Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
File:                     YFgeZz2A90dJNrITN-r8wb3Dhek.mft (raw, json)
Hash identifier:          rd4xodXf+L4QJ5h05iW11ffbNc52wwVMKo9kOP6KOX0=
Subject key identifier:   D8:F9:D4:C7:EE:CC:AC:61:C2:55:22:1E:B6:B7:15:AB:E2:16:02:9E
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Certificate issuer:       /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial:       018E84C065EC2F6791334F4F113D296A366A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
Manifest number:          0ADE
Signing time:             Thu 28 Mar 2024 11:09:45 +0000
Manifest this update:     Thu 28 Mar 2024 11:09:45 +0000
Manifest next update:     Fri 29 Mar 2024 11:09:45 +0000
Files and hashes:         1: 4hvKKQwWQhwSBMCcdI9MVzO9dhY.roa (hash: Ucqi9q0b6PX/FE1OxZlfC8z3gcxMlfzZKbAOwzbqiE4=)
                          2: 6DLO8aK6bBqc2T9_A7FLWsfWxQk.roa (hash: r5M3fJhXehDfUWAUqFjFwsUjGBvZ2kqNK1dq5fGu5Eg=)
                          3: 7oB6DOUA9G1FvkyITzxv4cX5OMo.roa (hash: xvzqPLQfjJ5axjpWFOk7rZmuP+2V/0+uAMhF/k5BYNw=)
                          4: 8ewO0kF6IroMWUBBfgE2L_ThOtU.roa (hash: DHZBkahLIu3ewR/elK0J5xiW6qQYR65gwPc6punju18=)
                          5: 8otsMGth1S4N0YfEZbZIJpfcM7s.roa (hash: +pU6cLRZeIDg/L1LlosDn2+HeBH3DMp0dQz/xJBYcdo=)
                          6: 9aOxL-nh4UUt-_IMi9OOHGvoDSM.roa (hash: J1J5UkOnr2+zzFl2RgQKc7WxOvurg01xoH8hgRVMBD4=)
                          7: AOf0MZWHENn-rznfYFf9XXx0HhU.roa (hash: OczPz4CedC4XjQ4jLfKS5ZFZy5hnfB0PcWugRR364es=)
                          8: BKYmTQt6JPsriSrM_LzpUWiAQII.roa (hash: FqMX6+T1yHUwH0tGC8ptBfWjsyNAjYhGliBl9EIbBVg=)
                          9: FF4YZklL_bkcAkxf0IWaB2CN7Jg.roa (hash: Uf5oZUWiJ4OrU5GuVq5M7O6tjO0+iJsfcrUk4y2FatE=)
                          10: G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa (hash: 27ThFvHk5JZTfqzk05BswlgrcgDHlW8rQUsGE2mFT14=)
                          11: HCUsN8ijvRpE6W0SYz1D3kKTkmE.roa (hash: Ob0Pz6utJjglaoB0GTLYLY+/Hgba1RWM9ZjIw/P4KpQ=)
                          12: Hlm6U1wNwdfo26HUBqKingFGX0k.roa (hash: TD++n1jEZMgsext6CN078hB/SThP47hOj7rXsluhdE0=)
                          13: JXa0g7O6BApZkhscDuspJws4Jec.roa (hash: 3V7idOUHrJhUDVnGhJ7PBf/Fz4e/zzGKWCoRv6NVvCM=)
                          14: L7ncx2xbnhhEO42YI_9gv9N512k.roa (hash: ZXEMLj4Pw4/VwpUjD4pBBWvbHtyy7sfzKojg16HSQwA=)
                          15: MghAPluvx32zcSIwpyI4QqfxfzY.roa (hash: YcXJNQSyqVmykVkvTqltoOTqXMuNd7RcdFc0ZJm5t7Y=)
                          16: N8ulU-vFTgu3VsvgelydQBAMiQ4.roa (hash: lfRJniN1LNPAMoObejC1geAvhZI8YKAgbklp6Mfau24=)
