Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
File:                     M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json)
Hash identifier:          T3qW2Eba7a+WenV+JHfF6uxdrS5kTdl7HB9FbL1RVVY=
Subject key identifier:   BF:40:06:38:C2:FC:8C:88:C4:45:1A:CE:F6:DA:F6:55:84:97:55:D3
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Certificate issuer:       /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial:       019044F855738A298EBB19F0276794A90E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 12:00:43 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:43 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:43 +0000
Files and hashes:         1: 09s7ZwJwpj5rvThPKXL3hP5XaxI.roa (hash: lKDt+IHzhSA3jfZezco0bUwDn1E85xnTnc5GRe4DmHM=)
                          2: 6UFqDbZBvJBdAevSDBxf3RvSgAs.roa (hash: yTm6J5QNT1UUqIejG0gvemAIm4uue0Fi+ZB4nROObOQ=)
                          3: AFhVw7L2cmfyKUGDwOCmO7Yo1gY.roa (hash: iXRx1HHxSJILYVnLoIi9U9OHCxx0SDrAT43Hzdppprg=)
                          4: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: tI8nPHxE2zdIPAyMJUhYpPpyJ48sbmSc3mLmoJS+OnA=)
                          5: ND-2T-TXVgO1iidRxUqpbiZ62f8.roa (hash: QKJfEvAusxYEqCt0nLS1vzk10Jd8GtUZ8EFTkQjxvAA=)
                          6: TEk_FA6o2pbt1p51ZxzSAe76zMo.roa (hash: 08xiBx17omWGybU4wMg/hoTFzhhTfqGKrTFbCpJLz9s=)
                          7: UCRT57JB4nrX1LHH-8XpTtRVxrA.roa (hash: 8bXJ7RUXGrq8CNpxtblHoqn66vlfLoL6jSuWnPchWCw=)
                          8: V1aAdMTQ-SApwo5HduseKDzrH9Y.roa (hash: +b8q42nBVNpwIeVCkZirAbwNa6bBuKoMbFw9l+V5Gz8=)
                          9: VhC1WinLvrdcU3ng-7Bl7zWD9f0.roa (hash: jQOqgvg0Mjk9TNcQzTUNUpGwQEHskTA+8BGF0gwKb3Q=)
                          10: ZTlGc_8YpPcmvwCJzSww-IaSn7Y.roa (hash: xzl5G9nqCp+ywJUIEt9XmQIAgxL67eQHDgLkpZzj54o=)
                          11: btdRWIVdlGF-hdEWxEiYsMh-6C0.roa (hash: TmaLTHpuWUdlDyovlqD8W4V3YnyhHPoqylFAmqqkhTU=)
                          12: chKAQjKLdtlq9kL4h4y1g19hli8.roa (hash: JFsKC8DTcP+1OSi0Nk84Jd7DSTYq+TGa+xIJCw3f8wY=)
                          13: eighutQF57gl_oHvgyGcBuhwOcY.roa (hash: M/EtpyLKEBlv1ftVFUelzx/zoZNX7Ysh7PkvU8iFiC4=)
                          14: kEphm1CWxvsMAb2r_lfEth-S7v8.roa (hash: iJOt3NMhCw15oHIv/DO45Qd234s64oO128kwjcXoK2w=)
                          15: p2FJTbKZxxBxtXrNJ4Di1VjkFCI.roa (hash: m12vKxRxkrdXLcaY3MlwEqwI5o2+I9pDov63ovpkHWw=)
                          16: rW3tRzfjRvW0Wx6a2_gYjIr6eG0.roa (hash: sq3RUE+b5o/bjHOXJt3/yOnMlXN5bcVAcd3sdI+ExC0=)
                          17: yQh1oq1Ogt2ePutTcx_6C-oKrwA.roa (hash: /bFMmEnYpF9xQ06uk/KHCywfKCr0GtELxkI5iuEJa9s=)
                          18: zJ4YK-UkCeu2RS-DGgJ0EfSTrZ4.roa (hash: d1u31mPkuhzWWQo5z3lq2TH+KdbFR5TtfL682Hmkjz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:55:73:8a:29:8e:bb:19:f0:27:67:94:a9:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
        Validity
            Not Before: Jun 23 12:00:43 2024 GMT
            Not After : Jun 24 12:00:43 2024 GMT
        Subject: CN=bf400638c2fc8c88c4451acef6daf655849755d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:00:f3:cb:e5:21:74:66:02:6f:94:f2:00:
                    da:ab:1a:ff:2b:d9:db:07:a6:18:63:ea:fd:28:11:
                    76:f3:e3:54:74:4d:93:cc:a9:54:f7:97:a3:71:43:
                    1a:24:af:72:64:cd:25:d7:ec:c2:21:4e:ee:6d:e8:
                    08:9d:52:3a:95:c5:64:49:aa:bb:e3:49:41:1e:bd:
                    32:1a:ce:96:29:e8:cd:b8:f6:8b:c1:55:60:6c:25:
                    42:6a:81:e9:36:c5:06:83:ae:8d:b6:3d:eb:77:c9:
                    73:12:12:cc:12:3b:56:61:4b:aa:c3:1c:a7:c9:3e:
                    b6:e0:6a:8b:e0:c8:9d:53:e6:67:16:05:49:7c:2c:
                    0e:ed:08:b7:d8:d0:fb:eb:84:61:84:30:08:ee:00:
                    c4:ec:1a:9d:27:cb:c5:69:81:8d:13:0f:35:09:6b:
                    0b:c0:1d:86:b8:24:6c:4b:c0:7d:ad:71:a4:16:64:
                    c3:82:87:c1:dc:00:51:79:36:1f:8e:fb:1f:05:31:
                    c5:a4:35:21:57:00:02:85:a8:05:80:20:a1:e4:25:
                    75:0b:a8:7f:c4:0a:2f:d0:00:6b:4d:21:c3:c7:75:
                    e6:bd:fe:48:c2:d5:d7:80:81:94:bb:71:0d:de:21:
                    b5:9b:7b:72:bc:27:a5:09:00:8e:0a:ee:87:1b:02:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:06:38:C2:FC:8C:88:C4:45:1A:CE:F6:DA:F6:55:84:97:55:D3
            X509v3 Authority Key Identifier:
                keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:56:47:db:9d:c4:0f:ed:e7:20:81:ec:62:47:c5:92:e9:
         f3:32:c3:52:de:87:e4:86:34:aa:b7:3d:f5:e1:82:5b:29:c6:
         ca:82:36:01:9c:67:d7:72:3d:b9:4b:25:04:50:42:55:21:ec:
         ea:65:c3:3a:b4:4b:03:9c:2a:ae:be:4d:24:f5:3d:8f:94:87:
         7e:fb:b6:6e:9e:63:15:7c:6e:00:84:14:f5:18:71:98:91:21:
         19:40:c6:20:25:df:02:b0:6c:e9:04:66:b3:22:e7:2b:25:98:
         d3:25:1a:0f:33:7c:84:c6:18:bd:2e:37:9f:ee:39:3d:d4:e5:
         cf:5f:27:49:d7:dd:2e:fd:e0:01:33:7b:cc:92:69:84:31:b3:
         d1:d5:24:29:92:f1:12:36:52:13:c2:3d:f2:f7:55:f9:0b:02:
         d5:c1:e4:69:f6:17:01:69:df:eb:d3:6a:7d:af:b9:64:3e:0b:
         8f:12:d1:f8:72:03:a1:ba:22:7e:2d:a9:b1:53:51:d5:63:94:
         a3:53:bb:5a:8a:68:84:dd:6c:78:7a:e4:9b:75:4c:59:47:f6:
         30:8c:db:4e:9c:cd:eb:96:09:fd:51:31:04:9e:ac:af:b2:09:
         a7:07:89:35:2d:7f:d1:27:46:cd:60:65:a2:b8:77:18:2f:bd:
         8e:57:9c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+FVziimOuxnwJ2eUqQ6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4
NzU3NDgwHhcNMjQwNjIzMTIwMDQzWhcNMjQwNjI0MTIwMDQzWjAzMTEwLwYDVQQD
EyhiZjQwMDYzOGMyZmM4Yzg4YzQ0NTFhY2VmNmRhZjY1NTg0OTc1NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujYA88vlIXRmAm+U8gDaqxr/K9nb
B6YYY+r9KBF28+NUdE2TzKlU95ejcUMaJK9yZM0l1+zCIU7ubegInVI6lcVkSaq7
40lBHr0yGs6WKejNuPaLwVVgbCVCaoHpNsUGg66Ntj3rd8lzEhLMEjtWYUuqwxyn
yT624GqL4MidU+ZnFgVJfCwO7Qi32ND764RhhDAI7gDE7BqdJ8vFaYGNEw81CWsL
wB2GuCRsS8B9rXGkFmTDgofB3ABReTYfjvsfBTHFpDUhVwAChagFgCCh5CV1C6h/
xAov0ABrTSHDx3Xmvf5IwtXXgIGUu3EN3iG1m3tyvCelCQCOCu6HGwK8iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9ABjjC/IyIxEUazvba9lWEl1XTMB8GA1UdIwQY
MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt
N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3
LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM1WR9ud
xA/t5yCB7GJHxZLp8zLDUt6H5IY0qrc99eGCWynGyoI2AZxn13I9uUslBFBCVSHs
6mXDOrRLA5wqrr5NJPU9j5SHfvu2bp5jFXxuAIQU9RhxmJEhGUDGICXfArBs6QRm
syLnKyWY0yUaDzN8hMYYvS43n+45PdTlz18nSdfdLv3gATN7zJJphDGz0dUkKZLx
EjZSE8I98vdV+QsC1cHkafYXAWnf69Nqfa+5ZD4LjxLR+HIDoboifi2psVNR1WOU
o1O7WopohN1seHrkm3VMWUf2MIzbTpzN65YJ/VExBJ6sr7IJpweJNS1/0SdGzWBl
orh3GC+9jlecCA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:28 2024 by rpki-client on console-ams.rpki-client.org