Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          x5cSOYp9KAj6daJNXpnhXjCKBaLxKtHPLaSr2/rLoPQ=
Subject key identifier:   A9:42:3D:A4:8C:EC:80:1F:78:B5:32:94:DD:FC:17:53:A9:37:B6:43
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       018EF6DFAE587FD4E17A8660C364BBBC7F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          11D7
Signing time:             Fri 19 Apr 2024 15:00:37 +0000
Manifest this update:     Fri 19 Apr 2024 15:00:37 +0000
Manifest next update:     Sat 20 Apr 2024 15:00:37 +0000
Files and hashes:         1: 5PEKR9pLMcmTc-ncxigygBnbJRk.roa (hash: +v6xjlsDn/zKLDemkQazAMOHXo3Te8jTTF4siPAWhRo=)
                          2: 6142EjFhuYPM6uoTbJ2F16dv2po.roa (hash: hLIagJcK0+gUpsIbKUP7KbExZOqdwGsT2LAodPZwJiA=)
                          3: 6NL4hH3WuXovydNutgqWGQv5utE.roa (hash: wB4RuHXBrSdutTxUi0h/GdFQ6wGPJBRpU6I9taGj54I=)
                          4: F1cfinQaCToQ0BcRHAPARScLdRA.roa (hash: NFHhKAH5vo4ic9BnW8CIDg19ToUjpuyrhtiuaqksZkM=)
                          5: FkxnnMJgeL05H-9TBSOsWkmhG98.roa (hash: hrzUTKolE/C3mwm71OQVLPpW3GBgF4JFlQ9r0xGnKZ4=)
                          6: JP6EEoI7enQwkUcxqAZ6IdSadOg.roa (hash: 5p7linsTTuAdtLcD1+6FbRk9FNRXbDGx/EYCgT+K52Q=)
                          7: MnVEpKYMu71h9uayNXUfWfpb76Q.roa (hash: lE3IvmjM6nX1Tnm0DtJKTXMv5Eyw0LXlZLWdnj8wvhM=)
                          8: NEdYdGyxbpJzi6a-X9yihhUcmV8.roa (hash: Ix03Jk0TiaSOReqK4qnX7KYsW1Bu4aYmSk0w0bxzxbE=)
                          9: PchTeY0ZpTGCiKuC0BHC5XTSQ48.roa (hash: CLgz6YoiekUgBGhWsRtNJogKRnIGATPwdN7SZ9XHNFc=)
                          10: PgtHoL_30ZCKzbmvLwX_mBhsiIE.roa (hash: H6ehxl++F64a1IPTlCpLBDOHGwyf3IqUdAuA8yva3ZI=)
                          11: Pk3rT_LrAIL8eoa8iay3qtAt7Ws.roa (hash: qBIGBHmo+nUWMpB5ZRg16jd45LbyLoyy1ZI3KBGsIRU=)
                          12: SLK-4BdmGHNLtcfnMbxQYt4CK-Q.roa (hash: Z2o/Gc3fMt77NS30S4HkJgt9txesp7p6YypShGpwiEU=)
                          13: UBxeqE_3q4Whw4Wr89PER8o1WvQ.roa (hash: nF/iA875/YKBVtx4zBBNkcRaNQD1A51hTGP7LTwBpkw=)
                          14: VoBPuO-qugJSqon8tNTUJ0qnHt0.roa (hash: d8xAg3pDx6cDsjXrlMv7rI51/9LtPP4lid17WyeSR54=)
                          15: XWUyYH6Qi5hsRwgoMhzbgvxAuvg.roa (hash: mMGmQCmK0WvprQlXqDNeY3jw+SxSeQC+KOroXTaVdPk=)
                          16: Yq3FCaUSt6fd6OOQHrvzuYqjHKA.roa (hash: 8Vi95uCswqZPWlXsgZXfBArujKBxn48dWe9rDr6vq94=)
