Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File:                     bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier:          7I08c7m4cW2JGPGhM3WXu/YNNYCQfjtQRFIvb8+jAmM=
Subject key identifier:   BE:5A:A8:EF:7E:71:72:19:D0:08:EA:B3:EF:B2:55:C8:E2:D5:6C:5C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       018F84B5BA2E308BF0497199F090BFEA6668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number:          0CA5
Signing time:             Fri 17 May 2024 04:00:53 +0000
Manifest this update:     Fri 17 May 2024 04:00:53 +0000
Manifest next update:     Sat 18 May 2024 04:00:53 +0000
Files and hashes:         1: 19ajNU175KJr9lL4s1MVczw-CZE.roa (hash: JfOg7k1/4+kZwv11nUht9jwLaBb3gvmsjuR3h3TibSs=)
                          2: 1HOsZLc-xkmKxpZ6SXh3SsGk8ds.roa (hash: 3n/dkchwhoj66zls5yTH339Uuefx/D8BOWuj/sa9hgM=)
                          3: 1Kg3AeuGUGI_7Hwt3W92yqbg3XE.roa (hash: 0FcEOOj+7ppCrX6MlIXYh3NujiwAflPryGqTptT20gs=)
                          4: 2XUx7v4JYwgHK0UdgSarUv2Puak.roa (hash: hF7NzBVgWe57gAZyGM+/CATebm12iduh8XWV4X1q0Pc=)
                          5: 3589ePvXqytZB1Sw2mpgDUhIPJM.roa (hash: eTz5KF0sbxe6SOrB2wV8qx8BDlLuXnFCE0jDn/G75z4=)
                          6: 4_uPiLGoI9wE3DtrLpy5W1y-mTc.roa (hash: Uu1n35X8f5Pz6pE9w/ieEOBAVboMQ3Fw93d0tzZ5lYg=)
                          7: 5svROvoGQ7pUF3Srg2efjRD3opY.roa (hash: EUg9zfXDhzdAixZHZ6Q66KnRJyWda0b4an7Lwur8EPA=)
                          8: 77HNHD5RH4f4W0WDzEbSdXLKttM.roa (hash: o26A3OQoo932ud8XnOt2DTYHTbzEVnBxbjygQR/CLfs=)
                          9: 7L1qf7FGz5w6H8BIhdbYjU4axpA.roa (hash: El94++tx2p4Wj2ny9DWOkJOGpdT23If/cjHav6fMmDI=)
                          10: B1RwdbxrgWDeyX_orWHcIPoqmyo.roa (hash: yKoHL2zh91n+vVjTKvc+awgT0mVC11chvCiaQD1qnMw=)
                          11: B2om4sJ8TKCJI2QNXTltC3HOjBg.roa (hash: i1hl8MsoP1yu0RwBzoSUy0PyzgBw+bMLL6ozFWphmoo=)
                          12: C3I30IS5tZduuGCfHfvZWcmJk3M.roa (hash: zkl/ScbsUUInXiLhHE2iQowgWJp8QjueLrs20IUuNUc=)
                          13: CxT8oESUQgEuKpLShsyDBCB8D7g.roa (hash: 8Ripm23q0Cp+2dswGaGpA+WbR5+T9nDabzj7izLJMyA=)
                          14: EFFaIhzDhcQcETL5Ql036yJBmcE.roa (hash: ibFwf0nc3z4r9TT+hDeMHXslH3bPhHx9etPMUwYwGoU=)
                          15: HDMtr0XE-Ym2BPoN28qLinchLNk.roa (hash: 90woSh3IQhMRmHGrG+tQY5HUTP9PX0exXpDQ+1C5uyc=)
                          16: JJXC6e73F8aAkSSaKDVCF-fAZ4M.roa (hash: Yrb8FgftQ/pYE86VyNeSZaVohxEp8s6PD8Fl0+4Oqew=)
                          17: JSDT-l7XbiwAw3hok_7MGRAKlQc.roa (hash: oTK8ThKZIJ3MXL1rO+0PlNM3M/X4u+aifeqwvlrqjHI=)
                          18: KqUx24iMNgIY7LOOlAmTHib7qHM.roa (hash: NoKU8BydiyqAHRz8W56r3GZIuTybAt6/eVSPRunTiH4=)
