Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          5EShce9l0m2OtykevB+bGIA1GoLVK9UTatbXCvKDszQ=
Subject key identifier:   C0:EB:87:D7:E0:82:2E:E8:A9:A5:B9:49:14:BC:4B:9F:82:8F:BE:03
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       018F3B1CB0AA1B4515B46C5E37A6BDD1EAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          119E
Signing time:             Thu 02 May 2024 21:01:26 +0000
Manifest this update:     Thu 02 May 2024 21:01:26 +0000
Manifest next update:     Fri 03 May 2024 21:01:26 +0000
Files and hashes:         1: 00jeChJ2inddDxJ5Z2Kbj3wd3wU.roa (hash: 0a1CeLsEOqhplLUFUoWDKmpj/OMoWAcpex5ptefq6EY=)
                          2: 48fo0HUWRAgKiMViKhGdJX7f9C0.roa (hash: axjZHGYzerdENb8dUw1Ux23z9tanexEhXjhuS10OMuA=)
                          3: 90WE-hDKBDUgQlBoEvL_fMGJfrE.roa (hash: 5WLk+rQLl8qXOHTBrORlnsKasMxKoNPxrBke0qEyKgg=)
                          4: AGjcZfTBsqCHTj4nO_TvZnqo-UE.roa (hash: Hc4epX5Um91Q41SrHH2xhu8Z57fcmQHT3WhZ/Xn2Olo=)
                          5: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: K4uXhtrYhsuOQZxIHOEgKI8Q6sEoeCAZcqOh3PoL6DU=)
                          6: JU4WvFS0NCO1jFsC-cyAbLJnseU.roa (hash: oGLDKVo/CFxal+FLtgRrdH1uDKbImJ0PmIt+qzYdxRs=)
                          7: KUTJuAHnRMkRFXvbLaK8Y5DzOPI.roa (hash: B7ku/UNuLX82BwQr8pbKSgte5LhKDrjCPpxPebKGiOs=)
                          8: NbvNFUA7hATb7y3Vp451wKXCueU.roa (hash: 2S218p2Pi/GUd/mNZrA+gLnODkoMkBwfZNX3iFCBXsY=)
                          9: RFcEpw4S7wh891iO1S6Y-VFd3Xg.roa (hash: DY57VPOTd9xV8a95GRVMpNUDJSY6PfzXj+wUAy6A4C4=)
                          10: SbvIm1SCVR13-6_8mAnSjWuJiwA.roa (hash: 0ZIEr/OTnU76LDtFeNaWuKnqCxE8OiCkNGyh1DtV5IQ=)
                          11: Tr220bkBkw5SpgIQXUo76esPwWI.roa (hash: jMpiZkLSRhu/gkrKA1CuufntwtgwZYKwyAVkNnZ6c7Y=)
                          12: U60c4RzJCPcvkMecGzIdRefHi5o.roa (hash: eLHitQJEbOGgo+JiitgHtPCDe7LBfo3vcQ2eWI9GoiU=)
                          13: VtHLUv7DlDrmxokULC1eGkvMU98.roa (hash: hzK8oNd7Auq7qaR2ZEHpSfzeKpYBt5xvpmffsShtY5A=)
                          14: WTCJpC6Z-yCThXVmFSGpNlRlNg0.roa (hash: vYC77KcDTBAqRot6cSKZJky0gZPbJp/3ydGI0vREmcQ=)
                          15: _QZIFVv4a6iCa321-101DQTpfAI.roa (hash: TG4gH0snXMi8LROtX8uEXA4YTnwIdSIJSL7iakyVPUI=)
                          16: a4HTWTTcxAiUab7fE4n4LX1wAl0.roa (hash: xnWX8xVd4y0udnFX0qVT+8HvRdZolPxeI270uZZivAw=)
                          17: e3gmZjj7LS7A0Hun7nCciE9hbXE.roa (hash: 4+10xNy/Fig7Cu/c4VJDqY9uYRPxXGAi8im3w3C+KVc=)
                          18: iKcM7VDIT3qoM_9t4tzwFZY4TY4.roa (hash: xqV7YHWmSViN8FDe4MhgFHK8cba5jx5Hh8Ja2oeH19s=)
                          19: kW853kVUj0vjf5Phs8DaHBQ_mn8.roa (hash: ZkrJWoVi8zvTjSW/lrFDGTwmnPJri1BsV0qpeEMDZe4=)
                          20: oZNyRytYWmWHfh_Y0IfBbhPVIvw.roa (hash: VbZ+td3RW+9rmf6Cq1i1rzyCRR3O0rhw7G9mDxsQoH8=)
                          21: pODswxY4SqXoDBI2j54CT7d_d5s.roa (hash: Pygba1HnoF6GdknLv6g3fSALPoryGQo0GCkzefLqMoM=)
                          22: qLWf2mRKFKxIdrSjxVwcVnO-h2k.roa (hash: dEfDxREs0H+Ilr57BFZrm+nNxNDiz7PohVgIRBirefs=)
                          23: yFRzZBx5uf-Kjh8OVzYPhusZFOo.roa (hash: Hukd53CNKD0tb6YHluu+04Ap1fIiSz98aCFE+k/2DyE=)
                          24: y_QomMEL04zbN99hSlDui5930sU.roa (hash: Hg/KqdtRkLvjDgSvnZVTWjhrUHI7JRNroqG3oqb4D0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:1c:b0:aa:1b:45:15:b4:6c:5e:37:a6:bd:d1:ea:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: May  2 21:01:26 2024 GMT
            Not After : May  3 21:01:26 2024 GMT
