Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
File:                     YFgeZz2A90dJNrITN-r8wb3Dhek.mft (raw, json)
Hash identifier:          yNySZTQT53bS5xXxdQF3Ye1pTMv2D9y46OWDoaXEagg=
Subject key identifier:   44:8F:A8:9E:21:73:BC:FD:D3:56:43:11:A7:64:23:D3:4D:D4:99:9B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Certificate issuer:       /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial:       019259C3E91AF0D9BAEEA41029527518CD22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
Manifest number:          0CF8
Signing time:             Fri 04 Oct 2024 23:01:04 +0000
Manifest this update:     Fri 04 Oct 2024 23:01:04 +0000
Manifest next update:     Sat 05 Oct 2024 23:01:04 +0000
Files and hashes:         1: 1-yGWEDAjD1HPlr-mrAl64S7O8E8.roa (hash: +jI8HJEgWxqefshJhgH3L+eKaIC1+3/irxS9pVi7puc=)
                          2: 2zu1wJ8wfnve2lCsbhddhlT076I.roa (hash: BqvHOGZH8/w3gGFl8qZuFtcL2aDShJCRzn7dsd8nZlg=)
                          3: 5b3s4uMoX-RJY6zYeJbW4AZqud8.roa (hash: R+1VdQ+4H28yuJTD7cjJ/kpp/N/Mzt8yjt7buAdxFPI=)
                          4: 63wugFSzZMkrdwKXYfpxZRPTLTw.roa (hash: coOmiaE6+foXP6g+298jHAaOn7CLLjCkhaq0vtRTMKQ=)
                          5: 6DLO8aK6bBqc2T9_A7FLWsfWxQk.roa (hash: r5M3fJhXehDfUWAUqFjFwsUjGBvZ2kqNK1dq5fGu5Eg=)
                          6: 7oB6DOUA9G1FvkyITzxv4cX5OMo.roa (hash: xvzqPLQfjJ5axjpWFOk7rZmuP+2V/0+uAMhF/k5BYNw=)
                          7: 8ewO0kF6IroMWUBBfgE2L_ThOtU.roa (hash: DHZBkahLIu3ewR/elK0J5xiW6qQYR65gwPc6punju18=)
                          8: 8fs3JcP8J1wL3-0w1qbBxUl6Law.roa (hash: MO238A9p3PNFHYfxywIpbuMkWcmabDQXFkOTAyQTxKc=)
                          9: 8otsMGth1S4N0YfEZbZIJpfcM7s.roa (hash: +pU6cLRZeIDg/L1LlosDn2+HeBH3DMp0dQz/xJBYcdo=)
                          10: AyfnL8v8N3x1kZ8SBp2iLWaWZlE.roa (hash: OAjeA5YolUQYQetyssEeK6Z8FCWJ7il8U+3fGUDSMBE=)
                          11: BZiO0kiawnHBacJ07bN6fLAIS2I.roa (hash: Ph9JRVyDhmuWN1XPtNfiFB5CHloYZbnJInIjyctkHZ0=)
                          12: Bc5_73qFvhCgRS_ivyWRRJLjxlU.roa (hash: c/WT2med4B+cpTZKlyoiSkcIMGMNepdyYelHnwG1/Ns=)
                          13: CibheR6T58boLBJHy3ihJ57XoF4.roa (hash: JEdtvh0dayFsJzZdN//WG1u2ETP0gqoK+8BlFmkIXmg=)
                          14: Dq64nrOld9ZP1H2Wi3tThk3wFmA.roa (hash: HAwNBLJo8jYZmb81T3xvbxWJcs7ZNIgND5bOTM4HGaE=)
                          15: E-Nw43pdX7T3kG8iYhuBtZJdVEQ.roa (hash: mdQzUtpAtRZltJ76UWCKaev/I4w1IXZxA2ITjvTeb6c=)
                          16: FAtoa3WoCyW8mhbLDD-NP2GQN-s.roa (hash: 7diYIRYqOdZqVTBQGJdSL67U0vPdSmOYxoC+X7HUfRA=)
                          17: FF4YZklL_bkcAkxf0IWaB2CN7Jg.roa (hash: Uf5oZUWiJ4OrU5GuVq5M7O6tjO0+iJsfcrUk4y2FatE=)
                          18: G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa (hash: 27ThFvHk5JZTfqzk05BswlgrcgDHlW8rQUsGE2mFT14=)
