Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File:                     CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier:          RHVhyWXQu1ZSIFvoGzmeHlOvdeRs0BWN0yR6OEUqn7c=
Subject key identifier:   F1:47:6B:18:2B:4F:8B:14:53:EB:2E:C5:39:DA:5B:CF:EF:92:F4:CC
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       01935688EB8929491B00C4576488A26B9A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number:          138D
Signing time:             Sat 23 Nov 2024 01:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:33 +0000
Files and hashes:         1: 08xbEV5dYJsqrQp7uTPtouFFNXI.roa (hash: YylyTDnhEx/302w0SPeJCoLkLi4wBdv84f78hlN+QVg=)
                          2: 0Jx4AxPlA8XktmLUzsz0CbTmDO4.roa (hash: eHl9zbZt7e0XAhoeHgKEdNo0r7F5RBaNa+L7o8ifwGo=)
                          3: 1-FDYjlAnQZxCptAWSAxvBMyvtdM.roa (hash: aa1bPsjDFid9D8ftCEJ1Ns44rfrk1DQE33TtdhCG+QA=)
                          4: 1-ajR-9B7cdVSJTy2cq0LYaHZNdc.roa (hash: NxMkqBvfyfwOiuSUCKE6c3cN8j73/gxtNb2KgkIVAgk=)
                          5: 1jhDiIYrLpMTHwSdTOr6zy9UsOY.roa (hash: Wi2qR68iWH+TphUPVJJP+isZwrg1Z3yZMjsuUFRn34g=)
                          6: 26qO268wEcAcXB5t4PDV5eJPiU0.roa (hash: e9A1zcJAH+QV9CMnrpJhfncM8bhPbGh19QAjv9XlZVk=)
                          7: 8u-JtuepV1qTRe4mewjV06Xxk94.roa (hash: VGmAE8IbWQQAUpBf2xJmmApptXu1V3uXLrJPk6OE0+I=)
                          8: 8u1DoFw30m_VOWPLD6Tz8WCvlAI.roa (hash: rqM7iqoSz2oyeYO6p20FDKKbWqWAItAT65VbZRXqLbE=)
                          9: AADwvNY11BeBRU1e2F5w9CVtQK8.roa (hash: eGOeV4eEjZyZ1fuqfedoPWOedvOSUsL+hDBiYwzo+OQ=)
                          10: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: 9kGCPw9VDsIY+7YKY8KhhoTB1PsiYDniepi7Y5wXjZY=)
                          11: DG4ridp-MWB2AA-npxQOwU7Y3as.roa (hash: i9PnLBqaxGRUUUYOZRAqlK2xnuJFwfWo91s+FnMrpSo=)
                          12: Dv0hh37M2hm4arOUOQNcVTTXj0s.roa (hash: UiOSeWwtqPmBU1nd1teVdEncT7dGj8RSi/WUkeS47I4=)
                          13: ENhmKGve6HMvvjL4B08HvaGV4EA.roa (hash: 6CStQ7FoWQJcKj8Rn3yNqRvgfVEx9+rENvcvHJ3epDg=)
                          14: EXFBP5IWdwvW2q8kZ_776jD8cSM.roa (hash: V/dwv8ShYd/utrQQew5scCJxjum0qmH1IGX9V7Vka28=)
                          15: EnHKWmvKiaYwAlcBJAynVEsEFV4.roa (hash: dsdSFJ0qt+0VyjsLIgPQUs+yVrsFQz6ZnrmJrZCJDkg=)
                          16: HGllR8QozTx0dgKW7XrQ71oE1CI.roa (hash: C6yrNaF7IZexK2Vh46+JiR71o5ccZ9r98noVnx7TfpQ=)
                          17: Hgx22Q9o6OU2VcwQjapWLsxVsX0.roa (hash: cAvz5/vi1xc62ly46fcIgjE5mXTUlYaiMVaDBzbp7fc=)
