Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          9QrZmOvoyyHT41yMUI090bqVEeoJLq6RZvTfNWDngiM=
Subject key identifier:   E0:B3:47:64:4C:B4:11:B1:BD:CD:3C:E9:0F:DF:70:36:DC:75:10:BC
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       01946F6AC8C53A5B03B578B6D0CE55D1F518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          10DC
Signing time:             Thu 16 Jan 2025 14:00:56 +0000
Manifest this update:     Thu 16 Jan 2025 14:00:56 +0000
Manifest next update:     Fri 17 Jan 2025 14:00:56 +0000
Files and hashes:         1: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=)
                          2: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=)
                          3: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=)
                          4: 33iYPYtt5AemQ1cjM36Rt1zTHCg.roa (hash: YfFQeexiuOu0UumfbyFJkKYHRiPsF5sJX/U6ioFKUD4=)
                          5: 3Fu2GPkXt0-Lzz3eaID7XSP4YTw.roa (hash: tPKlbY89OsoO7XSwsKbenfBYaxCQfRLF8VeeCCHr/TY=)
                          6: 59BM3cmIoy1MoFuz148y_WZgCKA.roa (hash: b8nLw7Sod/Ce2ZRbJw+OEbeY/YeQr8JvhOn6OiPAFJE=)
                          7: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=)
                          8: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=)
                          9: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=)
                          10: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=)
                          11: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=)
                          12: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (hash: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=)
                          13: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=)
                          14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: CdYw7bdDyrxLNo9Q6ui4nP0XH9p1FYOCJnEnqQyT1o0=)
                          15: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=)
                          16: SKTIyHXtcBSWgsqArOetabgC6Iw.roa (hash: wlTzqtL7XXgCSVJcIXH5FrXlb2kC7qEyd0/a19pmV6M=)
                          17: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=)
                          18: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=)
                          19: gAy2L-yq3jv5ULydsY0WjO758DY.roa (hash: kDdF7XHhC12P2H5eVodHGu1h34gE1iEE5luu7KRRUlE=)
                          20: hT3ViMbXb_LrKhuiSpoqFmrcMCQ.roa (hash: FSGIliLJrgmQF4EiJqgEcoHONosmzXQhYlsO5z6IXR8=)
                          21: iuZIYZ0Q_9xllOx0JShQ49jTsMQ.roa (hash: e6DjFwBCGOrJwzBM1pVGgmVe+0POPsOMUBPxv2SOmLA=)
                          22: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=)
                          23: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=)
                          24: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=)
                          25: wMbNOoVuAAfOnCv7audGe2eYisA.roa (hash: 01LtLvrgoSvRoI3YU8h8l/yOXPpepM2yS3ti0z/wVV0=)
                          26: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=)
                          27: woRUexRgrjYm-1UeX3M4dxJmzd0.roa (hash: byIFDiUOYopR6OIBe4sC/1zUg7J+fkp7cf+oN0cuBwM=)
                          28: yNNBP2CYZiCkNUVUsBEkdKlDfd8.roa (hash: vCmsgqUye/JQpQ9Ozf04BYmInQnymLIG2O0wE02K/Wg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jan 2025 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6f:6a:c8:c5:3a:5b:03:b5:78:b6:d0:ce:55:d1:f5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jan 16 14:00:56 2025 GMT
            Not After : Jan 17 14:00:56 2025 GMT
        Subject: CN=e0b347644cb411b1bdcd3ce90fdf7036dc7510bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:53:a6:0a:da:78:db:0a:2e:53:c7:74:4a:
                    30:5c:25:14:15:b7:7e:42:0e:77:43:20:1f:1c:e2:
                    d6:96:08:a7:ff:58:ef:fb:d9:d2:c7:91:1e:23:7a:
                    df:35:99:3d:ce:d0:87:d5:f8:93:d5:20:1a:97:08:
                    64:c8:7d:aa:c5:2d:88:de:c4:26:75:58:12:5e:e8:
                    49:63:2a:0e:8f:6e:c1:be:2c:b7:75:65:c3:29:30:
                    a7:83:41:3c:f4:94:c2:91:ea:d8:31:c0:aa:26:18:
                    1a:02:11:ab:2c:65:f9:50:9d:b4:79:57:39:e4:5f:
                    c8:73:d0:36:0c:bc:cd:3b:64:eb:23:0b:6f:67:12:
                    af:20:1a:85:be:1d:b2:d7:76:03:23:4f:6d:8e:5f:
                    c8:5c:59:aa:04:c4:12:2d:9e:33:09:25:8b:26:f9:
                    52:52:65:33:f7:a1:bb:fc:78:ba:d5:97:da:a2:09:
                    73:db:5e:29:be:f2:45:bb:de:70:74:3b:1b:2e:28:
                    4f:c5:e1:7d:cd:d7:7a:ec:33:03:2d:af:88:a7:b1:
                    04:1d:78:eb:d5:4a:80:0a:6a:37:fa:7c:8e:ea:2d:
                    52:3f:27:5b:b8:d7:2a:15:5b:23:36:73:49:26:c0:
                    5b:db:b5:be:5b:17:f8:93:0f:1a:bd:c7:16:4b:b5:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B3:47:64:4C:B4:11:B1:BD:CD:3C:E9:0F:DF:70:36:DC:75:10:BC
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:fd:90:e7:dc:5e:ad:9a:8f:62:09:35:09:40:3f:c0:2d:ce:
         d2:7d:f0:ae:8a:de:27:c1:8a:78:81:98:9b:f7:05:38:ee:d2:
         d9:b9:d7:df:21:d8:65:73:90:7b:89:89:60:72:51:c4:70:84:
         b8:7e:56:04:8f:42:74:f5:6b:b9:25:b3:8e:64:c7:91:67:0a:
         fe:28:7b:b1:71:0c:6b:67:2c:a4:da:4a:0e:d7:ad:09:38:7d:
         80:17:94:57:02:96:88:ac:97:b1:c1:a3:a2:0f:e2:89:61:0b:
         9e:e5:90:ac:84:9a:4c:58:c7:7c:4d:9e:e2:13:64:4c:ad:2e:
         45:c6:e6:06:ab:67:4f:d5:40:e6:d7:c6:89:42:45:49:ac:89:
         69:7b:e4:ff:4f:3c:3a:e3:98:5b:1e:6b:77:85:01:14:b2:47:
         c3:b1:01:c4:cd:e4:73:fa:3b:59:78:8b:2c:0e:ae:86:4b:37:
         1b:a2:ea:2e:5f:c4:f9:db:43:b8:89:7c:2b:f0:e4:66:b9:bb:
         cd:5c:88:6f:df:0b:cb:4b:d1:27:cc:fa:f4:1a:d2:dd:55:f4:
         ab:f2:56:2a:15:3f:35:57:19:b9:3b:5f:7d:92:ae:84:ac:09:
         9c:92:3d:ed:46:ff:4b:52:c9:02:50:9d:7b:5f:3b:eb:e8:ba:
         c8:74:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 17:15:33 2025 by rpki-client on console-fra.rpki-client.org