Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          oKUlT3UeSbbz9d21T/dInTI6mqH9cOnWVykM1a4uqbo=
Subject key identifier:   33:91:33:17:CF:8F:98:1A:10:82:51:B2:58:D5:64:CB:C1:5D:DC:E6
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       01903BF5A22DBAA55917317C9263F410BD29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          05F9
Signing time:             Fri 21 Jun 2024 18:01:11 +0000
Manifest this update:     Fri 21 Jun 2024 18:01:11 +0000
Manifest next update:     Sat 22 Jun 2024 18:01:11 +0000
Files and hashes:         1: 1-KfmwOH34m_f6r77sOwst0JtBeI.roa (hash: Ri3NpiRxTX5tBPjsu6b8CcmQLtOesvoe35OOVrPDEeI=)
                          2: 17SfWE-obcFtFEDHZrtdKCw8vZk.roa (hash: OMy8FnKUI49Rx5Kahlca5iqrV8Wc3pnfpFF9NN65e/s=)
                          3: 2CfSzSYmKHStODoBho7RAOz1WI4.roa (hash: k6zjRYI7pxNhgX4md3fIM0dYsjvy0XPvrI4OzjNs4CY=)
                          4: 3RioF6FvtIvjmmGqGyx_LTKBWc8.roa (hash: zjr+FwB/BiCcExLJGRpraBqKlBRhpb74bEjKooqYMLs=)
                          5: 3jUlO7txcBm0SyWZH1u9a0-GqK4.roa (hash: oTuC9ZVxaNgyY4N0c7Ahkw5yd69ljAIoyPCn3ZCMzj4=)
                          6: 4ld_OTKPJ4LMDpdjemO4j3Z0fSU.roa (hash: jREMgBnsU9HX2evZ1j3QhW1awC/liPQ6kRhEZ2ZsikM=)
                          7: 5DqNO1OVGRepRS2dBn9FBOBTKe8.roa (hash: azLvpRUWt8Rz7gODxXwoUmfnUyReR+CDNrfQWoY+0B4=)
                          8: 66SmqLtAsFizK9jdGtpqfFqvtf4.roa (hash: sVtYD9a+cWsJZF3DpFh9ASDob+KnEpQh8RlXJi1RZfQ=)
                          9: 6qsA98uH4xQCbmQeG1-SnsTVUag.roa (hash: rBFKO0xQCm2OGBgFK4DScDQ0GKA+yYF2TjC1o38k9kM=)
                          10: 7bxgZXoMAXCGiquO-EVVIWl3j8k.roa (hash: cyIEl1FogKobN6k3GL5LYhZtuNOSsiH8NSpfQ+oICMk=)
                          11: 8-TsSbIDkbqrxYzwLynjab917bE.roa (hash: VW6Ql7WuMcy1i/pGQ1o78RhPVAcyj6Btwxf0/TtNkfg=)
                          12: 8a71cCqeSx4PqeZLOvLBT3JuaDo.roa (hash: ydeePUSX4l/d7logQzvr+grLW0agC761zY5KZdoRgMs=)
                          13: 9gC1mqDnkos2PEBwExnBRyzz964.roa (hash: rE8dFV8FcTaO1i1AGBlbTrk7GFIVnFS5/brQpOiRNh4=)
                          14: AG0ztBsDYIpjZd1wDVx3mJpSxwI.roa (hash: QXsML13qLnPhhV8OyZ5/ccL0b6xtx+LDbWUFhWILKnw=)
                          15: CB0xY_m3GbjQikNNWWXPjcerO7w.roa (hash: aVrLJp4S4sHqZLobfh05d81Qzz6wQeYsEjreZWM1G5U=)
                          16: CGMKrr-9pJqvibnkiMXlSivX5hc.roa (hash: IpwIdzCTUn4rhslz51MxO8Wfuc8jdM4cyGlfXRdV0u4=)
                          17: CMlAd_IqnKkm3DgeiqByBX9iPSM.roa (hash: DqdygtbXn+Ti3a1A9gzFlQiFz5Up/uy4v7sxWZokuCQ=)
                          18: Hn10CM3uPwktWs1rGYS_ar5MN78.roa (hash: eKEO3PeIbcXbxz8OkiuDu1YqtwuSDeemwwsRkJL3OGE=)
                          19: Kxd9m0uPzDFHysQ0yCWD40dhlKA.roa (hash: 6Rnu39bYMoyharf4nKVkEOBqEBYLj9zt1HDOn7xKVT0=)
                          20: M9oI1v5fCXV9PgArdgmXYRHTkXI.roa (hash: aWNTApAucgNbp4V1SlapXdqo5ZORZhuwMCsuEE8pYxE=)