                          17: Zm9a0MTbA4UvCkxsi-OI0oIWOmU.roa (hash: beJiGPq13BvREPIPypF+tq5GsFjxjMrN408iLs6tNLc=)
                          18: a99x1hjPepf9-zgAGO0iM1GVgbA.roa (hash: l9zHu/UNl65mqZVZogHYtrsioie9JHrAZtYEJOsg2eM=)
                          19: ak2_KVOpHneN6Dtgh8nyE08u7L4.roa (hash: 320s2ZIwcGSQITFc8TxICvIoR/pHOU5aIRLKwz+nZKI=)
                          20: dBxPIG81JzZ-areNNkFbuh_J2mw.roa (hash: ypbimx/GSFQbDSpbjgVERc3a6KQKMFrunpLSh/4FagE=)
                          21: iBttbv_nC2UZESGmFzPEmSbirXY.roa (hash: WTe05bMdgJXscMIjqK2jRTJJAahu0pyQ1x8KOq3JLJQ=)
                          22: iIllXOhTLIFlw3uLJYq6owxk4oY.roa (hash: HzncVs48U4rmJzjueXzmxR5qTiQFdeFWlybfVa6ItwU=)
                          23: li_xee7nYJLkhbkJ7qT-5-xRZi8.roa (hash: jfdv6ZsLltFnZgO1MnOSkaGLDNLiSRn+nnn2m8+dyW4=)
                          24: otc1oikAXi-stwJ8bbDC95musCM.roa (hash: hW/5B1eyo8J0leS/UxNNa/tlpz9c2tGOWa90hj4BBE4=)
                          25: pDPVkOo2PzBoquTjmnaGLcobNCk.roa (hash: AHwla5TxjKqdyN84Nll30qs/lM5QN4iKIwvatgV5xLY=)
                          26: p_b6iVMu6BN4UVVm9z8IonBaH9E.roa (hash: 0v8VOFf10Xj+RwwxyKLaUyHBKTl+m/Xj/RENiPpV/ZA=)
                          27: q3fcLz7-yMl9t9YsM_WsuH9SvMM.roa (hash: kZRSDAIRV5iOjdH7Ti0HQa6pP+9uIRrCr4KRvGelt14=)
                          28: rIy2y2UGuPkFE_6wdluKTOwUx5o.roa (hash: cYdBTXzH07xkhH8hm0iQ46IcsCBDILKLBXaAAiaebg8=)
                          29: s0ioViFZOBIqfUqe3yjbl1zCnnI.roa (hash: rwgwYNmGuEnYj5W/l6Bv7MaUHDNwRTFsmDb85+F/CP0=)
                          30: seBX4zd3kP7PUyXY4xg3iK9P4pk.roa (hash: EAZe7QY4ntNaDD3BUuGrFHmMzdOLF1a7bxSh0i4dCUs=)
                          31: srvIO8uI8sswTaQSAvEX0uu0kqM.roa (hash: HWX7qY0tX8oh3zI4IoDfD8r073JP00X4hqABe9ck4pA=)
                          32: t2JrHUqTd0kBoQB8g7V324EXGlI.roa (hash: JcSA/9kpashBdZQicFXiQRuxXk7PSkDLdqi9KH1OC+0=)
                          33: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: Z4Ve4KvQEinkC9oXRTIaKfbBb+is2yOX63Dbl6/sHrY=)
                          34: whEDx1fJmFyWeNngfdkn2P49tgw.roa (hash: G9PdiyvPnTl4dn3FQaUr7xWlCP/EwS437+mHahhukdk=)
                          35: z7XFN6JTz3crXxYDt1nz82APQt8.roa (hash: x+y94JiGGP2AAo4WOZX0dvMgTjwyeblKTdLba7ED66o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f6:df:ae:58:7f:d4:e1:7a:86:60:c3:64:bb:bc:7f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Apr 19 15:00:37 2024 GMT
            Not After : Apr 20 15:00:37 2024 GMT
