Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          LZlAbwJobqqQuXe/mfBt5cbY3spIzGGkfPmSFB2/DZQ=
Subject key identifier:   33:ED:DE:D6:BD:56:CC:55:19:62:82:05:3B:98:85:D3:AC:50:ED:A7
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       019363D66B6D28EFFD34811325613AA80A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          13BE
Signing time:             Mon 25 Nov 2024 15:00:16 +0000
Manifest this update:     Mon 25 Nov 2024 15:00:16 +0000
Manifest next update:     Tue 26 Nov 2024 15:00:16 +0000
Files and hashes:         1: 1-K-AsCZNmZh4Q4cXVvSYca63Zmo.roa (hash: AQsxTvyaqdUuO7L1LYqsGcjHrY8Xrrw7E4clqQC6weU=)
                          2: 1ZssSNiBWrK1n7Oax4-OFRwPP-k.roa (hash: PQl0HOUgfpcc433ShGl4KyOwNmb+LNeOb0lgeEicT+Y=)
                          3: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: wyiqEQBTi+w4aTj/RBtD55GmDTDcgAhajcS2PKubj6s=)
                          4: 329xaJCn813bsJ6w8Xa2sjWliA4.roa (hash: HWYsp4vF8I6mnA0x4Ye2gmg2A3ad+VVr7c57IOTbISw=)
                          5: 5Wi_DvHmhBpXAWghfFVd7Q-H-cs.roa (hash: wi+6zaiucpWowzSLTnVpQfpBtWhiajo1VyZNTLvfFMI=)
                          6: 5xFb2G49X2eC7I-S-imknyCSalY.roa (hash: O58qBeoPFG71u9OBoY5VVr2nAzvgRlfj9q3f5n4XchY=)
                          7: 8M3Ue-WgkZaSjPXybs2qAwB2VCs.roa (hash: hl9nkIk9i9Pr4MTILKtNoQWV9kJAQ/s9efIVSuXpE7E=)
                          8: BR-UTKW_2jU0kBLwx3XuI91RxPY.roa (hash: XviXr+WrftTK0Ygc0AoKj8cM0+el1tFVvlH8LEE/m2o=)
                          9: BeqKaZHIBDsCWjNqjADA82cqxCs.roa (hash: D2EskD6o6WWO9LY5jsgyfeNBVz1TlTTyEtfxQADlAEo=)
                          10: C9Vejok0B-rSCAZxvy-0BP5uHx8.roa (hash: 8R7WVJ4thUhY+WpISdxZy5zrgvpUKIW3PlsFRAPwpuM=)
                          11: CUN7awJEs83MzzSqDAFUZ1msg-w.roa (hash: VdwvaEKOQzwHAm8cK7xo+ytVcfMyLnK/EF/U2bWvIlg=)
                          12: DQ6HhpeAviOIg2SFk9auiOKw7RA.roa (hash: Ue7PEpOAQ/qh5DAgYJ1tOkBPLhv4ZmxGXC4xnjVV0nk=)
                          13: DrXIYRGoooC0I-rRdAEGaJd-i1o.roa (hash: C6lDcGsJnTTimORadf2gJJB5ST6J0/on32nhG0WHaZM=)
                          14: E4RjmySUEMtDa8UTvS1XG2UgMj8.roa (hash: /fYLjECTC9znHdZwCwfCWQl13tiXQzwkX5JJdFkLkG4=)
                          15: EY_8UK58CLC_MHOLKQN29XR3SsU.roa (hash: TXLjuUxdVne2hKBZkmT0lLvPS9KvfYEaAuj3zIfKYEM=)
                          16: EaGiUrL7HbAbeh_88qDDIsBWZFI.roa (hash: hR98S9MURy9gdsX8a8Z1pyweXIn9igNcAgFRRLmIuQY=)
                          17: EhI7qHrem-H8Q_VFcuVEoTvXO5g.roa (hash: RhWBkr2g6nzIwFCs27fscImMIFNjTNoprD3W3we6588=)
                          18: ErZSmRcA-tJ2aDousSuutC0FT-0.roa (hash: B+XEtlW6n6WZOMH7DhgvwgOk/0CxZWeur3IVAcHiy6s=)