                          17: S_pAP66H1f439oE-22hyFtyvyBw.roa (hash: BPplwmPUIv/iVqsyqzNV1l9Cwc9jUY8/GYTaIXqTIx4=)
                          18: Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa (hash: bSaEVpBrBTluPKrKtZFObM4ahdqClvbYJomIJxU1WuI=)
                          19: VO8aSMMyE1Idk1H3CaNaJldXInk.roa (hash: a/yC2ZWIDpsLnaqyGX27KmyFjwGhs1Y/l9dc8cJpoB4=)
                          20: W4yN-Xn8pK2K1ug4K5VjhV16A8c.roa (hash: X4Fpotf0gARGCyRdRvKext+2wVDPfUFQVStA3vZqGwQ=)
                          21: WlexZI9HfgbsdmMCeQPpTefTMao.roa (hash: c0DjiwxT0XmzycOy0gdf2/nxp28/74OpC67WqR9X6fM=)
                          22: YFgeZz2A90dJNrITN-r8wb3Dhek.crl (hash: aK94RUqC0BIrgCdVIk2Zn3ZO9vDc9wAoPhMffWtjrbc=)
                          23: _kfD9qLa6o_YJ1S0qFCLjn03DnU.roa (hash: LopMBWxG0MhDF1XJbA+b9B7YQhsls7AiNx5KscCAr6I=)
                          24: c93aNeFuIBq67DLTDtzGrbYVmws.roa (hash: sOrFOFGdSscumi0ANhVQjRfll3emtq1pkCkfbQrvgCA=)
                          25: cTOJoqWQjbgHxSpvdHijc4xJ8zc.roa (hash: 1EgrFN8dUQVFTMKsU9p6PxbkQDG13zr+W0pek+5VtsI=)
                          26: cZUD51CHqsQn1UPp84zHrugIJWw.roa (hash: 7KPwaObmJO7IoeNMJpn2AxqB+8q0pzt5J4OjPKhxazQ=)
                          27: ccgXeOEWSJRFv5lfvWnlj7VgbyE.roa (hash: 4kw1OcmXWV15WCSnoHMRDTNfP5eKgwTiqMN6Gg4M5wY=)
                          28: ez5wDyYGi9w0DRw-3WQkXYbBQx4.roa (hash: p8EoqwloZwEOjer6ahz9NEOm4eLiOy7gFcAa3kP3QbA=)
                          29: gKXToOCXWGhDYi3ZHv8ThkFEZ2Q.roa (hash: Vj4UEf6oL2ec4eCk5J0yzfYd0dusFxPLMFxF7Ovyi+I=)
                          30: i8Mwi0GK1eRkxR3JO_mEXIip19w.roa (hash: jIgFHPikOCv4OzsrWTEdZ5MA9K+zVQSu5RFE24idWLs=)
                          31: l6LoUqLoqriKRFQXErP2Qc1uVzw.roa (hash: 7N76w9pifDbPMTKiXVMiFfk4w9FJFbEfnQdYHSw00Ek=)
                          32: n35rgtMJSLTvy0_x6zm60m0eeW0.roa (hash: lYkmfD2zjlIGyFWxLRGAJcsbSY3tllDj9JCJIPVG1TY=)
                          33: nbtlFmVz8ck6IaseaLKx4hSFELk.roa (hash: JN9FepzBXbTvAQlT6m849/appCf+1DShX5CyOz4oBZw=)
                          34: suULw5bwoi-k02zh8ipaPiSNB2Y.roa (hash: 7a10ZEUJB1C5S6ro0yndQLrDuBFgl2x3L6inipA4WSQ=)
                          35: uZnv2LnHOamJti_NgFYnoYRaF6c.roa (hash: VyRVbVsG809hIE3ZF3Mv/bAol4jy6sYVk94pLGjD3vA=)
                          36: xJ_tafogDHqHn5lhuFnJSLFmhFQ.roa (hash: 313JR6HKaqGfGycK3Og3ltlYxw5auPIqKS4jsqVgjvk=)
                          37: xsApzOxLukUzdkXA9S1sXl93VDE.roa (hash: ncTBqBOt1YM0Jy29350mzqf/AxTM4V/6AUZVqREJ+Xk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 11:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:84:c0:65:ec:2f:67:91:33:4f:4f:11:3d:29:6a:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
