Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
File:                     YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft (raw, json)
Hash identifier:          InWNfODA2ZHVdS32m5+FTt3wpvBUHU0KT6LXrhW+5bo=
Subject key identifier:   A8:7C:FF:48:45:37:FC:82:FE:94:79:71:85:49:43:9C:19:1C:EF:B4
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018F8E5D5E0E1E5126DB5DF0E03634E70C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
Manifest number:          04F2
Signing time:             Sun 19 May 2024 01:00:34 +0000
Manifest this update:     Sun 19 May 2024 01:00:34 +0000
Manifest next update:     Mon 20 May 2024 01:00:34 +0000
Files and hashes:         1: 07cCelZPS4Z5nagTbP5OdRxaHSA.roa (hash: o1k+2sbhvQyh+q2BdEBepQV+4egY6byZjN1iFl4yC2I=)
                          2: 0bnuTkCfYfzUfw3eB1VZySpW2z8.roa (hash: 57UexDJJ4dyqLTvR+hM8PAsHjeV+TSvkbh8n7TWviQs=)
                          3: 3OL__vUlRT3HIh3Z3sOaB7a8UyA.roa (hash: dPeDQsWdENzfbK9CX4/peLPi1FFliqTS5thzEiWy5Yg=)
                          4: 5XaRqReFVYOaTvnV2R9_MAfI1uY.roa (hash: HRROlwpEY6ttcF3ptBKvpVcl+0SS+UPpWg0GG8CVrgQ=)
                          5: 6cOAEYV0XFea6ckL0EjlNf2msZs.roa (hash: fWzJPwRWQZLPJ3wzBvcB+ZayqWkGy1bBS7qgJYm54C4=)
                          6: 8hqG6MuUTBaGeYn8b1MLG_aUsxo.roa (hash: mkLqxFlFQ5067gD+iL13nMSH8REqWJV32KZ51miZDoQ=)
                          7: BuMBlbMww4MpLqOgFo32UW_dMoQ.roa (hash: ri3a9VgqzbRz3Bp6Fq3iZUao+yIOA/yWMlTNCrthWNo=)
                          8: C2y7llRT1ACkQ97WgvezW7Xjfkg.roa (hash: /rleZK0Sk4bWQFflBbexGPZc1ZLiI1VzR+KIxIO1FnI=)
                          9: Cjb0RJ3cAF0H9We3eUkun_fKKoo.roa (hash: XoZVAzT6WlMDNVCXEqLHEkkgDzgbV7S9TwRJOlkKalM=)
                          10: Cjj5wOv_2hSHgkEx89K2aHe4IpE.roa (hash: qzt3gxeAuxWZKBJkFZhRXS2quuBVG0R4Wfod//zwA50=)
                          11: EMMlDo_ZEo1KryYD--iKv-Ws7d0.roa (hash: K2IQUKVGfwqms1WTMz6O+nrKH0VpEEn3Hldc+B0M+C8=)
                          12: EaKWPOsEC3AdultDM0xgnKuKMQw.roa (hash: ToTX7iP8fSgcvywfV//7pITdESq6M1Icc2aC2KWJxzg=)
                          13: FLrfluS3G6eBn4Rz8dO3Tg1uUvc.roa (hash: BnW4jyu0bgDvHie08CZtTDJ78L8japxPf505h8mt7Ho=)
                          14: HCmN5WGP7TnTD1le8DXUJAlRqUI.roa (hash: K+ryewXGkp8QEtaQHFFw24w2Qm8haDCUr+WSJgw/c6g=)
                          15: HDAlGA4h66F4ys1PgZtcuWJlRbU.roa (hash: rbzHwOAoqcMw1lI8y0r4q+/jJrFcAP8JfjFSaJTJuHU=)
                          16: IWkosv1oceI1aAT6MuaBeykPnDE.roa (hash: Zt1zR/MujgpAImrsB9MGSD/MhSE58xHF3n6xOhC/j7E=)
                          17: Iw4wygJD_n_QEM-66XmQNAnhk3Y.roa (hash: j8itHg6SOPpRfBnF5uWhKvLwCt6l45pKoUjkYm3rgV4=)
                          18: My21w7hOKt8S_WD_k_QYtqP3xJs.roa (hash: SNGrCJdmGfgFecOlXyAeNc49ywc7GdzsG1QojBwlWhY=)
