Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          YQI/QDSh/PHZAjJco314mWYT+bL9qdg6axmM5JpwXpQ=
Subject key identifier:   01:AF:B6:5A:03:02:7D:14:21:4E:B4:B8:02:B2:88:59:F5:1F:CC:40
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01947DCAA832250560D1DEEFE57341FDD69C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          0FF3
Signing time:             Sun 19 Jan 2025 09:00:20 +0000
Manifest this update:     Sun 19 Jan 2025 09:00:20 +0000
Manifest next update:     Mon 20 Jan 2025 09:00:20 +0000
Files and hashes:         1: 1-8mzLgcSu9Oq6q2tMFsUIKVj-y8.roa (hash: TL+lgkmWfcVi2SAdBZQfMnIAV6VfzBiyuBl16HYlLH0=)
                          2: 1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa (hash: yVOsoV3yJ2B3NS6xPJkpc/bYU0gh14t4/0w2H7T8rs8=)
                          3: 1im9hEU1Zy9gvDtniuhopIsSAfI.roa (hash: KW9osimLZTsfRmjZlDNM2cTfJYEvT/L6ZQhgwqfwXrg=)
                          4: 2fGYsQ2p-erYJDs8qD9w62HBmjE.roa (hash: t/5y8g4i31/Z9kl6zGDu1iv/a/9qXrzQCrAFOItuOXM=)
                          5: 4iA6JSRt9iOXLjSJo4FPcvo5850.roa (hash: Y6iNsmOmNRn1t0IzHy7GGa6of/n7DvPOfcUdK5WYltI=)
                          6: 5T-uWj9twPgW88xOoqQzKkjJJ24.roa (hash: sqAIwpwqapzYO2+lY5/AGADk25rfARYCO45gc5xFmSQ=)
                          7: 5sP9AUGchNWq9z-ewhSavIILNHs.roa (hash: AuCjYL0TN0EWfTEbYCBZhYsII9mCs+B7At3SazH6Kpg=)
                          8: 7D86KP-TMsbam8_lLT2JJcb4SW8.roa (hash: obH4dQt/Oli63a0jpBviDAMO3/OUG4X9389knU++zyk=)
                          9: 8b5XsU_ykhlua86XBDQUS1Mo7FI.roa (hash: WWCuXlQD4j8DR63+O4KA60gHpfsjP5jXzLpDX6ZJvWA=)
                          10: CCs7s7qtTwTA4v_cUzv1kNWH5cs.roa (hash: n9IEvGnZo2t/xTYkauWQNpybghOPxemj5Hqf6XCpTTU=)
                          11: CvYPnO9n9wAN8861pn_AlstUSmc.roa (hash: AhTYD+mPr3Q/UsUfGKJ2zJxIpB92wOFsAXppP+mD++w=)
                          12: D7sLP9oJw0MaBOyeWz2IsxPbLh4.roa (hash: 7QOJAAihtPrGiqBplxL/SRScdl7+nvNqXjKZZwxD6F0=)
                          13: EHANXORuuFW-bF-qP_Ewlxhr-nY.roa (hash: zrxGCCVowaTZG19wQV3mSr3hCcJg9eM34gCGRKeKgvw=)
                          14: EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa (hash: Zh9Sz85xAOxdRH/TSTK08WUiIZwDMKmp8n0eSS6ma5U=)
                          15: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: guc1ubyYLvZBuzTWDxuRpcFFr86Mh764SxGs5KRFfBE=)
                          16: FhVVLOSaxxu76faY814MnjaKzto.roa (hash: 9AmDzH895DDiPDx+GJM625gim3dI0bqS449682uf9QU=)
                          17: IBQePbUiBM5g94FVwIacCAEuPao.roa (hash: KLM5pCcoF2f0RYayCLzM4NVj30QUjygkx0XcB71JnNA=)
                          18: IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa (hash: x1bR2iw79o2n2CiabiJSxb3FYLKksGeSqDdvgl7oOyQ=)
                          19: K6kC5-I7q0kqPpaxKbrbt1jR6iw.roa (hash: HqUYkvdDzJtU1vyhTa6maxQ4ihN1x19hZj5aHKPFz+w=)