        Subject: CN=a9423da48cec801f78b53294ddfc1753a937b643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:11:bf:6f:9c:85:c5:b0:e8:7f:db:dd:1e:
                    bd:7e:38:da:bf:4f:22:b8:f5:92:c1:14:a0:ba:2c:
                    11:e8:a3:08:00:8f:79:f1:e9:1a:e2:0d:ff:18:31:
                    7b:64:5b:37:f3:6a:cc:47:fe:64:2e:d2:08:e7:80:
                    3c:3e:86:d7:f8:86:b2:b3:18:ae:67:24:95:ea:1b:
                    6f:b0:bf:6b:bc:d1:a9:c9:f3:48:91:cc:a5:15:bd:
                    3c:a6:e4:19:39:6b:55:d8:87:d4:68:c8:ef:93:68:
                    e2:d0:8b:39:1e:75:d9:46:b2:d4:37:91:be:12:17:
                    06:a7:a6:34:b3:42:e3:04:81:00:21:41:70:f6:23:
                    0c:e3:fc:ab:b2:3c:77:3a:bd:10:3c:20:fc:5a:52:
                    d9:8b:8b:3b:7d:fd:34:91:b3:8c:eb:fa:ea:22:0a:
                    de:87:f3:c9:51:53:78:d8:79:58:79:e1:6c:86:e5:
                    1c:63:eb:97:7e:81:3f:3d:4e:d6:8d:12:b8:2f:86:
                    81:ad:5a:4e:eb:0c:f0:76:78:ab:13:88:6a:8b:90:
                    5d:a3:95:39:36:3d:b7:41:61:51:00:e6:f7:3b:a9:
                    44:6f:1d:69:ba:96:ab:81:98:a8:22:99:ad:a0:1a:
                    03:06:f9:9c:0b:c3:e3:1c:2a:62:73:bc:05:e1:8b:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:3D:A4:8C:EC:80:1F:78:B5:32:94:DD:FC:17:53:A9:37:B6:43
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0a:aa:95:e6:b3:3f:2e:25:85:a4:cf:11:2c:70:6f:22:71:
         6f:93:c4:95:b7:5c:a7:18:68:6c:9c:a6:26:36:4e:cc:f5:9f:
         97:54:06:20:65:6d:23:39:6e:c9:f8:0a:55:aa:c1:5a:a6:73:
         a0:d5:36:0b:73:cf:2a:3f:f7:c6:dc:44:54:fd:dd:ba:57:ef:
         e4:e9:42:8a:a9:e3:34:d3:3f:6c:af:73:c2:cd:ee:73:54:03:
         38:cd:8d:c7:8f:51:a4:d0:36:10:3c:cb:d7:9c:ac:23:19:4a:
         60:68:fc:e3:dc:00:d4:c9:0e:fe:fc:b7:17:60:c5:f3:6d:03:
         a4:83:e1:b2:cd:f0:94:d5:c3:2e:80:14:59:0b:88:8a:9c:a1:
         1f:b3:3b:4d:ad:61:38:48:5b:98:24:3b:b2:79:5d:53:2c:88:
         06:3f:05:d1:df:e2:c9:ae:a5:0e:c2:a0:f5:0e:78:e5:6c:17:
         4f:25:ea:87:1b:7d:76:ab:74:63:3a:ca:29:ae:46:0d:9e:f8:
         2d:18:7f:6c:b8:54:59:7c:df:1f:4b:a9:e0:40:a6:02:fe:4a:
         f8:b6:af:ed:2c:ba:96:e3:fd:18:48:b3:76:15:21:ac:02:4e:
         2d:6f:1f:6a:f7:55:0d:f9:bc:b0:7a:86:87:da:f4:63:b1:6b:
         db:82:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:33:01 2024 by rpki-client on console-ams.rpki-client.org