                          19: FHlZ21dJhHnXpZLFnWr-BqfX0Yg.roa (hash: O2myHbw02xo4/2AN3ucbSxuBjpsKswd+BQ8oXTdUr5k=)
                          20: FaTE6UIymGghHtYjc2d5JBR4gSk.roa (hash: vy8sx0Yu9lCNzlQPi4lnBdKYMhRLF7E7c5uFi9PFXnc=)
                          21: H5TlYYqlRGo_PTyai5vbmWkAmwI.roa (hash: LNm3ZAa5iEPuwb+jrdOo7NfsPbxUUn7l4riakg8pua4=)
                          22: HCdljOpb4fYDb-Y4xKpTxHyjJ5c.roa (hash: zk4MibO0AeHryWidCmnMFIHYC+A7gcMkOXORMCnSuIA=)
                          23: HK19H_Gzxxuw4tLjFK33Dk6smsE.roa (hash: Ow3I5kpCqM7K3KJiq83HPpGwr7mymQs/Zb3SEgRZfgk=)
                          24: HqT4p3_FmBxFDt7kRCjteimW3rE.roa (hash: jefwFEsDaBKuxRtfLxjXVwTV028AyZvnGGPqgktqfio=)
                          25: IatlVZ303XxJCTIZYLxELi4Jj2w.roa (hash: 4EYgsEyy8ks7I057dNtpYHIVTP3/TcKgJUZW5XjADbg=)
                          26: IuV-qoT1eKZtzLbk2i-jSWlQSPk.roa (hash: +brgyaa6JVeXzMUviu33ImdvwxHJ6Iv8iOqQDdfPA3Y=)
                          27: KTVmd9cjams2n-vfwlGzmGCCDkU.roa (hash: WDJyaTho1pWBdr+NnhgrGGWeGg9GNhKuTa7sGDNXG3Y=)
                          28: OlIIOfKP1J7zS0wogZCMGm_pKCI.roa (hash: LXberCkVFZwa22H5DTyQo00qu/0MQHR+izRV5Eb1i9g=)
                          29: Q9kZ7ilJffm6E3-ffhmyJP3WXBA.roa (hash: pAc8+7lwpht1pZlvINvycWuILb1k8JqWiXW8n9Q8CUo=)
                          30: QmJYWHf3y0nFkp-6NbnK0b2kkwM.roa (hash: FJEs1UAw/2fWEyd3HQec4Uk3Cub4P5S3Z3JxVhVUvqI=)
                          31: TjdNZ4FwdJ-vmUZ-grXR-ESSvww.roa (hash: AwSWVlculUYDm9vHl7tJJNV97v8ZBzJfXUTEGIxfSjs=)
                          32: UucdaLtXbkj7u1bVujOQaf7NRTA.roa (hash: Snww6KZSHPEuXaL7xfzLSzavsS6EqtgGJXABHdEDxMc=)
                          33: VILYjzb1Bl-B52Qb2vXZ8aL4gf8.roa (hash: qDJ2Hyd/88hWlsAILodLKtVypKcWs1+7sRQw6Ql90RE=)
                          34: YPl65i_ZAqJrso7fye8XXCwCou0.roa (hash: xoK7yuvbybyvXFNt6hFV7HcPi8yJ4HyTUHeYqJooH3U=)
                          35: YZr22wospq5rjTGQ7ki-GmoOgFQ.roa (hash: WUAyIZiayv1YKfn5jm8UhFD8eeXhT6RmKxJsH6k+6XY=)
                          36: _Oc2ICeoWFmGdWZcpOn2AsnL8EM.roa (hash: 1Iz5uvPT0ESGjQQqggJOsYLSO31c2tY4nlplDo2ecOg=)
                          37: __aIy9ZzV2fNlUpi3s_6Vi-FohY.roa (hash: bfjFf6F8IOP5N3vg42KoPPSZtq+6T6zWS6Vm2lF2f0Y=)
                          38: aqd6E3npsvP_2D8RuTYpzO-h2hM.roa (hash: ba6De9RsoAyc8VsVoXnKTONKaN8N4OktKWZD0UzGhtk=)
                          39: ccRRhKrMVjSjQouHIjhDfuG5FL8.roa (hash: Ld2+B/q8aAw4l6IlatN0XPLL9J0BqpVjMD91nc3tjxY=)
                          40: fY9e3UDs5Q6_dRWS05zGANbbhTQ.roa (hash: mopDPxXBUHLqCiKPbw1elk/+05at19UTWasX49Qo8to=)
                          41: ha2geyQsEApfQtIFDQBxhoDzMDk.roa (hash: Mv0puJQJ1pF0AuZZM5/UBDqcjWrSXN0xV7t7TwlDF6w=)