                          20: MR1g3BBi_xl1gx5Y0lGmfE-MYoU.roa (hash: H1hmCwZT9JBFGwEqv/yJBQon6hUn8vTsaw2M6wo0nSY=)
                          21: N1O6PL9UFvK9gufJwrqToqlXWnM.roa (hash: 42lFDFK45bmrsBoeSO/8+TJTW9TgvHQqbUki/a8F01w=)
                          22: OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa (hash: x7yqlpuzOUYTjhI9koKYGYix8ZFmxFeUptiD8PTHtzo=)
                          23: P0zP1jJVbq5izuOS18FYTI1YHxs.roa (hash: s6fzct44ef1GEvO9VXyOMf9H83k5wEPaumVmsRJC6ns=)
                          24: Q1MqoNwFR_5njWMpG9w_dVHxN_U.roa (hash: Q0fJJ7ym6xTHtMnaOZn2Vz5+pGnexqXLR1sH/DSDNKY=)
                          25: RKiPm9TAvbuh_hM-_lIBxDZv6rg.roa (hash: wmQF1xmI2xLjnYrkheVh+QF2nwc1FwtPu4Q6cucZc/A=)
                          26: TKLwlj_hhD4ChnDkZIEH511OIGQ.roa (hash: d5LelJw+wBPleYzumiiB1DR6XbgaSt39j02f16QfxpA=)
                          27: Ua-OzysUdguXwiDuoM7X5MXwVrQ.roa (hash: dbmeJas/U+JBIrXkJS0C2tPfPutnaVXnW3EKfgBEMN0=)
                          28: UssQ3uaWIBR-jRSPRfVK4dqtyZw.roa (hash: jSCB75UJBI6CVBgbXnymkTQet8MviTNNi1b+iGWhqX8=)
                          29: ZE5HXP4DhKEPM6Gv1wOErPS1cz0.roa (hash: O/2TK/NX3+tm+RkMY/59BD1XnfP0CTYDGNxOF5SY9hE=)
                          30: _rbgiNGO-S27H5VBRvlSaosM5pA.roa (hash: F4Wzd0keTC9/E8Yr8BBEUoGpX4zOhFgL+3EUdrKLPwg=)
                          31: b9747bu6F3orHJcVTx2KhvjyqKA.roa (hash: H3wknujwm2p7sLOwETgecFsrpjupwjmW1r2yHz878yc=)
                          32: cL9HljoeDZBP7di9MEhfCPP-xAA.roa (hash: qaTamrU6zn88FwpCrnMVriN6C+OTCsqMOCj2sz/ZJTE=)
                          33: dhvrao9cqDtu4cNL7P7VwKji0UM.roa (hash: DXIuFC1u6zXUhH/posDaRLzzQjM/I3jLYYQrFJ8rMq0=)
                          34: ed1jORhWSi7ng65aRGJvId8bpXw.roa (hash: V1NGOKlYDvJUTPipPut4jDpgPnuzNxC4hJ0tFfqQYgM=)
                          35: grkpzxJson0VO7xVFrMikGMv36c.roa (hash: YMm6A4zlYtaXgWVdkGysieoloVta9ggqSz989h7KXRQ=)
                          36: hRkfWek6x-vExSIgkwy_44n-0R8.roa (hash: Jw1jYBu4t1JSgiHUdnnTnbxfd7dT4zMqdCScHCXuMGo=)
                          37: iDsVGhUzM9wIiGAdd7UL3QbsAlU.roa (hash: CSbthrtDlT3wO3U8KcYsreaOD2U29zr8MXYvaDSeDTs=)
                          38: iS6COwGyythSYEhnktJI6anFjEA.roa (hash: GWVuOHI/ZOLPjaA2BN1wMh+IXCz7gVuOKvl8Sig6s08=)
                          39: ilkQ7l85HQmR_JVmkd_hGC8Di00.roa (hash: TFb4vPDvFn3NHoDA2wS5sAtOgJMIPvQ/3QpJDKqOZjg=)
                          40: ka9Kg1mP_UGoOXD67l2s092h9eY.roa (hash: gHOj1YrfYiq5kNzFwLUGBr3drQZHXZ/djO0mPNqlklo=)
                          41: kb9BxBKY2oFyyAaWOLpVowxkabg.roa (hash: bEQAku9SJfZcJdsgmD353/m01osbhC5MCXsXKZyKu+I=)
                          42: mzYTG369PgNAlh5zGombwiR8USY.roa (hash: 8QzG8+TapKGW2hVk6FFFsMwf9yDJ6j+AMvjRb3edEhc=)
                          43: pRKV5NnSuigLYC9OzbXlUz4fMic.roa (hash: 4y/NfLDBoopBcm4EtlSOqI1kOdlLNZGs+mJqvxTsbxE=)
                          44: sVO_hwOUMLHjYiUFYzC6ZlJnNjg.roa (hash: A+S9gnFkAJ3wbXU2lCWRPwZRzZuYDwzqjjLfNzaAhnw=)
