Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
File:                     zNdhWb_Z4zdSPukw898RHWuucwY.mft (raw, json)
Hash identifier:          vwUXb9e64IFvNaGVmlcYpx0g1S+p07wsiHrPql9vbkM=
Subject key identifier:   C1:09:6D:AF:F1:8D:E0:62:52:B3:EF:7E:A1:13:D3:2D:DC:D6:F1:C7
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       019351625B573360F6E857974962C7BA2244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
Manifest number:          1341
Signing time:             Fri 22 Nov 2024 01:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:20 +0000
Files and hashes:         1: 5LOjIq-3yd7hw4pT3lo56aj_ga8.roa (hash: Y/WZghkZ/7xQ5qFzFAFEWHEqRXKLclQ8G7V6awR4F0w=)
                          2: 6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa (hash: p645s9VERW1Ef0opHp6vl7h5I41i7L3NWWr3wTxcUVk=)
                          3: 9rNpUbLwKA3gYn0hqgoutw3fV-Q.roa (hash: TVUr3ENRWy3Rj1ZGSC9LwooUXRSPARD9upMwIkPr6j8=)
                          4: AiYDAuHWWTbYGdA9r5q3PIbIRL4.roa (hash: 7S953/WdZ9j9UM9PASqBEgriBcpm4uT5STbABwaS3+c=)
                          5: E4flgD7bLIBptnfcRSImsx5L57g.roa (hash: U9JOog2wqa5hQUvuyPoezsKKnv4GSQSvPSzl78ggYSY=)
                          6: EZEhndTlg1rDowy5E2rk-h7mSgQ.roa (hash: fyNSddUvACMDe4juPA9+2Potkdgbjzru0+C3ftlXT3c=)
                          7: IhZ8qlNDzw6GY_-0TY_DnlKi9SY.roa (hash: /EBB1YMKTCPOQkh2yKukzJVPXEtaJpr+VHQhSUJ1+4A=)
                          8: KTjrig58iCiDtCXLyYl4meXMdCM.roa (hash: BdXNjrhrST6rMpLc+0llzb1KPIvY+J2WR1/ZtLpfNGk=)
                          9: Qd_B5EHX12KFdpT6SPCDchylQE8.roa (hash: +ccD5p6/2wvJzVqs43c+TQiWwS5USs33/h3rJMRwqr8=)
                          10: R7KYMne9nT_iz5coUQ_BlRrjJWU.roa (hash: 39Hd9AauaG8oIviA1LWxZ9Jlr8aoDauG7y2E/FqdooQ=)
                          11: U0FQgrVnP50XmOXLYcQm46KtpM0.roa (hash: XXW9ntvwFXoEBbWYdUYEL33ubcoxwCDsWgnzE/wZmb4=)
                          12: UaAHJ6D2lzYdvmvWzROgAuW1lCY.roa (hash: 6tXA/zIteAqsA2QwMdSmiHNXhWZsdvzAVt3Bfz7meVQ=)
                          13: YMd3qlEPMVBTUCZnS-kA6K-iQbw.roa (hash: 4nVnBk6VV6+Lr+uvhp1NnMPOQVxHfUJUufs6gCiHrgE=)
                          14: YtZsgEdY6FChVZRVChbos9M0M0A.roa (hash: VF+P/RnqGVvfb6m5T1SH78Y1omoNr4I/TXpZBN2ccoI=)
                          15: Z-S-K2tkLQH88XimL8U9JLX7zVQ.roa (hash: p2scXI7JgF9jrJ1YD7+kgEcAU4CT8qylmFuzEng/+UI=)
                          16: Zg9y5VE1ip1W_zr3sJGo7UKwSBA.roa (hash: 3lblbwQKf5+qO1hOF2taPaUqeneGedzIAZ0mvWfe3Kc=)
                          17: bt_XrLZM8HMf_z4vQeK5KtExbQk.roa (hash: EHWP520ZfRXlMFbLdNqjrsgOxGjgZeV7CGfEgMOshW8=)
                          18: cl6zLFJobMfarjPywyHhnNalJOI.roa (hash: avArrMCYAg6mwsGzunMLZw5BMdmAACLjaBIi/uEqtQM=)
                          19: fi5aq6IMrHYx0xvqOLsMO1cD1Go.roa (hash: z8lVeFgUlbbAao68sltw9h1KUSjuNb0TJ1VMUv8/qC4=)
                          20: ppFFSdvlJSrA1YPhZ0g6f2cv0K8.roa (hash: EUA2qNT42UtK7xh1mGKDYMthctX+asIlFomL7NYSF6s=)
