Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File:                     dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier:          MExiWqiaa4fO08Km28TXK6wKBMgFLaklXipI/TkDYqI=
Subject key identifier:   2F:CC:70:38:B7:91:9F:68:D2:F5:14:A5:40:77:27:62:91:87:0A:E7
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       018F4343B461E46E511C7375D0C1A7460AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number:          11AA
Signing time:             Sat 04 May 2024 11:01:01 +0000
Manifest this update:     Sat 04 May 2024 11:01:01 +0000
Manifest next update:     Sun 05 May 2024 11:01:01 +0000
Files and hashes:         1: 0kF2wRoUOkLUKmrAqdCX4R1J0AA.roa (hash: i8o21B7TyFcFxgOiEsnIcGxiJyZTYyg93qdsgJee32M=)
                          2: 1-uEe4tCvpv9TXogVnzKuyk4EkVA.roa (hash: JFATtxle7Ua5lbhgcJmA/cH/I23jCep4XKv8WL93ym0=)
                          3: 1zu8HPFtIDmKvPLz3iS0xli5HPI.roa (hash: jRshAkiGSlad8DbCSTEwQtu2VCyyEf8r14A45Qvzy7U=)
                          4: 2Pi0No-o2M5_k3Fw42pdZeqvSbQ.roa (hash: 9M/W1RbMU+HnkeekKN0NIyVjNoo85jPxSfLQcBjSqQE=)
                          5: 2WiSYSTZY0NArSxNilTiRMxcsYc.roa (hash: lASIA9d2PkT0l8C+oe7mezW6YHawCvy0NzT0CuCrEGI=)
                          6: 3okcH6dSItYnE9DclsLLJRCf2F0.roa (hash: K9Uah8YXP3Sjk5e9RvVckCs7WCGDHQNzGLVgAgj07Oc=)
                          7: 6D4t59QNnNKPnnyqNarBaCmlHbw.roa (hash: wpRURc3LdqMvq3vWJ4E31vv/Y0NXQHjc/4yIADETfsU=)
                          8: 79BOLEXRc1axf16yU7SUacPUMlI.roa (hash: E01MGziwxipTYRKFcRoRWSzpqxMRvTjblvC93Cxp7+k=)
                          9: A_fRrRaVZhvPeeWTwjL1xHP2KEw.roa (hash: 2otm8DpSoKtMUkXeVleVYHxEWwltE23mhySKeWZ8m9Y=)
                          10: CPzhMPg4KqjlNqqZ284gCHEOnpc.roa (hash: MEulMPfyYWYw2yW7y2gijStH0rdYBh1fIiD1yH/l4Sk=)
                          11: E9FfpYHRo1YkVzZHEm_XhRwM2hs.roa (hash: WXyd/hjgOOWQI+sc6uQlbBQ0GFQcfTNf0dRCsuvYsOQ=)
                          12: EFvtSqtQ68lw9VKB_EtKNLRvgbE.roa (hash: Rv6XheDg3i5HvlnNPLkCmYuspUhOycy6wPiDPIt5sYw=)
                          13: FO85FFxHI7Mrb0n6MpUu3rJ3wEM.roa (hash: D3AtVoNF2rj7PikgoyusHzjXeIBlzcYwGsUXr5png+I=)
                          14: HEJdIihbFGcssaI-FDUZc1Y7YvQ.roa (hash: y/Qy1GfZcaZSQkZ1S2edciL5+lshVuVUhXt+RS9xeg4=)
                          15: IBR7S1BdJZw1sWxQyQ5JJOYa2qY.roa (hash: unWs/SLTaVpa3ikmVcWMaHbvxbZbEh8tLP9P8hX79O0=)
                          16: IiQsYb7UlC1ykm13iaowhBMA5qc.roa (hash: UNIx7i51Uwea8kdqKcwhhbRC27qRDs6lXBUh9dRPe/c=)
                          17: Q4b1Nst-lgI9ICoENbB6a4cpbPA.roa (hash: 9kEo9nbGhbQEFY0sQoi7yUV3oZwV22SAI22V2BXJx7Y=)
                          18: RImNjDQRcuWrz5x1oeYnAgAV3z4.roa (hash: 0PzxSBNO2HrPEGjUFNmYPkf5xNBNyOLoKcYavy+oYR0=)
                          19: RMdb6lsnYeYvYQ630jd-81XnEdI.roa (hash: BXqwzUHDrwGf5tTUBI0egxMpWpAF6D2q7BbD25l8vyI=)
