Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File:                     CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier:          5vgHz0XxqhAvMzPQiZnAE5L2mcYbd9A0LAqk6+Hi+YM=
Subject key identifier:   D9:86:11:F3:1D:B3:0B:A3:E1:6C:87:09:68:86:BD:5E:DE:CA:7A:CC
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       018F8DB894A0CEAD37123E54D030AC24C4BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number:          1196
Signing time:             Sat 18 May 2024 22:00:35 +0000
Manifest this update:     Sat 18 May 2024 22:00:35 +0000
Manifest next update:     Sun 19 May 2024 22:00:35 +0000
Files and hashes:         1: 08xbEV5dYJsqrQp7uTPtouFFNXI.roa (hash: YylyTDnhEx/302w0SPeJCoLkLi4wBdv84f78hlN+QVg=)
                          2: 0Jx4AxPlA8XktmLUzsz0CbTmDO4.roa (hash: eHl9zbZt7e0XAhoeHgKEdNo0r7F5RBaNa+L7o8ifwGo=)
                          3: 1-FDYjlAnQZxCptAWSAxvBMyvtdM.roa (hash: aa1bPsjDFid9D8ftCEJ1Ns44rfrk1DQE33TtdhCG+QA=)
                          4: 1-ajR-9B7cdVSJTy2cq0LYaHZNdc.roa (hash: NxMkqBvfyfwOiuSUCKE6c3cN8j73/gxtNb2KgkIVAgk=)
                          5: 1jhDiIYrLpMTHwSdTOr6zy9UsOY.roa (hash: Wi2qR68iWH+TphUPVJJP+isZwrg1Z3yZMjsuUFRn34g=)
                          6: 26qO268wEcAcXB5t4PDV5eJPiU0.roa (hash: e9A1zcJAH+QV9CMnrpJhfncM8bhPbGh19QAjv9XlZVk=)
                          7: 8u-JtuepV1qTRe4mewjV06Xxk94.roa (hash: VGmAE8IbWQQAUpBf2xJmmApptXu1V3uXLrJPk6OE0+I=)
                          8: 8u1DoFw30m_VOWPLD6Tz8WCvlAI.roa (hash: rqM7iqoSz2oyeYO6p20FDKKbWqWAItAT65VbZRXqLbE=)
                          9: AADwvNY11BeBRU1e2F5w9CVtQK8.roa (hash: eGOeV4eEjZyZ1fuqfedoPWOedvOSUsL+hDBiYwzo+OQ=)
                          10: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: JYWERRHShluVRMtXbV9QUz4RmSTNc8/A8OmN9XrehDk=)
                          11: DG4ridp-MWB2AA-npxQOwU7Y3as.roa (hash: i9PnLBqaxGRUUUYOZRAqlK2xnuJFwfWo91s+FnMrpSo=)
                          12: Dv0hh37M2hm4arOUOQNcVTTXj0s.roa (hash: UiOSeWwtqPmBU1nd1teVdEncT7dGj8RSi/WUkeS47I4=)
                          13: ENhmKGve6HMvvjL4B08HvaGV4EA.roa (hash: 6CStQ7FoWQJcKj8Rn3yNqRvgfVEx9+rENvcvHJ3epDg=)
                          14: EXFBP5IWdwvW2q8kZ_776jD8cSM.roa (hash: V/dwv8ShYd/utrQQew5scCJxjum0qmH1IGX9V7Vka28=)
                          15: EnHKWmvKiaYwAlcBJAynVEsEFV4.roa (hash: dsdSFJ0qt+0VyjsLIgPQUs+yVrsFQz6ZnrmJrZCJDkg=)
                          16: HGllR8QozTx0dgKW7XrQ71oE1CI.roa (hash: C6yrNaF7IZexK2Vh46+JiR71o5ccZ9r98noVnx7TfpQ=)
