Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          Cec8BFJzr2Fejk66JyndycdhxoGM+M9Ow4+WOIkRmJg=
Subject key identifier:   A6:7C:8D:B9:07:11:78:20:2E:5A:49:51:22:27:BE:0A:39:3B:71:E6
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       018F460DE5210A2AA1CF3BEF144DA0933993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          127D
Signing time:             Sun 05 May 2024 00:01:06 +0000
Manifest this update:     Sun 05 May 2024 00:01:06 +0000
Manifest next update:     Mon 06 May 2024 00:01:06 +0000
Files and hashes:         1: 0fHX7bhteTbdIcpIVe_MB7cQjxE.roa (hash: tRYF4uDnqGb68uemqIe1xliH5JRwaV8llZ6b5gDddQU=)
                          2: 1-qi5RfrLx8S45wk9QGsJQGBkjbI.roa (hash: FIupfgNZ5tO4X5aX5/+pmZKGbOD43HH2ad/WWG+I348=)
                          3: 3KjXvS56nnWvii8NOABXWqzL5Uw.roa (hash: zgzBkEhmekKNniAk5JKLPXnLl7ECWQXzloDGzeSruo8=)
                          4: 3wyQEu5OoyZI6zzFu_K7eR8r2k0.roa (hash: XH9jkxrIlZPxvTylaely66F2tNQox49s+kPAwUtxuCA=)
                          5: 4PxuigS3jdQiqJlloNpR1G2rMB8.roa (hash: zEAntRd6uHAgZ+dFKEjj2MybVvYrpJkvngy80mMz4jk=)
                          6: 8Z6YGgL_i8ZtUSpNhCbgs9BKSoM.roa (hash: c7z89SkSvKXv4bdB75R0WY3NlP2Tpv59POmfO6/fhJs=)
                          7: A5c1Q-FjCc_jEWCNtVE_rUfMjoc.roa (hash: w8N7uudj9yGZdwnDoZQ53EALs9rRSqIY2UYmPh+Extg=)
                          8: BYUwJEs-GWBrAJsOlszBio-L1mY.roa (hash: 3JsGt0KwCzBtOZB3t33fhBoWrYHh7joRL1hG8qIzaDQ=)
                          9: Bn9XLuhaP6gdWZ4pWMwoE2fmU7g.roa (hash: ITFvaSHvmLUFYuHV3iSvjEM4TLZoNGx974hcHz4fNrE=)
                          10: D8jAtFDQWnedEDik-hivW1nBsOU.roa (hash: i6andS3J3WM5bXlIPD8dZY4a7xwbaQcTxuJAovhR8Mk=)
                          11: DNq1NO3Wnmql62j0oQNjD8eZt48.roa (hash: MW7OZEOk1jGR2x7yDL+gxliLl5bsGDpyRB+5G0REdOY=)
                          12: EWZlZD9kRqgI8UZV4SRGzS0U5n4.roa (hash: 8tO1kl1Hvfuhd/CKIrAenW5qfr8b9eThsMZvf/5y1PE=)
                          13: FUlrEPcodaQE6sPzRi3JCNfdxeY.roa (hash: qM0TRfGKmmCORrWOW44IF5slD6R/As5gkpz3+WY7OyE=)
                          14: GcPNs6pJc6W38yIKOJM-iP46JDA.roa (hash: BexSvn9EKJeGF6Gx2MQy5a0e1jIfUCvJz+R3ZbS8mr0=)
                          15: GnHJTN7ncCstUelSbleEG4HEl40.roa (hash: asQ2rmkNknwu45mNTB7F7R0kZwFfLaaKJJhnmNywaqM=)
                          16: JbVXBUnLG64zA1S7UqpTYHBRPN0.roa (hash: YjKFq8tPE+FguPruEfAcYBaECSyWDEX2YNepmsW3Mbc=)
                          17: KNBkNlaJuSqaJjuMECrJGYVdBIQ.roa (hash: 0W7H31aHUh1Vr9pbSrp4wtg6VlrLcLXVKWnwxkx5zKc=)
