Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          2jsPYMt6sHIZBHLruM3Qdw1jJ9mkSlw+XcOzjml3a+0=
Subject key identifier:   76:04:E3:EB:FA:48:B0:34:C1:F2:53:9C:58:AD:B6:6F:51:54:0F:8C
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       0193580937B1DF5D1D697FD5E70E19C6C2E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          11F4
Signing time:             Sat 23 Nov 2024 08:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:19 +0000
Files and hashes:         1: 1-3-ESaxkzW3ZQw38WPZJ_tsdHE4.roa (hash: IlFOdd5v1BJiEL8xIUBiJbErU1KPOlCPozVeygyf2QY=)
                          2: 1-HAvTJ97cGWI3qaGt2MN01i1ANY.roa (hash: xTsrxkGfjCMDIs0l9mLl7ItMVHU9CxHpsoUCHqRnp/c=)
                          3: 2P6kXl1w4W9_BWXcvTCb-aFXQ4k.roa (hash: 8sj0DOCsegtDtHprBtWqGf8JCVluKRYZR8mUNa8GTq4=)
                          4: 2npsbeo06LOYfx6QX9MypRnulo0.roa (hash: qz0Kl17iyLQPCOjV90EKtr40RnQZko25YYW38/r4KS4=)
                          5: 4Hsgobmz4OkRTDXyWHg99hI2Ejo.roa (hash: 1R1+znGsCivsZ/iBD8yMnA4JXDxjgiyNPxLx/0Bl6ro=)
                          6: 4kW30o24_DSU03CnsZ18rNm55fE.roa (hash: WYtedfrktJWa7QW2qQQNjcQUx3BP+wSSNkT3c8kHHW0=)
                          7: 5Oi20fgxXf76vlX0CIgw4-yiL4I.roa (hash: uatvOLiaOY+pfdUEAAbccfhIyU2jAsWt74gytgtBvss=)
                          8: 6zHO8Czy88SHXFiKXKb5bYn5glA.roa (hash: ulSbAArluBoKii2HDvaoKKebd+uGYt+Jqd/riT60woE=)
                          9: 81sism6nJsv3F20SZbGAZb9CLTA.roa (hash: 85CPBkiJ4Z/6QtBpKQYkTGm4sJD1nPPBbq+1csMkyCM=)
                          10: 914_ga3UMmvtKts0lYhztetP8tg.roa (hash: vAaUOwgjO1SdYN5JuQ5PPw2cS8ZqRI29WXcD7dFkgc0=)
                          11: 9MUEHib9ozGQn9WkavzCtQXDDac.roa (hash: rmPqiDNmmsjQkO8oVQX8HELqv8+M8zhHBOFUDSMAgsk=)
                          12: A8-av91QGroZNkUua6jhsKZgz0A.roa (hash: 2oyN7oy/oVV5mfN23mWbfNGv1w3r5ZK3dCKky7RzRr8=)
                          13: ASyu6a6TpTG5HUR4uwZARJmsi4E.roa (hash: y1G77NmvFnW4KwLqtqoVy5tKRxstK179nci15hnHEx0=)
                          14: CBhFbyFq8paIYUYc9uji0r5cUaI.roa (hash: NdGjMX8rasaGOzzfJlU5KHjBhImJiKtMz8rVODdy+tk=)
                          15: CeS9IGv5B3VMKzT0HQ8luu8uar4.roa (hash: sWDhVdAbKLYumx31uNfzb9sxBUKtM04YuqIrQA05igU=)
                          16: CsMiRnDn04-13qj2mOB4Lyc6YTY.roa (hash: U+GwIsKn5RGQHvbqB5SkD8NlacEA/jyL+KlLQyhYnKY=)
                          17: DHkw-9b6iKs4e7dfR23U7wjR2B4.roa (hash: ccz7q3BHJl/rhHAVjQXE8tQglYWTOeRqQtr3FDd3Q1I=)
                          18: E8LYneNC9Fbt5JG2blqtmNZ328c.roa (hash: 7vK6RvDAJewr2z4Bkt8ybevgK0jaa851bURoES7M1h4=)
                          19: EjtJ2vU1S8pVqUWUh5PeCW4pwDE.roa (hash: qTUeWqyndIVB+atc/2PdsKGwVHZJi1Tw6c++GorcFgI=)
                          20: F8kOd79BzwrtMG0iXrjnf4uqphs.roa (hash: 1faqv1YrtdMYWrQkl4IdQxDhtay3qTCNEFoK4KCd7VY=)
                          21: G3BVg4yke4NDxUFlv_zFpSnF4Nc.roa (hash: w3g9C4T32tvVozRRis97p05rPe6oPb97zc/GoQ0Gvuw=)
                          22: GGUHyBSxqp4WeRXH-NZ2wDGUmIg.roa (hash: k+R2WJPOBEhLwsbSnjRzA+CfRa0rK9gLf2TvTsGnrZA=)
