Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File:                     v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier:          vnzsWLOtSyNX+VwDaEaq4PJ9EqBD+Tk5++GHpn9lJ94=
Subject key identifier:   DC:B0:5D:23:E9:16:87:D7:BE:3E:AD:EA:EB:0B:97:0E:A4:43:39:03
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       018E885E7FB46941524477FBEF8D6B6BEFE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number:          0D79
Signing time:             Fri 29 Mar 2024 04:01:18 +0000
Manifest this update:     Fri 29 Mar 2024 04:01:18 +0000
Manifest next update:     Sat 30 Mar 2024 04:01:18 +0000
Files and hashes:         1: 6SvSTnNtVXqxwqH9Q-9WElcQXBM.roa (hash: IoH4N328Wt5CtmFC75f7PtO5zzPYyXdV/4yOy7p1BUM=)
                          2: 8oJG0SSq45n5dpkqTrbw7KNQhkE.roa (hash: wTHqyO8pOFrqX44+RpuUJXtGUNALLqYNsggzWCAVjhI=)
                          3: BWa41T1lqcy7cxRxyAxlMziFIQ0.roa (hash: azftsiZpu2Mvo1P8HxqYLA821FmAwo97GFXu5NX6Kak=)
                          4: D2c11eUFvnmdHe9Ou-jMF6wOZ6o.roa (hash: fM/jOXHWa0QnKQb+M+HqWEIbEBhXLdQSXhPJl9g9198=)
                          5: Dvs6PgRUOFtroIS1eZ8YjEOibd8.roa (hash: LHdCFAVe3kLC+a4WHiYkzrqm7/Qm6Ys5ZERdXVUBuxo=)
                          6: FssnxmWsoG9ql15ZwNGgk4nzZeE.roa (hash: RAyKk5OxdOmwYmemYVO5ZA7Mdjuvl2QyBJnE5a9CADk=)
                          7: JE0bPkwJ5vJ3ValcPLW4mI9sBDM.roa (hash: CodA+5TOpf1VlrrLMr8hHzq6KloRAiNwsT+mQ10Liw4=)
                          8: Lz_3txo62oEOC11Rh4vR0a3aQWQ.roa (hash: V1l/jO67isyjdEvuiUE9Hva4iLIO8hjYi6Kz+YFaE+A=)
                          9: Os5W01NBOZpXdNt7oCVCfUKFDno.roa (hash: ZKFXB3/Q2H/ISS1J0/LhTgYrpj4LjVAR8pAAdpP7MHw=)
                          10: PUuFE1rC8BfLjq3Js3zFgFUZpAI.roa (hash: viWhLObqvAvlBYUGfTcG9ZaxwfuA+gsRisb6+4IBKn4=)
                          11: R5OlN6sHOBiKPHTFYNER9UkfAzA.roa (hash: jUQPWCC4F2BU02s4ADBrj30iZ3zEh8NRrIsDTEWu4eM=)
                          12: SimeibHjeF3UW4gHBFLSr6G29cw.roa (hash: JSZhO21UIzWJy+D8wTshkBEHsRJ9CzsCE4zEasxUagQ=)
                          13: Ty2cxn2AaE_sooIu1RihlJYmQfc.roa (hash: 7QVGPLTV7OceeqBJFDC8ph5tP/HK1t2piz8mOW8/SPY=)
                          14: ZkSYiGdeDBg3ZpYueCLNQO8m9lc.roa (hash: P9qQE2mWmr2tCIvORTB5OhEsHTk4zoE/kGGBnFQDFHk=)
                          15: bGl_gyUdYgbAehDA5bwR3-IQ_-0.roa (hash: fkCx75ReE6XX+mPRssHRUqg/jo+Fe+kiIwsPWn9+IoE=)
                          16: hcRwKbU8dfPgthvqohIcqEIgg3s.roa (hash: 2GiEgmM4INtgNVntSq3oexPgkveZU/eI5oiyh7vf/jQ=)
                          17: hy4z2Uos8XuJxYGMigaW2Yb30MI.roa (hash: Hrg1ofojYBRoM76pKd5RKTX2fsvvQPI/ZaDfrOa1ojE=)
                          18: lIccS9k73j0f0Le_eHcLCzO0wek.roa (hash: Xlkmn0iuFMASSScE/1zdXXgpClQ2UQSNPZ20hxOX3Fs=)
                          19: oCy3W4-zG_ZoCfrebaDIXEGLsvQ.roa (hash: diT4gC1XP/YkJkVByNKqWo+9ZIFkewSmzKfrsR2DEWQ=)
                          20: osAskbvjAc3q7pIFIuTMN5t1kgE.roa (hash: TofNtkYjwKc281rCTm348ME5GCfGL8fX9+fQ1y7cIvQ=)
                          21: ub-EImg7sZxEH_F7QHqbWGO6CUY.roa (hash: lJ+1drlb14VNBDHNtv9sTy7b/P/VIX5UpmkbW/P26H8=)