                          18: K0pYXl6_B-WbLl-3d57pPmYbfwg.roa (hash: jnb8rl358xnPZctxA+uad+jeQjEHt2w+YxT5micfxo4=)
                          19: KNunyHSe4TW2lAFpTyK81XnawZE.roa (hash: rOcteUgtlHgBz1xYlZun68X7kqqALroKY63C/cyJCU4=)
                          20: KZhg2a-gVKf281hl9ixBZ5OH50g.roa (hash: bEci4Gz3A/OfYu/SOWalohuK8KM+d49JCoMleZ7j5js=)
                          21: KmhLxxgBgVBzswli0PYu7RYKHaQ.roa (hash: oq7vqgQj1OZU4yVNYLKFJyoq010ikluNzxIHkYsgVMU=)
                          22: M1mWs0qadnVtk0pqNP-julLyXbU.roa (hash: SdMQXIP8JKpblluXOWuZOtIXUen6Qrv8b5NpffzSj+E=)
                          23: NNM1OoWdDckG6I9Nycysye0Kxwk.roa (hash: D81LqgFd2YKBtVmXRrTSFTbh7+atUAzQlW4BQa5RkKU=)
                          24: NSh139o0xqsjND4g731FhVHfm-4.roa (hash: Z0rI6e4EXUgq1dup99lisQXj8ul82U+tdevD9j3MOYI=)
                          25: OPCJxZgDThn6q_4juBx0gQoGRfw.roa (hash: ERUeHjhjN7kaudypV11oBDu5xmRfn/w3wIiPqm8rJVo=)
                          26: Q9NHFxNakUf-aGbJZEvkcPN-t7o.roa (hash: pdLMdPcQXUq+yRvckD8bMqEDezomGKT/PE2mlVBRIO8=)
                          27: QT1l8Sj5UuzdlSt-WXP21lVP30w.roa (hash: CZXAnAE8/atNfg95vN2RZGlC4y/VFVDs22/H5EthjgI=)
                          28: ToyquzuuYlvBBxx1F623uhMw40o.roa (hash: 0rasbmhw8WixgEqT0G480JRWcIFnZCJPK1baEoI/ZOs=)
                          29: Ue_lxNppAzB5mRwvK6c5gRBj28w.roa (hash: 6gfwHrTuiQdGSp92xX4Ce2vze2MtiLfM3q+vytYNib0=)
                          30: UzFqjPN4pN37OOeLpftcaKnuY04.roa (hash: DFqb6hsCUOQuNWgOAX27vk2aUgPCTajZQzCeLw8jHoY=)
                          31: VUzVtihiesrIqKKBThROx3tHl1E.roa (hash: BsIh6IZJoL+mDKYVywciMO7nDSe4hm6ioefY+FMRQmw=)
                          32: VmnTbUvFDApFD1Y-xzO7-pq11BE.roa (hash: 0Q4kZgcem1MBfhfqEYU+hk5PFIzqrU33VsNZw+yy8mw=)
                          33: Whqpb2xMd_24hkiXW5nEeFn7yeM.roa (hash: 6dwfgGojSzka+R1jXRxdN9rD87fjbZGJVYl9UnZRun8=)
                          34: XOZCvt7DBtA2hps9YPs1cKeAQG8.roa (hash: PwikP15d9hUKuMn3vPhR9FveFTTO+OcvgLY1+InluV8=)
                          35: ZCGix8UoP4DahJRzXez7xAH3Nls.roa (hash: IF1Uz1CFoR+SM1Ho3N8+tj4auhnLsOT4HilUevIiPLA=)
                          36: ZKjWCCl6cXXsUnUxNPsXibNcCEc.roa (hash: 2pZ/UaPjnnHLdARfum/8VLl5B8irR8dMNzzZ8LEKoNA=)
                          37: b9qoDe71eKjNYfmVhHwPgmMz6n0.roa (hash: 8uMqQDAWAjsdTE517ZGKaH8q+ubs5frwYATjQ3HVxsk=)
                          38: bsCsCK2P6S0F3xwxmx7xDaaaqlE.roa (hash: VOIYcea6IyaJVkWs8W1AwyM8ifqlR0AAgPBaz9vEiNI=)