                          19: MOuJNuTtS_3zpyA-EJQAFpKzsxY.roa (hash: fN5oCjndweqxT08Th9pQ1pWOFDnUR9RBRZ8NNXiGPAQ=)
                          20: RVyAVtuYBhsVQ7GgBJ8NxxG_Euo.roa (hash: XsRSnQMK0ynFZwYc81eCpUjLSDoIN5m3g6pea5fEyIo=)
                          21: XWexh7z7WsD-syFzVGQuJgjwH7E.roa (hash: bOdVgG+TrVYtLqWR+lDEqoYNW3VhdmuZnuhgcoICR6g=)
                          22: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: L2nPjqpbdnfB+2tHpC3txQXQ/hmILWiVkkiV1vP3lnI=)
                          23: cHxthKhH65PUUA1ghBJl9g65CWY.roa (hash: NppRqB0DnaIrPY5Nxr3YCqSHcXO9iorEbWIIdD76qHo=)
                          24: cd-ftqB9JHKs3BmUKTgdqGh53R4.roa (hash: r/7zf4Z7jmcyzSYvVzEm++IoFduZgp/xXCYBEQPS4WU=)
                          25: du_i9F3ymKMiJeNpx7SC9fNKnFc.roa (hash: yhgaMz1xcuafKXHnu0W/ZQD2/nWsakMbD6Qe6LGAivI=)
                          26: ga5LrO9UNQFsjdc_cmiURK1G_fg.roa (hash: zsOHN7UBk8InPTQvVoCuULc2RtrJ9VgupGAtXGmINIA=)
                          27: gmQ5O6mFy7bez80R_ms_gGdrX3A.roa (hash: WhE07W9J+pXmmV5p18EmiMCxu7oTYqHlki7IB3h2f+s=)
                          28: h1kPIf-2j6LWBCkiWp_9Uvv5rPg.roa (hash: P+4jjbDwla8FjcVg7y4IW0CT+gnKDj/80szJAhVTCPU=)
                          29: h_mtEDbBn2E852vkt-m9XTDNSQw.roa (hash: bhJa7M/OGQdn4ICr0+P8hhRubKQd2u/10RjaPlDvnbs=)
                          30: jiC7IXLMmHxlaMPfCPaZZ28-o6U.roa (hash: kRvN086OhMKvZSOWqRQUhMcYwbeXFZI5H+8YMFWyqAE=)
                          31: n1-7zco6FluaoneVktEnIThCM8g.roa (hash: L6r+eIMFvg4ReKgi0NJyH6+Kil0tCWRVVebba+t3cHo=)
                          32: rRvycewacsNjkiuoV4f77av1zv8.roa (hash: K+hWmxu6ff74+il5QdHDHoUKLmHL3lXyBRUxZPfDgmA=)
                          33: rUfzwyiPkzLDhTDz_N-WMQLqzq0.roa (hash: 6t9rddKGa+et13IJpDuTaNAvNuwVfjoEore6SKCevHE=)
                          34: rrrUpuF1KgCnBLS04KnBxBRy79Q.roa (hash: muuWoE+d6svWm07AqWJWBhEb054J9EDK5vuaywS1rxc=)
                          35: sSScfpXmOaLt3HkZvAcAEoK97Eg.roa (hash: 7ihshxAi9Rom+Fc63SleKwfyCGAsG0u8mQCiywY+V+E=)
                          36: v8MY4F-df271PxG1f_ak-ut7gZE.roa (hash: 44MtdM92mbu7piXcwfQ71KTESRs15PnFv2+ghGcAZro=)
                          37: vwmTvfYtBIX7VPbpiNh22HQ_sJs.roa (hash: NDO4+RrdByS/4Tnx9h24/o5frS/RtD8nA8SpDKE5vus=)
                          38: w8C-rXpB2qI1CMj_VafeE0-sGys.roa (hash: d99gpe9ZI4qFh/kZwcGTLaoCdBno5Vvd655JeayVKCQ=)
                          39: wa3eLzPqUQDIi-E3aHbRsf0y0QA.roa (hash: ASuJ37RD3SiIiXzrLDRI2nNd5vtJpmrgHRmADFq/oME=)
                          40: yCnMCG5P4msH5GLPJ8t4wpr93h4.roa (hash: as8IgG+deHiRQbcFTyb2vHXwwemmh1F/lhhZAajoAzo=)
