Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
File:                     um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json)
Hash identifier:          iECmLbEEt4IFYAjxWgXiWnlb850oc565UNArzsVgl44=
Subject key identifier:   01:5E:B0:C9:46:50:1D:1E:E9:E8:91:46:19:7D:C3:8C:8F:8A:D0:84
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Certificate issuer:       /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial:       018F599535029FB5889B9509C9B208169DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
Manifest number:          118C
Signing time:             Wed 08 May 2024 19:01:41 +0000
Manifest this update:     Wed 08 May 2024 19:01:41 +0000
Manifest next update:     Thu 09 May 2024 19:01:41 +0000
Files and hashes:         1: 0nJK-sDwzEH_IjXJf1REdUXAa7A.roa (hash: SSvXaQZPEjzyQK0OeaWqY97b/cQRCIqF4nU0dqjupA8=)
                          2: 1-q6Gx7_Jx0RNixfVCpKaDeY8lmo.roa (hash: oJlfwPWRmIAmSHoNmAWggqzgU1+wvYLox6YQ/PzNY+M=)
                          3: 4NyVi73Up9lFJ0BlEC-a71FcItg.roa (hash: UlYTpXMn7LDDuyuD172oTXKzM0qKYgqQNpCD49/A0yA=)
                          4: 64gE8QPMrs_f4Qskgk_7FN3799M.roa (hash: 6mf2kcZQ1WBBLyqa+mauXErucjGP2b0D9TcIPwDHVy8=)
                          5: 7PQHYcCC70mFJoCZGZH2KPPzODE.roa (hash: jjX+ELMO240UJ97mBCTGoVgfFfj/nLrESeoijUL5+jk=)
                          6: BZoCA7BKgfwDeZrlosohbetOTQI.roa (hash: YFRafiqrXDOHhUfz0ZYzcsXxdxqt0p3WTRSeDluJgDw=)
                          7: C6LT-Ff1dGOSfpn24KGTry44-MY.roa (hash: IKCSXVHUk0HcTOnNmLtWqk4b3TEnH9Wu4aNKgT6ndb4=)
                          8: CDcAC4iIZwHiVzTaenDIfQYR-JY.roa (hash: fmfMi2EhrucvG21ZhkyE8ytc2sMqYvqbcMRivgW+Jdc=)
                          9: IVZG3zAF8lT3jfbBgMJadxjWFE8.roa (hash: +mqGCIP7u5HxsN0WTJh2Fub1hAoN4PwMvZcSyDaKH6U=)
                          10: KP5HGifGCLzmXmEwdtwoXR4114s.roa (hash: 3fUwzHYU15gVwZKXGK/TVIOGsNAY7xVFmQXnNPOAAec=)
                          11: ODFnpVX1750dTcDx5lakCY5hzMA.roa (hash: R9G0rI3ganz/ySmhWG//B/s3/8OdCZCrDskLI4vxMj4=)
                          12: OS4hbHmokII-BxrIpZJQVDCgqsA.roa (hash: ohHglCBEKAJBGONx3K1dOiQcj/1vjaOuRJSrPv6I/7I=)
                          13: PcBKhrDDpbUc1awFu01pLxRR2jw.roa (hash: MH97fhGaKQfwFZHfZ7vssV6cizkEBRjjgpLYu6MQNq4=)
                          14: QmjgWzuarbRULuLql_6hRPuc_PI.roa (hash: yckeBnl8EdCyKjxKxVUl5TLZX1ctT9xEBg889hfvsvQ=)
                          15: Saq5aztbhePpUlLMulWNqELZBKU.roa (hash: OD/OxUPNy0dbwjUG1ePzFPOeYa7mFLfq0SuWhF0LYYA=)
                          16: Sk062BHHn9TgRU-ik0-uBOwClU8.roa (hash: fFx1fGnn1iRETbCFjKPLKKU0EaHYpWtTPnTKTJuCgXs=)
                          17: UJdaRLJxmdQkBY3z4lE0xL9Wxkg.roa (hash: o04LMU/uq3w/3+k92My05DkAYOKaD/B2YwpxQ7ofz6o=)
