Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          8uZ/Mvt7XsrlMUFc75MGORZyPZ7O7+mTHqT8GDrLde0=
Subject key identifier:   FF:36:A7:A1:C4:67:9B:25:54:F5:EB:F5:BA:74:A1:C2:04:05:39:7B
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       0193523E05B6CBC981BB58FE320EA13EF803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          13EC
Signing time:             Fri 22 Nov 2024 05:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:16 +0000
Files and hashes:         1: 1-_zG5M3C9a4wRTvrhgSKcxm-SHg.roa (hash: KvXqT2o5OSdvGzkFHtNGs/H4/bFJNlb12hv9/b46lM8=)
                          2: 1-uhELfZn8yj6VCK3atfsCEuoxuA.roa (hash: 6bTVrcalCV5ABkwh85AivNF174VRNH9izQ9Yp0wrxOs=)
                          3: 2-aOOVr7q023Pk3IaV5TPfJ76Gc.roa (hash: 22bUlTVHfB7wqkY2JhUNchX7kmDDrhCiXCQUa3/KJgU=)
                          4: 5QiU4KjHe6rURZgDdGTMl8Zyezw.roa (hash: yuQ/7BQYs9jM3jrH4SGueIzc9M29YlEPUkdg3FNwGhc=)
                          5: 68T0xseQyvW-Q00Mw9hUNAua0DY.roa (hash: 7wbYY+s2klX2VsRMckmXjrjz1lurfX61Y8O7sv7drjM=)
                          6: 6uGmIT7W9Wg7sBSoWczMa_sL5OA.roa (hash: Imb41uhM4QAUPwlqzwTJM1cL864G4illVyHURh92zyA=)
                          7: 7RgnMPWIFNhlJYDFCkvQw2l56eA.roa (hash: A08+clRBwT/O3Rn7KYPV9Wcni9VvwrepT8LUNLo6Tlk=)
                          8: 7lGBTkKYJ_WPAzyZzTtGImaphjo.roa (hash: efiPd2dZMuMzPfsAapnr7OZ3fhRlGkVsj2SemJKw3Hs=)
                          9: 8ujcaWQZePlJ0Pv383gdR7mriWM.roa (hash: zPFtFtRXT7HKq4fkCF+GhCN9gJxkpP2gmdJn5sRXRYA=)
                          10: 9V15KokMRLOv3d2QGM6kxqPMjAk.roa (hash: 29UWw21kDH7u2g5Xu4dD7QQgFCTeRuEYahZhzOMMtuQ=)
                          11: 9_b_r8yUwYd4GGeZKd-c_UaSh-w.roa (hash: njPD/RrpUIDyoyt9tCP3WKv97I0fs0muUSblPZ88qqQ=)
                          12: AIKzjtnyf9PYt7rN9uFhOi7701w.roa (hash: KMUO7QLzVB5FzyR5Rb6lHz4hobw6OqO4jbn5mAMr/LA=)
                          13: Cpj4CS5Syfv8p1MkSDbM2HHOQIA.roa (hash: QYdoLyP1ugdtttBATb01GlyvniZSmhwbFfG0SubmXXY=)
                          14: HF2XbYjJvu69VXIR3q4532IaQZU.roa (hash: +2prh5szipP2kwDbAJeERLwDz+H2V6Ak1+qQUXS1dhM=)
                          15: Hc2JXlu_-tA5p-ImkeLPBP77u1I.roa (hash: iJnNcLG+UsucKeYTqIJJlXdmpkBm+dz2aj+5d15V320=)
                          16: PZoFtIzZ8ZVm4oP5HkVTaJjH3Ts.roa (hash: jsw/QE01H+QXkF9AwZ+rJo9OzcIutemBBR3xgFxYMbQ=)
                          17: QBZsiytaxBWDQIAklaBTmKX0Umw.roa (hash: sBN3mfYhKcw61bQ8I5Mha9AN/GJRl/Iu2GY+huMAfP8=)
                          18: QtOqvCh0JDBBovvKx6SNp2pH5co.roa (hash: ftEYpTT0z58NNgBwmUY8IBiVari+rCSJofn9gVyAmAg=)
                          19: SP8AgShzwYjEGMPSvDt3cdNDVi8.roa (hash: rHZFKTf74QNuT5bELYVma7un8SurP5bi6Ari8WD/2MQ=)
                          20: ToXeB3N0sZ2KMbOmaAVHBiip2DE.roa (hash: +XFZe3v94eKHbwGTxRVxddpMMxlU4NoPVmFEhjqJtdI=)
                          21: VLdlSoX1beDIU_8vxBCxbHUTHMQ.roa (hash: kHctGKB5vzhvjM+LaeyBciSMiGjsyJrKcJLq/4As12c=)
                          22: Z_e71hj2oOgBz5IuU18Wz30iY7A.roa (hash: 6DejAFnrnwgY06QDp0LhDZBWpdvZoFHnL8ARCBk6A04=)
                          23: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: OVlO9va8v+j/e/QkaLvm+c2I0zFLDovP5dK66HYbtYI=)
                          24: aW5hqrLFBdSddb2iPsz0JuxckWk.roa (hash: DefnT8kH2WacGi1UN8M831HLtvl06Zmw+v/hVR9j4zo=)
                          25: b8Gb7e3T5_fbCDzBvMO1glwFKuI.roa (hash: 95BghHc+/HJ72K1yVMIF1HltsRax/pcXKtykbvEXW30=)
                          26: bSKT2MCA_M7qJHOiW4ucyAHsHFM.roa (hash: q/ouXvQxioEERidFIndLeBbWbz5eUw/WW1LmTk1RXDk=)
                          27: cps1vnPS3Gi9mMQYaO12hTBpBBs.roa (hash: lgsGGPiuWmrm/7M+9vlFMSiTrIkVU3fdjmwdxGoUW28=)