                          39: c10hL6sUKAMlvjIsgDxP3V3FWU4.roa (hash: 2IaGWzn07faxug1cuscXxgboIlwo8XejaHQdU5/HnXQ=)
                          40: dIuysQMbofP9RsaepbMgjieRoXo.roa (hash: 1BmQ9aOwd5dAkmzEg3iz3yHWyYrD9U12dZG3xGMmw9Y=)
                          41: du-Dlfd1Ei0ri1RQhQor81ZLUNI.roa (hash: qiqa9UQSD0oGFhUioJ/FKkL+EwNVtDhEjC1x9J6ziIM=)
                          42: gxo60Qf9Yqe_Leyuw8mLpUn9-kI.roa (hash: QqP5SedYF+6q+3NPl6s/D+oin0eI5vaJiwgtHN9tL0A=)
                          43: hpHYExC3-pm-3v7RBv6n8yV1wA0.roa (hash: HmwlHUwA1p+CCgoAjw2kD9AUjQ/5efUukTGGhpsrcQ0=)
                          44: i51s5Gd-XNGTVnJ6E_-6-ydCd30.roa (hash: YpWFPXIujybYV1DF0/5LsDM1rdqLov2ncF2XiYU8PY4=)
                          45: iDMhH5rVV6jj9NG7eJQNvplpFH0.roa (hash: 5tfJBNevRLDxDFNN23IKb7rci/nFIGJoysJy/dRiokA=)
                          46: jirxpa6aVNQds6hw95oiEfaXkIw.roa (hash: zmTpXCvhBKr2ty7lsYkCEyNurPrE7EqM6ckyPnmydRM=)
                          47: jyVzaQsrz541MXLNRZIVi4qZTIo.roa (hash: cnYy5kPnnJR6s9N0qhsRssBUYhi6SvgVkaZdqwrao0I=)
                          48: ksLoTERnvRRPnyhJLpjhmmuo9U8.roa (hash: ks+rM06hG0RfZjVpExXi1bd8fl1ymaiEm8yB42CamCA=)
                          49: lTbmz3DwMzFS6Rvlg5BZbL8kPgk.roa (hash: NhKspnhjHLZRlyNhndu73kqCovM+/mV4nrIQ6VrYhX0=)
                          50: mIq40arAbrd3eJARzYQCEgRzlhc.roa (hash: Cw1aZ+tvLLla8meS0WQMmGMxenb71+uSpmbjfb3VtBQ=)
                          51: naI5cl6zKph4r1Mp_Li0wdMo8kY.roa (hash: j/RnJFw97tKv+zMCbjJZHXcTHB1HVFNEXjLDWBi3Pj0=)
                          52: oRo-6FYCAVZU656gbMVK2P5oH7I.roa (hash: 0Xc6aj+eUezWf6VzK4LBrjqUsIiyg4kBnWs3IUfhOoo=)
                          53: qwCXL4dhBaBgF9phuNcAAHZaM3o.roa (hash: NXQRB/BupIKHTSiICAEWM3w4N1TiaeeX1XhJH0jR3BY=)
                          54: rSEs2lNV926JupNDsT522KTytxw.roa (hash: sUaERjm7RaurSohc2QNL01+HHtlWxuCW8jJUrUov6i8=)
                          55: rnddRaMcCslvH6cnJKCpKa12JaE.roa (hash: yf3qJRgPNuUcG9fpenZXdbuhIXD/VHv5xpv9cxwtpMs=)
                          56: t646WIM-Hu-A12VVYPKnxqCQV60.roa (hash: /KgctHbA9zi5EL/akfOBKwNxgBV3oSWdrmvDcAhC9XY=)
                          57: tCCbrqQBdlwSpOxQccx96JU-DJs.roa (hash: xoDvqRKJHYDos50gfLA3fktrdmJW7Lu9AB3bEQctghw=)
                          58: uystX69ATkOt30x3TGXK_Q7tWZE.roa (hash: 1AEpHU/d5H//gYkxpN3j/MKiE8zA6+P5L+ID3gfTTt8=)
                          59: yB75EtoyN4cKPxhnJDPFWkgT8Bg.roa (hash: LFKy3HdqoVoShYO7b8Sms0t+Gsq5QY/s675kLl3bXRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:eb:89:29:49:1b:00:c4:57:64:88:a2:6b:9a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Nov 23 01:00:33 2024 GMT