                          18: UnJ04U3SJwe6VBmcct3g7hlvHKE.roa (hash: s6ZoLWNGsu/E8uWyy3cHNFo+7R4CXpp0WabjZf1+VMc=)
                          19: Xm4knbvbNyy-YfJmrsCd5rjz_C8.roa (hash: Cvt6FBHSds5nduA7d4VAxrNl1zII2W8Yo6yRjYRWZaY=)
                          20: ZESKzbysh6qfriuRoIbs5Xu1EM8.roa (hash: jps05+CU5BfZ5l/vnBw8YlE+mRwqpYB2jhKqkzs9p28=)
                          21: ZSpOjRqSVbvxFTysP3Apo4aG-60.roa (hash: +2rz9BShvA07ZS8M7N/tmVg07A5JPd0L63RjNQE5ZHw=)
                          22: _XLj7T_1jErmLRHWt8hO_ITk1yg.roa (hash: JQvA1aNvALu+d1r875usOlJ+RU0NnEVXFSHXec5s/sk=)
                          23: cWHICIBiC3dRjKZPyyI78SwfKN4.roa (hash: dxXQvROjxkYVqkgCwV2wmF0Li+AbVKndhgcGz20J/6U=)
                          24: ccRycgvC64y98eYYqHq-1ZAivfE.roa (hash: lAN7t7s06SRRymZ7RanK8SvGuw1Guc249CYb3jsiolE=)
                          25: dprewLF_sfeKlHAH_YbAwCF2KXY.roa (hash: PzMgBkL8ZkSzAVzDxQlnnQYAukvCbtjYwoNsNU7Yk7Y=)
                          26: ggr9maPChsjUcaz6PCsMFo_BOtM.roa (hash: uSE5OmWXCfpAsl+Ayreb7cIyGncsF675B6EtL9ZVhyw=)
                          27: jfg7RV_UkgzfWeWyHAStqzmdIyk.roa (hash: megMmIzuq8ICC7NEYCx8Rdb/JlGjMtAr0rnU8DerNoo=)
                          28: l6zmYK2PF82znFxr2mecy_CnaYg.roa (hash: 2N6MVon2wIOmgVoxHIIDck8D32Szl7+6hN6T0+4Rpi8=)
                          29: n98q3jZD4OklW0sRBOqj1dBBih8.roa (hash: 59V3XizA9So5yYQzo2q8iAVBtq7UFMGdWFxo2Xx3yp4=)
                          30: pyzxs4SebpB0XeVV1R_56nF0hlA.roa (hash: n4R/bvJcg7iaOKsSdqtEaRjws4Ra3wrKbpPis8gfodc=)
                          31: qCfM6on5fuWrsdD3Y4j2FH58WDQ.roa (hash: vkZ3rtRmwKFgH8wzp2jaeINgsuPd6BEIKHJXZvmQS7M=)
                          32: qOofSTgZO5-rmn3TbJiq7k_uTjU.roa (hash: jOQcqjxTY3QPRihDq0BX0ZP3AsSQswsvgdANrgE9UiI=)
                          33: qq9kAUWj1l6WXkA4enA8jhagwkg.roa (hash: r09tXy6Gd4xkR6CWGsuF7YhI4ib4F0d4Mvj9f37IeXQ=)
                          34: rB2YLL5JNIsfLxpSFAKXDiclVFE.roa (hash: Nkb7t1D1w5LIkIxqA3ty6zWo8VcpDPSQmqJUJ9jk9wc=)
                          35: u6golbr2qnYt09fL2axwOkKGkT4.roa (hash: RRhhzxS0L2BIVJai1RnMKs+4GRKrCVvn8uv/+ivehDk=)
                          36: uQEz2-rNbxgytpXCNU0x5qfSjhg.roa (hash: dPfchWycWktpLuqDYThh/D1FXRf2dL13u18nlfbxJ80=)
                          37: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: mPom1e7whVEbANu7kSsqbP5uxW5eekgZDi4I03ffDnQ=)
                          38: uql2vpGxrGdtA5Gl28tpTglqNYM.roa (hash: MYOAJDrF99ey4AK3sLL6b4wh3cdKh0XERn/N9KlqA88=)
                          39: yZB6jxFOrRl5nQBQYOM_Nql-JTs.roa (hash: muFo8dgBR/XmPuMC+bEvKoWwEZNAwSOZW8+/t3uC0Y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:95:35:02:9f:b5:88:9b:95:09:c9:b2:08:16:9d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: May  8 19:01:41 2024 GMT