                          23: GPCgOkDy6-72Leb7HirsigRfBF4.roa (hash: UJI5/0YPT5EdKQ+VmZ5E2wi0EnxI4FwxgSWJ3y9wKt0=)
                          24: HvzswHPBy6rvY1gikwqKW3-pFe0.roa (hash: VF0VHr8+si6DQ8V97h1OD+aPu9PyXY/PjWz/QTEXmNk=)
                          25: Iw20cHOSTnJ5LrmjydopTB_Y3ko.roa (hash: 1Spm5ZeZS6z5Y6FvKVXuUziOc1K4GA5FBbCjm3GXT7k=)
                          26: JfolB_n-uhocLHroadb3eMH01kY.roa (hash: 6CAx7n70DTBLTZfBnWwtIDvDbee6NypJJmIRn/Ag2cU=)
                          27: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: 1hW3tDN9LwFxhEyfTqzbZh5e4KJd7qPPaPIG5647InI=)
                          28: NIsqSVrDqCkT_DxOkHHBW617cU0.roa (hash: skAMXVQOHa8CfxG5QlHScEd2fCQNoz6ddPlHo1Epphc=)
                          29: T4Png4mY77o627NHSevjfijmxds.roa (hash: Fg2YjzKui3a7mYsmG6AXkoh3WCmWMGaKxDcVW9YPnx0=)
                          30: VGWxv1lVxi2D0WEZGovkR9hAEE8.roa (hash: Om7dRkLrk0nNVv3ROCpohCznzyQkn0650ASYslJs6kw=)
                          31: XN0vw7HKgAWhLOqAfGD7-OX8V68.roa (hash: ijAm4wGsCuP1/s2vvTHiCpsVqkuMIJpiuc208SqGde4=)
                          32: Zn7JyPRua3Wdd0m60C4hHBDjZyA.roa (hash: uFXqh8pRxF2h+vAZsuZRvWLFtGWaj8YcZ3N2PRUm6AA=)
                          33: _ETaswa0WitiWVkBFYZeKHQ2c8s.roa (hash: SZKTJ0Hi8zcANOk21VYQ9r5pEu5NQnc5TnMIVMdNDx0=)
                          34: atcsCPIr6L2eTtcdMno8iQ6NFRw.roa (hash: 8J3IPA5v8bopFJhFLcG15/HLdmSNKUZLg6aOHxhA6/w=)
                          35: b10Pd6sriydu5J5J5t_M_vmWbj0.roa (hash: mvtdt+2Zy4WYAb7frCl/jZQJ6KWv8NaW8j1zIUuxRXw=)
                          36: cv50Ygj16I3buOe6GJNaAo3pwDM.roa (hash: /nS2b4qZwGqCEOEuu2HsHK4EKSc62U+s+N23JnvwU8o=)
                          37: fNtl_5-JVDib15Lln3MsBqFNBm4.roa (hash: zbyKwzuDp3Ljja0bzYKNWekwINUvkOv60lWB5cZMssU=)
                          38: hmPIaWjDLEiOySSArWcaGIXRr8g.roa (hash: PKN1yS9A2yzUJex14UURFwzM2ResOSoTSJEaMQgxWGQ=)
                          39: icr5e44vLtL_2vbymZcZAGvMx7Y.roa (hash: 3JFfSD6HFW/h2f8IS4u4ovcGR/sx0x6n6WjVT7GeW6o=)
                          40: j9h52iWOsKT12q-BrmfuIevubgA.roa (hash: 7AcZb4B5RH1u86bgIFtqIofEGZOrepwFab0r/cXmPIg=)
                          41: k3JjgyOxRM0kMMzA66gJuHobHww.roa (hash: ioLFiHVQauTWtOOgF+qsHMWDA1ULeNwcInrgWSDkhto=)
                          42: kQbb-sqiprt4AMrQekJlimjEy8U.roa (hash: DjYKXTesR5HtE1PAPwuasivejcg92eWCvwS/yEIsxJA=)
                          43: ksTdIvTlmf3VyKCOwgTDjsC4u2o.roa (hash: g/G/f/dhUywgYQDYl8y8m6H2ZKOmc/6gHiq97r5Rc0I=)
                          44: kt9J5p7o9x2JM9pxmJ08eB0nDGg.roa (hash: FVM0bn58+krMcnDGrTaOW9g1EY/qXJaxavqwW5ce1/4=)
                          45: lOv_CyS_LoWTbRYagGOXw3eTf2Q.roa (hash: td1zqKa1LRft5c8AvRHfbgAjOmxD0HCUnKuwYURtwjU=)
                          46: o9yEWHSQZ0z05zbwDkgEOlGfMk0.roa (hash: NT2S2WpkTcm6gJi05x4oeeWmQc9in7XFU2Wlr6CAwjo=)
                          47: pI0TG-U1AZnpoTEGnhXuvMWm6Xw.roa (hash: c1OL9VsC6n8DZB6cbXk+hVxrzlLEzjjQHzPsHex7N1Q=)
