Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          y3CVzwd3AV7IQ9wN7ZG0RJExfXZrgfF/tfSNqoCKKZA=
Subject key identifier:   86:47:5C:5D:29:B9:55:DB:64:0B:F1:9C:A8:4E:F8:4D:24:0E:71:C0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01935207A40BB4B88C8AF01D57610CE74834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          13C5
Signing time:             Fri 22 Nov 2024 04:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:52 +0000
Files and hashes:         1: 0wezRukMCCVbhOrn7xSOENioaT0.roa (hash: nA6PmW2mvGpbOSVNasCxGt4wXmHbuowsHtaIZU9XQus=)
                          2: 2TpHms_rgwG7dkqFned5lAxRJqg.roa (hash: N7eLRlNYcytd8GPITAcejlDYl3cjC7EfRAFzD/V3Tx8=)
                          3: 3NTnVTuJyT6xRebLF6V_5Aj49nE.roa (hash: CYMwnuossuJDsh61qjlq/kj845hc4/W8NjdK1/PtBFo=)
                          4: 3zDVgc_8G21zF8KdE1c7hqN7QQo.roa (hash: Q4/r21QV/wepCV+1FmePDikOwBlD/nMSpJ+fzUfcu8w=)
                          5: 4D_Nel15Fg8XjM4wd3LKA6f3yEI.roa (hash: Zx+xhnPiitFpj/IAP19hBIJF0EC8cC5bPCOTQJPDfp8=)
                          6: 6F3PvZPslRMAayscJS7i9yG1fDM.roa (hash: bysuuXbApdJlpWGKhq88H3GFYa+a/4QPQ3jg5f1JhBU=)
                          7: 8mFOo6DhIudSk_vo-Muowo2cSz4.roa (hash: LpvKcOnYUjyuzgyAAPtZMwoJqM22rsKZ3/VIrDMC4Vc=)
                          8: 9ImbuWG5AV0ZAVRYcrsfy_lZBGA.roa (hash: Gca1/74QDdo9tQQyAMH1rwYjP70pf+gtj0XhDUYhuwc=)
                          9: CWe8vVWeMRK2L9oBSx2G68RTHLs.roa (hash: gJ9/eWAWZfFMnkyMrJU0DT1E5agmnU2S6qyXSmyHO+k=)
                          10: H5f7Xu2b2OVqkKksTuIkB08_dUk.roa (hash: uVpSQtGEkFbMcfckryf42AbRlO25HdUbddFC5JygkwQ=)
                          11: KUYispO8GYgYf_MzAWW58daWtDg.roa (hash: hU3kXE88+RL+ka3P9YOtIrmbM9IGPxKqKlxQWGAhzUE=)
                          12: NkVN5FPJZ0GhjJTIaKmDaVb0zXE.roa (hash: P7MfoDxZ8ARWgsm0/Z6HVBvxsPTtXvgYsdO1jVeqv2w=)
                          13: PwLsHH8OAsEF6gGAL2MzCt4ujQo.roa (hash: 4O5iMN+I5lADLIpb6gr0pl9fXpJTrSC8M0dMEyEhNkQ=)
                          14: QSDPU_GONSgIV2Jz_b5oabs8nd0.roa (hash: bOfnqLYl/KPA6SqW0vMI8j2W6RAaIgWi1X6U/SJ8osQ=)
                          15: S2RxVauU_CQ8L5gpc_YOEWVYLEY.roa (hash: R226H1uw/kBXsv1Vv2czKwYpCu1qe4pvuYHxutjB3k8=)
                          16: TJb5yqAFAEQm4bodhZvgyKGR5g8.roa (hash: Fw+fnfUDG6i7GuiSd9SaWqD3Z7c6KWluZOqQB8rLf7g=)
                          17: W8Ej2_cSaIOtXzv7-KEr1b-dc1s.roa (hash: 4cDDNKjGOwU1rwexgQWiHf0m8r3xtNB8Z8fqYF1Rf7o=)
