Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
File:                     2gDpgZUwYZcsiWvW0nc40IOq2w4.mft (raw, json)
Hash identifier:          4QdXEUv67ydVwcHk+zm9pVPtlafZRCwO6yHAk/y8GKM=
Subject key identifier:   27:DB:7A:CC:E3:C7:A5:F7:1F:49:B6:62:E2:00:67:9E:75:AD:37:F9
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Certificate issuer:       /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial:       018F8A803EA086559BD1E80AE71E617CAF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
Manifest number:          0D58
Signing time:             Sat 18 May 2024 07:00:11 +0000
Manifest this update:     Sat 18 May 2024 07:00:11 +0000
Manifest next update:     Sun 19 May 2024 07:00:11 +0000
Files and hashes:         1: 1XPXizoo3QovA0D_rYnm8sWuDzs.roa (hash: qwrz+qjuXqZ+isqHPDPKLpv0EX4Ks3xqfF4IN3BA/EA=)
                          2: 2gDpgZUwYZcsiWvW0nc40IOq2w4.crl (hash: 2zWoWPKTqEhXUBYvK+6fLVaoEwtyg0amC5NX3cy5QmU=)
                          3: 9Ua5w3i3hNnRvdugF5SVD2EHQUM.roa (hash: hp2nkCE+kTfI7GYFVeuU7M1nxKn9AfgdvE/PObht/nU=)
                          4: Ar-KVGiYVtpz0Y8DDHbWY1o0gTA.roa (hash: OgZ/0uDYXQVcpGfGmBp//mpVXVvMDTXYFme3AtLVQlA=)
                          5: DVxku4MmVw3qknUQL_Mj8r7LbMg.roa (hash: d589bEQUW97ZSHfiuyq3Ov+0SH5tfDOeXhVrB1c4SSg=)
                          6: LR_MLFigiPycxpUT-i8X2ghQNmY.roa (hash: 9bsAi4VM7z1lVXobXwmJTVkUd9f+yhERTqO1UaCMUKY=)
                          7: RUCcY7hqqusxybavPlaAjg9Qrbk.roa (hash: vb48GLj1uxZnGV7RZ1IqUJzdHe5dBOghsZVtUjZNLWk=)
                          8: S94wqkVgjqoj_VVwqnHmJMne7Go.roa (hash: Os6aIKCnDcu9mIZzYgVcwi7p9fbo3zrMX/xDjAtnI98=)
                          9: TQwtrZcBJGFVyrzqqxywcDTXrvc.roa (hash: cN0E3PwxKdY7/qMpZ3N0IQmH+LYovR2/od6Knc2thnM=)
                          10: T_BbSG9QpQY5IElECu7dyIhgRF8.roa (hash: StRfTsXDaWC1O0KpGT9fjWJ4/3oPAkmrqaCRNPVgETs=)
                          11: U9TWmfT5aP6p2exh_0DJ4NPcVy4.roa (hash: tmgVQujLcL7n9dplfKkJ0LCQNpOoMBJETXvXZkMkVcY=)
                          12: UZO-TdldA4yqzW8QY5517id3zEk.roa (hash: XEjipbShP5e411Q/osgXs0IqkcVgDMli/fv9zVEsnsw=)
                          13: YYid5hq7Rw6Ufdhn62mOOwhka0E.roa (hash: 7gDT5zzL4KnPdw24o/Xvo97bsU+iet+KVIgt3FutxqE=)
                          14: YbKFBle2Lek2iBEnzvMGLYg07hE.roa (hash: mUzIguuOHpRsY7dy9CEGCsar/t/4u66NOxifi4J7LUI=)
                          15: huLLn7xrE3DWANwTQ6drS7GFFXk.roa (hash: +N6FRVjf1gbVm1vh95bmsypXCPeAJskro2vROSbXjhw=)
                          16: iDu3RuJMawGYwdVvr778j2Nw8cs.roa (hash: 4nJcWUZs6CxaoUYlDrKdvD3zRYvY+1xyM5pQbcuidOQ=)
                          17: iIZ4BeX46IEbILEBBzhpOPlBZBk.roa (hash: N58qjEuQuVEZl66GQEp3q6fnc1MWVBJr4w8n46juM44=)
                          18: lVFGCkfN6Q7VzMV0icYe2zUI9wg.roa (hash: QbspNuxuVU8sqfWsmYYcgVEQZP1tY2csz6uimqz7uOo=)
                          19: m5SB2Yl8GV5M8IArGz6we-2SkGQ.roa (hash: jds1OkLvAwsjnsT6rW2+EEau8lqakNyokYQurzMob3A=)
                          20: oPsRxv3z3mxNgBPZo4pb0r1iVdI.roa (hash: VsTLnr+jB2Kcg8GagNEmUhwLJ/MYkBv7FFi6J3fXo1k=)
                          21: oT-QA3TRrGv0UgKZYUuKRpppMME.roa (hash: 8Hp4Zq3PYJCPvI5KVDS3LmKwYx7TYsaHUo2/KskqYh4=)
                          22: oq6FJoCxI2q3o4XGq4xg-2S77tY.roa (hash: mgEiRLTIlQUfq6TOKMCjpUNS7fgeYq46yqwlQT5fn/k=)
