Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
File:                     nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json)
Hash identifier:          ppoPE02XB/0Cc2G+I9ygh94uG5JVPOP8uvTHD0ojQEw=
Subject key identifier:   82:09:CB:86:6C:FC:23:5B:BE:C3:29:A2:F1:D0:80:4C:7E:EA:B0:EA
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       018EF67236AC41A084ACC8D2AAE07B186D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
Manifest number:          114C
Signing time:             Fri 19 Apr 2024 13:01:03 +0000
Manifest this update:     Fri 19 Apr 2024 13:01:03 +0000
Manifest next update:     Sat 20 Apr 2024 13:01:03 +0000
Files and hashes:         1: 098afNMONpc7DjJCzJdd8uOJgKs.roa (hash: MhIAgyXUt6sBrPLMg9xDFZoVr39J+Z9h04ckcXLWo40=)
                          2: 1-KZZjzaDCxsNzm98Jd8uouEBZ8A.roa (hash: GV3GG/1Aa3yqxTTCumhBgT5MpqS5gdxJpXzmBOVOOEM=)
                          3: 1UTUmQD6o0wldtyTQPQTQH8UYco.roa (hash: +pn9yhGNqb2KvPwV+R15DKaF+QM0gOwtzeIMyt3kZyI=)
                          4: 5utVM_zlQApLqYApqS3qtYnckks.roa (hash: qPsW2ZK60wU/h2bXbgMdyJqYPUYeqqRLGshk8SuE2bw=)
                          5: 6gveebrIAwyBvR6ojtCS-TSvbSY.roa (hash: sDSA6NMXd+n9imZvht0Rolg6h87Tq+9f4ZaTUA8ObzY=)
                          6: B7ayCTbCI3LtuHA8WK3tvovnmdg.roa (hash: V9tl3PmPjbaEU2WsGiaM2hwqpKfxQP5vW8xd4wKkNLY=)
                          7: CWBWvEaltc5P41O91weClTDZJCs.roa (hash: vfN+sgvJctPv7X5Jnqif5QFOqIPZEWIg0AQtQT4eYGg=)
                          8: DhZ8VVQIAge9ec-AgHXVpbtQlRE.roa (hash: sKbBdTDH1nzNbfRMHr3fR0mVX3enRPXgqVTEAdotwX0=)
                          9: ECADpdgOH_F5wzqs6pVIRdGH30c.roa (hash: PnbpVK/oQQ57q9A+X0rXgxD3MT/u9+oKMD4DWP0p/5M=)
                          10: KXbhOXTCcDs4lXmlvvnw9UHfSkc.roa (hash: XRmUhXEP+xbsO75Yn0Wg2iRbEBzrLS4nU1h4ZFhk1ZQ=)
                          11: LH4kKyYgZqHypMiZh2S_R9qDsoY.roa (hash: 0Zz2HrB/JnveoMq7SRxxwSfNGE+ceIZiw4H8BmykzZQ=)
                          12: RfBWWUPpJqg1kJz_qanNNvP9_tA.roa (hash: Sml/MlFD+pVEuoVrmNX/IBz6jLu5Uwf0EYx+BUlJer8=)
                          13: SDEPCeMSweG_nrUplhxOKL0slAs.roa (hash: Cg8oietfmwG3sL2a3t1TmTVPlM/rln+ai4A5QhZJ73o=)
                          14: gxlNBg5J2bUH0tV0APYjP0IjwiM.roa (hash: FTkJHSgP8RtgoiI8ejcg25mn/yKKjBe1XL9lFa+flSs=)
                          15: hdOjs0IU-jdbvGt-VHfTB2tQaQQ.roa (hash: uZdVFOch3Z98N9wE7OLMBt/ccRUU0mndyYmlFeuoNos=)
                          16: iZ6b3EjXXfw-ECuTBiigs-tACBY.roa (hash: IQZsBkVaLl9wZ51jgKKrrW9GE1OggvIxUE0uojgN+sI=)
                          17: kV1-K21oIpYORUg7QVC1Z6wKsjM.roa (hash: Im3gD25lzTya3gPROsNUubVeqxN4yBRHm3vRYSZrj60=)
                          18: mDZM6WMElPjO6xzq89JY0XRBDhQ.roa (hash: sxe3V6vIsi3vG2pzHOlACwzcjqxWNF0iG/xPfWEZZg0=)
                          19: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: WpqNQ63bWYDPBB1iWGImpCTGgwv4Ekt+3FN8epglyHo=)
                          20: qUooWMfK-pJ0riKWJeI6H7tsSD8.roa (hash: p36h5ZeYcgu4mV122GMtau3Y5RLicuGyzCnBcREFulc=)
                          21: x46BQuaCOQyXFbZ5JzHzSzNNa0o.roa (hash: eXfsWZHzEE4sArVIyzVjJxQTIoSxP04DGBk9m64b+TI=)
                          22: zc-Cop1yXJUL6A_EtOpk3bU28cg.roa (hash: 6VEKJoBwYRjZMwR/vOzNP3nbt2f6BYuqDtCAWqO6oUA=)
                          23: zfXYGBzA_tpglrjvSoEwWjE4_14.roa (hash: Uex0OYVZZJJCfsOzEs1AGU4u8qSZAYL1cL+VndwIoQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f6:72:36:ac:41:a0:84:ac:c8:d2:aa:e0:7b:18:6d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Apr 19 13:01:03 2024 GMT
            Not After : Apr 20 13:01:03 2024 GMT