                          18: XBxjnE_4cvoehaXae9-B0zkCaZc.roa (hash: 2f/5yRRK2taSawqZj0/KAjzVmXk5TL1TwypkMSrtVC8=)
                          19: YeL4gYMEP9xlbmlAF16e6uX-s_M.roa (hash: eLQw8RB1zgDT4/d8sODJQrd9oXBnftuJtFn/w5UJ6LE=)
                          20: Zutb95AWPEEW2bAFdc9m0BwniKQ.roa (hash: PgrYC2pIbdOVvGMLUiiVq/xxkOeK2+5gbbrb7OJh1G4=)
                          21: bDD8e_UIsjE3n4AHobtMBZ0C0u0.roa (hash: KEkQrRly42jdz+c6HjCQ9WYKkHJyyCXMi4Bbji0BErI=)
                          22: bHHPruxCoRSgL-jk5cswyqErsoM.roa (hash: NQK05hb4S3IxdkZIozQ6r6W3sB8Tg7o+ccQO8a6agrI=)
                          23: cXNxAp2HAjkfEU1D3oyTlOcksQs.roa (hash: t6UpFGQn5NU5RDplI+pDcV7l7rqO14b/joH1ZePmqY8=)
                          24: dqCQ3nr3wzW2sfGa8eEVsmrUGrg.roa (hash: uOdsXraVSV+JNTlfJixbZ1UVoeel1p29hUDYnSj9vGQ=)
                          25: drfy4Bc3vLZi72Rr6S_E65NPAZQ.roa (hash: JyGzlUlZQ4YOos2Oghe3W1I7OM9FJMAOg5nMxZo0Mw8=)
                          26: eVf8mZnmSuB7NHPJKOapzHFj1zI.roa (hash: bAekohET7+9R0g22DJ+bZhkS0bWeTywWd+Y/1ZC9vbo=)
                          27: ewvOF2wTawoLpnW1ibEaBTW8EGQ.roa (hash: p1dyoFougwxzp28Xw/qvIal38OVirpmmQE9Bhhxkx6w=)
                          28: giuPZ0fzn_X0mDupbLJMT1RQKC4.roa (hash: kFibyfC6rlKwfOdWh7OmKBJZWQiaExvLORW40HdShIo=)
                          29: gyPM0uOHBZiirtfLdAmAtikW5uo.roa (hash: imgp2hZ/sYP16xqvPleRdT3YhI3e8zr58Giezq+PxMw=)
                          30: jB0A87_tWzapTIjD89TilpVW07w.roa (hash: wvbpijOIOyNQ2iRNmHX0N4z6iv/o6p4QLFpOe+GrDWw=)
                          31: jobPq6FT6gVEdlgpwAiGCUL4MIc.roa (hash: aK8/IJGyg9nD6U6IjC6YPxxVDwWN3ImQp0D/IOJULgo=)
                          32: nexXK3blSfUe2AnW7rizutBjFnk.roa (hash: aMJOJmQD1QK7uvkJqxLadFyEvDf033Wfo8K+5EhuPDE=)
                          33: oe8DXh2xMJDTp0p3gStt3ARlSRU.roa (hash: m1oafxisPZwzwXCinJc/xTvDObGqc9BiyOYuLx3/+xA=)
                          34: qtzkdjS6Yb8fVRpHxSHyL_C8oD8.roa (hash: 0JNoXDdZeWdOvQH614NIANI/gbB4cvtoJl+ml386CsI=)
                          35: wbZyVf1u8Nm7B8v2_YxQLhD0E9g.roa (hash: FhRJoolpOlmWQRLLTijkmReHSEsEiffqGPNngWFDPM4=)
                          36: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: PSEfCVFPXrz2/840TiwyNq3YxRhpOKdsMT4Y59ESujU=)
                          37: yJaOHYlgBSVnRqE-ORtbNVM9i8w.roa (hash: GZaUOc6iTm4snLv8/ACLT4/sP/NlZko1p+q8Ea73UME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:a4:0b:b4:b8:8c:8a:f0:1d:57:61:0c:e7:48:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Nov 22 04:00:52 2024 GMT