                          23: pDcrV_Effw5sZmmTO67t5TDYVvY.roa (hash: gWnr6vjoItlKVOGJKaBbPkftIv+09HsbSr7Km49AOTk=)
                          24: wdkN7410J6eBg9eWjYxLVEUtvts.roa (hash: qxNIJ08tnPOPZkQpaDzdDku6dvvmj5NLdxTeC1qW8HQ=)
                          25: yNcoCafp-Xv_-Bh_6IkS893-a9Q.roa (hash: sA3Wdu57f++yTUg9BnkEVQqWlYsG309BFkhebT0VoKE=)
                          26: yptHIqko6ki9zrGWcKPD7ViNe9Y.roa (hash: hECmKdDzts9+DNYIEtbCDeJKqR7l7Bzsajymu/DpQZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:80:3e:a0:86:55:9b:d1:e8:0a:e7:1e:61:7c:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
        Validity
            Not Before: May 18 07:00:11 2024 GMT
            Not After : May 19 07:00:11 2024 GMT
        Subject: CN=27db7acce3c7a5f71f49b662e200679e75ad37f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:9f:e8:29:a1:ef:e0:9a:3b:21:43:ef:32:
                    d2:ef:59:cf:0f:67:68:7b:e3:db:01:39:6c:7f:9c:
                    4e:d1:0e:0c:1a:d8:72:ed:5f:d0:72:e0:20:c8:fa:
                    33:66:6b:0a:b9:28:99:00:50:52:ef:9c:00:d1:21:
                    43:2e:bb:be:08:36:58:d0:d2:cb:ef:48:03:de:06:
                    28:d3:af:0f:eb:57:e4:b5:d7:b7:f6:64:e7:1d:ed:
                    9e:9f:f7:53:13:4a:93:65:9e:7b:bc:63:cf:73:59:
                    f0:a6:ee:d2:31:f7:63:bc:a2:a4:27:25:69:03:11:
                    69:61:04:a4:43:39:04:d3:47:68:be:b5:52:bb:4e:
                    dd:17:87:b8:91:35:df:8d:5c:51:ac:14:23:82:c8:
                    a4:91:79:76:1f:ac:e0:7b:b2:8a:34:16:07:01:76:
                    b6:b5:56:91:3c:bc:9f:d5:1c:73:52:5f:79:d5:cf:
                    41:92:88:0d:76:ff:59:5a:91:9f:42:95:2f:41:7d:
                    94:35:21:a1:50:e4:24:a9:72:e8:92:71:66:88:4b:
                    f0:6b:ca:23:90:28:bc:79:de:b1:f0:4c:6d:fb:89:
                    ca:c7:b0:c3:a3:03:a5:3c:60:62:a3:13:9b:c7:f9:
                    6e:15:88:31:e1:70:14:ce:1a:21:49:f4:06:79:d2:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:7A:CC:E3:C7:A5:F7:1F:49:B6:62:E2:00:67:9E:75:AD:37:F9
            X509v3 Authority Key Identifier:
                keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:05:af:76:49:5d:44:6e:84:a3:6a:bd:47:f9:7f:58:f0:
         1d:a5:a1:f8:07:f3:d8:9b:35:66:69:6a:16:ab:2d:e5:09:43:
         e5:39:9d:11:6e:10:d1:0f:eb:56:7f:86:5b:01:f8:a9:b7:7e:
         60:25:b0:ff:6d:95:f9:68:cd:e2:d4:61:9e:ca:2f:be:6d:6f:
         6a:fe:91:97:5c:50:4a:ea:be:a8:49:c9:9f:7b:b5:81:d1:6e:
         ac:fa:8e:22:f6:16:5e:12:dd:cf:e1:88:c7:ee:8e:ee:ee:af:
         ef:7d:90:a7:32:19:bb:19:f5:22:e1:37:bf:44:81:91:ca:f7:
         cd:2f:eb:fc:6a:f0:5e:00:df:51:81:f1:d4:50:b1:d6:f5:83:
         60:93:c3:38:4b:bc:9d:9b:79:8b:0a:c7:3c:cb:7d:27:32:ff:
         a3:f2:35:60:c6:50:13:31:64:c2:d6:c2:c5:f7:0c:58:27:7f:
         c9:57:f8:5f:a1:8b:0e:2a:ce:d2:21:da:92:45:f0:4d:93:60:
         da:77:0b:58:d7:e8:33:cb:a5:9a:3d:1a:c8:9c:10:c8:68:b2:
         59:29:4e:38:f5:68:04:5c:d2:59:fa:ef:2b:f6:1c:4b:7f:a6:
         2e:86:6d:0e:ae:ae:3f:87:fe:b1:ec:fa:f4:6e:ad:61:74:c0:
         50:04:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:49:54 2024 by rpki-client on console-ams.rpki-client.org