            Not After : May  9 19:01:41 2024 GMT
        Subject: CN=015eb0c946501d1ee9e89146197dc38c8f8ad084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:e2:04:65:54:b0:90:5d:5b:64:0f:45:12:
                    e2:a0:2d:3e:ed:74:a0:c1:a4:98:96:85:36:36:a3:
                    e9:bb:7a:50:a0:e7:3a:93:50:cc:ac:11:86:49:94:
                    6a:37:71:20:47:d5:c6:52:f8:61:81:c2:b0:34:7f:
                    7c:2f:38:11:38:e6:84:3a:41:50:74:9c:04:be:a9:
                    a6:70:2b:4a:94:c4:7e:f2:62:48:08:0b:0f:2c:78:
                    7c:fc:16:e6:79:e6:9f:29:e0:9b:1b:e2:36:67:3a:
                    3b:51:49:8d:03:8f:b8:81:69:7d:99:5c:3a:b7:7c:
                    a8:f0:a6:72:45:c5:16:b7:13:6b:3f:8a:10:84:15:
                    b0:d4:34:b7:64:94:b0:79:5a:c9:9f:69:de:98:1d:
                    82:70:39:43:8f:4b:da:7d:9f:e7:57:15:4b:69:ac:
                    e0:c2:b9:40:a3:8c:3e:ee:b0:20:78:a6:6f:b4:41:
                    dc:c5:23:1b:46:9c:e8:79:e7:55:2f:e4:31:ec:8a:
                    d3:b7:00:11:91:68:63:39:1b:b5:5d:d7:f1:ea:ee:
                    73:1a:1d:8e:34:09:42:4d:60:ec:59:3f:c3:23:8c:
                    e6:1a:3b:ce:32:50:b5:ce:2d:d8:e3:f3:04:9a:16:
                    41:8b:96:38:91:67:92:d2:61:97:e9:26:b9:2a:72:
                    cd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:B0:C9:46:50:1D:1E:E9:E8:91:46:19:7D:C3:8C:8F:8A:D0:84
            X509v3 Authority Key Identifier:
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:3f:08:77:51:e4:1e:1f:05:25:26:cc:92:2c:f7:98:bc:
         94:e9:6d:f8:47:b0:64:32:94:27:8b:af:42:f1:80:fb:88:c3:
         be:c2:f1:ef:5d:7f:4f:8b:7e:e9:5a:eb:85:10:e1:41:88:e0:
         06:cd:f8:ea:b3:11:4d:ee:f5:ce:cb:a1:6d:56:09:ec:aa:0b:
         81:26:9a:96:b4:23:2b:cc:b5:68:27:46:17:98:8c:13:0f:71:
         5b:69:13:96:fa:3d:db:03:1f:dc:15:60:79:10:38:9c:17:72:
         55:da:54:22:6f:8f:a4:15:d8:9f:81:85:7d:e5:ba:6c:17:fd:
         a1:88:4c:e0:e1:29:a1:a3:b2:d4:41:c5:68:5e:54:f4:fc:d0:
         0c:30:2e:fa:b7:e1:e0:f9:90:0b:8f:99:30:db:f7:4c:b6:be:
         87:70:30:c1:e7:fc:4f:bb:bd:2f:34:f4:4a:ae:77:6c:c5:a6:
         8d:8b:e5:1e:ca:72:ad:05:de:e7:2a:67:c7:ea:9b:8a:f0:e3:
         25:83:8f:05:4b:20:65:dc:f2:16:b6:da:60:48:70:b3:12:a3:
         08:9b:43:12:bb:3a:ad:c6:fa:7c:18:73:06:1c:7a:92:e3:eb:
         50:5b:1b:16:3b:c4:46:f1:d0:95:ae:35:b5:2f:da:f5:33:25:
         f5:da:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:48:28 2024 by rpki-client on console-ams.rpki-client.org