Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          Z/eQuBqfu1okSS/JS4oNaPhV0GKPmjkiqDYINthA7Lc=
Subject key identifier:   06:2E:40:1A:3C:A9:EE:F3:76:FC:E6:61:9A:B9:93:9E:B1:A6:B9:7B
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       0193636901BE5FE7D36AC4A07A092DBC5ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          079C
Signing time:             Mon 25 Nov 2024 13:00:46 +0000
Manifest this update:     Mon 25 Nov 2024 13:00:46 +0000
Manifest next update:     Tue 26 Nov 2024 13:00:46 +0000
Files and hashes:         1: 1-KfmwOH34m_f6r77sOwst0JtBeI.roa (hash: Ri3NpiRxTX5tBPjsu6b8CcmQLtOesvoe35OOVrPDEeI=)
                          2: 17SfWE-obcFtFEDHZrtdKCw8vZk.roa (hash: OMy8FnKUI49Rx5Kahlca5iqrV8Wc3pnfpFF9NN65e/s=)
                          3: 2CfSzSYmKHStODoBho7RAOz1WI4.roa (hash: k6zjRYI7pxNhgX4md3fIM0dYsjvy0XPvrI4OzjNs4CY=)
                          4: 3RioF6FvtIvjmmGqGyx_LTKBWc8.roa (hash: zjr+FwB/BiCcExLJGRpraBqKlBRhpb74bEjKooqYMLs=)
                          5: 3jUlO7txcBm0SyWZH1u9a0-GqK4.roa (hash: oTuC9ZVxaNgyY4N0c7Ahkw5yd69ljAIoyPCn3ZCMzj4=)
                          6: 4ld_OTKPJ4LMDpdjemO4j3Z0fSU.roa (hash: jREMgBnsU9HX2evZ1j3QhW1awC/liPQ6kRhEZ2ZsikM=)
                          7: 5DqNO1OVGRepRS2dBn9FBOBTKe8.roa (hash: azLvpRUWt8Rz7gODxXwoUmfnUyReR+CDNrfQWoY+0B4=)
                          8: 66SmqLtAsFizK9jdGtpqfFqvtf4.roa (hash: sVtYD9a+cWsJZF3DpFh9ASDob+KnEpQh8RlXJi1RZfQ=)
                          9: 6qsA98uH4xQCbmQeG1-SnsTVUag.roa (hash: rBFKO0xQCm2OGBgFK4DScDQ0GKA+yYF2TjC1o38k9kM=)
                          10: 7bxgZXoMAXCGiquO-EVVIWl3j8k.roa (hash: cyIEl1FogKobN6k3GL5LYhZtuNOSsiH8NSpfQ+oICMk=)
                          11: 8a71cCqeSx4PqeZLOvLBT3JuaDo.roa (hash: ydeePUSX4l/d7logQzvr+grLW0agC761zY5KZdoRgMs=)
                          12: 9gC1mqDnkos2PEBwExnBRyzz964.roa (hash: rE8dFV8FcTaO1i1AGBlbTrk7GFIVnFS5/brQpOiRNh4=)
                          13: AG0ztBsDYIpjZd1wDVx3mJpSxwI.roa (hash: QXsML13qLnPhhV8OyZ5/ccL0b6xtx+LDbWUFhWILKnw=)
                          14: CB0xY_m3GbjQikNNWWXPjcerO7w.roa (hash: aVrLJp4S4sHqZLobfh05d81Qzz6wQeYsEjreZWM1G5U=)
                          15: CGMKrr-9pJqvibnkiMXlSivX5hc.roa (hash: IpwIdzCTUn4rhslz51MxO8Wfuc8jdM4cyGlfXRdV0u4=)
                          16: CMlAd_IqnKkm3DgeiqByBX9iPSM.roa (hash: DqdygtbXn+Ti3a1A9gzFlQiFz5Up/uy4v7sxWZokuCQ=)
                          17: Hn10CM3uPwktWs1rGYS_ar5MN78.roa (hash: eKEO3PeIbcXbxz8OkiuDu1YqtwuSDeemwwsRkJL3OGE=)
                          18: Kxd9m0uPzDFHysQ0yCWD40dhlKA.roa (hash: 6Rnu39bYMoyharf4nKVkEOBqEBYLj9zt1HDOn7xKVT0=)
                          19: M9oI1v5fCXV9PgArdgmXYRHTkXI.roa (hash: aWNTApAucgNbp4V1SlapXdqo5ZORZhuwMCsuEE8pYxE=)
                          20: MSgiDxaU62Xl0S_LXV_LEhjZOg0.roa (hash: AXqwRBD2W0sd7lJydPai74p3AfAM7gWwgK/cjXWUl2E=)