        Subject: CN=8209cb866cfc235bbec329a2f1d0804c7eeab0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7d:65:6b:27:b1:9e:50:83:9d:04:40:80:4f:
                    b7:0a:1b:8f:1b:88:a5:9b:0a:89:25:34:9d:75:ff:
                    bc:47:07:b5:0c:3e:f3:06:ff:a9:83:80:ad:32:8e:
                    b6:66:ac:ea:69:5e:9c:68:2e:dd:ee:a5:47:5c:61:
                    4a:cb:e0:37:1f:42:6c:0a:a6:93:b5:0e:dc:d4:ff:
                    74:e5:e0:d1:e1:f1:ed:8d:ce:62:d1:b5:09:f2:db:
                    c5:59:e5:00:d4:49:f9:51:f1:39:b7:f5:52:99:fa:
                    a3:4d:31:85:9a:76:97:95:8b:76:e1:a4:79:ad:13:
                    ea:fd:41:0f:ee:f5:b8:87:c8:cd:8c:44:ab:fd:14:
                    ce:fc:5a:e2:b3:41:59:64:36:66:af:8e:a3:ad:84:
                    61:74:d7:da:02:71:7f:ac:a0:81:eb:df:52:34:4d:
                    f2:3c:56:cf:ff:6a:ca:c0:d9:0b:6f:54:ec:ac:52:
                    6c:bd:9f:da:d8:36:87:d9:87:d4:5e:6c:e4:c3:e9:
                    0e:4d:61:25:5e:5d:fa:2c:91:c6:02:1c:33:73:58:
                    77:82:4f:14:32:0e:c2:d0:58:4b:73:95:88:f0:82:
                    4f:ec:42:f6:c3:2d:c2:9f:75:32:79:5a:a7:b7:fa:
                    88:d3:bc:d3:e9:91:c4:61:2d:7e:37:22:46:8c:39:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:09:CB:86:6C:FC:23:5B:BE:C3:29:A2:F1:D0:80:4C:7E:EA:B0:EA
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:10:f1:5d:24:1a:15:86:6f:a7:4a:03:e7:8c:4d:92:3d:
         51:a4:14:cf:0c:f8:4d:0d:80:72:e4:85:b1:d3:a8:bb:03:07:
         a2:b6:7b:f9:bd:db:90:40:51:88:5b:15:8e:ac:d9:4d:83:50:
         c4:22:5a:78:90:a6:93:de:b3:b5:d6:b0:72:37:30:ff:ef:e2:
         82:46:10:02:2a:b8:42:89:82:09:7b:f8:a1:bf:48:6d:a3:36:
         06:59:f9:d2:0a:b9:a6:f2:6a:3b:57:50:f6:24:09:50:c9:41:
         97:86:8b:a2:d9:a9:0f:b3:3f:2b:50:8d:87:5c:e2:4a:f8:0b:
         1c:c7:63:bd:54:6c:a2:ea:50:ad:24:9a:8d:17:4b:08:c3:ef:
         4a:48:53:e5:c7:bb:f2:ce:b7:e6:2b:8c:ec:be:c6:73:4d:93:
         6e:e8:d8:24:7b:75:f4:c1:4b:86:61:84:9d:9f:f5:68:57:81:
         b6:e6:96:88:6a:37:1a:05:71:60:28:c2:e1:75:34:51:99:92:
         1c:70:7a:0f:24:ab:43:2e:b5:c1:c3:23:8c:d4:9e:c1:2e:ae:
         77:4f:b3:5d:32:19:3c:10:61:47:ec:05:4e:bb:e5:09:70:0c:
         61:92:44:e7:3f:c4:28:b3:ce:78:1e:46:1e:2f:21:30:7c:1c:
         29:fa:f8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY72cjasQaCErMjSquB7GG0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjQwNDE5MTMwMTAzWhcNMjQwNDIwMTMwMTAzWjAzMTEwLwYDVQQD
Eyg4MjA5Y2I4NjZjZmMyMzViYmVjMzI5YTJmMWQwODA0YzdlZWFiMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH1layexnlCDnQRAgE+3ChuPG4il
mwqJJTSddf+8Rwe1DD7zBv+pg4CtMo62ZqzqaV6caC7d7qVHXGFKy+A3H0JsCqaT
tQ7c1P905eDR4fHtjc5i0bUJ8tvFWeUA1En5UfE5t/VSmfqjTTGFmnaXlYt24aR5
rRPq/UEP7vW4h8jNjESr/RTO/Fris0FZZDZmr46jrYRhdNfaAnF/rKCB699SNE3y
PFbP/2rKwNkLb1TsrFJsvZ/a2DaH2YfUXmzkw+kOTWElXl36LJHGAhwzc1h3gk8U
Mg7C0FhLc5WI8IJP7EL2wy3Cn3UyeVqnt/qI07zT6ZHEYS1+NyJGjDnYmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIJy4Zs/CNbvsMpovHQgEx+6rDqMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCoQ8V0k
GhWGb6dKA+eMTZI9UaQUzwz4TQ2AcuSFsdOouwMHorZ7+b3bkEBRiFsVjqzZTYNQ
xCJaeJCmk96ztdawcjcw/+/igkYQAiq4QomCCXv4ob9IbaM2Bln50gq5pvJqO1dQ
9iQJUMlBl4aLotmpD7M/K1CNh1ziSvgLHMdjvVRsoupQrSSajRdLCMPvSkhT5ce7
8s635iuM7L7Gc02TbujYJHt19MFLhmGEnZ/1aFeBtuaWiGo3GgVxYCjC4XU0UZmS
HHB6DySrQy61wcMjjNSewS6ud0+zXTIZPBBhR+wFTrvlCXAMYZJE5z/EKLPOeB5G
Hi8hMHwcKfr4Tw==
-----END CERTIFICATE-----
Generated at Fri Apr 19 19:26:14 2024 by rpki-client on console-fra.rpki-client.org