Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          gV2vmfv+RAyGC1pZrPW2BJmV4OPfX8G7MsG7qnQUqKY=
Subject key identifier:   32:7E:42:1E:63:5B:9B:AD:81:7D:C2:11:7F:55:86:C9:28:75:53:B1
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       01901E8FC53840990E56523687903E9B74AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          11E1
Signing time:             Sun 16 Jun 2024 01:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:56 +0000
Files and hashes:         1: 3n_56JWKOXWgz_XWpbx8MTM7LU0.roa (hash: n21owNVWm3o04gq4+sKgwmwvhdEqlqnex9MiZ6ygEbY=)
                          2: 9h7__af2NE9z6X6OqyB0wjicmD8.roa (hash: +XcGUzmf/SZ2Nlbjt1gLw0MVkPh5doD6/CQhGY+ZVis=)
                          3: 9qyXVuFB4kEruZP7Tzct03twJ_I.roa (hash: hIsqqE6gRN3SgnPSDtXcuN1cooM5ZwIkThIR/rS3Njs=)
                          4: CAm2zkoREjgdBIsA_W_0T788UbE.roa (hash: qW5jzPiB72169zhmuwdI3hJAz642Vbl8rFARmIgA0AQ=)
                          5: Cljh7KoccmYNLvOVHw_dl9cXyGk.roa (hash: J9ep7qkkaZ0CoYMTz0ijbWvER14h/4NeLhO2yepVLlQ=)
                          6: HCXEHioqLwtOvZ0yH2poRWsk8bQ.roa (hash: bNdM8kMJkC71aYcXEffTejhB3XGUlIXR5ztUXYidbtM=)
                          7: K_GKFulSX6Oy_EAQzLQa-3i5CJg.roa (hash: l9gFAG8lRkWg7ngTMBFdXklVQR1yNsmnq3CBshIRfbs=)
                          8: MDgRwsqSH1qDSEZYKWoZ-c6oV4c.roa (hash: dq2oJsxxjpC6qJ3CunLDgBKo0Q+6JfPWaH3jDHSL2JU=)
                          9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: vWIxXIfuPxHvCv4CSFbw/3ltFxljKtmck01tgLxg+Iw=)
                          10: TkONv6p4712ltbBWIOKfovJm9qc.roa (hash: u9IbHqPh7hzzpi/SnyKWyjP5fGp41eal8tnU3G4FvUY=)
                          11: UmWHDfklvkJ6gNEyIAtN3hKFhZM.roa (hash: CgAB4qiSFvuss3ySfftPDlanfZ+UnNafmz8ZfEE/gZ8=)
                          12: aV3O0hoZk3qdHJbbDnlB7fNwxGY.roa (hash: 4DkD+pB05bZZAwA0VCibOpwi5k+487wuKrvY4+LyV04=)
                          13: d-qbaMTmjmh4iD3R9hdV1XjgLNU.roa (hash: hbQD/FXZiapXvOA1P9vcBFCW6IVZTR+HRJ6Ebhj49lM=)
                          14: jkFm2Y6p0zJ8rZRgYoZV6mXGgnE.roa (hash: jc5QOZ9LFzvtFGNnEulYtdxF6ZT0jDuitm6RFc2oFg8=)
                          15: lMlXeLqw45PFwwM9axEeAQDeoRU.roa (hash: fxLR7L4WXf9QkCUmD2b0i6xOJHTscWQUGTcDyzmWXu0=)
                          16: mZScfSxL4T78-fhidGxlZmNIw6I.roa (hash: Pze/pgdSIvXn1+Fag2kb0JP6MvO/4uOv01h68+qgORY=)
                          17: pi9GDdufVhThRiMS4yjbHwvj4NY.roa (hash: ljOLzY8/nBA6QByAxhTdNvxgLLAEPrRU1pQeCwUXDdc=)
                          18: q3Drz0MaEOffYD8n_mTEACvRmZs.roa (hash: 58W+VGbx5Oy2Ij+JB67NPykOehvg0QeHJqv/yxGQS/4=)
                          19: qsyxCvo3ntBQFv_S4a1sizGHsM0.roa (hash: 02WrPMGEy5BFj1aJfAmRIwE2mBS5y9YD3iykOfhzGSs=)
                          20: vzmRLq_DlO1sObTxAP8qD4GozuY.roa (hash: rEJEzZ42GdJFXUWq9NpNUIHMqaBc1AqNT2yL17H9KRM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c5:38:40:99:0e:56:52:36:87:90:3e:9b:74:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Jun 16 01:00:56 2024 GMT
            Not After : Jun 17 01:00:56 2024 GMT
        Subject: CN=327e421e635b9bad817dc2117f5586c9287553b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:97:cd:e8:7e:cb:3c:b7:48:f9:de:91:b5:
                    ef:0c:54:79:7b:83:dd:58:77:20:ba:de:b4:42:c8:
                    0b:e0:4e:5f:02:40:cb:37:65:17:1c:bb:d2:4b:7f:
                    7c:cd:30:67:b6:9f:5b:ed:0a:15:d3:ab:d0:e6:7a:
                    ca:3e:a9:d7:8c:11:57:74:94:01:8d:4b:33:bb:14:
                    b3:71:4d:22:b8:8b:90:a0:a3:cd:57:55:ad:88:ad:
                    fc:d3:73:ef:d8:37:0e:63:51:06:0c:f7:9c:89:97:
                    8e:fe:93:66:98:f6:e1:6f:10:26:6d:73:9c:68:d7:
                    ce:e6:19:6a:ef:f5:8e:92:6b:cc:bd:9b:71:f0:91:
                    01:07:3a:22:b3:03:df:4e:18:19:fd:fb:3f:98:bb:
                    fa:0d:6f:4a:85:ef:8e:5c:e4:0c:85:d6:d9:82:97:
                    63:36:19:a3:82:fe:5a:f2:c7:18:c8:73:bb:39:ed:
                    19:a0:a8:03:67:57:13:c7:28:fc:45:d1:7c:3f:85:
                    2f:4d:0e:be:b4:58:4f:70:4b:ae:b3:2a:7b:62:30:
                    81:db:e8:87:6d:d1:f0:6d:15:6d:a1:6f:84:71:de:
                    ab:59:b9:8a:c0:94:e8:6f:af:37:29:4c:e9:d7:19:
                    10:c9:9f:00:f8:d6:05:8f:f3:b9:8a:8e:c1:8e:4f:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:42:1E:63:5B:9B:AD:81:7D:C2:11:7F:55:86:C9:28:75:53:B1
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:14:69:f1:d2:2a:a8:99:6f:e7:d6:fa:00:82:15:fe:19:5b:
         e9:c7:9d:6d:30:2a:27:40:9c:3f:bd:50:b3:f5:40:31:ab:e1:
         20:fc:7c:1a:19:cb:39:6a:4a:9e:d0:cf:a3:fb:af:e3:c2:9c:
         a0:d4:bc:5c:e8:ed:66:df:4c:e1:5e:c2:f9:52:5b:9f:46:02:
         75:d8:0e:d2:b8:1d:bb:cb:fc:bf:b1:26:47:38:2b:b6:3e:b1:
         62:51:64:b0:ef:bd:f7:5d:0f:b7:94:5e:10:14:36:61:87:ca:
         3a:4e:27:23:21:6d:3e:ea:59:66:6a:ba:e4:bf:ee:81:8b:71:
         ef:4f:a2:5b:9f:c3:39:df:c0:b2:50:34:0e:87:85:d6:ab:28:
         4e:9b:23:dd:cb:b5:0e:5b:d3:36:e5:8e:dc:aa:a7:f5:0a:d0:
         d1:86:fc:8c:24:ed:aa:fb:30:9d:e2:f1:cb:f9:b4:8b:8f:f6:
         6a:ce:02:04:31:85:f9:2d:6e:50:a3:df:11:2c:75:72:85:2b:
         20:9e:32:a8:ee:7a:9e:19:11:cb:1a:f0:bf:c5:57:23:01:46:
         0d:d4:38:c9:80:82:95:75:de:3d:91:60:3e:19:23:d6:ff:6d:
         62:18:68:a0:3f:86:ef:23:18:41:7f:d0:17:07:60:c9:f1:85:
         58:cd:ed:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej8U4QJkOVlI2h5A+m3SvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjQwNjE2MDEwMDU2WhcNMjQwNjE3MDEwMDU2WjAzMTEwLwYDVQQD
EygzMjdlNDIxZTYzNWI5YmFkODE3ZGMyMTE3ZjU1ODZjOTI4NzU1M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw96Xzeh+yzy3SPnekbXvDFR5e4Pd
WHcgut60QsgL4E5fAkDLN2UXHLvSS398zTBntp9b7QoV06vQ5nrKPqnXjBFXdJQB
jUszuxSzcU0iuIuQoKPNV1WtiK3803Pv2DcOY1EGDPeciZeO/pNmmPbhbxAmbXOc
aNfO5hlq7/WOkmvMvZtx8JEBBzoiswPfThgZ/fs/mLv6DW9Khe+OXOQMhdbZgpdj
Nhmjgv5a8scYyHO7Oe0ZoKgDZ1cTxyj8RdF8P4UvTQ6+tFhPcEuusyp7YjCB2+iH
bdHwbRVtoW+Ecd6rWbmKwJTob683KUzp1xkQyZ8A+NYFj/O5io7Bjk/+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ+Qh5jW5utgX3CEX9VhskodVOxMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRRp8dIq
qJlv59b6AIIV/hlb6cedbTAqJ0CcP71Qs/VAMavhIPx8GhnLOWpKntDPo/uv48Kc
oNS8XOjtZt9M4V7C+VJbn0YCddgO0rgdu8v8v7EmRzgrtj6xYlFksO+9910Pt5Re
EBQ2YYfKOk4nIyFtPupZZmq65L/ugYtx70+iW5/DOd/AslA0DoeF1qsoTpsj3cu1
DlvTNuWO3Kqn9QrQ0Yb8jCTtqvswneLxy/m0i4/2as4CBDGF+S1uUKPfESx1coUr
IJ4yqO56nhkRyxrwv8VXIwFGDdQ4yYCClXXePZFgPhkj1v9tYhhooD+G7yMYQX/Q
FwdgyfGFWM3tZw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:32:23 2024 by rpki-client on console-ams.rpki-client.org