                          20: SQTGeLChd2QQwrxSouxicN3qSV8.roa (hash: iUa+wZeBniO/21ixSO7Cb6C471/AjWsIrx/uU9uaMoY=)
                          21: Y81fJoWgWovg7DEd79ICrz0gWuo.roa (hash: 9Ouac1AZGRjwugaHm2lHTMUN7KE2XNy9dvBbbaIqeQM=)
                          22: ZsQwmaC9P1dPOW9E7iR7sVlgLUQ.roa (hash: GQRPsurZ1exai7zWVFdAXvu56RaJ7u2qJbOGGTVPy2k=)
                          23: _gnfbDoKocmclE0qNHiR50xyJj0.roa (hash: XY4FcluS2d0tHsDrdbGvoXXryQUTObJSUhuh0MkmXTY=)
                          24: b2v9zuI0-E3_o9zjRPCtjRR6wp0.roa (hash: x7iW+LIPfgneHNji2l0tpKxY9+r1UNofeKeCApdsnhU=)
                          25: d0LdSOjOTB7k4B61BN6K04kgjEc.roa (hash: Jqro2IvRWlii8yoVXk/DotoPA8F0mbN0TZAVfamHJ1U=)
                          26: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: p9SjAmuqgoITgeeDqKl14KAvZdKRFOcqVdN28fzcmSw=)
                          27: dsOaWjOvc1ojbUR4_bJsY1maUo8.roa (hash: v/L57SgDtnR4rwcCmZVEesxuwop+ueLTQ+1H86XyRj4=)
                          28: jlGixnjS0U2-N2_wiUx2bZ25eeY.roa (hash: jfAlpgZ8u8PDEwdG+CQSbtq2BmlWlz5IwacknslNhZ4=)
                          29: m8QXttxFvmKj-Fr_Ymund_VIKBY.roa (hash: chTUM3mZk/A7+AxTG4VgVZ6WM5kKbQUlW9gFEbTyv7s=)
                          30: ocChZoHpZumQ0sIabJMHuMzVOB4.roa (hash: IyQkFnsPyPRge3dy0PJKLxbOkOZuhBZaA4ecbQ/YayE=)
                          31: u2YP42CcwDHaIlW0eVcEcLGTkoI.roa (hash: ntzj6ZYZSfpEvLoMsUU5nfrMzyNrTfWu3roCCE3PSrY=)
                          32: uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa (hash: hqV8FgxsrXINgskWma19v2UbCR88aZpdO7lM4BvJvGU=)
                          33: x4jQ4JBZuzerr0IP285lLAfDLdw.roa (hash: YvLJF9l30xSqixTYo0UJa2oAFjbmQ0Cqfyhtl9KD5Wk=)
                          34: ziYj5tkCeyjmn6vH88MdqNG6wBg.roa (hash: um7DhealZCFT5o2g/8K11OuGrOcFWmjViC4wYvodGpY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:43:b4:61:e4:6e:51:1c:73:75:d0:c1:a7:46:0a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: May  4 11:01:01 2024 GMT
            Not After : May  5 11:01:01 2024 GMT
        Subject: CN=2fcc7038b7919f68d2f514a54077276291870ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:51:30:7e:71:c0:49:e5:2d:aa:35:dd:25:
                    5d:aa:91:1f:a8:80:e0:0f:c8:04:62:97:40:28:c6:
                    08:ac:dc:8a:13:61:2c:dc:86:87:8f:c0:ad:0b:af:
                    d8:e2:e9:c4:58:f9:1f:c3:7e:20:57:70:e4:f4:42:
                    14:75:7a:95:10:fc:5c:80:7f:13:28:5a:38:08:30:
                    80:2d:9f:36:0d:c1:76:d6:20:bb:80:b3:24:ae:ba:
                    83:bd:b6:94:15:2e:3e:51:d9:75:61:ad:6d:2f:2c:
                    41:24:61:30:61:f1:a0:c6:6b:16:64:a6:eb:a9:65:
                    78:7d:48:52:6c:a7:1e:de:9b:db:9d:95:d0:9e:74:
                    f8:31:fc:2b:a7:d0:b8:b4:af:2e:e6:1c:69:9a:b1:
                    83:e2:3d:34:b6:e7:ed:26:a4:d6:a8:49:68:18:1a:
                    5c:e9:68:60:27:8c:68:e9:e2:bb:0a:16:f2:85:d9:
                    e3:b8:90:d0:ae:a4:9f:77:69:8c:df:03:fb:fd:c7:
                    2d:9c:8b:1d:cd:8b:5d:b3:34:46:e9:45:51:40:13:
                    f6:62:c6:3c:01:26:52:7a:9e:4c:79:c1:de:5a:7b:
                    a9:1f:4b:d7:bf:6a:9b:6e:bf:77:8e:e2:5a:d9:4e:
                    30:12:c2:0d:7c:e8:e7:9e:d0:3d:71:8a:e1:f0:d3:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CC:70:38:B7:91:9F:68:D2:F5:14:A5:40:77:27:62:91:87:0A:E7
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:6f:d0:7f:1b:8b:02:9d:35:95:7d:cd:ed:01:bd:25:83:
         4c:b2:be:6a:ad:36:08:28:ae:a2:50:2d:62:58:35:fc:25:0e:
         ab:d8:68:1c:7c:17:f0:51:58:30:d2:95:b9:b0:bf:b8:c7:1e:
         c9:89:71:e9:8d:06:06:7f:48:8e:d7:3f:4a:54:76:0c:da:d7:
         72:f5:8c:4b:06:8e:6a:30:11:a1:f5:11:be:30:89:71:c6:88:
         1c:34:87:b5:ce:28:6a:aa:53:3f:1d:c0:7d:8d:b8:05:fb:a1:
         65:ec:d6:b2:4f:65:95:99:3f:94:b9:b6:c6:c7:5e:b2:d1:28:
         0c:e8:fb:78:0e:02:b3:4b:e5:20:2f:32:70:3d:4c:11:3b:54:
         c1:9c:57:9f:a8:ae:8b:70:a7:d0:3d:55:94:39:3a:d7:85:d4:
         46:b5:f5:eb:3c:64:2e:af:c7:e3:70:de:2b:30:66:e2:01:cc:
         e2:cb:30:86:1a:a9:d9:e5:c1:ad:12:97:d1:03:63:62:d8:6f:
         fa:c5:3e:99:b6:d9:3a:7a:a1:41:ad:65:63:7e:cf:d5:1e:9b:
         5b:07:33:03:c4:87:e0:48:f4:3b:11:ec:31:7e:c4:f8:76:1b:
         49:9b:8b:84:70:42:c5:ed:e8:fc:29:bb:17:88:ea:95:d9:08:
         1d:5c:85:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DQ7Rh5G5RHHN10MGnRgrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQwNTA0MTEwMTAxWhcNMjQwNTA1MTEwMTAxWjAzMTEwLwYDVQQD
EygyZmNjNzAzOGI3OTE5ZjY4ZDJmNTE0YTU0MDc3Mjc2MjkxODcwYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou9RMH5xwEnlLao13SVdqpEfqIDg
D8gEYpdAKMYIrNyKE2Es3IaHj8CtC6/Y4unEWPkfw34gV3Dk9EIUdXqVEPxcgH8T
KFo4CDCALZ82DcF21iC7gLMkrrqDvbaUFS4+Udl1Ya1tLyxBJGEwYfGgxmsWZKbr
qWV4fUhSbKce3pvbnZXQnnT4Mfwrp9C4tK8u5hxpmrGD4j00tuftJqTWqEloGBpc
6WhgJ4xo6eK7ChbyhdnjuJDQrqSfd2mM3wP7/cctnIsdzYtdszRG6UVRQBP2YsY8
ASZSep5MecHeWnupH0vXv2qbbr93juJa2U4wEsINfOjnntA9cYrh8NNUsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/McDi3kZ9o0vUUpUB3J2KRhwrnMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeNv0H8b
iwKdNZV9ze0BvSWDTLK+aq02CCiuolAtYlg1/CUOq9hoHHwX8FFYMNKVubC/uMce
yYlx6Y0GBn9Ijtc/SlR2DNrXcvWMSwaOajARofURvjCJccaIHDSHtc4oaqpTPx3A
fY24BfuhZezWsk9llZk/lLm2xsdestEoDOj7eA4Cs0vlIC8ycD1METtUwZxXn6iu
i3Cn0D1VlDk614XURrX16zxkLq/H43DeKzBm4gHM4sswhhqp2eXBrRKX0QNjYthv
+sU+mbbZOnqhQa1lY37P1R6bWwczA8SH4Ej0OxHsMX7E+HYbSZuLhHBCxe3o/Cm7
F4jqldkIHVyF5A==
-----END CERTIFICATE-----
Generated at Sat May 4 12:14:31 2024 by rpki-client on console-fra.rpki-client.org