Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier:          yApdVJWdH8GSqSYLJSeweNPWLG1WvZ6a/CwrZyH9fDQ=
Subject key identifier:   64:9F:A0:F5:19:7A:CF:04:F4:2A:B8:4F:C1:9E:A7:12:01:01:04:43
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0188787FF9BB0814DFB07BDF640D6E05C8B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number:          0932
Signing time:             Thu 01 Jun 2023 19:47:12 +0000
Manifest this update:     Thu 01 Jun 2023 19:47:12 +0000
Manifest next update:     Fri 02 Jun 2023 19:47:12 +0000
Files and hashes:         1: 1-GimiD9mgL-4iapOw7YrzTH76ig.roa (hash: YIk1nphAww7fWhaQ0LRDOMeq32+LDg6eo3KV+E8vpDI=)
                          2: 1oy4hCBDOTU-sWn6jgVGOWegRF4.roa (hash: bUqGKOdllMcMGEngK3Bszv/Dgk96MG6XHkKTSrUmPYs=)
                          3: 20Qw4Pd_hEiMkl-l-AjQM4fy7HI.roa (hash: gb8Q8EmbbABoRksrmxQQ2fMEpDxNaLSTJ1/961L4hvw=)
                          4: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Pp6Oc/oaOOSZWJISRMRu+LpSQFN6NAfSlXWUZHcak5U=)
                          5: 4Me6lWJznhU6RAvjRP4qOPD7whc.roa (hash: j/e5KFTJfPw2U+l9nYtsKRRj1Fqj/FffH9NdEwySyYU=)
                          6: 4RcP33lyq6G3z70-1RQvqCgUT9g.roa (hash: csVY/xqdLVeiEhmsqkXU5ukSih+lETD31RAog+nCW2I=)
                          7: 4XMeMwKezbtluu-biEiz0hHdWBU.roa (hash: vUSQOz+l1LcPqrbReG8i5Udjze+PlZI7YyCZIpY4eFs=)
                          8: 52SXuDZStoj6Fl6WsPmf6MDAChA.roa (hash: /LD+vULSOKaRdIJQnpErBdOnSRt42Eux8rcWiWZf6y4=)
                          9: 83CqIbQsThXPJte-4rSSAoZut70.roa (hash: Gv8sRUNSMCNmVP8pchUsVPvgCGdLWKP0herKbj4RCmc=)
                          10: 9HTGN6vJ8lYVS1e12dFZYq1qpHg.roa (hash: 4r6daAojN+TuksRv4a9uBUf44bvoEdDokOuxnp2+OMA=)
                          11: 9YSB4ACVLnXK3QfXqlTMlsl6WLw.roa (hash: iGgkL0eT9OG/ppq4yvbFfFOIeD2R9B5pFZ2L1E8/WXw=)
                          12: DYQjS8GLCTno-cHAmml8Lm-b6fQ.roa (hash: la4MuKvw9xEgZfYXYD1wpDiCrhmxCm/fLWsPHgYy+aQ=)
                          13: DrN58GqW9-nvtzDsuNrvyBGVdMI.roa (hash: Yqbc44YBMk4LAv0KnXx3X0dWHBQk/S0UX/l82Lg/Njo=)
                          14: FT-fXFHZnzxNmenl4C_4GShjOGk.roa (hash: s3K+5llNw9uoCFX1otr+jFgn1N44B5x2P3FMrN61LUU=)
                          15: F_2zMS0XO9j2LpynDcBXQR1HESw.roa (hash: MUkYaO8V4Hn5d7R9DyM6IIUyOC3IWzqPAa6uHknm4FA=)
                          16: GCbFSPillJOzw1_RR50BPy7XWr8.roa (hash: tXqyBRf0p8Vg03ZIX+f0yfrUYKU8gdvuKMuagyNk9KI=)
                          17: GjiXe5_tw7E4OAUX7jbQOBT8_iw.roa (hash: MH8ed3QuSfuArV3LCL39biPaRX46e1J8n8noydY4mjc=)
                          18: IIueWyGVjezrEUiAMwkgjJvzVuc.roa (hash: LVxdMBzT2k1X5PN+5QIc760n8eSMa7WBFqinMgJCbzw=)
                          19: J-OKkBgLS5LvV1aL8tHFINAgsKY.roa (hash: 0UtklKqs414B3tmlQzVtwxwyPESj4V2RO8TD/BbCLBw=)