                          21: MSgiDxaU62Xl0S_LXV_LEhjZOg0.roa (hash: AXqwRBD2W0sd7lJydPai74p3AfAM7gWwgK/cjXWUl2E=)
                          22: N7YeSuv_93Y_IOrbZqQ-j0jIasc.roa (hash: DIz8dWdET3me0/lQs7x9fWybUAUW0g3DQOCTOnZxG9k=)
                          23: QCraeD01iyRQ_Le8U50FnBsucOI.roa (hash: CfpESyntgNsOtFiR2QtbzsqhZEmB4AEQhe3kIQx/iZQ=)
                          24: RyB3ARwykoBhS7jmXDzzELiykII.roa (hash: LjMfBB+4eYX9U/g56VkSPUbjhcQ4lz66x9qh9mmNMKU=)
                          25: Sf1fHMspDkxHrMsocEfHyWt5OCo.roa (hash: 2ylMz0wvlo0eK+7UAooyArXd5D8LuMYKzvSm2e2lY7s=)
                          26: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: CtzwNS/eu6JrpkHEjdry9PolmvRYvECdcRlk1IAQkkE=)
                          27: UBBSEb9zDZ0K7Tl3S_JpH4Sdw_U.roa (hash: GaWUffPm+k+RUa9VbpyhV8RaTzdB6n1B6pcpjQHoECw=)
                          28: YjHodLlKJI1u41bvnymifvXT0d8.roa (hash: GzC9nN0+ITy8LWqc2azjPqCRbUH0LeY7Jp/uFfP//84=)
                          29: Zcz_qG4mWMoNathPXuQil6c420Q.roa (hash: HAbTnhBV8bwvrBQTEt07WzSEikvKbQB0emTGl5vEagk=)
                          30: _QPsGh0HNtlcYaZPGUxvqUr4izg.roa (hash: OcnJA+DhN3pF8jUv/C7g99AZqWWkoMue31qCVRVwPzE=)
                          31: atXBqm0g5zV7ZIAyomhlGHuI0s0.roa (hash: jRKb6aScL/LWJgG/hvJyhPlr81yDt1VrGtosvexznr8=)
                          32: bB1W4T1j8ng5UX3xZZGrl7VStto.roa (hash: F4CPPJRv8Vp4LIOFwUYawrUY3B/kta/9oUzK3aa0Wcc=)
                          33: cT8UEm-WPXxQy9ObH_k-VjTUQD0.roa (hash: u/+Gm9y4XhDqa2VseneC7PmaIWI0Dd9n7boEuZAsR5o=)
                          34: fwxQxZGfZNTx01xvaAJZncp0iwc.roa (hash: ErZhmMBMz44uu1nZpJLxraDS3drrhcAxEAEAfjlaaAQ=)
                          35: hHTgdPedZHUDy9wunq9iYzct0lg.roa (hash: 5YVZZE+j5x1GyoQN/5CkVkHZzRH84HOGc7wWf0wiF8c=)
                          36: iEvSuIhDIfxO1-tyJ6Ccnc-lg7Y.roa (hash: M8uhmn6F+NLtKPrWx5dW5FFL0trHdn4xgQb+lh8ZqJU=)
                          37: iPh9Gm_B1LyR_ur5c3Zhr9_IfdI.roa (hash: ExRrWfkzBjkxRTzSvBUxw1LgTagb2b951c+fyjMxilQ=)
                          38: jSO71Jr2M03V47NBUIZFT3rvv_g.roa (hash: 7W1qaN/rx1j2OFHijdQp5cqQE/k2kjTtR6tnkBJG+Ms=)
                          39: jnkSFKcquRODrIUMtxiRiaBhfBk.roa (hash: dpPCjSDUv3F2MRO/eB6ryXf48AupyPuoJLEnyTH9+sw=)
                          40: jp9qINJN-PwvDfmjGe5z6l6YC3c.roa (hash: RkpMQzh0WcLVdBMSnLntUzHzdWMsU/1ktjSMAWIsiX8=)
                          41: lFtGNLbqjqSjsolPBExn1CUhzCE.roa (hash: Hdz10tmkDLUHwK8BKEB/PTavLtum42TFwjfVeqC/H8Q=)
                          42: n6aLez2hhjOEBM2wJjruDOXVywY.roa (hash: EmHYnJgkJN9XL1kpI7cpM78YT+WVjfmYp5YhfrjI3rQ=)
                          43: qzhd3xMAWAz6QI_etrK9t_rd8PE.roa (hash: PFmVVoNMPyANa5wJtqbzOgEX/asvIg3bsXXlRPzYbwI=)
                          44: vLZlHOG4tSA3dvJ31WmylQNj3LY.roa (hash: Wr74ITK6NprB/DJTmtkPpmmk+vDJnLIrgSyPrGqgpgo=)