                          19: GLlNMQCG-BBX0mjEjyxfph_HnTc.roa (hash: tuG45iNKNAHV/xcmGtiOC1wN94306bAb6fXC8g713S0=)
                          20: HCUsN8ijvRpE6W0SYz1D3kKTkmE.roa (hash: Ob0Pz6utJjglaoB0GTLYLY+/Hgba1RWM9ZjIw/P4KpQ=)
                          21: HClk0ncUja2gsX5Nip8rWJmvueY.roa (hash: ajmrxTUSY7X6AEeQEY+m+V/+CII1eAbR+tXii8VfFoE=)
                          22: Hlm6U1wNwdfo26HUBqKingFGX0k.roa (hash: TD++n1jEZMgsext6CN078hB/SThP47hOj7rXsluhdE0=)
                          23: JHhys7x4KUZI1kO4J7gw9Jd40og.roa (hash: poqk7Deqya23jexLwISc0UserD/fN4/WISbryoxdqxA=)
                          24: JXa0g7O6BApZkhscDuspJws4Jec.roa (hash: 3V7idOUHrJhUDVnGhJ7PBf/Fz4e/zzGKWCoRv6NVvCM=)
                          25: K-8C4xRGQtB9bZ7StplYgpp_bmk.roa (hash: 4abn+V1OlIdL8KjN8qiA4KQKzlFFr0NyDymDvM32a90=)
                          26: M0FPsQD-uZ6YwpYphQ4MyVb3i4E.roa (hash: aF5xXPTf9znO5HnMuETTbl8dIKoROSLhdZfZF5SAyt8=)
                          27: MghAPluvx32zcSIwpyI4QqfxfzY.roa (hash: YcXJNQSyqVmykVkvTqltoOTqXMuNd7RcdFc0ZJm5t7Y=)
                          28: N8ulU-vFTgu3VsvgelydQBAMiQ4.roa (hash: lfRJniN1LNPAMoObejC1geAvhZI8YKAgbklp6Mfau24=)
                          29: OelyGdV-bmqdPAQxs2ZV09Kdfyo.roa (hash: RSX6PKmxZ7PtZYpQVpAMnqycuU/1ZdOdtgYTkMD5u1k=)
                          30: RIax74QrouYR3G8EuZnS6CBVrMU.roa (hash: M6s6tTvytpsTedCvBb5V+tEJLg5OsfuQe9dSglOp/j4=)
                          31: RsUWnL5wDXE4XkDzTr1ZD1Erj4k.roa (hash: cfUPai0ZUyj4qPOsj0nQd++UAnFF37EjV+2rwCi7KAo=)
                          32: TYQeQD1ysn5li6VJeZeQK_3erL0.roa (hash: dzi+R7+ToyVVvJOw2iGEvYCWff6UR0ILPu26gb5MVQE=)
                          33: Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa (hash: bSaEVpBrBTluPKrKtZFObM4ahdqClvbYJomIJxU1WuI=)
                          34: VO8aSMMyE1Idk1H3CaNaJldXInk.roa (hash: a/yC2ZWIDpsLnaqyGX27KmyFjwGhs1Y/l9dc8cJpoB4=)
                          35: WlexZI9HfgbsdmMCeQPpTefTMao.roa (hash: c0DjiwxT0XmzycOy0gdf2/nxp28/74OpC67WqR9X6fM=)
                          36: X2IkH5bANGDgCOAsENL0OUw_Axk.roa (hash: XII9KUDHuFQFyrnaKoTaqVZbNPqfu+gueEcte+pj6+c=)
                          37: YAGghf2nHWxSmPsnZlbSjLC3TqQ.roa (hash: zHvoP11AhI2b1+D3SH3mg8YKyeEIZFPhAGCLTCrBb8s=)
                          38: YFgeZz2A90dJNrITN-r8wb3Dhek.crl (hash: J/m5q585t8LnOA7B/kDfDSM4vOaa4507fBjH/pBMPyw=)
                          39: _kfD9qLa6o_YJ1S0qFCLjn03DnU.roa (hash: LopMBWxG0MhDF1XJbA+b9B7YQhsls7AiNx5KscCAr6I=)
                          40: as2ouzTkFaYBFJR_GvEZGfbT-5A.roa (hash: e5AnOgFhaNar7V574CalAnloXzQnPpgES2lVG8RNJ/c=)
                          41: c93aNeFuIBq67DLTDtzGrbYVmws.roa (hash: sOrFOFGdSscumi0ANhVQjRfll3emtq1pkCkfbQrvgCA=)
                          42: cZUD51CHqsQn1UPp84zHrugIJWw.roa (hash: 7KPwaObmJO7IoeNMJpn2AxqB+8q0pzt5J4OjPKhxazQ=)