                          18: LOSFGh-4kVwsksLXcZu--po7Gzo.roa (hash: C4S/vWav2FwV+VNO3PWNChbx1DdKqPdxPQ76/ijw2tU=)
                          19: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: c03yq9biA3COhpD714lU5JnjYkhzXIGp3X2F3zQaG4Q=)
                          20: NnbtXj1tNY4lI6jdFK-1jR2UByw.roa (hash: QM9Q5YXH789bCCc8XqmFOy8uVlRXAjwxnScyPSfRYJI=)
                          21: QnZJL3qYLI_FGPipdj1588Iq4N0.roa (hash: iJivv3xvorWtOq7mfmZu1ALTNz1OB2IiX50lACoMH2A=)
                          22: U3OaYV-wOvVFY6zJc-1Cns0rrf8.roa (hash: TK3TTlmeNmLswojx1lQYMJRjBCWZlhllUHswQFlwxew=)
                          23: VSkOhfiwsQjKyYNLwmHQD99iifQ.roa (hash: dlL2DiTBNR5LOJj3gMNn+vfpZNknkBIld3mWRUpwkBc=)
                          24: WJkTmjAKX__LNrSNfWSUEsmETtM.roa (hash: m1wWuakdJR0VDlV4cysT82Zy2fYYVgfHzcHpDsvrW0c=)
                          25: WQMCALraDK8bS2E2l5pIshVREg0.roa (hash: iKQ3rbDaYcqfIC1rGGpsmc3QJtLy0pmw/Ld2E4OLIR4=)
                          26: XoKlLTttG9buIMoPICj4w77ocps.roa (hash: VjHPj0RA3fmLdHxTHnncllCJJLQ6Rem0er0Z7Hg1+00=)
                          27: _UBWiA5SbxfGU8IJwclf_0CS9Jg.roa (hash: IOlQfKGFOnaabt4KBQ+vn1NL+QqjuyiTyNPQ+JDiwoQ=)
                          28: fcfydsFOVC6qGO1FRRr2e2bZxDA.roa (hash: /YPhjeHDFhnmAnKbLoBN6QoNwGbCMA7/PpyiWBr43no=)
                          29: fd7CAoPRAiiEQg5rRNt8SfZn8UY.roa (hash: 5AISExqKrhwx7ntk4TDYNV/UjyUx+xGFyjY+w+QtbtQ=)
                          30: hygtEluyax9mon_jVH7XDM1YFsM.roa (hash: /06+RrIn+7XGv/IJmvEsl7+3U7NF9KeICrdXO4d3bRc=)
                          31: kVEAGEGPSgfIT1Gh668kvSnXhG4.roa (hash: HeiD2nz+7PkKCQZMYZKxI/qMmVosyZMkk3qSj8trWVo=)
                          32: koG0QOX3iYcCRARZ2BbMxnqqiIA.roa (hash: 8aDLZcKV+rP4/r0Mko71fAPX+Wt8HtZv94jMbea2lww=)
                          33: mjp_jeIx-Xlqoly4O2DfSapczGk.roa (hash: EoWOYXCoCTihcI2LpIzqfGJ8WNn0LHaiC+BwAybeNhk=)
                          34: qbjWDYLDdfYWzsmBZPn0jZSXsYI.roa (hash: zXrpxAK614oflhjemlLGnMpVRNauwEf9y32xBtLKBe4=)
                          35: tysWAmy5ZtD5QB3Ed1pMHAJLPYw.roa (hash: NUHKBMUT5JETCy4dvM9uiaGeQMLrOv/YXvpNzgzVsdg=)
                          36: uSTmAGd3s6PIiJS7L9fCWnZp5zo.roa (hash: 9qcben1NxiwJCjU91w/96P7stG+6sdHi/LPUMUAw9Ps=)
                          37: z0yieLihF4AKdy5kuaWBCWLeKSU.roa (hash: fsdb61i2kEAJHiWq2j79bvdzNqbb/OdX16oiKEqgurA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0d:e5:21:0a:2a:a1:cf:3b:ef:14:4d:a0:93:39:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: May  5 00:01:06 2024 GMT