                          41: zAEQeiYg1HBoKoy2Hkn1nyQ56FQ.roa (hash: Z2kNJaPF7q/KHJfI43DKxnwQ3k1HOa+Gh41OHp2F+XA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:b5:ba:2e:30:8b:f0:49:71:99:f0:90:bf:ea:66:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: May 17 04:00:53 2024 GMT
            Not After : May 18 04:00:53 2024 GMT
        Subject: CN=be5aa8ef7e717219d008eab3efb255c8e2d56c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:e6:e0:9a:6a:f7:2a:d1:3d:15:7d:42:e7:
                    86:ec:e5:d5:ae:c8:57:bf:47:92:17:1c:95:1f:e0:
                    7d:af:87:a9:9a:08:b9:6e:36:b2:44:0f:02:ed:24:
                    09:26:c9:31:07:e0:7c:f6:a1:98:25:e8:00:e7:b8:
                    de:45:a5:4c:26:e4:22:57:6c:3a:dc:43:f9:08:20:
                    96:87:89:0c:d4:1f:b4:0e:56:f8:bd:30:11:28:5f:
                    5b:dc:9a:ca:91:dd:54:cd:61:70:26:9d:72:8b:99:
                    e4:8e:23:65:29:12:ce:b0:eb:9c:6d:44:6a:91:1c:
                    31:b9:3d:18:5a:4e:17:0e:33:cf:40:40:c2:a9:c9:
                    ae:1f:59:cd:bd:1c:e9:63:19:7b:79:5d:68:53:21:
                    e3:7f:17:b3:25:2b:5d:1d:2e:fd:bf:bd:86:e2:3b:
                    63:60:5e:eb:3e:41:96:16:e7:c9:1f:e6:4c:be:b0:
                    1e:a0:81:c3:24:f0:af:5f:ca:70:90:ee:85:da:ae:
                    62:40:43:a7:30:b7:5e:40:dd:6e:f6:97:64:ff:4b:
                    a6:3b:6d:b0:ff:dc:d5:ff:c2:06:10:dc:50:cd:88:
                    6e:81:53:ee:da:b7:09:ec:f7:0a:61:2d:21:f4:f1:
                    8d:8f:51:a2:57:0b:f8:b9:8b:cd:8b:85:7d:f3:ca:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5A:A8:EF:7E:71:72:19:D0:08:EA:B3:EF:B2:55:C8:E2:D5:6C:5C
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:6d:41:84:ce:c9:b4:d3:25:4c:96:6e:74:a5:36:3a:ef:
         7e:bb:6b:1a:11:3e:53:cd:d2:51:ba:b6:f0:42:d7:24:09:1e:
         bb:82:7c:38:57:18:fe:d0:fe:49:dc:d7:35:f4:57:3c:8c:4d:
         2e:25:29:70:18:df:28:fa:96:4a:70:f8:fa:bd:fc:b4:b4:07:
         7c:de:5d:93:9c:64:a0:b1:91:fd:06:65:6f:46:ab:0e:30:49:
         de:9b:02:6e:c7:f6:e1:d5:ec:77:12:02:73:12:f3:ed:d9:c0:
         dc:3d:0f:a8:60:e9:b8:cc:40:30:60:61:b8:7f:01:3b:5d:45:
         d1:90:ee:2f:09:ce:33:20:8e:f1:b1:8f:21:83:18:47:7d:4b:
         a6:76:bb:b4:3b:1a:29:09:59:ee:fa:6d:e7:8e:27:ee:a1:70:
         fa:27:89:60:83:7e:43:14:7a:b7:10:66:86:27:75:41:10:93:
         ed:95:5f:5b:db:0c:a5:62:2f:54:3a:16:3f:e7:dc:b5:62:94:
         77:56:62:c5:0f:64:66:e9:80:e3:20:33:d8:09:3e:c8:07:2e:
         d0:e6:7b:d9:b7:60:b5:17:e0:d4:31:f5:17:e1:45:16:f3:a0:
         97:ea:11:56:38:ce:6a:ab:4d:6a:f5:43:1a:c1:fa:82:49:e8:
         15:dd:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:22:55 2024 by rpki-client on console-fra.rpki-client.org