            Not After : Nov 24 01:00:33 2024 GMT
        Subject: CN=f1476b182b4f8b1453eb2ec539da5bcfef92f4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5c:16:74:5b:ae:58:95:2c:1a:c9:2c:c9:fc:
                    1a:81:e6:a1:e2:c2:cb:3c:77:97:e1:c0:f1:a1:93:
                    4d:2a:c3:7e:cf:b1:12:6e:b3:85:9e:e6:0c:ea:37:
                    2a:d6:df:bf:2b:f5:3e:ff:01:ee:ca:4d:04:99:6e:
                    fc:9f:af:01:cc:86:3f:2b:c4:d7:ca:8c:0e:dd:47:
                    46:19:ee:5e:8a:ee:82:43:8d:97:77:51:b2:4b:08:
                    2a:f4:f8:4d:19:be:42:55:1a:72:bf:a9:4b:b3:5a:
                    8f:24:da:75:35:fb:7e:c0:42:89:5c:ce:0f:1d:da:
                    12:b8:53:1a:a2:2a:c1:35:0d:62:93:9f:6d:c7:8e:
                    e2:d0:c4:51:a4:df:58:a0:0c:b5:6d:ea:4a:fd:03:
                    9a:44:8c:cf:bf:9b:45:91:cc:c3:62:50:40:15:a1:
                    f0:5d:26:72:72:34:21:15:de:b6:a4:a5:5d:26:e6:
                    85:57:69:a6:91:c4:99:02:e1:7a:7a:9d:46:0b:00:
                    71:4d:29:99:3c:c9:a2:f1:76:94:94:0b:d7:2c:80:
                    8c:b3:7e:16:53:97:12:51:61:be:73:2b:36:82:b2:
                    07:33:ac:d9:62:b0:9a:34:59:d4:27:9f:b0:86:15:
                    64:7b:a9:37:91:9d:68:40:ba:6d:c6:08:56:b0:d5:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:6B:18:2B:4F:8B:14:53:EB:2E:C5:39:DA:5B:CF:EF:92:F4:CC
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ca:35:2e:39:d1:60:1c:63:7f:50:a2:f3:38:e9:26:e9:bd:
         78:4a:15:a5:a6:6f:cd:42:05:78:dd:de:1f:91:81:36:eb:59:
         14:cf:d4:22:b6:1e:ec:9b:ae:c7:ea:bb:5b:9b:b9:ac:27:06:
         7b:87:15:0b:77:1f:dc:72:ec:8a:9b:0d:6c:db:cb:71:81:62:
         9f:70:11:0c:1c:e7:af:fd:38:25:27:1d:ba:d0:0d:08:6b:ad:
         79:72:8f:93:00:32:37:08:f5:fb:0b:83:43:c7:72:27:62:5c:
         37:81:2c:5e:bc:13:3e:b1:3f:bb:3b:e1:ae:a1:41:8b:ec:0a:
         f3:7f:1b:dd:f9:36:9d:70:08:ec:e4:21:c4:99:a9:c0:34:11:
         3b:63:f3:04:86:15:60:fd:48:b6:b8:9e:40:58:ce:b8:bc:19:
         8e:8d:3f:ca:d8:76:22:27:5a:5b:30:6f:4c:87:e6:c6:5b:0d:
         24:e4:f0:43:2b:ea:67:e9:66:ae:cf:77:82:6b:11:8d:9f:89:
         96:e5:77:fe:e1:c0:48:1e:d6:23:10:51:ad:b2:8c:d6:dc:1f:
         25:92:15:66:82:b7:94:30:70:83:37:8a:45:79:45:e7:91:c7:
         e1:53:67:9f:c3:ea:18:a7:e1:a6:28:ef:a7:50:64:4f:e3:ea:
         fc:01:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----