        Validity
            Not Before: Mar 28 11:09:45 2024 GMT
            Not After : Mar 29 11:09:45 2024 GMT
        Subject: CN=d8f9d4c7eeccac61c255221eb6b715abe216029e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:01:e2:0d:7c:99:56:5b:7b:f4:43:bb:04:
                    e8:fc:6c:cc:2f:6e:e4:44:ec:f4:42:fe:2b:e2:9e:
                    42:19:53:dd:35:d1:c4:65:6d:b4:bf:b1:73:b6:b2:
                    c1:02:0c:23:eb:ef:d0:64:5c:1a:28:65:c6:01:f1:
                    1e:16:da:82:ac:3a:c5:4b:a6:c5:af:a9:b2:5a:d0:
                    7f:7c:f0:01:12:01:60:de:ee:69:ff:14:fb:11:be:
                    4e:44:87:b2:1e:9c:c4:78:44:2d:10:15:0b:04:96:
                    76:fb:50:db:9b:c9:4a:52:be:37:7a:69:24:d7:cf:
                    5a:f8:64:cc:ec:cc:8c:db:28:49:a2:65:be:d2:2e:
                    fd:14:37:ff:cf:2d:02:e7:af:1f:6d:39:4b:c3:c1:
                    1c:1c:f9:34:aa:86:9f:d5:a1:b9:e9:6f:49:c6:c8:
                    9e:e4:14:d3:13:a5:9c:82:22:a6:0e:eb:3e:98:24:
                    39:01:f5:d8:c3:1f:60:a6:e8:df:cd:42:16:94:6f:
                    10:ac:11:7c:42:6a:51:df:d6:28:cc:62:f8:88:5f:
                    40:6c:7e:fc:d1:56:0e:d6:22:a9:49:70:f5:87:45:
                    56:fa:48:e5:b6:d8:3b:aa:a8:1c:35:12:6e:60:a7:
                    6d:f3:1d:32:1c:08:3f:e7:95:3f:3a:fc:af:09:83:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F9:D4:C7:EE:CC:AC:61:C2:55:22:1E:B6:B7:15:AB:E2:16:02:9E
            X509v3 Authority Key Identifier:
                keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3b:04:37:20:7c:92:16:92:1c:cb:8d:17:88:3c:d2:41:57:
         d0:a2:0d:54:c7:b0:dc:1e:73:e0:d7:2f:7f:e9:c9:03:3d:c8:
         56:30:84:69:e2:4a:56:83:10:f9:34:f9:cf:54:b6:d3:d3:71:
         64:53:b3:b2:1d:3d:b4:d5:6f:52:7f:2f:de:a8:b4:c6:8f:75:
         b4:a3:a7:50:4c:79:8c:08:f8:98:d2:fb:1f:2f:de:5c:cc:25:
         0f:aa:54:43:50:cd:d3:ab:c3:43:1f:1e:73:f7:88:06:4c:8f:
         7e:14:59:b8:79:0b:05:91:fa:99:6f:fe:e1:08:d0:6c:bd:8f:
         54:f5:2c:55:7c:f9:68:69:bb:7a:30:40:68:c6:bd:b8:8b:65:
         ed:c2:03:04:54:3f:c9:3b:c9:5e:f9:79:a4:c3:88:dd:01:ed:
         5e:ec:e5:ec:75:20:c1:67:f9:ff:bc:8d:10:d7:9d:06:b9:8a:
         35:58:de:1a:e9:b7:2c:7d:d9:5d:c7:ed:ce:ab:7c:19:72:f4:
         55:21:c4:9e:d8:a5:15:3d:f4:02:7a:8e:cc:4f:f6:3f:68:92:
         bb:05:4d:a8:23:74:c4:a8:ef:95:27:05:d8:e0:27:53:94:48:
         9f:57:46:3d:0d:75:4d:26:a0:b7:c6:f9:b1:13:5c:01:74:b0:
         05:00:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:25 2024 by rpki-client on console-ams.rpki-client.org