Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          910v2TgG6HB+oHceiOb8iC+1Eydgim5OyoYdX3QQfuQ=
Subject key identifier:   E2:50:A8:0D:C5:64:96:2B:20:F2:92:7D:F6:19:33:55:EA:76:AC:D0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018F0CF95AB114E571DF2D868817228E5EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          0CED
Signing time:             Tue 23 Apr 2024 22:00:19 +0000
Manifest this update:     Tue 23 Apr 2024 22:00:19 +0000
Manifest next update:     Wed 24 Apr 2024 22:00:19 +0000
Files and hashes:         1: 051CAfqgahSNIJ43aAQK8JnhapQ.roa (hash: M7dv4vjEV13X1ydwsxDX0i0FqoW8ruEEV79Z0bg8qB4=)
                          2: 1RZL6Mz8BPIMdRVUxsnkImJg4RM.roa (hash: YdksGAFu1C7YMwSTBy7fkWR1pM71nNmbQx8czmdjyVQ=)
                          3: 1ZQgNfPCI3VE6bmC6F5-UlZBkbU.roa (hash: bRCkQNEMbQgIeIDgYRlkiIF6UB+2tTVCL9JysaCgsac=)
                          4: 2CgFmOGP717oALUaAiVYARg6t9Q.roa (hash: kP+qqT/fr+AmSGmJhlEX1wwhusi+sKSYE0FYaGsMvfo=)
                          5: 3r_7_I5EyrLtSzaQ5lcoUl_8cfo.roa (hash: gK5csNTCLCVAHvXtd8vBb/epC94IeLIsn42fgTtOjdw=)
                          6: 4w0OcNBMbXySdlTzmnDGQgBU9a8.roa (hash: HOVgOjXWlde60TLoL13QmDFef+tA0GiODY8tGT7zA4U=)
                          7: 5FkLY2MkCly-7mySOnuhbSNHlog.roa (hash: P6qockQ1RdAFxoCj5LLSxiagKZbK6XklXMKAFRKHwdU=)
                          8: 79rLseMHbXXWH_RxX7XZtITcY2Y.roa (hash: dVUdEzyncEAsc/P94gHS77EyfwEBl1zc2koh6ZjYffY=)
                          9: 7AcNt2n4Mpm-Ui2I1wutrc3wxq0.roa (hash: /4UYCP+3htwXErgd13lA0T8hFEOMzoJRIAGnRSc5dCk=)
                          10: 7_915I9BaMxhWVRqxi0K-riVXcs.roa (hash: EYThhlAo+o4AAJJxXtdVAzdgcRyyGEJIsdBRPQK0yBw=)
                          11: 7yOhaWvFF32W3vcomgagglxLPhs.roa (hash: x7Vj5Ftn3a7Pj4ewehU1p1hq9NAFQJaHmOnOCktkV48=)
                          12: 9AuF4jfkFF138Y7idKJLOPHegNY.roa (hash: pop2eIGExd/oT61seKBBIHZPq8zPiLF71VIq3xRb3zA=)
                          13: 9wKoRGhrw4r6gRw1LKJhx2iqnfk.roa (hash: cNj3iLLPG68j8OOInCEj/DZKxl1jkvhm6J8y/yBvpF4=)
                          14: BXfVa2yvr8d4UgS6BJpOXIOYYnE.roa (hash: a0UYFro4OxTbS86nE/yM6BZCNHOXyRGvPDdROxCQln0=)
                          15: D1f3uH7gwk7D4TBJhYlVuS0iu3s.roa (hash: vRNc/Fs3kEqWDlsBb+p9HMndkwWj6OEE/XiFfzmVZyc=)
                          16: EYJ4yde1bOebYakBgVTUvzub09k.roa (hash: yvDerswncrQenHPYm/R7dOFYDQ62RMdaiVBuIx3TVbc=)