                          22: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: nPSOjpOT/VnIUbdWWE5doTLTzpiZFPSJHF4c8odRUgE=)
                          23: w21Q9_ZXM-H6VGNSoQCtMro9Pg8.roa (hash: xYXhsNq3riprb5mbg1v1yBZMTZTnZ5UhU58ySv4QWYM=)
                          24: zpf__rS82IMXee9KofOf228bbSo.roa (hash: 2Ls5HAGz5B2I2C/n6Jr0Ut/cTpBuICjp2BTOkQy5Pcc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:88:5e:7f:b4:69:41:52:44:77:fb:ef:8d:6b:6b:ef:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Mar 29 04:01:18 2024 GMT
            Not After : Mar 30 04:01:18 2024 GMT
        Subject: CN=dcb05d23e91687d7be3eadeaeb0b970ea4433903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:1e:fc:96:59:14:e8:9b:71:c8:22:eb:f4:
                    b3:0b:b5:f4:a4:a5:5d:41:8b:10:a8:0b:57:53:4e:
                    30:3a:e5:af:8b:bd:c3:28:99:2e:53:da:2d:e3:b5:
                    d8:7d:c5:e4:60:ab:d1:c3:af:b9:aa:28:92:49:6c:
                    25:4d:aa:67:65:12:81:35:ca:26:ca:ef:d0:91:f6:
                    1d:11:39:c5:51:93:b1:e2:e1:3f:10:29:fc:09:ec:
                    a3:a8:c8:81:34:97:14:36:3e:3a:1c:68:6d:b1:75:
                    16:82:1f:74:91:ec:3c:d1:22:4e:9f:42:1b:97:bc:
                    19:d8:7b:47:4a:29:e8:ef:43:8e:16:2b:19:9d:22:
                    95:94:6d:42:2f:cc:b8:c8:60:9c:be:a8:dc:1d:d6:
                    b4:df:f8:a9:e5:e9:92:af:6b:5a:78:3c:8f:b7:72:
                    23:9b:49:dc:0e:7b:07:99:79:05:9e:75:ee:49:b7:
                    a7:5f:ff:af:77:9d:c4:3e:14:3b:8b:e9:93:c5:fa:
                    55:fa:d4:a4:91:2c:46:83:4c:b5:8a:be:b7:be:18:
                    15:1f:47:18:71:22:56:83:48:4d:ea:5d:88:08:c3:
                    b3:a5:98:c8:8d:51:e0:cb:92:43:68:da:ad:89:fb:
                    42:0c:98:f9:47:36:82:ab:1e:5b:d2:8c:4b:3b:cf:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B0:5D:23:E9:16:87:D7:BE:3E:AD:EA:EB:0B:97:0E:A4:43:39:03
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:c7:b9:8b:2d:c1:29:a3:fa:bf:64:1f:54:e4:9f:be:3f:
         52:18:29:58:39:86:3d:33:3f:1b:0f:14:35:31:69:3d:4a:3b:
         b4:ab:ff:32:7e:32:b8:85:75:bc:22:ac:d6:5e:7d:92:92:55:
         eb:05:70:9c:42:b8:a8:72:d0:20:e7:f1:de:92:be:f7:39:31:
         13:d6:37:51:f2:99:60:3b:ec:18:a0:47:a3:cb:7c:e5:9c:82:
         98:e6:b6:5b:ea:05:98:42:79:9f:9a:7e:72:0e:69:3e:37:e1:
         9b:2a:88:45:e4:12:52:bb:f8:a1:df:3d:75:28:e7:da:16:ac:
         58:6a:a3:c7:4e:6f:0c:c4:86:82:ef:38:cb:3f:3f:64:7e:34:
         ea:d0:57:ba:c1:21:f5:24:70:7d:29:47:b0:a0:f9:e3:94:72:
         0f:72:73:63:69:ba:4f:c9:50:f2:96:bc:8c:2d:62:dd:7d:c4:
         92:bc:2b:13:e1:0c:10:7d:38:55:35:fa:d7:1c:e1:38:ad:2a:
         ba:d4:74:9b:4b:03:44:17:de:89:b3:99:38:05:74:c6:93:8e:
         c4:f0:25:c8:36:24:ac:b4:ba:d8:b8:31:27:24:b8:b5:36:2e:
         f2:3a:6d:85:3e:3c:36:50:01:f0:d6:61:58:10:5c:79:6a:9e:
         10:0d:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 09:08:03 2024 by rpki-client on console-fra.rpki-client.org