                          20: Kv1wDWEZo7BjW-q2jTecW23OlTY.roa (hash: J4uhj5pzKEGp+wG4i/g12aOAhAs8gBC8cMZXhtqTxYE=)
                          21: MGhSiQWuJc-mNGrPsr9DeqWgH8s.roa (hash: bN+Kuoiy7Yc57P0+wUgZnorTU84RNUsfQT9lf91vDXE=)
                          22: NK7wdmyVNq4Lih8XrRBChz-bUFo.roa (hash: VSgc6HZIHIp3TAnXeotASUCjoea6cmsMLLGN7EwdieU=)
                          23: O5EcyxN_O9Yq7QKdSo-OMzAYek0.roa (hash: GTx1xDB7YJLQBMsS3qQ3FmzihgcqlPdqnnnVgcBxqC0=)
                          24: PRL8whNMmSSaBlYDtBWeMCzzmH8.roa (hash: +AnDMCEnITfpeXpcIjTs4JUUtLycaW6JTnJNLK8zle4=)
                          25: RdYKHeyFN-cIk_b59x2xHXQszQ8.roa (hash: 1DZW6UDUlWAlMRLXcWgTkrm0U/Hm1gQ1ylufL7Bb+pU=)
                          26: S8fugCHIF5Zrk4eUHjOPtmG06TY.roa (hash: LirJkZnMtDCkfzstbgRZTyP8XcEe2aaOf4OWDVL3EBk=)
                          27: Shf2soTFC9rho0W5mfGXMRBbeSs.roa (hash: pgZ6s9KmSst/JAx89iqeL+g0hJsFTZLuMOCZi8zkHto=)
                          28: TiUwYtxGGBKycVu5NXCxI3n4z4o.roa (hash: be081MyCGIwvxC8KDKo7i9LMDRlrOzmYsljENpwAfqk=)
                          29: Tv7V4gVCkjzp8_ZvU1GumxKTMUI.roa (hash: RCqvQB+1nYVQwg/m/5oUKni9b9kYMP0CD7X8/2to37A=)
                          30: U5IntNRNX7FFHV_fUcEbMtKxGOU.roa (hash: NeLcw+nVe0zG8wgXyIlzcgA4ZFaEZ5hfIq3v/l8//2Q=)
                          31: V9uEiMaPzw86tvZ61aXHCKAcdXw.roa (hash: YHYVZo0uyMSLvT4lPeka5ZSt54+KlIDelRMVgR3Gz4s=)
                          32: YQLFZoDgiTlKOTyF42sJw53hqwM.roa (hash: gVOmOPudIOEMNNGkEDWNETlk9J46izGWQoa5WFhcc1Q=)
                          33: ZypsOOouO_G1-Qidu-nPHM_ea0E.roa (hash: RkydWB23wD+WwBtdpsbjlc15R/iqJHQnR9KfouaSB/s=)
                          34: _K8hisDRyGFyZMcBat6LtW3w19c.roa (hash: YnS3szMxJG5KeNtManZU+X5F0fr1QocZqYSPvi6IvP0=)
                          35: aEdSlbVX3t7JrGI6_GizRhxIz-U.roa (hash: RnNiiXq0LTZr+8Y5NXj/6XgmYfsafN7Aye+o8l88BkU=)
                          36: c1O-kkupv2A91ekE7vH_oE8n9NE.roa (hash: RXogsJLHbnqfwVvado5X7A/vKfbw9iUG/TKdy7XHqIc=)
                          37: c5kYgjv0eNfvCMJ7yQnEP2U-rF8.roa (hash: RC7+FGwl5r9uDgqcL992W1ebVNdH7dGC/JK4jVOYa1Y=)
                          38: dLAvGmweY1Ny0LTywcqyGCLDkDM.roa (hash: CFqHI1bKHoFYtfomszwyqT+/GfOjsqKdwzQNf/Ia1uQ=)
                          39: dhmkdEMZxjvcqpmm6_WQEdrVgj8.roa (hash: 0BCFd7vWpLMGZIHUk6Zg9p4ttOJlehRwZf6ZmHqCEnU=)
                          40: dyPR31ntgVnvxJgQeL15ti8PoKM.roa (hash: zqyvn2DBFYB+rgBNzU4O7NKH1C0przjjZ2R4jy05sXw=)
                          41: fCaQB80TndSyu5nFkSZlxq1jUi4.roa (hash: ++M/m/I1VZTmP9j9HfA89SEEYdRel6aXK0RbAxC61HU=)
                          42: fjwEAoyoamsM1riyXft00Zuz1uw.roa (hash: p66ZhxpSGdo/Mbi6A9zjCGugfEppBqvhcKsIeKwUiDw=)
                          43: gGpCv9be5wd0mZ2FKrmfW9fjCVI.roa (hash: /slIz75ZhmrMe3uup0/CqrMGJQVQ1o/MY/xyTRtKNbQ=)