                          17: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: 6SfS3T845v2d8l8HwYb/jT23cmHHbHv2yU8irBaZQKM=)
                          18: FiCksGLwuvEEn2xNyci19-YjpRY.roa (hash: 04Bj4HxrzrNM3ips+Z4tzx6elcHzHZ7ew2oipqZ174c=)
                          19: HDRlvwIO4YUjxEVsuQnLMpKNgAQ.roa (hash: b0PaPQWeqsSNNI/WQtMsoRBGdnCSXPDpd4W6V76/T/g=)
                          20: Ig4_7CucWp7qisllK9WAT65yGR8.roa (hash: BiQjnihwbkqTaoVBUlw3F/Rzk52nkK2a/znpLsbhw/0=)
                          21: IotrmkD74TRXdhwR9tUzwOHJFsw.roa (hash: 7NGddAJdcylbpiDnlfktvLJ2IUoPKS8RJoFLcU2qVuU=)
                          22: Jhg8rgrV7Dkn26YP4m241zaXoC0.roa (hash: TUJYVysFP3Ci+7zGWztzt5l3uQCYwXfGHf6rKXg0vRU=)
                          23: KZgEecQxE_N1dF_qgByTv9EkVAU.roa (hash: jseKOCPr/wdUS6C6gQocciho2H9ngvqSW9iw6yGoVSI=)
                          24: L3wCSAD8yC0tq7ZF53nRo-RtlmQ.roa (hash: hf9t4djwLI0GUJk25PpPCO5nTGJgZYlqoP5wjy3fTpQ=)
                          25: LKeErzl1NzFYUq5retAWPH6U4SA.roa (hash: Y19JBpoAcChmaLaLIQb4geSMpwyT8KwKUCxiL8MP76M=)
                          26: Mvyiwculd6CoS7xAAhl2nq2pp6c.roa (hash: 56eKDWiI6SB3+pedS9joaA90ql8sQPgiklB8odxaRJU=)
                          27: PHZIJDdbpE22dXHOEvu9J_4dzIs.roa (hash: YmogY8dOnX4HsXKogh5Pl4FGeUeZYVDbaseokMr9Wf4=)
                          28: Q-PoiEkBAFL77EgYbfNw2JO83SY.roa (hash: hjDWtvwBL5uNPTkwOprJb2MTh5HCRBO+IS81YCbWwE4=)
                          29: QcD_T-Ad--Ab7TjOQRcCf-qC5Ao.roa (hash: jCo+E/HBRVfurkydftatiL1m8P27fTEj6VniFHl2EL4=)
                          30: Ql0i6Fl8xWP8b2DBhC6Xozs9lFU.roa (hash: 4FFWyvqNK4oI1xu2JqVOBWF/V9/c+bT2LtTz75tEhSc=)
                          31: RKrtDJsonf_eT-X_IWBtsRe3S-A.roa (hash: TkaGTCWLvkcQK97BPrYga1BHRS8pGF27lYrNhY2SNQw=)
                          32: SeFrYTxhrtNHB3i1jD1ma55Hses.roa (hash: UZnrvl6Xc9X0NeRIvMLWBQ68YRjIjpTKrkcNWr3Vu+g=)
                          33: SmiyYuDPEfhUoND8Oie7OrdcQJM.roa (hash: pzftG54xEhb7GFvWg8J0S0flgWBJzqearEv1gClx+mg=)
                          34: TRIHx_DPDYf6C4onyuUKBqifAT8.roa (hash: a2tRU8v2kYnDZYo/ALYEavrPZCfyKNmCoKCuhz/GELk=)
                          35: UeJXWIATgnFXFlNNUwXHPxq8kAU.roa (hash: q/rqUsbH91q3aaYS0eW01VXIUFBDIIHuO1tZkUbzUrw=)
                          36: UhN-unRDxQtkBaN34dLB4srWylQ.roa (hash: tMf4lxF+jQRKIX26LQP/WJS8wL+YK2sJibMcJ3TIRLk=)
                          37: W97-yB2Mbwg73ap0BnNK9GZ0CBc.roa (hash: n9zsdGXPxROsClABiuww+dgCxSrw0pJQphR5ctWazd0=)