        Subject: CN=c0eb87d7e0822ee8a9a5b94914bc4b9f828fbe03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:46:12:3f:d5:0e:73:41:00:7a:d5:59:3d:
                    78:a4:42:3b:1a:e4:c1:e2:3c:fa:66:15:7c:82:4f:
                    d1:40:4d:34:16:1e:26:de:55:79:02:29:55:ff:d7:
                    5c:e9:b2:68:5a:cb:67:cc:e1:18:c5:ed:d8:75:8a:
                    39:a2:be:4a:6b:49:47:80:df:e0:f6:d4:d9:a1:be:
                    5c:5a:70:df:3d:e0:3d:df:9d:69:c7:2c:8a:68:9c:
                    c7:d1:35:ac:84:ac:9f:d9:84:71:ba:7a:1a:e6:e4:
                    c9:52:df:c5:ef:85:04:ae:a6:5a:fc:d4:ea:ab:e8:
                    45:cc:e5:ca:c9:a3:99:a4:47:bf:38:c2:5c:e6:81:
                    a2:19:5f:b4:e6:4f:83:66:83:09:d0:7f:3c:3e:c7:
                    e9:ed:52:92:70:ae:83:44:03:d2:75:a1:8b:66:69:
                    6a:0f:80:2d:e4:1d:67:dd:82:62:20:45:7c:db:84:
                    35:a9:ac:f7:ea:25:b0:d0:99:60:fe:d3:07:c9:54:
                    84:91:11:64:36:2a:be:aa:f7:8d:9c:42:44:17:02:
                    c2:fd:f4:cf:ff:b9:08:e4:23:48:06:58:fd:14:3d:
                    86:db:1f:0a:eb:f6:95:58:bc:1e:5e:3f:f6:ef:95:
                    c9:b8:11:e9:1a:d4:86:d9:7b:91:74:f8:07:89:b7:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EB:87:D7:E0:82:2E:E8:A9:A5:B9:49:14:BC:4B:9F:82:8F:BE:03
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:df:af:fb:9e:8a:59:74:a4:89:e6:0e:35:10:5d:41:64:0f:
         a0:72:5f:1a:24:d4:70:12:77:7e:b3:19:6d:91:55:fe:6b:f1:
         ac:fc:96:18:12:f6:1e:dd:43:a3:99:ff:12:8f:7c:b3:d0:41:
         bc:ec:12:01:ed:b1:2f:11:7e:98:df:e1:51:f8:8e:c5:e8:65:
         49:a9:43:06:43:e2:2e:89:f1:53:41:56:ab:58:fe:be:59:b6:
         c7:9c:6e:15:a8:ca:7a:e5:01:3c:0b:1d:a7:ba:3e:1b:f8:65:
         14:6c:78:b3:c3:0c:69:83:8d:f8:f5:8b:3f:11:1e:cc:bd:e2:
         a8:a3:dc:27:37:20:cf:42:96:d5:63:96:a7:16:2e:db:0c:5c:
         7b:51:7d:be:33:8a:50:82:3e:1e:48:ee:cd:f3:85:03:5e:08:
         d4:6c:d4:8f:fa:5c:69:1c:98:bf:04:4c:de:59:1a:f7:eb:6d:
         86:0f:c2:45:de:9c:3e:9c:d7:7a:50:67:dc:e7:e2:3f:f4:af:
         f3:f4:c6:bd:05:4d:59:2d:a9:5e:e5:ad:c4:f3:f5:e2:54:5d:
         39:9a:2f:92:0a:66:4d:f0:ff:1d:e5:69:52:5e:78:50:cd:2a:
         30:5b:f7:3a:69:d1:8c:53:e4:cc:25:82:64:c6:85:34:0e:1a:
         b9:a6:0d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87HLCqG0UVtGxeN6a90eqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjQwNTAyMjEwMTI2WhcNMjQwNTAzMjEwMTI2WjAzMTEwLwYDVQQD
EyhjMGViODdkN2UwODIyZWU4YTlhNWI5NDkxNGJjNGI5ZjgyOGZiZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGpGEj/VDnNBAHrVWT14pEI7GuTB
4jz6ZhV8gk/RQE00Fh4m3lV5AilV/9dc6bJoWstnzOEYxe3YdYo5or5Ka0lHgN/g
9tTZob5cWnDfPeA9351pxyyKaJzH0TWshKyf2YRxunoa5uTJUt/F74UErqZa/NTq
q+hFzOXKyaOZpEe/OMJc5oGiGV+05k+DZoMJ0H88Psfp7VKScK6DRAPSdaGLZmlq
D4At5B1n3YJiIEV824Q1qaz36iWw0Jlg/tMHyVSEkRFkNiq+qveNnEJEFwLC/fTP
/7kI5CNIBlj9FD2G2x8K6/aVWLweXj/275XJuBHpGtSG2XuRdPgHibcCuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDrh9fggi7oqaW5SRS8S5+Cj74DMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd+v+56K
WXSkieYONRBdQWQPoHJfGiTUcBJ3frMZbZFV/mvxrPyWGBL2Ht1Do5n/Eo98s9BB
vOwSAe2xLxF+mN/hUfiOxehlSalDBkPiLonxU0FWq1j+vlm2x5xuFajKeuUBPAsd
p7o+G/hlFGx4s8MMaYON+PWLPxEezL3iqKPcJzcgz0KW1WOWpxYu2wxce1F9vjOK
UII+HkjuzfOFA14I1GzUj/pcaRyYvwRM3lka9+tthg/CRd6cPpzXelBn3OfiP/Sv
8/TGvQVNWS2pXuWtxPP14lRdOZovkgpmTfD/HeVpUl54UM0qMFv3OmnRjFPkzCWC
ZMaFNA4auaYNrA==
-----END CERTIFICATE-----
Generated at Fri May 3 01:18:32 2024 by rpki-client on console-ams.rpki-client.org