                          19: NNe8EW_0A0IBqioKY5jsXGK1ekk.roa (hash: 4vJkFes7j9DigFCHqFR6gtgl5sdIBUao+92HYfOVedw=)
                          20: NeV9mQpwOfgzmYW_LOGXR7znkXI.roa (hash: zZen78W7d3yphLkrFotj2UM5ISvEgPm15wDwIBPT8bk=)
                          21: TPmfhxh0_nTXnn3Ex03aeMGiB4c.roa (hash: HFnYo4N0HI3o2+ViKgPlzaJxO2Vou6oIlA6YqMzd3m4=)
                          22: WWl7oY5azcSuucmc1VehXX2ToU8.roa (hash: VVR6m6iS9uDyy/9YnkfInsEFygSxWVSTX1oLbzAuRNM=)
                          23: YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl (hash: dsztdMwEI0tUcdugJWeW+KZp1/y52/zPbeRMPgN7RQ8=)
                          24: _VJlQLIVVH06RPc34Qz4RWySapA.roa (hash: 9u3yNxjP0+XUjclcHf7WD762Il3Ad+Z+wWid85Yi1QM=)
                          25: aUqNm9QYschsBoYPTaBMe35SMx4.roa (hash: NfpGeW4R/JAUnK29KVDmrxIl1mXcGXPiqkU3+xjmppA=)
                          26: agHw5j73hh3S8gaVYMcMrZCuJN0.roa (hash: ai5olFnMzKUwv5YcWrLDzcxfH3cynFgeTCnIGgyJG+I=)
                          27: bRsgTPk08-KlnWUYbujqk_6W2v0.roa (hash: XZNjlfCztmwTStwyhp3/Lx6XOn87s6eJ6mo/+sF/Jhc=)
                          28: bn7XVVkqMCINrv4hqBRG6UdHXgE.roa (hash: y6WrtZNlDFHtlW+g4xWbdvlkfushEFx+1G9FpGozvqI=)
                          29: exI6i2Bs3-Wva_jrUVMV_9GuCk8.roa (hash: 8m6wx6PZR3xNOJqmnEe9yQPRO8DWpk+++OElGAhUqbA=)
                          30: fOpHoj6gE6QDSzI_xpI2eoSQlig.roa (hash: pLBi2u+3F49A1hvLwb6x7gKKB5g8fv3gRqV1aRiYSu8=)
                          31: hXEGsl5qQzAA1qUdQtNGBqiww10.roa (hash: VhmT0oyWxTqRPxA05l/SiDGCzCOgHGrb6X/m2cHTsoM=)
                          32: hyTnbVyao6JjNaXQt7kqUO_gkRc.roa (hash: Fa2ezNx58bvfQoFVm4NVId7tu8UUWIuTGvjnkzDFkpU=)
                          33: ihRhOZUFv-OHogZ8RVtdTs6RNwE.roa (hash: Ia5SJV6JVHsM37MG/ESXwkgifHWKG/X2C9X4sYYj5Vw=)
                          34: kr0TjOxgcm_KhMjeicf8fW76Q0Y.roa (hash: xOf8LT+D5nUC7HtSexyu/Xpg/836IXc/PjHz1TvdOjk=)
                          35: kvvKLDOBYQmJCrL-MVNswp6AvVc.roa (hash: 7LXTJ3RenJhpLqfikF7CGEeX4DAs/ioFpcDctyXrdgc=)
                          36: oCIoIDnKe9sDUQ4rdq0LftoSIyY.roa (hash: GMqwL/UzexMNXUPcQjSe8tF8xDmZwxc/YUEVW0869wA=)
                          37: p9Bx6-80Z5u_nVEX6cPclfGKy44.roa (hash: FO0CDO5/eLT4T8N64qjY/znyGnOT32AUzGq1jdCfiNs=)
                          38: rDUJJwQTp10msnyxTM7qFFaP5Dg.roa (hash: OGAdNtvpSlQiN9dwAIoLVR9XCCOViXto/goGKMmVA/Y=)
                          39: sUXNq6VPxMrfPQkizTRBj_C8jvI.roa (hash: 7HjA1Jb0bTUTCXbqUrP4+H3nyYjc6kUsvDllUZHLdEY=)
                          40: tZn7lyIq6tEiWekXEXz-SkGHzo8.roa (hash: NiWdg4ql85ZeEHdfy/wWhInM+oz1hYXzPT2nTZIi4FY=)
                          41: u8zBuHARv8CyyionOPBGX5xAZKM.roa (hash: fWgGTbqSPk6KAbHlPb7dacN4y/WZk7mHEIrZYs4LScY=)
                          42: vHwM7wdSGCzqZGT3PQVMmgcgq-0.roa (hash: lxXc3Ic7U9QN/qAasUTdeXNkM4spGtFzK1kkhA1DEkw=)
