Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
File:                     nSpHi7CwjmYbCy-fvok1vJwqKKE.mft (raw, json)
Hash identifier:          7Wr0paIl88lMbaVWxML6fe8deiIMjAQiS1MeFIGGrbQ=
Subject key identifier:   86:96:57:E3:B2:10:14:A3:B8:78:F4:A9:A4:84:16:52:A4:13:3C:8C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       018F3CD402D347EF260A7B897668890E6ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
Manifest number:          1333
Signing time:             Fri 03 May 2024 05:01:18 +0000
Manifest this update:     Fri 03 May 2024 05:01:18 +0000
Manifest next update:     Sat 04 May 2024 05:01:18 +0000
Files and hashes:         1: 3FEk59rqAru8QKmYGUz0XQwFr90.roa (hash: cxeOg5ljPJVYC49WnydxPr/mQgR0sc0D3XpP5uHAYC8=)
                          2: 3NoyuRZuk6asfCLqYSlXSDGTFIs.roa (hash: KG7MXR5H+OfYpC0EwKG+yuo8wLdqSzVmiSV7wPNTvO0=)
                          3: 6RNDY4xUvHsZt1zjUs5MZ7Xu8qM.roa (hash: sjOfx9PNWDtmZEXIak1+1yAhzwqeHs6Tw7Ww4QPjCpM=)
                          4: 6s7x6Y7HVjKYN49P_yz0KEkIohg.roa (hash: ik6TZ0M3u80MTObme0RayUh0PYg7viTIbdZLhnI9+OE=)
                          5: 7sk9hJTd2n-r3DnnstBen7WmkQg.roa (hash: bjHRXr72WLmB+S1HOabBzZE6kQxYN/wz8AKyQsn1p2Y=)
                          6: 8Z9rMXoKd7R7bK4mkXnInEizQt8.roa (hash: 9XGuzXxYghxuNKM+yyxXXmdoMqTHe+9mgI/60OwnGBk=)
                          7: 8byaAubWVc7wJHbb5lPxRJQs2ZY.roa (hash: /hFnU+6in+fMkqeoJIEjTwNI4k2D4MZmQzyTZqT8PjE=)
                          8: 8jjHs2hfmPavLxBvxeBQQBKzyCo.roa (hash: uWqJd3GkwkaDQ9ceeej0IfQuKYcNY2zZItZoBss/HE8=)
                          9: 9505HU7iv9AisCAC_kroqwy37gw.roa (hash: I00SZkw8Vj6UETo1nlyQ9Yxl6mLzLzKsknyrpG9Gcqc=)
                          10: CdCGJdwiK8thdfKorSgGRnjJl7g.roa (hash: laggn6Xv2U0yZEEsUJpqkmurBkAVIyXShENmHhvZmPk=)
                          11: D5elMffch2bSW4O92zIz6giDrPU.roa (hash: 6/klPAXATxoPnxZhum5XzpUa2oGegYMtqz4mnHZ7lMg=)
                          12: Dl96hi-J9558bkCYYyBDyabUVtw.roa (hash: lOAk979wv61LQB1rFFzIOTgracLaTu/nvNk6YQimmr0=)
                          13: GzQ8L9hbelp_97aSiLOOFsg2Cro.roa (hash: K4CnrIWJMnl2xPAW0Z4IZBzPUBvZtHmISnOwpXiuvs4=)
                          14: HHAnS4L9MUmMwacQNcDV13LIRUQ.roa (hash: o9Ce1Yz/bUedqXWSj3vk48VM7ijDtTJ6EcPqEOrWmPk=)
                          15: I0xIjW4_1gMifBBZqMoGsuV3IOw.roa (hash: ovT/r2UOu84vs7XCnocp2wlt5G468aRkG2ckeFAOprY=)
                          16: IT5P9AD-ch8AtkvdNqs_JEKuxAw.roa (hash: DgIKVg2PNHTSFbONTvoSKwtG/f/Yzc50e9cf1ntfQdY=)
                          17: IoS9KhsIlOyLJbYkNQqTLJ8Qokk.roa (hash: aw4SgzycgbkwrNrCXC3pNAmowAen22d43wGOLYTBXvo=)
                          18: MBAoVFnz9ZpZWB4UPEEqHh0YX_w.roa (hash: ArGV/WlDmupW+pOSHh8xl3R9PwhIawTAf7/acT0fGTs=)
                          19: OcggvNUkloeZ0brN8F1Pd_fLZ1I.roa (hash: oSzQardrSUsxDIC9Bpby58d4LfbXvsW4BCsxhNMuLeY=)
                          20: On6lZuLUtDvLSP7peVFQx48TXvo.roa (hash: 92WhOoWUJ8bQ/d8SgCg1w8AW4BA4lPejX14z26w5MFA=)
                          21: OvfOYmGHhVUFNg3UrhzTKLLUfRs.roa (hash: 0gIjcz4SwWWMZMNuz4Az04K8OnuFXGpCkxq6RdkG/MY=)