                          48: qUF8-3PAX5ouCZOJ4138XkTt4Rs.roa (hash: ag2lJLJXarj/edmWmMocxvP5G72fGT577Lu21azdr1o=)
                          49: rmgWADLTo0N_RvlZCQpB-Iu-9wA.roa (hash: 3DiTwJQfsYYC/gJcG5fvyrrcg8u1uxbjyFeh7eu1Jgs=)
                          50: tLzpABes7NzI0gkK7xIo5WP1AA0.roa (hash: zoFli4tJdlIDA663OFU27kpPxBsE05Z5i03kFOaHXag=)
                          51: xkF_Z53d7wdI5bWbtqALYaOZEzI.roa (hash: GGg7ZFshDCf16rwso94nXMirZf8RZLATuKWqsMFxgw0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:37:b1:df:5d:1d:69:7f:d5:e7:0e:19:c6:c2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Nov 23 08:00:19 2024 GMT
            Not After : Nov 24 08:00:19 2024 GMT
        Subject: CN=7604e3ebfa48b034c1f2539c58adb66f51540f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:88:d1:2f:ed:b4:55:07:09:15:13:05:f8:
                    11:b9:57:82:a2:d5:53:67:84:c7:99:0a:76:08:1f:
                    71:7c:8c:44:36:4a:6d:e1:0d:9a:39:fd:7f:8d:2f:
                    8b:cf:38:d5:7a:ce:7b:20:1e:0b:0c:88:1b:91:f5:
                    78:3b:bf:db:36:e8:5b:78:29:c0:59:81:9d:47:3f:
                    6c:ae:04:38:1f:28:c5:26:ec:5f:6c:96:8b:4c:81:
                    fd:c3:c5:44:84:55:1f:f4:d6:85:99:ec:c8:b1:5c:
                    c0:f8:10:55:35:5d:a3:6c:2b:68:cb:89:b0:85:5e:
                    e3:4d:de:87:a1:c6:a1:d7:29:9a:91:7b:37:70:4b:
                    80:a3:f3:60:86:3f:05:87:33:aa:97:7c:b7:b4:70:
                    93:7d:b8:2c:40:d1:18:0b:3d:cd:9e:d1:7e:02:72:
                    fe:a2:65:5f:15:69:00:a0:ba:21:78:83:47:e8:8f:
                    32:4c:d6:e5:b1:bf:02:f8:17:d5:85:f9:05:39:89:
                    9e:88:8f:b9:0e:4f:7d:b1:da:71:69:00:ce:2f:10:
                    2a:75:93:93:71:77:95:55:fb:a8:0b:e5:92:5b:d4:
                    0a:92:c4:fd:45:c7:c3:7b:d4:c9:b1:26:fd:55:0e:
                    80:b1:25:09:6a:ba:98:bb:64:55:db:9a:7b:20:b4:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:04:E3:EB:FA:48:B0:34:C1:F2:53:9C:58:AD:B6:6F:51:54:0F:8C
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:79:37:db:c5:90:90:64:45:5b:01:6b:54:b8:00:cc:33:13:
         b2:5e:39:46:68:0e:a6:e5:68:86:a7:17:f7:d1:c2:3c:d3:4e:
         5c:1c:e1:05:a5:95:31:84:74:32:b9:26:98:e1:fa:18:43:ae:
         44:ea:f0:bd:36:d3:60:11:7f:b0:cc:14:d9:6e:4c:97:3e:dd:
         97:d7:78:4d:9b:93:40:5d:12:2d:cb:58:6a:57:8e:fb:47:97:
         15:52:2b:ef:37:41:a6:4e:1d:2c:dd:df:47:84:69:1b:ef:45:
         9c:e4:b3:2e:98:11:09:88:23:5a:4d:b7:0a:27:65:57:6b:83:
         64:6d:00:8e:16:97:e5:f7:e9:e2:56:93:a7:02:04:05:4b:e1:
         f1:79:5c:9c:6a:04:0c:96:5d:2a:fe:bd:dc:be:0f:81:31:87:
         56:b9:89:97:34:f4:88:1b:17:aa:39:7e:e3:3a:03:57:65:32:
         d5:06:db:01:87:3f:99:08:2b:93:24:f0:53:95:47:9c:39:32:
         28:cc:f3:e9:12:fb:97:e9:31:3d:f5:72:ed:08:48:93:d7:19:
         f3:57:c8:ff:3e:56:0b:ca:69:06:91:42:12:19:72:e9:73:5b:
         57:97:c3:ee:e7:a4:e8:13:f1:f7:57:32:8d:dd:2c:cf:f1:ef:
         3d:a7:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----