                          38: aRL9FoEBg7BMj05sWh1OuHWG_JA.roa (hash: xMhJwojo944cMXD8MesrnUbAOEDQp/Q7R1IenKTmrbg=)
                          39: afITdHRcGcdwKOtAWEJ8LG7qr2A.roa (hash: pt/XmGY1uC7OSCHtALrB8P9sjn1cIkuA5g1w/3lQjJk=)
                          40: d5Fm6KrDpkF1Y1t1tyzybSpWWvk.roa (hash: CTN71J8wiZZWx8T3NL49HrVZvdmjk3ZG/40s/50Pnm0=)
                          41: fD8E8A0sQR2MWdNFfcD-BAFnboI.roa (hash: Xeu0Bc+3H8ET3ldgLZi5OuvqTT9anGF5psIxrujIbHA=)
                          42: g2bqt8Auc3XOeq9M3fFJg8AXDGk.roa (hash: 4ut8boddAmaSovmvF46dOMje5EM/yTOdohYOZZl6ywk=)
                          43: gXerzGosUeyLbpex_Jhr6_Nd0w0.roa (hash: L6bbr8MKm/QYwvSTkDIJPsHiwqvptbqvwow2/uebcbc=)
                          44: gfVXHI8LiSMc_vCuwoTFyEBkLls.roa (hash: +1UdjMRjPhPlu0GlbFfyHnKeSEZb2WU6+nYTiM7Pdwk=)
                          45: gmWbvfZplEQo52g-gmGIg114GLA.roa (hash: cebanoEIemr7DSYFZmdL18v6XMOnjh+KUZuIturQFJQ=)
                          46: i0o96JO76KUtJGvtgXG6LgLrGlA.roa (hash: kVOyOHKj7lp2Rn/Yf8Dk0G4I7SXGDwOUJ434G/ejkhU=)
                          47: ibFxBG7dXlbb6vkuxzpj8aFPW9Y.roa (hash: y/2gh96vV7NoVV/3aZvzkY+4+mY1wFJEbah0HG6tQZs=)
                          48: jlvYhHUl_tINr9DvbuRTQ2-Nn2U.roa (hash: zHfvfzIpGyZaL87/Bw/C5E1ZbrhmKTMyoed2TyPvM08=)
                          49: k-3G9NpV3nECMGbmHT7NAf3BQbk.roa (hash: NQvLASGXF6GMI5TYXCnDsPjcaTxKFJHcAabDEzWLYsk=)
                          50: nu-IiIFelUf656scMVPt37iaJjE.roa (hash: DLl48j5eiYDO7h+s4ymPor5tMA9qKg5BJkU7NVqt0ds=)
                          51: pGkPGugsRjaKRH2jCS5hC3CWGZo.roa (hash: TuzwqO3pd5bUA1YD/Jfcf1NKyy6GJZ+AAVTV0eR8qvM=)
                          52: sgqA9dDyEjB2dxnBjKekJlXaVxU.roa (hash: x7OVigOPBx0IQrekW/6kznohUbrxdLPbfH+tBzUhCyA=)
                          53: v7dy_mb7YZoaDUFEBuwa_jnPSJU.roa (hash: qMbDJJjc0Lg8e5UME+LO+TcqIgbebI00FO/ng7YkPkA=)
                          54: wRiDHiDNQ0yhxdflLsJrih8UC7Y.roa (hash: jxqdyrm/ACaS3cdbVRl+qj1oX5dEFF6jugcZUowqa8c=)
                          55: zElyXVkaUDhTaEIcmfcsZoqBDjo.roa (hash: dXoNwAHTolpfSeJKnVz7tdk8PPnI889vUICT6jyT5Zg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Apr 2024 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0c:f9:5a:b1:14:e5:71:df:2d:86:88:17:22:8e:5e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Apr 23 22:00:19 2024 GMT