                          21: N7YeSuv_93Y_IOrbZqQ-j0jIasc.roa (hash: DIz8dWdET3me0/lQs7x9fWybUAUW0g3DQOCTOnZxG9k=)
                          22: QCraeD01iyRQ_Le8U50FnBsucOI.roa (hash: CfpESyntgNsOtFiR2QtbzsqhZEmB4AEQhe3kIQx/iZQ=)
                          23: RyB3ARwykoBhS7jmXDzzELiykII.roa (hash: LjMfBB+4eYX9U/g56VkSPUbjhcQ4lz66x9qh9mmNMKU=)
                          24: Sf1fHMspDkxHrMsocEfHyWt5OCo.roa (hash: 2ylMz0wvlo0eK+7UAooyArXd5D8LuMYKzvSm2e2lY7s=)
                          25: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: 2xWwsZ6g4P9LRytESoqDxgm4VbmhJSX8sBsre1nQVio=)
                          26: UBBSEb9zDZ0K7Tl3S_JpH4Sdw_U.roa (hash: GaWUffPm+k+RUa9VbpyhV8RaTzdB6n1B6pcpjQHoECw=)
                          27: YjHodLlKJI1u41bvnymifvXT0d8.roa (hash: GzC9nN0+ITy8LWqc2azjPqCRbUH0LeY7Jp/uFfP//84=)
                          28: Zcz_qG4mWMoNathPXuQil6c420Q.roa (hash: HAbTnhBV8bwvrBQTEt07WzSEikvKbQB0emTGl5vEagk=)
                          29: _QPsGh0HNtlcYaZPGUxvqUr4izg.roa (hash: OcnJA+DhN3pF8jUv/C7g99AZqWWkoMue31qCVRVwPzE=)
                          30: atXBqm0g5zV7ZIAyomhlGHuI0s0.roa (hash: jRKb6aScL/LWJgG/hvJyhPlr81yDt1VrGtosvexznr8=)
                          31: bB1W4T1j8ng5UX3xZZGrl7VStto.roa (hash: F4CPPJRv8Vp4LIOFwUYawrUY3B/kta/9oUzK3aa0Wcc=)
                          32: cT8UEm-WPXxQy9ObH_k-VjTUQD0.roa (hash: u/+Gm9y4XhDqa2VseneC7PmaIWI0Dd9n7boEuZAsR5o=)
                          33: fwxQxZGfZNTx01xvaAJZncp0iwc.roa (hash: ErZhmMBMz44uu1nZpJLxraDS3drrhcAxEAEAfjlaaAQ=)
                          34: hHTgdPedZHUDy9wunq9iYzct0lg.roa (hash: 5YVZZE+j5x1GyoQN/5CkVkHZzRH84HOGc7wWf0wiF8c=)
                          35: iEvSuIhDIfxO1-tyJ6Ccnc-lg7Y.roa (hash: M8uhmn6F+NLtKPrWx5dW5FFL0trHdn4xgQb+lh8ZqJU=)
                          36: iPh9Gm_B1LyR_ur5c3Zhr9_IfdI.roa (hash: ExRrWfkzBjkxRTzSvBUxw1LgTagb2b951c+fyjMxilQ=)
                          37: jSO71Jr2M03V47NBUIZFT3rvv_g.roa (hash: 7W1qaN/rx1j2OFHijdQp5cqQE/k2kjTtR6tnkBJG+Ms=)
                          38: jnkSFKcquRODrIUMtxiRiaBhfBk.roa (hash: dpPCjSDUv3F2MRO/eB6ryXf48AupyPuoJLEnyTH9+sw=)
                          39: jp9qINJN-PwvDfmjGe5z6l6YC3c.roa (hash: RkpMQzh0WcLVdBMSnLntUzHzdWMsU/1ktjSMAWIsiX8=)
                          40: lFtGNLbqjqSjsolPBExn1CUhzCE.roa (hash: Hdz10tmkDLUHwK8BKEB/PTavLtum42TFwjfVeqC/H8Q=)
                          41: n6aLez2hhjOEBM2wJjruDOXVywY.roa (hash: EmHYnJgkJN9XL1kpI7cpM78YT+WVjfmYp5YhfrjI3rQ=)
                          42: p3GUlXVVn_8sDDUu0rJ4BQhKtjI.roa (hash: zzZ5JMPpjtCHbFXgK8ow+of69Y6t6gOnQ//wdc2muew=)
                          43: qzhd3xMAWAz6QI_etrK9t_rd8PE.roa (hash: PFmVVoNMPyANa5wJtqbzOgEX/asvIg3bsXXlRPzYbwI=)
                          44: vLZlHOG4tSA3dvJ31WmylQNj3LY.roa (hash: Wr74ITK6NprB/DJTmtkPpmmk+vDJnLIrgSyPrGqgpgo=)
                          45: vaHvrV3stvr0Yn4gcxzHuULbsDA.roa (hash: F6Kqw9MxsU2wFm2XCsycjHRmTZtifcOGKS5c94JZ+is=)