                          28: f3kz1XK82k7nZ9c_VJO00J_IYWo.roa (hash: R4KrzIMz0JnJH3vYw54vRi44kV7CXnTPuVDwpmZ1A10=)
                          29: jX2JlTW3XchnQbt8IttFMh24sAQ.roa (hash: 75xNEjMhGOrrMY8PEWTGcgkAeyIY1rdxcVhmBgq3NS8=)
                          30: k2y0dbclqfkDR4RCHMrKPPkanuM.roa (hash: /PhTPQdai2pCCi6fhus+cushWk0wKvSDPiyzlkIqwtE=)
                          31: k39x78AVA0gK80-nbdMSfIX5Bus.roa (hash: 6gYKw9/Qlj9wkc3r/sfGRP2dol0HzVQhQJPRLKWuhRU=)
                          32: qdB6ySjssDrDY_OxXc7ZMcVmN6M.roa (hash: JZLcbl/ymjaWpxqj0LsWUKquCMckGbVF6EYLCxhiqC0=)
                          33: r00F9z_gDuZ2dbZrNZGgZZVRnfY.roa (hash: nQ0vk8ImFe4l0tm5UaB3TAUv0nNmm+5mBVV81PX8Egs=)
                          34: sh3nf_nGdks8JWQh7FW8iC7EIUQ.roa (hash: ehrLBrdlvej8R+tlB7+lo35JcEhfDbs29RZM2Lb8vI4=)
                          35: tMoGrs2rNXzZX_qyeg_HYoZKFS8.roa (hash: lIEHf9mP1TE6iFZ1/kstbUEzK64oGn0ll7nmaklh5WQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:05:b6:cb:c9:81:bb:58:fe:32:0e:a1:3e:f8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Nov 22 05:00:16 2024 GMT
            Not After : Nov 23 05:00:16 2024 GMT
        Subject: CN=ff36a7a1c4679b2554f5ebf5ba74a1c20405397b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:39:0e:b7:7e:a0:55:65:49:35:e8:47:4d:
                    d0:f0:0f:5b:73:e2:a5:77:95:bc:f7:6b:d2:66:5d:
                    ce:df:90:60:81:b0:92:77:53:4d:39:cd:8a:95:dd:
                    07:e6:1e:19:42:23:bf:50:b6:3d:32:e5:94:38:6f:
                    4b:b4:d6:49:ee:d7:43:ac:1c:91:b0:31:cf:87:8e:
                    c7:20:09:ab:58:18:48:74:f9:b3:10:db:19:0a:fb:
                    d2:c8:be:4d:0d:c4:8a:02:9a:75:84:eb:65:e2:68:
                    d1:23:51:ea:8f:a0:fb:55:a2:c1:89:6c:c2:82:25:
                    27:56:c9:a7:c8:6f:4a:26:bf:20:0a:b8:2d:71:16:
                    21:11:6b:dc:8f:f0:ea:02:09:e1:e5:15:b8:3e:87:
                    6a:f3:1f:35:6d:6c:b8:74:9a:a4:55:c3:c6:34:25:
                    96:38:6e:3b:57:26:7d:ed:da:e8:db:14:8d:b2:ac:
                    24:50:2d:b6:47:8e:96:c2:a2:de:44:8d:13:ea:10:
                    3c:63:30:2b:73:d9:26:19:34:f1:7c:9f:b6:8f:cb:
                    01:b3:3b:06:ee:c2:9d:f9:9b:b1:db:ea:d5:35:58:
                    f0:f5:b5:2f:94:5c:17:ba:55:74:9a:79:e4:85:c4:
                    aa:32:1e:ae:b3:db:e8:12:e7:e3:c9:cf:c4:37:2e:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:36:A7:A1:C4:67:9B:25:54:F5:EB:F5:BA:74:A1:C2:04:05:39:7B
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:24:ca:7f:31:bb:3f:67:2a:20:e0:33:d0:73:5f:5c:6e:98:
         a4:9f:c5:e1:2f:30:da:90:4c:12:1e:a8:be:cf:50:8b:0b:99:
         82:bc:04:ef:92:b3:40:d5:05:4f:ef:1d:dc:62:4e:90:d3:ee:
         ef:fa:81:1e:e3:6d:e2:91:a9:08:39:f0:54:2f:ce:85:8e:b6:
         ea:11:7d:01:44:4f:cd:18:49:f1:af:a4:b1:e2:14:78:6f:fe:
         87:12:2d:e7:2d:25:30:9d:c1:13:94:2e:4c:ca:33:de:7d:0e:
         c7:2e:85:5b:b3:e9:87:c6:e3:3a:64:b9:21:3d:85:3d:28:6b:
         4e:c0:17:e6:c4:aa:76:0b:74:d5:57:7a:45:37:63:86:43:67:
         5d:51:d2:0e:15:ab:f8:9a:39:af:ae:76:39:41:bf:35:41:0d:
         95:a8:36:08:1d:ab:22:80:1f:59:da:17:b9:f9:af:8a:e8:60:
         95:45:d6:ff:d1:8b:6c:67:9e:85:84:c4:28:97:f8:2d:bc:06:
         29:93:80:d0:5f:55:16:7a:2f:f4:be:ac:d6:64:ac:84:48:3f:
         86:97:41:7a:89:02:d6:f5:2e:48:12:3d:d4:92:9e:9b:1a:27:
         fc:b4:1f:cb:38:3e:55:a6:cd:d8:1d:ab:c1:ca:fd:e0:b3:ad:
         29:6d:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:54 2024 by rpki-client on console-ams.rpki-client.org