                          17: Hgx22Q9o6OU2VcwQjapWLsxVsX0.roa (hash: cAvz5/vi1xc62ly46fcIgjE5mXTUlYaiMVaDBzbp7fc=)
                          18: K0pYXl6_B-WbLl-3d57pPmYbfwg.roa (hash: jnb8rl358xnPZctxA+uad+jeQjEHt2w+YxT5micfxo4=)
                          19: KNunyHSe4TW2lAFpTyK81XnawZE.roa (hash: rOcteUgtlHgBz1xYlZun68X7kqqALroKY63C/cyJCU4=)
                          20: KZhg2a-gVKf281hl9ixBZ5OH50g.roa (hash: bEci4Gz3A/OfYu/SOWalohuK8KM+d49JCoMleZ7j5js=)
                          21: KmhLxxgBgVBzswli0PYu7RYKHaQ.roa (hash: oq7vqgQj1OZU4yVNYLKFJyoq010ikluNzxIHkYsgVMU=)
                          22: M1mWs0qadnVtk0pqNP-julLyXbU.roa (hash: SdMQXIP8JKpblluXOWuZOtIXUen6Qrv8b5NpffzSj+E=)
                          23: NSh139o0xqsjND4g731FhVHfm-4.roa (hash: Z0rI6e4EXUgq1dup99lisQXj8ul82U+tdevD9j3MOYI=)
                          24: OPCJxZgDThn6q_4juBx0gQoGRfw.roa (hash: ERUeHjhjN7kaudypV11oBDu5xmRfn/w3wIiPqm8rJVo=)
                          25: QT1l8Sj5UuzdlSt-WXP21lVP30w.roa (hash: CZXAnAE8/atNfg95vN2RZGlC4y/VFVDs22/H5EthjgI=)
                          26: ToyquzuuYlvBBxx1F623uhMw40o.roa (hash: 0rasbmhw8WixgEqT0G480JRWcIFnZCJPK1baEoI/ZOs=)
                          27: Ue_lxNppAzB5mRwvK6c5gRBj28w.roa (hash: 6gfwHrTuiQdGSp92xX4Ce2vze2MtiLfM3q+vytYNib0=)
                          28: UzFqjPN4pN37OOeLpftcaKnuY04.roa (hash: DFqb6hsCUOQuNWgOAX27vk2aUgPCTajZQzCeLw8jHoY=)
                          29: VUzVtihiesrIqKKBThROx3tHl1E.roa (hash: BsIh6IZJoL+mDKYVywciMO7nDSe4hm6ioefY+FMRQmw=)
                          30: VmnTbUvFDApFD1Y-xzO7-pq11BE.roa (hash: 0Q4kZgcem1MBfhfqEYU+hk5PFIzqrU33VsNZw+yy8mw=)
                          31: Whqpb2xMd_24hkiXW5nEeFn7yeM.roa (hash: 6dwfgGojSzka+R1jXRxdN9rD87fjbZGJVYl9UnZRun8=)
                          32: XOZCvt7DBtA2hps9YPs1cKeAQG8.roa (hash: PwikP15d9hUKuMn3vPhR9FveFTTO+OcvgLY1+InluV8=)
                          33: ZCGix8UoP4DahJRzXez7xAH3Nls.roa (hash: IF1Uz1CFoR+SM1Ho3N8+tj4auhnLsOT4HilUevIiPLA=)
                          34: ZKjWCCl6cXXsUnUxNPsXibNcCEc.roa (hash: 2pZ/UaPjnnHLdARfum/8VLl5B8irR8dMNzzZ8LEKoNA=)
                          35: b9qoDe71eKjNYfmVhHwPgmMz6n0.roa (hash: 8uMqQDAWAjsdTE517ZGKaH8q+ubs5frwYATjQ3HVxsk=)
                          36: bsCsCK2P6S0F3xwxmx7xDaaaqlE.roa (hash: VOIYcea6IyaJVkWs8W1AwyM8ifqlR0AAgPBaz9vEiNI=)
                          37: c10hL6sUKAMlvjIsgDxP3V3FWU4.roa (hash: 2IaGWzn07faxug1cuscXxgboIlwo8XejaHQdU5/HnXQ=)
                          38: dIuysQMbofP9RsaepbMgjieRoXo.roa (hash: 1BmQ9aOwd5dAkmzEg3iz3yHWyYrD9U12dZG3xGMmw9Y=)
