4e:f3:36:a1:d4:dd:24:d2:24:e0:75:10:41:fe:03:
         7f:3d:18:20:b0:53:9e:3a:f9:4e:81:14:21:87:a9:3f:12:e4:
         ba:5a:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:15 2024 by rpki-client on console-ams.rpki-client.org