                          45: t-UmPK7a0z1d7carLDgkN2MFV9U.roa (hash: p1/ryE9eJhz1aBFKaaCLHbdy0ZdGSBl52Opjx5n2p0s=)
                          46: yLcbHMgRfnm3GP6mvQgxG6m7W4E.roa (hash: Ezieh4C0OjR9hVJWQfbuNJn+pjhzzmPKBbae2Gg46+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jan 2025 05:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:7d:ca:a8:32:25:05:60:d1:de:ef:e5:73:41:fd:d6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan 19 09:00:20 2025 GMT
            Not After : Jan 20 09:00:20 2025 GMT
        Subject: CN=01afb65a03027d14214eb4b802b28859f51fcc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:d9:3a:07:42:2d:d9:d0:ac:7d:26:84:3b:
                    82:4f:97:69:99:8d:aa:a3:19:c8:06:f3:b0:db:57:
                    99:d7:6c:34:30:28:9d:40:32:fe:e1:6d:ed:0b:5f:
                    9f:6e:75:f1:0d:85:8b:5d:0c:8e:ed:f8:dc:0c:f8:
                    ef:3d:31:38:c5:9f:b5:35:43:a7:24:60:7b:33:3e:
                    44:23:4b:85:23:72:86:4c:9c:28:b8:95:8f:69:e8:
                    01:d6:1d:de:2a:75:da:b1:d6:a9:4b:ea:cb:3b:44:
                    1c:21:ca:18:be:71:7e:50:86:67:93:34:64:b0:86:
                    c4:6e:84:24:72:d1:80:60:d2:cc:00:27:97:1b:14:
                    2f:c3:7c:44:6d:3e:55:5d:f3:23:be:ee:36:2c:36:
                    0e:b6:02:e5:ff:ba:40:66:3a:c7:a9:2d:2f:75:33:
                    04:e1:0b:f6:e6:f1:3e:a4:52:07:3b:1c:7e:2d:6c:
                    f5:55:0e:98:73:bb:e9:3a:6e:8e:e0:c2:fe:1b:c6:
                    0a:cc:b3:60:a3:c8:3b:d2:6e:0d:0d:bc:d7:9a:1b:
                    9c:7b:2e:c3:4d:7c:f5:db:8f:52:2d:6b:58:ef:a4:
                    fc:b7:80:ac:21:e6:c3:78:25:f0:bd:0b:6d:3c:0b:
                    8e:68:2b:c5:08:19:1d:5f:ab:e1:a2:1e:52:23:c2:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AF:B6:5A:03:02:7D:14:21:4E:B4:B8:02:B2:88:59:F5:1F:CC:40
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2c:9f:f3:4f:b3:3b:26:6f:e5:a4:cc:d0:7e:f2:9f:98:66:
         11:b4:64:14:1c:d3:d2:6b:a9:7e:ed:0d:f4:ff:7e:63:53:3f:
         f1:04:a6:88:a7:ff:88:2c:4d:1a:82:5a:63:52:6b:c7:99:91:
         e7:e2:bd:c9:68:c3:42:8d:d0:3a:d9:be:b3:83:f8:0c:8d:9b:
         23:20:01:0d:c3:a9:50:7f:ba:a7:b8:f5:cd:2a:e4:c1:35:10:
         0e:43:a7:68:3c:f1:5c:f1:e0:ce:85:9e:ca:68:09:8c:ad:32:
         a8:7d:ef:18:89:22:46:bb:63:ae:f7:d6:81:a2:d0:db:36:6d:
         33:65:b8:f1:2a:af:df:c3:cb:1e:8c:88:47:72:92:03:59:b6:
         b6:8f:39:7d:92:48:2a:b7:86:06:94:bc:3e:e7:c6:c1:14:8c:
         64:c3:a6:96:a5:c8:ee:86:b0:cd:ec:64:a8:86:dc:3b:14:19:
         bf:dd:ca:9c:80:2f:59:c2:86:8f:ae:19:56:13:83:2b:f6:03:
         3e:c5:fd:8d:41:8c:df:7d:e5:b0:a2:64:16:22:e9:39:72:8a:
         9d:80:0f:83:66:6f:5a:c1:95:5a:b6:35:47:14:5e:9d:d4:8b:
         84:77:e1:70:94:cf:24:4d:28:3b:ac:f3:b4:65:e1:39:27:90:
         1b:6a:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----