                          44: glJSEIHwgzuD4WWnSpTOjUMtt4A.roa (hash: CAWrKmm6kBvsjycLggLZoxc+9Amg5NzAQAXaooj/j44=)
                          45: hLFJ18E6NPAcs1MEjA6MOasqNQs.roa (hash: L9jJCZL6L8qcJ17VVa9Ze1D4T8oCNxWpuqlAclc+eqU=)
                          46: hyeVhNzPCXIaHPNZZSzRwXxNCZA.roa (hash: U/iJi9VxqG3PV5SuBmr2FuFHnuAo+nbBpGWTbXdBLR4=)
                          47: jlBvh0yw6NqPJePO3tYEaGRfCyY.roa (hash: aM0jS+qRopoGf0VoHHIJDiUN4udfN+Wf/SlH7OvW5qw=)
                          48: pHbngFnVQ2Zrr4motj4z2t_RCcw.roa (hash: oFYngMbeDkFmsqv1hyM/E0H+aKy0blUvrOIsnOqG9KQ=)
                          49: psGe0N5kT4nZewFKXpdIqWffuYM.roa (hash: kKpsZuBZpRWTBhBTHqb+wzlOBMWgqOg0eb1AXy93x2M=)
                          50: r0S1p5jGRhQfPBbTDUfinS8c9Tc.roa (hash: 6m2fYIL7LmoqWJhVHOpMvR9qxWhMO+LtoK3szK+GB64=)
                          51: r6MeWC-0_ah2STkvnoJmmOpORo8.roa (hash: /isG5FXuateKfDG0Kl8VW7AweuVz/sjsk+Ujpa1lfHs=)
                          52: sFli_ovMMk7-8J6jIoG-buKSyNM.roa (hash: emy9FMcjswom6LV9WTOjqdiHg9600/HwvDH4cg3F928=)
                          53: sGn7JPWcZH4El26uGj-M2bgYbpY.roa (hash: GoVERw2t3WzMh2qorWteDB7nq5pUw/5bBRg0E2xJnkE=)
                          54: shAIPJHpAN1BC57Ku7BnErdqZBw.roa (hash: yOaPqgVcpCR1veTCXoB02qewL/bUbgV4fCBurYDax68=)
                          55: skarauNUF8NuaEwp470gjaUJ9Js.roa (hash: 8NUpjnkP1eLjbmG0KR6J89+1tBh//tmIoDJWO+mAeTQ=)
                          56: t7nV2Sjn9kwZrQpSO0uDZoaOges.roa (hash: NhioH9gDFUh94JKGukBVsZy1TtmS1+NrMcPuvxvxLvQ=)
                          57: vFED0dZEjBURoWsxXMlx1HS7ed4.roa (hash: vEt7G6Ann7qx1FBa6ahNxtGz4eZd0wBdR9rGSzdkcBI=)
                          58: vHx0sgcbOyPXNDhLV1_hWnh7-YQ.roa (hash: hUW38C5N9syfpnVAXEPF56mQnejLWlEGFhiRGPXMDps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jun 2023 16:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:78:7f:f9:bb:08:14:df:b0:7b:df:64:0d:6e:05:c8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jun  1 19:47:12 2023 GMT
            Not After : Jun  2 19:47:12 2023 GMT
        Subject: CN=649fa0f5197acf04f42ab84fc19ea71201010443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:49:cf:8b:7a:f9:a3:42:ee:f6:51:5d:86:
                    9f:fe:8a:07:a2:b7:76:3d:b3:9d:8c:a0:0c:9e:2c:
                    e0:e7:b8:5c:d7:14:d1:16:50:db:ba:f9:9a:aa:e9:
                    1d:c4:97:0e:7c:d8:37:17:77:9b:c1:3d:bb:ef:cf:
                    15:80:94:74:d1:85:e6:9c:24:30:0f:cd:2c:25:3b:
                    d3:22:4f:6a:12:8d:50:aa:c1:3d:08:2c:1a:17:eb:
                    c5:69:91:50:90:fe:14:79:8a:76:47:7f:be:6e:c8:
                    db:02:8e:60:78:a1:af:fb:09:ef:26:39:aa:42:69:
                    b3:32:a3:9b:3c:fa:80:5e:9d:cf:36:ce:eb:6e:c2:
                    87:cd:db:ec:a7:27:56:e2:ab:75:fe:63:9a:20:25:
                    76:7e:c3:9d:f1:e2:0e:42:d2:f9:e5:8d:db:b0:cd:
                    22:a6:40:64:14:a4:50:ed:e7:96:a3:bb:ab:69:05:
                    f3:dd:ff:a7:e8:4d:f5:cd:3e:59:af:b6:c8:2b:74:
                    9b:cf:3b:be:08:0e:eb:f6:23:e7:0e:5b:f5:97:cf:
                    fb:c9:e8:b5:cb:9d:39:83:16:cf:13:77:23:80:03:
                    e4:c3:27:82:5f:81:19:17:a9:a7:bc:6d:52:7f:61:
                    89:f5:53:8f:7a:e2:69:48:d6:65:55:99:93:b6:4f:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                64:9F:A0:F5:19:7A:CF:04:F4:2A:B8:4F:C1:9E:A7:12:01:01:04:43
            X509v3 Authority Key Identifier: 
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:66:4f:4c:cc:e2:28:cd:58:a9:f8:89:26:e4:78:2f:07:
         37:f4:08:50:b9:58:ad:86:fe:5c:c4:d8:19:4c:5d:79:48:64:
         5f:31:e5:32:0b:99:16:71:13:2e:54:c3:ba:fc:c9:62:75:b8:
         14:22:a6:0d:76:05:8a:aa:74:8f:03:4e:55:a1:d5:60:8d:f5:
         84:93:c5:01:ff:ea:9a:cd:32:05:e1:78:fc:da:e8:f0:20:10:
         1a:9a:7a:4a:ce:20:66:72:c7:a0:38:a3:13:c5:61:4a:46:17:
         83:67:44:4c:d3:94:28:61:db:15:c5:7e:5a:39:c5:ad:94:d7:
         3b:d9:ef:f3:86:c5:bc:7d:5a:b5:16:b5:67:9c:7f:7d:7b:10:
         61:25:3d:6b:88:7a:bd:47:75:1c:d2:99:b7:a9:3b:45:a5:26:
         47:9a:fc:07:26:f1:c2:6b:aa:3e:06:20:f1:90:92:7f:57:ab:
         9b:09:6f:48:87:29:2f:e2:da:8a:8d:07:6a:4c:71:78:91:0e:
         e2:6d:39:a4:c2:4d:60:1e:57:52:66:a7:92:13:30:e6:b0:34:
         be:e9:b1:be:09:49:96:10:5b:55:2f:c6:be:23:95:6f:6d:75:
         53:23:f9:0a:1e:bd:76:60:b7:bf:34:f3:a9:90:3c:81:20:6d:
         a2:b5:42:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYh4f/m7CBTfsHvfZA1uBci4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjAxMTk0NzEyWhcNMjMwNjAyMTk0NzEyWjAzMTEwLwYDVQQD
Eyg2NDlmYTBmNTE5N2FjZjA0ZjQyYWI4NGZjMTllYTcxMjAxMDEwNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveJJz4t6+aNC7vZRXYaf/ooHord2
PbOdjKAMnizg57hc1xTRFlDbuvmaqukdxJcOfNg3F3ebwT27788VgJR00YXmnCQw
D80sJTvTIk9qEo1QqsE9CCwaF+vFaZFQkP4UeYp2R3++bsjbAo5geKGv+wnvJjmq
QmmzMqObPPqAXp3PNs7rbsKHzdvspydW4qt1/mOaICV2fsOd8eIOQtL55Y3bsM0i
pkBkFKRQ7eeWo7uraQXz3f+n6E31zT5Zr7bIK3Sbzzu+CA7r9iPnDlv1l8/7yei1
y505gxbPE3cjgAPkwyeCX4EZF6mnvG1Sf2GJ9VOPeuJpSNZlVZmTtk9ccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSfoPUZes8E9Cq4T8GepxIBAQRDMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxBmT0zM
4ijNWKn4iSbkeC8HN/QIULlYrYb+XMTYGUxdeUhkXzHlMguZFnETLlTDuvzJYnW4
FCKmDXYFiqp0jwNOVaHVYI31hJPFAf/qms0yBeF4/Nro8CAQGpp6Ss4gZnLHoDij
E8VhSkYXg2dETNOUKGHbFcV+WjnFrZTXO9nv84bFvH1atRa1Z5x/fXsQYSU9a4h6
vUd1HNKZt6k7RaUmR5r8BybxwmuqPgYg8ZCSf1ermwlvSIcpL+Laio0HakxxeJEO
4m05pMJNYB5XUmankhMw5rA0vumxvglJlhBbVS/GviOVb211UyP5Ch69dmC3vzTz
qZA8gSBtorVCuA==
-----END CERTIFICATE-----
Generated at Thu Jun 1 20:19:02 2023 by rpki-client on console-ams.rpki-client.org