                          39: du-Dlfd1Ei0ri1RQhQor81ZLUNI.roa (hash: qiqa9UQSD0oGFhUioJ/FKkL+EwNVtDhEjC1x9J6ziIM=)
                          40: gxo60Qf9Yqe_Leyuw8mLpUn9-kI.roa (hash: QqP5SedYF+6q+3NPl6s/D+oin0eI5vaJiwgtHN9tL0A=)
                          41: hpHYExC3-pm-3v7RBv6n8yV1wA0.roa (hash: HmwlHUwA1p+CCgoAjw2kD9AUjQ/5efUukTGGhpsrcQ0=)
                          42: i51s5Gd-XNGTVnJ6E_-6-ydCd30.roa (hash: YpWFPXIujybYV1DF0/5LsDM1rdqLov2ncF2XiYU8PY4=)
                          43: iDMhH5rVV6jj9NG7eJQNvplpFH0.roa (hash: 5tfJBNevRLDxDFNN23IKb7rci/nFIGJoysJy/dRiokA=)
                          44: jirxpa6aVNQds6hw95oiEfaXkIw.roa (hash: zmTpXCvhBKr2ty7lsYkCEyNurPrE7EqM6ckyPnmydRM=)
                          45: jyVzaQsrz541MXLNRZIVi4qZTIo.roa (hash: cnYy5kPnnJR6s9N0qhsRssBUYhi6SvgVkaZdqwrao0I=)
                          46: ksLoTERnvRRPnyhJLpjhmmuo9U8.roa (hash: ks+rM06hG0RfZjVpExXi1bd8fl1ymaiEm8yB42CamCA=)
                          47: lTbmz3DwMzFS6Rvlg5BZbL8kPgk.roa (hash: NhKspnhjHLZRlyNhndu73kqCovM+/mV4nrIQ6VrYhX0=)
                          48: mIq40arAbrd3eJARzYQCEgRzlhc.roa (hash: Cw1aZ+tvLLla8meS0WQMmGMxenb71+uSpmbjfb3VtBQ=)
                          49: naI5cl6zKph4r1Mp_Li0wdMo8kY.roa (hash: j/RnJFw97tKv+zMCbjJZHXcTHB1HVFNEXjLDWBi3Pj0=)
                          50: oRo-6FYCAVZU656gbMVK2P5oH7I.roa (hash: 0Xc6aj+eUezWf6VzK4LBrjqUsIiyg4kBnWs3IUfhOoo=)
                          51: qwCXL4dhBaBgF9phuNcAAHZaM3o.roa (hash: NXQRB/BupIKHTSiICAEWM3w4N1TiaeeX1XhJH0jR3BY=)
                          52: rSEs2lNV926JupNDsT522KTytxw.roa (hash: sUaERjm7RaurSohc2QNL01+HHtlWxuCW8jJUrUov6i8=)
                          53: rnddRaMcCslvH6cnJKCpKa12JaE.roa (hash: yf3qJRgPNuUcG9fpenZXdbuhIXD/VHv5xpv9cxwtpMs=)
                          54: t646WIM-Hu-A12VVYPKnxqCQV60.roa (hash: /KgctHbA9zi5EL/akfOBKwNxgBV3oSWdrmvDcAhC9XY=)
                          55: tCCbrqQBdlwSpOxQccx96JU-DJs.roa (hash: xoDvqRKJHYDos50gfLA3fktrdmJW7Lu9AB3bEQctghw=)
                          56: uystX69ATkOt30x3TGXK_Q7tWZE.roa (hash: 1AEpHU/d5H//gYkxpN3j/MKiE8zA6+P5L+ID3gfTTt8=)
                          57: wJPaJZkBI4vR2dX2xLEWcWcMnA4.roa (hash: lq4K1QaglyNGx2344ElEF1wvxc8bL7SSdx9XbIj1xT4=)
                          58: yB75EtoyN4cKPxhnJDPFWkgT8Bg.roa (hash: LFKy3HdqoVoShYO7b8Sms0t+Gsq5QY/s675kLl3bXRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:94:a0:ce:ad:37:12:3e:54:d0:30:ac:24:c4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: May 18 22:00:35 2024 GMT