            Not After : May  6 00:01:06 2024 GMT
        Subject: CN=a67c8db9071178202e5a49512227be0a393b71e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:6a:b9:8f:dd:9d:08:d1:09:ed:f0:db:43:
                    84:d4:c3:79:56:33:69:af:12:7b:d6:49:7c:a1:1a:
                    9a:28:51:91:dc:57:83:36:24:30:35:0d:4e:fa:c1:
                    de:70:08:b5:d3:fa:1a:dc:c2:80:57:98:cf:b4:d2:
                    09:8d:ab:cb:ef:9b:ba:73:52:27:7d:00:c9:8a:3b:
                    42:b7:3d:15:b9:1a:21:40:f6:bf:58:b7:e0:95:de:
                    6f:25:a8:a6:25:af:f3:76:67:35:c6:bc:42:a5:94:
                    a0:8f:45:0b:e6:99:77:b3:9e:c8:8a:75:05:45:1d:
                    b8:7f:ba:88:86:42:bd:cb:1a:49:fe:77:e3:e6:1b:
                    e9:fb:e6:54:21:fc:51:36:d3:56:14:0a:06:13:c4:
                    e4:94:30:0a:76:4b:0d:f3:4d:e1:61:45:19:bc:52:
                    4d:22:9d:d6:b8:51:54:bd:15:e5:3b:f9:d7:9b:56:
                    e2:df:ad:e1:56:21:fa:5a:20:b8:ff:52:d0:cf:9d:
                    0d:3b:74:da:13:f7:6b:49:44:f0:c7:90:ba:9e:50:
                    b6:13:04:da:a4:cb:d8:1f:66:8a:58:91:73:1e:95:
                    94:58:24:94:a9:4d:5c:13:2c:c1:65:3e:13:eb:17:
                    1b:09:4c:e8:53:a0:44:28:9d:ec:f9:7c:45:5c:c2:
                    09:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7C:8D:B9:07:11:78:20:2E:5A:49:51:22:27:BE:0A:39:3B:71:E6
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:68:6f:b1:e6:e2:ec:1e:8c:d3:a5:16:17:98:11:30:27:
         28:55:01:8e:b2:fc:90:26:b1:07:93:27:9e:82:e4:2c:ef:d2:
         b2:d3:fb:1c:f9:9a:d3:d7:d3:f7:97:7b:9a:0e:04:06:6a:bb:
         f2:83:72:11:6f:1b:8b:e1:fb:68:b7:9f:f1:4b:3a:14:c4:c8:
         d4:d3:52:4a:c0:2b:58:f2:80:bc:6c:db:07:0b:9e:cd:bb:5a:
         7f:d9:2d:c0:27:13:38:fe:f5:eb:b8:42:dc:05:54:0b:19:7e:
         c3:bf:1e:53:b3:a7:3e:09:54:2d:e6:e7:43:92:ed:7f:d0:2f:
         70:e8:7f:be:99:73:f6:65:d3:7e:e1:e8:c0:e8:a3:ef:c6:59:
         fb:18:24:44:f8:ae:56:17:26:00:79:12:aa:19:50:40:50:0d:
         c2:28:39:3b:84:66:e2:7b:92:b4:19:18:29:dc:3c:6f:ba:e0:
         6f:f9:04:65:34:8a:71:7e:04:d5:91:3b:e3:cc:fd:2b:7e:69:
         ac:f6:fb:92:fd:06:e2:4b:16:53:58:91:d9:3c:03:30:1f:5d:
         00:21:d1:ff:c0:8b:9a:5a:72:10:6a:c3:56:6e:37:d2:0c:70:
         d3:d3:ff:b4:e3:79:8d:88:1d:92:77:8c:12:f5:5f:98:aa:60:
         f2:91:6d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----