                          46: xNTESewj1fWM6d1Hb8X-0SluzCQ.roa (hash: 51LTUjI4G8BVQEu/gP25/W1DcZEumrKJux9t340AIfA=)
                          47: ybv_RI1ISZvd5tYKqQYRe0yfOE8.roa (hash: 4Ca6L8PQJ2jhUyn5pto7xXoFe0zHRlBIqR79KOrAxhM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:69:01:be:5f:e7:d3:6a:c4:a0:7a:09:2d:bc:5a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Nov 25 13:00:46 2024 GMT
            Not After : Nov 26 13:00:46 2024 GMT
        Subject: CN=062e401a3ca9eef376fce6619ab9939eb1a6b97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:61:1a:2f:e5:d5:2a:1e:d6:d0:28:80:18:
                    a1:6c:37:95:10:57:85:83:c2:e1:e7:37:8f:42:ac:
                    7e:22:c1:64:0b:fe:75:bf:22:fd:1e:81:a3:cf:f9:
                    7a:07:51:1f:8d:bc:12:ea:2c:cd:be:6d:01:8b:5d:
                    1b:a2:31:85:2f:fd:a6:80:c2:ff:39:f0:f7:52:d8:
                    0b:a4:2a:47:4d:6b:44:bf:cf:5e:2b:b2:7a:8c:0a:
                    63:55:a1:40:06:c5:34:c8:ec:10:1b:d9:86:d7:17:
                    cd:84:2b:97:40:c3:34:b8:7d:4c:30:0f:ae:2b:e2:
                    39:16:6f:d8:c0:29:1b:6b:9e:2d:bd:f8:6d:eb:69:
                    cd:c2:71:6b:41:d3:3d:fc:9d:82:2d:02:34:eb:9d:
                    aa:79:a0:e5:62:5e:1b:bb:a3:d2:22:44:b9:f2:ce:
                    c2:0c:d6:3f:5e:8e:93:d3:ca:cb:65:d1:90:b7:87:
                    13:c5:10:23:71:f4:5b:f9:04:f3:90:35:6f:59:95:
                    1d:75:b5:a6:9e:8a:06:0e:bd:c8:34:dd:7c:ce:a9:
                    d1:7b:cc:b4:ab:17:cb:a2:0a:98:2d:ea:6e:94:c6:
                    e9:e3:9c:ac:48:b5:85:f9:be:62:72:c0:54:21:91:
                    80:1c:be:07:cc:92:dc:c1:47:cc:aa:33:62:6b:c2:
                    3d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2E:40:1A:3C:A9:EE:F3:76:FC:E6:61:9A:B9:93:9E:B1:A6:B9:7B
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:65:65:e3:db:6e:5d:9a:fb:4e:17:b4:09:75:10:11:74:d1:
         dd:17:51:6b:4c:95:19:7a:c6:35:56:75:6c:f5:40:02:06:41:
         54:68:b2:52:62:35:c3:35:45:45:84:af:a0:90:82:3d:66:dd:
         e3:87:2d:c5:6e:0c:45:1a:47:0d:a5:73:08:35:1c:08:3d:40:
         90:fe:45:ca:a2:2d:37:03:12:80:94:7a:cd:28:e8:4c:48:cc:
         2a:72:55:28:38:b0:9c:cd:03:00:59:cc:bf:37:55:cf:66:2e:
         0f:f0:fc:6b:81:2d:e1:f4:ad:ff:cc:f6:42:24:f4:cb:27:b7:
         5e:72:65:22:57:c1:a6:9a:8c:d7:42:0b:14:3c:66:0e:1b:10:
         a8:e9:d3:dc:fe:52:c0:66:b5:a8:eb:50:f6:1d:4a:85:84:78:
         05:0a:b0:f2:4a:35:88:fa:d9:ab:67:7b:e6:b9:76:5e:26:25:
         50:70:48:36:76:d3:c9:d1:7b:7f:ed:14:84:71:f7:b8:86:86:
         bd:93:be:33:9d:8b:8e:0d:13:f7:c6:e1:69:00:08:f8:d8:d6:
         ff:90:7b:82:3b:5f:f2:ff:3b:35:49:17:de:77:9c:da:ef:01:
         54:92:d5:66:d1:ec:35:ca:b8:50:14:ed:cc:98:94:90:fb:9b:
         34:86:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----