                          22: PJbXDW6wFyFpoCJsY4PZfOb1pps.roa (hash: W5uoDuI1YJHZzSltTa90qcRraryb3wunA/2E2jTFLsU=)
                          23: S9bOk96L6teI42opDIKUFBu2aD4.roa (hash: 63KvPOxiO7yWZUZS58GErT64+4QT+CCOrDP4Cj77oqM=)
                          24: UryNOktfDI41zD7D5vVo3uCEPs8.roa (hash: e2/3tvhK+wWjDW76H6cdt4zvvu+fjpf9HMFsY3JKxkQ=)
                          25: UvtodjqGaVZ2mDSeDlo0rFMGPek.roa (hash: k37pU+txiYQIM6Y5yItq6iRmIsoWXG9g04XLY9vzPRQ=)
                          26: X2eAwOIMgiqBfK_6sTFJAOSB6fs.roa (hash: npOMcQL3Swnswt9FihlBSHTEFSFlNIhSMnPmTKSyAEw=)
                          27: XchJTxbWg0w9fUCmhJjgV8lmu0g.roa (hash: xq8SC8VKHv5ZM38yhHwJiLX1R79LOWn1TifpfrOJuYw=)
                          28: YNsr_5P4r55GcYRgepoJw-2CgE0.roa (hash: WHzCxv5o3dL4wse8Q9+m9HzdHwqPlfDZUDoafDrKxec=)
                          29: aqE553YPSxMFTlQELSjpAg0tC28.roa (hash: /YPylr/5lqUZlWHi8IfR6seJtnMxlMITOPX6sMck6V8=)
                          30: d-nedqvXi_AFPcVVKVDBWJExuCA.roa (hash: TmVlfkAkWg4NLih4a+f61kzl7gyBPBkJegkLHH5GOUA=)
                          31: eio5EAd4MYSA5CT4hr3Gz6NqqPM.roa (hash: cT/uhqB/5NWLwlMvUungXVVN9Eg5HVcCgjEm8lBu03A=)
                          32: fcLaWJdRWTcAAdnzV1lS_RChzfk.roa (hash: RoUixH4rZaLLyfFH+i/Zk+ObwK9+zJstBg32lodbICo=)
                          33: flwHV8FyFh_2mpmPgxMU_fg9YJY.roa (hash: YIXACqAoYJtfrLGw6xw5Epdu4HqJvIe098ckIMLoCLY=)
                          34: g7bUe-XEO535PLlzmkkAaQaOYbI.roa (hash: IKhWteG8zk9LMzyMjzaQ7lr2AZ3UINsHdfECYS0cxc4=)
                          35: hqKnPrNjmoUpy7gVHGWxlU8JTXI.roa (hash: ciyxGB6w7UqpK8JDO/wU8EquP0Hd/V4Nr0YUeBAB8oM=)
                          36: k9cjJislu3oJGdl3ut_nMHIl2jw.roa (hash: YIxF3hK5O//WNji6VHvQKERR8hb87ZRhk24J767nGlI=)
                          37: kWtWNPzliUL_qmGO3bcE1TrqS3c.roa (hash: DRMPyKiKmjfNBO0saX/lG7Of5WHA4suWDVGo1BNukLs=)
                          38: l6FPeYCKEzjqM9GHHTPJqHpL9-k.roa (hash: K0GypPDkswq8IMvH35ULF8CaXXM+LakXwPJzJpqhOuM=)
                          39: m5ejYZVBxckTygdx8tqaue-4vaY.roa (hash: ugrSRoiMEWVZAWsEKDbk12cwAi1QG4LAfmNGi8S6ngA=)
                          40: mdsRh-EeqZpiWuwPsoui3y2B-Kc.roa (hash: NtxNDOZrZPOGmLkdKTIYxY4wJUuR4Zg+GQEHz5D3dkQ=)
                          41: nSpHi7CwjmYbCy-fvok1vJwqKKE.crl (hash: zfQUttD6sCHhQVTfGBmdSCdh/18uj2o7VHqVAnQgEXg=)
                          42: qjNW91SsNymPNvUgF9Kw8lAnz-w.roa (hash: 5tfPpmbaX9wzQiJLX1JsbtpWzREBrPc0U3GvTZMoFrI=)
                          43: quiug_vQERQVxjmIxJkz9kj7XOc.roa (hash: P6JAo2Qnu/BuqlzvrFZDnj2Xch4ha7p59aC8bt2eXY4=)
                          44: r-gb5f9rVQ3NIcdP6qsdKuZJZ_E.roa (hash: r0tbOXdoSQwC1hwuXaZR2UFqfoyebo9DkU+mdJQLH5k=)
                          45: rO8Gm1_XbhMVo43Ivu4m8psdbzE.roa (hash: 6l6exJs7ob6LqYnnMBUUzV35NI22wAwF8RSVu+DljDc=)
                          46: tGHdZfYiqdqM9f9OqNKTxULVzwk.roa (hash: uIbDwFmTNZqlA/v/hZHCL9jM+NBv8p3UzdG4pEwtTUE=)
                          47: tQo1fkMEX7j10FDGFeG8dtp1Py8.roa (hash: Nj6Q9jCV8Qc2nB5xDvLkb3QdSRXFWsYviXYtwW9lrJ4=)
                          48: tRAgULQ0l-wnrYyk7kEqU4bzXNc.roa (hash: LNtOiyRtvkQC3SslxqUtOfyFOXmx3KNqDB1jJ3Z8M8E=)