            Not After : Nov 23 04:00:52 2024 GMT
        Subject: CN=86475c5d29b955db640bf19ca84ef84d240e71c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:d8:2e:ae:ff:fa:d4:65:93:9d:9d:76:43:
                    0c:7a:6c:4d:ad:03:f3:6d:99:52:01:58:f1:f0:ba:
                    a0:78:b8:22:27:f3:08:30:a3:27:6c:de:bf:73:d6:
                    9c:fc:f3:85:b0:e5:7d:5c:33:c1:f7:a0:57:a1:48:
                    fb:02:33:f6:7d:c3:1c:04:3d:87:7f:5e:45:11:52:
                    43:d2:a2:77:63:c5:06:46:c0:56:19:a6:47:68:4b:
                    c3:db:77:7b:dd:63:dc:4f:b0:07:50:c5:51:96:e5:
                    94:a9:75:f4:55:b0:da:9b:cd:ab:cd:e0:d3:95:a2:
                    a3:f9:04:7d:dc:2c:dd:9c:1e:76:33:24:4d:65:9a:
                    2e:b4:ef:b4:c8:56:94:c6:b8:cc:3e:14:57:5c:78:
                    70:91:73:22:aa:19:d7:cf:37:09:63:60:9d:c3:4d:
                    65:5d:80:4d:c5:39:44:c2:14:39:69:61:12:33:4f:
                    24:1b:cc:e5:9c:3c:93:d4:a9:d7:20:c9:20:5f:86:
                    b9:3d:be:b3:30:b4:8c:1a:ac:63:32:6f:3b:7b:7a:
                    e0:33:10:65:5c:b7:35:b7:aa:6e:de:4f:5b:83:33:
                    53:12:96:15:95:1b:01:34:8e:9d:cb:04:5b:02:2f:
                    8f:e5:2e:4c:39:07:44:c2:dd:76:72:2d:a6:e0:e0:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:5C:5D:29:B9:55:DB:64:0B:F1:9C:A8:4E:F8:4D:24:0E:71:C0
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:23:a7:75:7e:5b:6d:69:b2:1c:80:5f:e1:57:f2:1f:0c:1d:
         7c:57:61:e4:82:22:e0:2a:1e:d4:49:22:e9:ac:24:9a:ab:a6:
         96:43:62:e4:0a:03:5d:d9:39:3e:ea:12:b1:fe:71:88:6e:7d:
         ee:19:41:65:92:b1:a3:4c:f6:02:09:90:30:a1:b5:be:db:85:
         f9:64:2d:8e:e9:cb:eb:67:c7:15:5a:47:9e:5e:ea:b9:f4:97:
         60:57:43:c1:d6:04:a3:28:75:0a:7a:a9:46:80:0b:76:58:0e:
         f6:ae:c5:a9:a6:fe:51:ce:cb:8c:82:20:67:4e:2a:17:ed:37:
         4c:41:41:bf:d7:f2:ac:b4:be:8e:9b:bc:e4:e4:52:ef:fc:4b:
         4d:83:7e:07:47:40:ed:89:5b:99:6f:6b:41:d8:5a:45:1d:f4:
         77:ff:83:88:66:f6:ea:da:01:dc:19:a5:3f:c5:9f:b8:79:d5:
         48:5b:9a:c1:b8:9d:97:a8:71:55:82:cf:f9:36:5d:3d:09:c5:
         5e:e4:82:82:95:1e:25:91:01:5e:5c:a9:c7:9c:87:ac:9e:59:
         9e:92:6f:cc:14:5d:56:b1:41:1c:1e:31:f0:fe:1b:f7:c3:b3:
         f0:e0:e3:e5:d5:57:b3:1c:89:76:af:c4:4b:4c:37:f2:1f:c7:
         fe:2e:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:35 2024 by rpki-client on console-ams.rpki-client.org