                          43: xaY25wbKuPGU48V_UzGEyy4WR8U.roa (hash: 7J12ICPB5cUoyPLI8sikjvf7zu2e7sHeRohBWKkf3v0=)
                          44: zPJ4iT8IJFBLC4KpCDe12b_SOyA.roa (hash: 27/bKUkD3B4SO5N537UzYaqqGUZorzyFlGbctpVT6Io=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:5e:0e:1e:51:26:db:5d:f0:e0:36:34:e7:0c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: May 19 01:00:34 2024 GMT
            Not After : May 20 01:00:34 2024 GMT
        Subject: CN=a87cff484537fc82fe9479718549439c191cefb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:1f:43:e6:fa:ff:3d:2a:c4:fc:63:83:59:
                    bb:26:d0:99:00:94:6c:db:55:26:0a:0a:08:fa:82:
                    ff:cf:5d:da:e6:55:3d:c2:04:a1:d1:2f:32:b8:d2:
                    f2:1f:fd:33:05:1a:36:df:db:e0:3a:3a:7a:55:90:
                    36:c1:ac:a8:af:c0:d6:c3:53:52:96:56:31:0e:93:
                    6c:3b:f3:0c:ac:1e:13:04:c8:a3:37:e7:dd:23:cd:
                    f3:65:27:50:5a:a3:29:2f:8e:c5:bb:02:a2:92:39:
                    70:40:4d:5a:a4:ec:e3:71:25:28:10:85:51:23:0a:
                    50:6d:6b:62:b3:96:c0:4a:39:44:ee:f2:08:07:13:
                    55:a1:33:c1:d5:da:d3:03:b3:af:a3:67:7a:c3:82:
                    95:69:c7:52:15:e4:86:30:d0:a1:53:4d:27:01:e8:
                    48:c0:ba:40:bf:5d:0a:32:1c:2a:f9:80:22:d7:ab:
                    5d:83:e6:7c:94:53:39:a2:9f:07:5f:31:e9:fb:f4:
                    e4:d4:5b:cf:87:b2:88:9c:d3:b4:fe:44:9b:a2:31:
                    ba:c9:c8:b4:01:da:84:46:96:14:89:04:f5:49:26:
                    e0:e8:08:53:bd:bf:22:57:c9:82:a7:d5:19:4e:e1:
                    e1:54:5a:09:01:b1:b3:52:bf:2f:6c:ca:8a:45:6c:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7C:FF:48:45:37:FC:82:FE:94:79:71:85:49:43:9C:19:1C:EF:B4
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:24:f5:7f:02:f8:f3:97:0e:36:6f:cf:14:63:60:38:81:48:
         be:e4:12:5c:dc:d5:f2:a9:86:55:ef:aa:86:37:c7:95:c6:f6:
         53:46:1f:a1:ff:d3:c6:08:1f:ac:ec:39:b5:da:8b:83:8a:1f:
         c6:89:3d:3b:49:13:e3:9a:e2:34:3d:40:06:5e:bc:2d:a5:de:
         45:f4:1b:91:dc:e8:39:19:47:56:84:d5:42:0d:4a:69:ce:6f:
         04:bf:57:51:ff:b0:44:fe:d0:99:3b:b7:d6:d2:2a:7b:95:fb:
         21:cc:d1:5c:c0:03:6e:39:58:aa:a9:d5:48:6e:e9:45:4d:30:
         ea:0d:9c:b2:6a:50:5b:12:12:cd:bb:82:bf:36:fa:77:8f:68:
         5e:9f:05:f6:a4:d7:71:87:9a:5e:25:31:3b:ee:18:f7:88:e8:
         e6:05:8e:9d:01:65:0c:02:29:ff:e4:96:90:47:44:59:2e:24:
         51:7c:4b:9e:5d:3d:11:ed:a7:c8:4b:e4:43:67:f8:95:92:d1:
         ff:b4:d7:32:b0:de:58:09:0f:f2:8b:55:c0:f5:8a:59:9c:80:
         4e:21:ec:2e:9b:34:01:f4:d0:38:55:d3:3c:52:64:8f:7a:a6:
         ef:65:a0:cd:bf:c4:1a:02:e0:5c:e2:13:a5:ab:56:da:68:75:
         d9:7f:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----