            Not After : Apr 24 22:00:19 2024 GMT
        Subject: CN=e250a80dc564962b20f2927df6193355ea76acd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:92:5c:60:e6:6b:17:1e:a2:ab:3f:2f:49:
                    f0:c9:f4:d2:93:d2:4d:2a:32:2c:d3:25:e2:ec:8f:
                    fb:71:a9:f2:02:67:3d:d9:54:2c:cd:58:be:1a:f5:
                    73:30:9d:25:77:46:c3:8c:cb:e7:be:0f:77:a9:89:
                    00:c2:b9:0a:02:49:92:81:87:26:d9:27:7d:29:2a:
                    66:a8:80:ad:26:3a:06:50:1f:2b:68:51:84:54:e1:
                    5e:47:47:28:81:55:b3:fc:c0:a4:77:ef:b9:08:38:
                    55:fa:2a:98:9c:69:9c:aa:3e:bd:1f:f2:6d:e9:21:
                    6f:e9:01:2b:09:aa:be:83:0a:79:f9:f8:d8:25:03:
                    85:04:a4:17:68:f9:f0:9a:4e:54:e6:23:bd:c5:d6:
                    b6:14:ee:60:3c:2a:bf:f1:95:d0:4c:00:5b:2c:1f:
                    da:a7:c8:87:ed:05:30:1f:d5:03:b9:60:4f:72:37:
                    1d:30:f6:cf:90:bc:0d:3d:f7:d5:88:2a:91:9d:c9:
                    c1:94:38:19:78:f8:07:14:76:53:3f:8e:72:1b:1c:
                    55:cc:bf:98:b1:03:e5:de:34:f8:44:94:43:01:15:
                    99:68:6f:49:b3:ee:63:73:37:b5:85:01:80:ab:18:
                    9c:40:05:98:fb:da:63:b2:10:ae:ca:91:71:6a:a6:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:A8:0D:C5:64:96:2B:20:F2:92:7D:F6:19:33:55:EA:76:AC:D0
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:24:75:df:e9:d6:c7:0d:ca:d3:f2:84:d5:af:f7:35:cf:
         c4:ef:88:94:5d:95:f9:df:57:13:51:d2:7f:19:dc:e9:b5:15:
         00:de:1e:43:0e:05:d3:00:91:d3:8a:e4:48:a2:df:82:8a:c8:
         f4:75:17:bb:bc:a9:d7:a9:51:27:5d:51:f5:bf:fe:c0:76:db:
         ec:52:d4:cf:14:98:89:ab:48:ab:c5:0c:a1:08:2d:37:cb:91:
         c3:79:77:df:8b:48:6f:12:c4:de:70:04:0e:f2:5f:6e:77:2b:
         98:08:e1:d5:f2:97:49:17:ef:50:4b:75:6c:55:96:4e:e4:70:
         2b:1b:4e:f8:81:5b:5c:7c:6e:ca:9d:87:06:3e:36:77:22:51:
         29:bd:92:12:dd:a9:1a:be:79:c9:2d:b8:92:5c:4f:37:c5:1f:
         de:66:fc:80:9c:8f:9a:46:f5:2d:9d:6d:55:80:48:67:f3:ba:
         1d:3f:04:11:24:d6:68:e4:59:67:a9:36:bd:2e:2f:91:cf:74:
         12:15:a5:0f:23:8c:5f:7c:80:e6:9f:96:3b:84:90:7e:41:76:
         94:2e:86:18:07:42:bd:ad:2f:49:53:81:08:e1:e3:00:51:9f:
         9a:34:1d:dc:d5:9d:f2:0f:b9:ee:f6:ae:39:b9:e2:ce:92:7d:
         fb:8f:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----