                          21: t5BMQR_Bs0AEYmrbpL7lxFUYnMY.roa (hash: Piypz/OE+SCfk2VY2P3nPOEtASav54KuLE68ilZgsFU=)
                          22: zNdhWb_Z4zdSPukw898RHWuucwY.crl (hash: gMC7r//Z65hbK08ItIU3UB4awhxvHiqXxdSmTR/G80E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:5b:57:33:60:f6:e8:57:97:49:62:c7:ba:22:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Nov 22 01:00:20 2024 GMT
            Not After : Nov 23 01:00:20 2024 GMT
        Subject: CN=c1096daff18de06252b3ef7ea113d32ddcd6f1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:11:3d:c0:ff:cf:f9:e7:05:0f:57:4c:c4:
                    d3:a0:ff:5f:52:7c:d7:30:84:52:87:a8:1b:34:86:
                    12:e8:04:29:9d:35:b4:74:ce:56:d2:da:5c:5b:b3:
                    6a:d6:e4:27:fc:1d:d5:92:6f:46:a8:49:35:70:26:
                    68:e8:b7:d6:a5:83:22:99:f1:85:2c:ea:bf:f8:3b:
                    11:fb:64:e4:bc:13:16:de:d4:b2:75:75:31:95:2f:
                    47:e5:7e:93:b0:2c:d1:44:0c:a9:83:a5:4f:96:75:
                    3b:8d:af:29:73:28:c4:b8:16:40:91:da:4a:57:1d:
                    11:13:f8:ad:64:5b:a9:cf:03:f6:67:60:05:c8:66:
                    50:8d:22:09:d8:2a:4d:c5:7c:0c:b6:65:5f:45:8e:
                    d4:6d:08:93:47:ab:e1:bb:36:d0:5e:6f:a9:84:24:
                    fd:64:e1:0c:ce:b0:46:0f:33:1a:b7:5f:6e:7c:0d:
                    15:be:d7:46:5c:67:37:04:6a:7a:77:41:d3:13:a1:
                    9b:05:04:42:46:45:34:43:67:34:b6:31:bf:21:4f:
                    29:18:81:07:ee:31:35:dd:0e:78:19:9f:f6:7b:50:
                    d9:f5:dd:f4:42:2e:f4:c5:cb:e1:91:7f:a8:fd:04:
                    74:0b:d6:77:03:2c:17:0d:35:ad:97:cf:4c:7d:83:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:09:6D:AF:F1:8D:E0:62:52:B3:EF:7E:A1:13:D3:2D:DC:D6:F1:C7
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:3f:5b:b1:0e:7f:b9:df:1d:e4:26:f8:bd:5b:03:48:bf:26:
         01:94:d2:f8:97:5b:1e:1d:5f:37:f6:c7:ac:5a:a4:b4:c7:89:
         e8:d2:e6:78:52:5c:b4:74:2d:3a:38:cc:a8:98:45:53:0f:57:
         de:a0:b9:2d:ce:49:65:95:73:0b:97:ec:f6:2a:f2:9b:a8:30:
         e8:0a:4e:cb:c6:67:90:a7:89:07:cd:7f:2f:8e:bd:51:b6:0e:
         b1:2e:2d:e5:d0:77:69:59:fd:97:24:84:0d:ae:97:55:ba:c9:
         b7:b1:b4:72:56:52:e4:29:0a:fc:6f:62:b4:5b:f9:b0:ac:9c:
         25:d0:5d:77:d8:28:b5:90:99:5d:77:ff:7b:fd:04:2b:ee:51:
         46:92:8d:da:0c:bd:cd:a1:ad:e5:42:a7:12:39:fe:ec:07:91:
         cc:18:a6:47:4d:c1:81:7e:e1:4a:86:b6:d8:0b:35:1d:aa:b2:
         20:2e:c7:13:f8:39:90:af:b5:52:8f:23:d3:9a:10:3b:a9:23:
         5f:d8:86:a6:d7:0c:81:ed:49:5a:5f:f2:7f:0c:f0:78:e9:c2:
         8b:1e:b6:84:dd:3d:68:7d:97:a6:83:ab:76:ca:11:2f:b7:c4:
         f5:25:de:57:9d:87:b5:15:a0:4a:7f:6a:69:af:14:8e:36:f7:
         a7:b4:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:24 2024 by rpki-client on console-ams.rpki-client.org