            Not After : May 19 22:00:35 2024 GMT
        Subject: CN=d98611f31db30ba3e16c87096886bd5edeca7acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:e8:20:9a:a4:d8:30:8e:70:7b:ff:b0:d9:
                    e2:c1:90:4c:9c:46:34:af:3e:e7:9e:a7:c7:90:3d:
                    af:fa:78:37:4f:19:e6:bd:fd:c8:86:9d:1e:be:75:
                    b8:24:4d:4b:78:87:df:a4:71:ea:1f:87:e3:a3:17:
                    c2:97:d3:f2:fd:9b:b9:ff:65:f7:f0:f9:00:bf:8c:
                    c8:fa:51:14:c5:5a:32:37:3c:4c:b4:a4:97:b7:5d:
                    5a:8f:d2:81:50:f5:8c:ea:c1:68:b1:94:d3:6e:5a:
                    13:95:13:f4:a5:77:c2:85:4b:dc:ed:64:f1:14:49:
                    07:2d:12:10:bd:d7:e0:bd:e7:90:fc:70:16:f5:13:
                    8c:41:c6:96:7b:ad:4d:cd:14:09:95:0b:ef:80:42:
                    da:d7:90:9b:82:c8:fa:7b:7c:34:a6:b6:3c:43:be:
                    0b:61:52:c8:95:1b:9a:cb:d0:52:ac:44:40:93:3f:
                    56:7a:72:9e:fd:1d:9e:17:2a:bd:31:77:83:ef:fe:
                    24:b5:a0:48:3f:03:9c:22:ab:0f:a9:17:59:ed:0e:
                    ba:5b:3b:04:8d:36:08:e0:c4:bd:91:99:8c:7c:d9:
                    01:b6:11:20:e9:be:99:cb:d1:e0:91:b0:f8:24:bc:
                    ed:22:6e:de:65:38:08:90:d1:f2:c7:66:56:21:d1:
                    39:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:86:11:F3:1D:B3:0B:A3:E1:6C:87:09:68:86:BD:5E:DE:CA:7A:CC
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:c3:ba:e4:8c:aa:34:b6:21:51:65:b9:3f:3a:15:ef:39:
         71:43:2d:50:56:0e:ef:e2:21:bf:03:1b:44:f2:8c:0b:20:3b:
         9a:d7:05:83:cf:a4:f1:a1:7e:81:aa:8a:d9:88:d8:bb:a2:ec:
         a5:8d:c9:5f:c4:25:08:ba:fa:69:ce:45:78:2d:db:89:5e:ed:
         25:29:56:f3:15:8a:5a:2e:38:33:51:6a:38:0a:b5:d0:95:40:
         f1:a8:5b:c0:19:29:5a:8a:29:23:5d:ee:41:d5:89:57:2f:2b:
         9c:61:e9:71:c9:80:32:3d:22:5f:f7:c9:a1:aa:6e:f7:fe:39:
         0a:fd:3a:d5:e8:a5:f6:0a:5b:2d:5c:76:da:2a:c7:ad:82:e8:
         0d:88:20:3d:54:28:87:98:da:6b:e2:22:e1:25:f2:28:c5:c9:
         da:96:53:e7:b9:a0:b9:86:0d:98:0a:17:0a:c6:bf:d6:17:1f:
         89:4d:3d:54:82:fc:d3:cc:c2:16:2e:30:6d:f4:fa:8a:e4:5f:
         9b:59:b5:2f:36:87:d9:2c:a2:ff:63:6f:cc:c0:62:67:ed:0f:
         52:9d:0f:49:db:07:33:a2:6a:34:f2:5e:59:5d:d9:3b:d8:d1:
         9a:26:08:bc:b4:43:9b:27:53:29:06:c4:94:e9:ce:82:ee:1f:
         1c:bb:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:17:21 2024 by rpki-client on console-fra.rpki-client.org