                          42: iJeW95zf0jNAJwYzc0Dbtooo2E0.roa (hash: 3R0tpRQpejZ6iCXgwcpzKM15V2RsTOTSI/scQePe1SM=)
                          43: kCGg57lqsn5R_T0U6vlFfa575Uk.roa (hash: MTKxuf/cX4UCoCa1GaeVHXlfcTF8xSWLo2ADx62wWDA=)
                          44: lCy-FhBsqCJbMoXwguQxuOMMLo0.roa (hash: XLCCftB8y2vyNunp/dlW6/gtszKNO9Ob7OGcXxXWXM0=)
                          45: on7n50BKHTFK35l4Ad5W_3poVr0.roa (hash: a9hztt8BsrfOa51j/gm2FLwSu/S1uKdxErfREDCBroA=)
                          46: pDGMQMLTHhnarT3l6CDaubqDMJE.roa (hash: X9dIg5xiXe4nWrAjox1AHru4JkV8uHdX3J+gEb6oCNM=)
                          47: sXQNdqJYXc8Sduzd9C-9IcnXAPE.roa (hash: BmsyOYwWH4+xJmi5QJR/GNayYfqHgv+Q6CWNF20asN4=)
                          48: tXpZEBraETuRlZe-_hK2AkwiY3c.roa (hash: 4ykNe4GUo9RhbPC8ECGoP8qXHucgOmsrHEXJoOlK+uc=)
                          49: taYmOKM_zoKnTGD087-63pS9n3g.roa (hash: rjDZRrsJ8UOAFZ6DM/Izs4tvDX23jcDWDBOiLBi/w6U=)
                          50: ts8Qlsgq9cqOhvPrqS6MRJvelAE.roa (hash: 81QsxiEzmt+FYpXsxm96zlrmsgw1wJejPMbE6VDnZ7I=)
                          51: ukFjoYAWgcleNCkUhqHBS-CEwdo.roa (hash: QtZJcOFRWFO1fsBdMiHZCaWC5qYtcnGAvv2Wnd0dEQo=)
                          52: xanp85TeEWkcfprdDLuZU3kn1Fg.roa (hash: DXdeulNiScMkA465+O+rdlMdQTzMwEvXrucyfKTgvbo=)
                          53: xzscnoo2KqefZ6wW1bGLGJhonAI.roa (hash: wrfPop2Q8NokpNpPgAN+Qz6dw0qxNF15SCvDyOZr4FY=)
                          54: ykQ3li33hJt3GElAKLdJiKdFf7w.roa (hash: oLOdH5JAtUyb1CHgwGrxs+XpnjPdVqL8zvYyDuzpPXo=)
                          55: z8F3ihjnj-frzmamSA87IqM65-s.roa (hash: pC4POcK25UWJxlCnvzRO0SCrbBCamaDST6gjDgECEho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:d6:6b:6d:28:ef:fd:34:81:13:25:61:3a:a8:0a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Nov 25 15:00:16 2024 GMT
            Not After : Nov 26 15:00:16 2024 GMT
        Subject: CN=33edded6bd56cc55196282053b9885d3ac50eda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:56:ec:99:4c:85:38:fa:6f:5e:65:14:c8:
                    89:6e:7d:ea:22:da:64:37:0e:54:04:9c:4f:3b:31:
                    46:d4:05:76:fb:eb:f9:c8:29:cf:d1:85:0e:4a:23:
                    83:9f:01:ad:c1:0e:6a:81:a2:5e:b8:81:97:b7:f4:
                    88:fe:41:0f:07:a7:c7:79:52:fb:1c:c1:d8:4e:ab:
                    28:7f:b8:bd:81:d9:1d:eb:10:e2:55:5f:a4:b1:ac:
                    b7:27:a9:ba:ba:88:e4:f3:ae:8e:c0:c6:b0:65:e3:
                    50:5a:80:a3:24:ae:00:b5:d2:79:63:c0:13:33:b9:
                    9e:fb:d8:2c:d2:21:df:3a:ac:a6:4a:37:e8:5c:b9:
                    03:d6:94:83:10:c9:00:1d:dd:7e:7e:3a:34:9a:8b:
                    18:3b:c7:38:fa:92:d1:ca:a1:09:8a:70:1e:00:ef:
                    2f:08:7f:fd:1a:e2:ac:48:4a:93:0d:d1:0e:66:a2:
                    e3:f3:b3:21:87:7f:a7:2d:cd:1b:f5:b0:78:b9:0d:
                    35:1b:e4:40:36:88:c7:bc:66:8b:fd:1e:97:37:c9:
                    cc:d9:ed:87:00:f1:98:dd:74:ea:38:46:eb:0d:9c:
                    e1:89:76:27:8e:70:12:6f:f5:c5:01:b8:cf:d8:89:
                    52:68:56:cd:53:21:9f:53:ba:28:08:20:b0:3c:56:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:DE:D6:BD:56:CC:55:19:62:82:05:3B:98:85:D3:AC:50:ED:A7
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:26:fd:f0:21:f6:d0:d6:87:f4:96:4f:a6:c9:73:04:2e:
         8c:8a:c6:cc:a9:cc:e5:47:b0:1b:da:73:a5:b0:5c:c8:ae:0a:
         0a:6a:d0:e3:1c:a6:b4:f0:73:f1:5b:62:a0:c7:43:5e:a4:69:
         f4:2b:dd:98:22:72:83:41:00:8b:e0:a4:24:9a:6c:b9:40:5e:
         56:e7:46:71:c4:d3:ab:59:c8:d7:75:1c:7c:94:d4:0d:da:ba:
         f8:39:1a:90:c6:8b:d1:68:ac:28:3f:b9:3d:7f:9a:67:a2:36:
         b8:e6:c1:d2:69:17:59:7c:5d:1d:d2:87:81:d5:bb:05:1b:75:
         e0:c1:ec:24:2a:e8:0d:e9:7d:17:e8:70:d0:94:04:68:e5:2b:
         aa:71:a9:e3:a1:70:5c:26:d0:3e:65:81:6c:25:37:7d:88:e2:
         64:32:89:10:57:fa:b6:12:a6:18:b5:32:06:64:c0:15:b4:67:
         a1:e4:d9:d7:0f:23:3a:95:0c:6f:d0:db:92:3e:e1:c2:91:bb:
         88:a3:0e:f0:b0:0d:ac:19:93:1c:b4:36:43:2f:7a:a3:2e:f3:
         54:a2:57:ca:46:05:44:13:70:a7:d3:c2:70:0e:b1:f6:45:0f:
         7d:de:be:5c:ba:26:7d:32:f4:b8:a2:8a:da:0e:c8:d2:cc:40:
         cd:49:4a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNj1mttKO/9NIETJWE6qApHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjQxMTI1MTUwMDE2WhcNMjQxMTI2MTUwMDE2WjAzMTEwLwYDVQQD
EygzM2VkZGVkNmJkNTZjYzU1MTk2MjgyMDUzYjk4ODVkM2FjNTBlZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOdW7JlMhTj6b15lFMiJbn3qItpk
Nw5UBJxPOzFG1AV2++v5yCnP0YUOSiODnwGtwQ5qgaJeuIGXt/SI/kEPB6fHeVL7
HMHYTqsof7i9gdkd6xDiVV+ksay3J6m6uojk866OwMawZeNQWoCjJK4AtdJ5Y8AT
M7me+9gs0iHfOqymSjfoXLkD1pSDEMkAHd1+fjo0mosYO8c4+pLRyqEJinAeAO8v
CH/9GuKsSEqTDdEOZqLj87Mhh3+nLc0b9bB4uQ01G+RANojHvGaL/R6XN8nM2e2H
APGY3XTqOEbrDZzhiXYnjnASb/XFAbjP2IlSaFbNUyGfU7ooCCCwPFbbVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPt3ta9VsxVGWKCBTuYhdOsUO2nMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfagm/fAh
9tDWh/SWT6bJcwQujIrGzKnM5UewG9pzpbBcyK4KCmrQ4xymtPBz8VtioMdDXqRp
9CvdmCJyg0EAi+CkJJpsuUBeVudGccTTq1nI13UcfJTUDdq6+DkakMaL0WisKD+5
PX+aZ6I2uObB0mkXWXxdHdKHgdW7BRt14MHsJCroDel9F+hw0JQEaOUrqnGp46Fw
XCbQPmWBbCU3fYjiZDKJEFf6thKmGLUyBmTAFbRnoeTZ1w8jOpUMb9Dbkj7hwpG7
iKMO8LANrBmTHLQ2Qy96oy7zVKJXykYFRBNwp9PCcA6x9kUPfd6+XLomfTL0uKKK
2g7I0sxAzUlK7w==
-----END CERTIFICATE-----