Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
File:                     bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json)
Hash identifier:          la51vg0iGJJ5d87JoMK1jOuNhNThV8+LqcFHdtCzfzM=
Subject key identifier:   5E:47:E6:F0:79:39:97:C4:85:1E:EC:73:35:AD:B3:C7:2A:29:15:1E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       01901E21AA2E838AC2A5B073F089810E555C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
Manifest number:          0195
Signing time:             Sat 15 Jun 2024 23:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:40 +0000
Files and hashes:         1: 4l8aF7hFCKKtBn_AFs3cQITdfCY.roa (hash: iqBYcVQJynF/LgZBvGOpyu0s1rZlYBhNmPWuGquJE4U=)
                          2: ArPmiaL9wsmukOM_54-ofrq479o.roa (hash: b1wf9M4SCu+LqCw0+A+FEUJKjcrs0KQ8XivK3bkOi9U=)
                          3: BNdkSfhBSecauy53ZOEypfpFi8Q.roa (hash: NED4WrJoQ9D9gYBmgW5s45DEmszMtbuVKTt5quSCAEg=)
                          4: OoW69NyaRuUkvjlFFyqz4FEKUio.roa (hash: olyZ5yEBAxKRaP8GbvLvmJbEW2bcXFbNyVengJRK17Q=)
                          5: RXTW6KgUVAG5XXEuoSJRUgSDpMY.roa (hash: m6+xN3v6xo7zYUmnHBQpGJa3ImwAzmDqKvUDgh1Fwww=)
                          6: RYnasgrYwDkMD19uXSf6pICv7sk.roa (hash: 7bDlcsBzEXU70zpKlu/x4t3mBrpt31CMd6Kye2aP8Zk=)
                          7: TYbQb6nAykgfZpTLM5CDZmBUTI4.roa (hash: 4OqfLK4hIuf3nSOYvcQYH+jYj9oCVMStY2FW5J9zU3I=)
                          8: YfxRM1pQzXJgmSyFt6Z1loIcSbs.roa (hash: FgjAnKtohpmDPNk6wuwxYKH/bRc9xoiYvwjYIEzXJAw=)
                          9: YkHapNEo4OI8xewnq6pxlJRfV1Y.roa (hash: M6yVqLT/Hjx4US+H2ZaQ18eaXeIIlgZ5G6tiV8pOI0I=)
                          10: ZFZgyzsJo23MF37jbPNPcIQrTaA.roa (hash: msZfx8GketImOIcaInpiRC8iBGYCd0XqACLHdjGc1Vo=)
                          11: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: Xc3aRFAyryrp/EJuBX3JEekn9T+GkNxs+nZ5riO8N+Y=)
                          12: hFXW8ucpWcqqH0Sd0AO4hvg8IVU.roa (hash: i14z51V9n3TPIm/3TKcml+RZ2zG0pZbS6QKZguK2/qo=)
                          13: kLmTGMT64V_r9iBhmYXhsIylSZ8.roa (hash: AEMqYkuLgT/4w0cG/PGxXrZfXOh1RfljKomZGfDwYjY=)
                          14: lJAS6-eOP2BnAmOzhg1SL6DxUc8.roa (hash: l/voa6MDRIlBSmuaL1ka5Cuu1YrbnI8ntHxWRqNfJfk=)
                          15: mXI73v44nFPTfiknp49ki8ttAPk.roa (hash: ZmXiEfA96qYtsD10ZDLxVrNKIg+HHbXGUECKw9J2VGY=)
                          16: mt2fZKCH-St1hK_aP1aDa8gP5Rg.roa (hash: pTybiO/cOmmh9UXeZyoO0jQVV8Q6QUG38IjtQmN2GPk=)
                          17: oDFrn-CFTzzRBAP-216O3A3lq_k.roa (hash: W96OJAVsIFcAHZZdYOXv3QUF+P2Ivu+eSjEVzaww7wE=)
                          18: sBsS28tJy9Sqsfc5WcAZo8J-YP0.roa (hash: JSoKf8HfVEMVYyu1HGyhp+rG1JDqq62FPV7i2Ig9wO4=)
                          19: t71YI4KSbaGkCmB-MEJdsGSfQaA.roa (hash: R/e5LF3J+CRodiuFWfzBq7cj+1ew0e07ualksOT+5xk=)
                          20: xzspfY1QWHE1JPH-taJyuAoGc-c.roa (hash: AD/fxJjkgWm/d/W6hET6cPSEDrtngFcwUvDOW/a1S2Y=)
                          21: z9jSaQooi48ciojI0DNXMjQGP9U.roa (hash: wBIZ9guDmNTfThhuSKlzu6dMR5P4osh8vKBmfEsH9Ys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:aa:2e:83:8a:c2:a5:b0:73:f0:89:81:0e:55:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Jun 15 23:00:40 2024 GMT
            Not After : Jun 16 23:00:40 2024 GMT
        Subject: CN=5e47e6f0793997c4851eec7335adb3c72a29151e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:5e:2f:f8:11:e2:28:f2:c0:e5:71:fb:8d:
                    e7:36:ae:47:4a:4c:16:00:68:51:dd:1e:ce:4f:ca:
                    f6:20:63:ea:fa:52:4f:af:8e:e3:e1:22:0d:09:d2:
                    57:bc:e0:dd:13:b0:92:45:3b:5f:64:25:23:18:3d:
                    a6:81:21:72:fb:40:3c:65:cb:aa:e2:4a:7b:ee:40:
                    2c:cb:6d:71:42:bd:4f:86:d1:69:33:5d:df:bf:94:
                    c9:fb:b7:56:84:d3:b5:4a:07:f8:3b:7a:3e:22:e9:
                    35:27:50:7a:3b:76:f3:7c:4f:2c:aa:b2:3a:b1:aa:
                    ce:76:3b:87:0a:01:31:6f:ea:ec:69:da:0c:f3:79:
                    5e:03:bb:8b:13:b7:ce:59:93:a0:f7:d0:0b:01:ca:
                    3b:d5:4c:cd:ce:8b:40:62:b3:df:35:3a:f6:7e:7b:
                    db:02:d8:5b:4f:03:2b:96:32:b1:24:32:54:0e:6f:
                    95:b0:95:b8:1d:56:26:72:fe:98:f8:b3:a7:09:bb:
                    34:f9:b8:b3:c5:69:0e:5b:79:ab:8d:19:22:68:d1:
                    a0:cf:2e:fd:2b:6b:c9:31:7a:ea:c7:b2:de:d1:f8:
                    5f:9f:1d:ea:0a:85:e4:15:b8:04:83:26:ad:39:14:
                    a8:7a:fa:44:13:b3:86:1a:96:8d:9b:96:45:7f:08:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:47:E6:F0:79:39:97:C4:85:1E:EC:73:35:AD:B3:C7:2A:29:15:1E
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:56:82:2a:25:76:f0:43:f8:92:c4:b7:b9:f6:42:5e:d4:d5:
         e4:ca:72:33:dd:35:f3:2c:1f:5e:a1:30:c6:e8:a7:82:9b:40:
         90:fc:86:a2:4e:0d:6e:c7:9a:04:f4:6a:32:84:f5:78:30:c2:
         2e:3e:c0:1d:b8:4b:cf:4b:03:8c:ef:cd:31:11:7b:69:1f:6c:
         2a:84:12:26:22:61:c0:dc:76:71:46:27:a0:ed:f5:d0:5e:8a:
         6d:1f:2b:23:d7:f1:1d:2f:70:77:69:f4:0b:49:a4:4b:ad:ef:
         db:9a:66:58:15:10:76:5e:df:1c:4f:60:2f:6f:f0:53:57:35:
         1e:22:18:63:84:97:04:e6:7c:3f:16:a5:5d:27:cf:c8:ec:ed:
         b3:8f:73:1c:98:c3:68:58:5d:e8:82:a1:d9:75:0a:b6:a5:4e:
         e7:dc:84:c1:71:9f:fe:43:91:db:0d:38:7e:47:8c:a0:e2:17:
         2f:a1:ed:81:b2:31:ed:ad:59:43:a4:a5:82:13:79:75:93:14:
         25:bc:1e:7b:ae:58:8c:81:e7:fe:5e:7d:56:e9:0b:dd:c8:d1:
         cb:5d:fb:88:d3:b1:14:10:6d:a1:f4:4d:c5:4c:9a:e8:df:02:
         3c:4c:26:74:e4:8b:39:24:b0:52:de:9e:02:29:61:1b:d7:36:
         8d:a9:7c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIaoug4rCpbBz8ImBDlVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwNjE1MjMwMDQwWhcNMjQwNjE2MjMwMDQwWjAzMTEwLwYDVQQD
Eyg1ZTQ3ZTZmMDc5Mzk5N2M0ODUxZWVjNzMzNWFkYjNjNzJhMjkxNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJheL/gR4ijywOVx+43nNq5HSkwW
AGhR3R7OT8r2IGPq+lJPr47j4SINCdJXvODdE7CSRTtfZCUjGD2mgSFy+0A8Zcuq
4kp77kAsy21xQr1PhtFpM13fv5TJ+7dWhNO1Sgf4O3o+Iuk1J1B6O3bzfE8sqrI6
sarOdjuHCgExb+rsadoM83leA7uLE7fOWZOg99ALAco71UzNzotAYrPfNTr2fnvb
AthbTwMrljKxJDJUDm+VsJW4HVYmcv6Y+LOnCbs0+bizxWkOW3mrjRkiaNGgzy79
K2vJMXrqx7Le0fhfnx3qCoXkFbgEgyatORSoevpEE7OGGpaNm5ZFfwiO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5H5vB5OZfEhR7sczWts8cqKRUeMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVaCKiV2
8EP4ksS3ufZCXtTV5MpyM9018ywfXqEwxuingptAkPyGok4NbseaBPRqMoT1eDDC
Lj7AHbhLz0sDjO/NMRF7aR9sKoQSJiJhwNx2cUYnoO310F6KbR8rI9fxHS9wd2n0
C0mkS63v25pmWBUQdl7fHE9gL2/wU1c1HiIYY4SXBOZ8PxalXSfPyOzts49zHJjD
aFhd6IKh2XUKtqVO59yEwXGf/kOR2w04fkeMoOIXL6HtgbIx7a1ZQ6SlghN5dZMU
Jbwee65YjIHn/l59VukL3cjRy137iNOxFBBtofRNxUya6N8CPEwmdOSLOSSwUt6e
AilhG9c2jal8SQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:13 2024 by rpki-client on console-fra.rpki-client.org