                          45: vaHvrV3stvr0Yn4gcxzHuULbsDA.roa (hash: F6Kqw9MxsU2wFm2XCsycjHRmTZtifcOGKS5c94JZ+is=)
                          46: xNTESewj1fWM6d1Hb8X-0SluzCQ.roa (hash: 51LTUjI4G8BVQEu/gP25/W1DcZEumrKJux9t340AIfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:f5:a2:2d:ba:a5:59:17:31:7c:92:63:f4:10:bd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jun 21 18:01:11 2024 GMT
            Not After : Jun 22 18:01:11 2024 GMT
        Subject: CN=33913317cf8f981a108251b258d564cbc15ddce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:c7:2f:4b:ed:a5:5b:bf:50:c9:2b:db:c8:
                    76:f5:6e:eb:34:d8:04:51:77:ea:2f:f3:ae:c2:3f:
                    f1:6d:2d:7d:e8:ba:d1:a2:bd:23:08:d8:5f:98:10:
                    49:63:f6:a7:af:38:ac:6c:12:06:28:20:09:c3:df:
                    32:62:92:c1:e4:43:34:ab:23:7e:ba:ea:b8:bc:99:
                    ba:fa:ed:3e:27:af:37:3f:c3:c1:a7:35:dc:bf:e5:
                    04:bf:94:55:9a:d9:ea:2a:a6:7a:c5:40:ab:a1:84:
                    bf:da:b2:a5:70:e6:db:79:0a:9e:45:1a:01:73:8d:
                    5d:e8:f8:02:71:a3:3c:b4:b0:06:ab:3e:8e:18:a6:
                    41:40:3d:71:d5:e5:24:ad:82:8b:fc:f9:b9:10:07:
                    ae:4f:1c:d9:f0:2d:4a:e0:d4:33:e8:6b:6a:db:08:
                    9e:57:0c:d8:57:c9:a9:13:fe:80:63:1c:51:46:eb:
                    76:86:b6:fb:a5:e8:14:91:c4:3e:a0:f7:f4:c3:1c:
                    3b:c6:e8:50:f6:17:27:36:7c:d0:3e:55:64:2f:a8:
                    e0:40:0a:0c:87:5a:49:a5:25:ac:22:e0:86:51:bb:
                    e9:4f:9f:93:5d:40:52:fd:31:ac:ca:eb:77:f7:9a:
                    74:1e:ee:99:c0:b6:04:c3:3f:17:09:40:a7:8d:ee:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:91:33:17:CF:8F:98:1A:10:82:51:B2:58:D5:64:CB:C1:5D:DC:E6
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:7f:de:8c:b9:b8:a4:93:49:18:7d:b8:d2:71:2b:f0:c7:
         fd:4c:03:6a:13:cd:0c:79:67:21:f8:96:52:b2:ae:f7:96:aa:
         fa:56:54:8c:cd:0f:6a:5d:ea:56:26:2c:58:6f:2e:0a:ab:0c:
         2f:b4:f1:bf:aa:0e:4a:dc:49:5e:a5:9f:68:c3:ea:0d:ea:f5:
         71:34:99:64:3b:49:99:42:47:cb:6e:91:ff:5e:73:5a:e1:8e:
         22:5b:ec:66:d8:be:3f:55:3d:61:c3:dc:1f:70:48:6a:12:ff:
         81:8f:f5:32:20:73:61:8b:8a:83:f4:ed:88:df:2f:3f:3d:b1:
         1e:ef:c1:df:6c:63:d6:d0:73:f9:02:60:2a:4d:21:96:57:18:
         9b:10:f0:46:f4:16:c1:4d:79:58:e5:ff:13:42:af:e1:84:40:
         17:8f:bb:c1:df:44:10:b9:bf:62:1e:dd:43:b2:2f:0d:98:21:
         17:e2:d1:56:e4:22:21:11:db:94:3b:73:7a:6c:0f:cd:ee:6d:
         a4:a5:b4:fe:3b:ca:e5:cf:bd:43:92:09:47:b4:07:d1:b9:e5:
         77:9b:ed:b1:69:ba:a5:1d:f0:46:76:9b:ee:21:92:20:cd:e1:
         3f:09:0e:b5:f9:47:d1:fb:e4:62:cc:be:66:32:7a:a2:22:26:
         43:60:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----