                          43: dDsZwnQTUqzVefhnoXaaxCrQBxA.roa (hash: DuuDZDSsyaEGaHMu6D+xNna9Z9WpRBtYhE0s5W29PAw=)
                          44: ei4vOR31GFbOByjRBG3ptqqUMq8.roa (hash: RIzZx/NnjgotxpkkfAA4+GNkcXGpnlA/iaM5kj941jU=)
                          45: gKXToOCXWGhDYi3ZHv8ThkFEZ2Q.roa (hash: Vj4UEf6oL2ec4eCk5J0yzfYd0dusFxPLMFxF7Ovyi+I=)
                          46: hAUR04He3YhhFlhHQMuDaA5C954.roa (hash: nU0KIf/g1adjGK35IhjCz4MsYMvpCojL5hbrhzgAdRE=)
                          47: kplbPAA693CAyWa1x_KMnZQYvFk.roa (hash: v6C4iMrzREfQZyjCwij9EvxbxCYmdA3xgTF29gH8zp0=)
                          48: l1BaaqWuFkWH-PawRGEseQ3m8Qc.roa (hash: nFmEbv84OkR8oFvno/OryTBPdNdBDW1/wEQUlML44ks=)
                          49: l6LoUqLoqriKRFQXErP2Qc1uVzw.roa (hash: 7N76w9pifDbPMTKiXVMiFfk4w9FJFbEfnQdYHSw00Ek=)
                          50: n35rgtMJSLTvy0_x6zm60m0eeW0.roa (hash: lYkmfD2zjlIGyFWxLRGAJcsbSY3tllDj9JCJIPVG1TY=)
                          51: nbtlFmVz8ck6IaseaLKx4hSFELk.roa (hash: JN9FepzBXbTvAQlT6m849/appCf+1DShX5CyOz4oBZw=)
                          52: pAG9zgHrtOvAH8Q0ezLMgejrQGc.roa (hash: NJTDQ+vXOV9IcGWRZN990vxU3OkekJZwnqmrZ61RaMU=)
                          53: sxOz8eFzKrhAm9cEdOsNLKkpnl8.roa (hash: JipOOphsmQkfW8rrewdU2QJ8V/0dYZMvJYVnX1v29Mo=)
                          54: uZnv2LnHOamJti_NgFYnoYRaF6c.roa (hash: VyRVbVsG809hIE3ZF3Mv/bAol4jy6sYVk94pLGjD3vA=)
                          55: wYpyjGqZgOLvdxHzTDcvP-NDRWs.roa (hash: T0b0I1+KCgMAI5xmLh/NE+yy9tEaDwRBffeS45J4qa8=)
                          56: xsApzOxLukUzdkXA9S1sXl93VDE.roa (hash: ncTBqBOt1YM0Jy29350mzqf/AxTM4V/6AUZVqREJ+Xk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Oct 2024 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:59:c3:e9:1a:f0:d9:ba:ee:a4:10:29:52:75:18:cd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
        Validity
            Not Before: Oct  4 23:01:04 2024 GMT
            Not After : Oct  5 23:01:04 2024 GMT
        Subject: CN=448fa89e2173bcfdd3564311a76423d34dd4999b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:29:98:1d:13:cf:9e:f5:ab:4c:22:d9:a0:
                    dd:7b:6c:5b:4c:0b:19:02:71:ab:1c:56:30:e5:04:
                    95:21:db:ca:ba:08:6c:33:26:63:0e:c7:2c:a1:4e:
                    5d:49:27:0d:7e:e1:84:99:60:5b:95:33:00:08:f2:
                    00:11:24:88:5d:83:7c:10:da:9b:20:f0:1e:66:4c:
                    97:cd:6e:90:bd:e0:1a:64:65:0c:ad:53:4c:2e:8c:
                    82:15:dc:36:68:a2:9c:de:07:34:46:33:32:ea:b5:
                    a2:82:77:f4:55:df:14:d5:17:50:15:fa:52:f4:77:
                    3a:0e:9c:a8:7f:e2:df:38:3d:af:b6:b4:43:ae:6f:
                    44:8f:96:03:14:ef:2d:e0:3a:d9:5b:a8:b8:36:71:
                    74:b8:c5:9a:45:92:68:9a:1a:84:95:fa:ed:0e:9e:
                    55:78:82:aa:ee:21:ab:98:24:8a:fe:62:82:9f:b7:
                    c1:e4:34:2d:92:e3:a8:b0:c5:8b:4d:0b:6c:5b:a3:
                    a2:a9:e8:78:37:c4:c6:af:45:f3:85:b7:c7:d3:43:
                    6d:9d:e0:b7:cc:62:9e:e5:dc:f4:0e:9b:d9:71:2f:
                    2f:72:dc:67:f8:c2:53:8a:fe:03:f1:74:34:5d:17:
                    a8:7f:70:c5:32:a1:50:aa:b8:8d:9e:5b:04:50:55:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8F:A8:9E:21:73:BC:FD:D3:56:43:11:A7:64:23:D3:4D:D4:99:9B
            X509v3 Authority Key Identifier:
                keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:c2:07:41:8a:92:25:8c:c3:36:71:a4:90:ee:3c:b5:a2:
         08:fe:8d:35:d1:8d:e1:25:6e:24:b0:f0:4d:95:e5:85:0e:d4:
         17:c6:02:12:d3:02:81:8e:05:98:a5:65:cf:17:54:28:13:3f:
         24:c6:c8:a8:2c:44:e7:e6:46:48:c5:ba:24:04:65:86:3d:97:
         1c:7b:79:c0:d1:7f:87:b2:98:e3:a5:1d:84:d7:e9:86:60:29:
         7e:c5:c3:96:5a:80:53:7e:b7:fe:fc:d2:bc:58:ae:1b:64:08:
         7d:a1:06:e0:9c:0c:0b:4c:82:30:63:21:f5:9d:39:49:43:ea:
         14:4c:1b:a7:b9:6a:0e:97:5a:49:75:fe:68:d4:ae:0c:7d:d4:
         d6:46:c0:b8:2d:8f:c2:26:21:60:02:71:66:ef:78:bb:ec:ec:
         53:58:b6:81:74:1c:17:5b:27:5e:ef:86:60:9c:92:88:9a:cb:
         70:33:d4:df:c4:d7:83:66:9b:b3:55:07:f1:09:90:8c:87:6a:
         d1:30:cc:69:a3:46:dc:df:3a:53:b9:d7:73:db:77:15:07:cb:
         07:83:72:91:99:d5:76:b5:78:71:b3:e4:d9:ad:20:c2:f1:c0:
         df:92:0b:8c:0f:23:d8:8a:22:f0:95:77:75:46:96:af:05:f5:
         ea:f0:ca:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZJZw+ka8Nm67qQQKVJ1GM0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQxMDA0MjMwMTA0WhcNMjQxMDA1MjMwMTA0WjAzMTEwLwYDVQQD
Eyg0NDhmYTg5ZTIxNzNiY2ZkZDM1NjQzMTFhNzY0MjNkMzRkZDQ5OTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNgpmB0Tz571q0wi2aDde2xbTAsZ
AnGrHFYw5QSVIdvKughsMyZjDscsoU5dSScNfuGEmWBblTMACPIAESSIXYN8ENqb
IPAeZkyXzW6QveAaZGUMrVNMLoyCFdw2aKKc3gc0RjMy6rWignf0Vd8U1RdQFfpS
9Hc6Dpyof+LfOD2vtrRDrm9Ej5YDFO8t4DrZW6i4NnF0uMWaRZJomhqElfrtDp5V
eIKq7iGrmCSK/mKCn7fB5DQtkuOosMWLTQtsW6Oiqeh4N8TGr0XzhbfH00NtneC3
zGKe5dz0DpvZcS8vctxn+MJTiv4D8XQ0XReof3DFMqFQqriNnlsEUFU5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESPqJ4hc7z901ZDEadkI9NN1JmbMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtXCB0GK
kiWMwzZxpJDuPLWiCP6NNdGN4SVuJLDwTZXlhQ7UF8YCEtMCgY4FmKVlzxdUKBM/
JMbIqCxE5+ZGSMW6JARlhj2XHHt5wNF/h7KY46UdhNfphmApfsXDllqAU363/vzS
vFiuG2QIfaEG4JwMC0yCMGMh9Z05SUPqFEwbp7lqDpdaSXX+aNSuDH3U1kbAuC2P
wiYhYAJxZu94u+zsU1i2gXQcF1snXu+GYJySiJrLcDPU38TXg2abs1UH8QmQjIdq
0TDMaaNG3N86U7nXc9t3FQfLB4NykZnVdrV4cbPk2a0gwvHA35ILjA8j2Ioi8JV3
dUaWrwX16vDKdg==
-----END CERTIFICATE-----
Generated at Sat Oct 5 00:00:12 2024 by rpki-client on console-ams.rpki-client.org