                          49: twXQjBlWYOvNDNr-8QGkSzdhCV4.roa (hash: aJbrrAaBlOEVzL74CdtDGTstyJTvSdPbyY+SJcwEbKw=)
                          50: vgEXb2WuSYn9hlGYzqvpyeUAK5M.roa (hash: 07sR3qLOWBDQOzRGTwsRji2HN0o4hzD6vhq/6uUx6cY=)
                          51: y8NDI14HxyF-6rv1YjKt09P-Roc.roa (hash: l1fpSyMFygSSYc0EHcLTs74x1sQc5SsGK8k68YrXGNc=)
                          52: ylDBDozc3JHhVdrzTvw63NWtbQ8.roa (hash: DF3l9kD5tg4/puAvldkGT5ZuSolvyS4CrqRcWskF+rs=)
                          53: zD4OUFxVrWWz4QPX_tmPsOqHRtw.roa (hash: aYemidJ+1EzI2KQRuvRwJ683s++tloIVr+6IhwnVtHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:02:d3:47:ef:26:0a:7b:89:76:68:89:0e:6e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: May  3 05:01:18 2024 GMT
            Not After : May  4 05:01:18 2024 GMT
        Subject: CN=869657e3b21014a3b878f4a9a4841652a4133c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:53:30:b2:08:68:6b:88:59:9f:3f:77:c2:
                    3e:24:a0:5e:a6:09:e0:14:6e:f4:d1:95:4e:4d:72:
                    f9:d5:4a:7e:0f:32:83:df:4c:96:8f:9b:56:bc:2a:
                    fb:66:57:74:ba:bb:cc:7d:e6:2c:1b:6e:56:ce:85:
                    77:ef:00:95:45:0b:4f:d6:20:78:51:75:48:95:09:
                    38:ec:a2:9c:a8:00:e2:2d:4e:05:33:1c:40:6f:c3:
                    72:81:b0:72:3a:1a:81:fc:5d:d1:a8:d1:67:d9:2e:
                    f4:97:46:39:e6:a7:0a:53:7c:88:fd:ea:fe:b7:9b:
                    8f:b7:08:d2:3b:1f:cf:7a:01:ba:8a:82:15:77:9d:
                    15:db:32:43:45:d1:5c:93:9f:3f:27:46:d3:bb:fc:
                    d5:c3:e4:7a:68:9d:d5:a9:a4:f3:5b:bc:80:98:a0:
                    22:3c:c5:4a:82:cf:e0:3f:09:4d:29:5b:5a:a7:fb:
                    84:de:db:24:33:a4:b7:a4:39:4d:96:4a:43:4d:65:
                    d8:e9:72:f8:fa:42:d4:62:11:01:60:db:29:a2:a5:
                    b1:c8:8e:84:38:07:c8:1f:7f:25:e6:d3:63:48:12:
                    22:50:3e:ca:ea:d3:4f:92:0d:a6:d7:18:ec:b5:b3:
                    1e:88:d1:7b:1c:2e:87:d6:ae:6c:be:65:78:e3:9f:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:57:E3:B2:10:14:A3:B8:78:F4:A9:A4:84:16:52:A4:13:3C:8C
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:40:b1:6a:a5:1d:49:4f:3e:f7:8f:8a:ac:06:43:b5:46:48:
         0f:08:15:a7:76:49:55:d7:e0:d2:13:09:84:4d:8d:73:42:09:
         d3:82:41:c2:4f:6f:c0:20:62:80:04:65:d7:e0:8e:23:7b:49:
         4e:7c:5f:82:d1:40:9c:1a:67:70:57:f5:82:23:4f:a2:30:9a:
         ab:09:33:a5:c6:c2:6e:68:33:82:19:e1:05:6a:53:61:45:a6:
         f3:2a:36:88:53:b6:e5:44:6c:47:5e:a0:d0:cb:ed:38:15:3c:
         4c:f4:d1:9a:90:9f:7d:fd:fa:94:67:9b:6f:0f:62:99:1b:c2:
         95:d0:07:a7:b4:12:e6:5d:b9:03:10:1d:8a:ed:8e:76:3a:75:
         a4:43:d2:ae:c3:3c:a4:9e:f7:55:64:7e:de:c3:02:84:38:7a:
         1c:56:85:2b:6f:3f:51:94:0b:c6:ac:ea:bd:7b:f7:74:50:91:
         d7:59:8a:73:3d:25:e3:6d:6b:42:df:76:ca:61:4e:f2:e5:6d:
         2e:2a:65:4c:89:09:35:17:17:1f:da:69:c1:c6:0d:7e:2a:c8:
         6a:a2:91:0f:cc:84:b0:87:ce:4c:fd:96:28:1d:3d:58:f8:ad:
         6f:1c:a7:ef:89:d6:b5:2f:4b:f9:3d:f0:31:d8:bf:c3:ce:fc:
         d1:95:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----