Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
File:                     jVnEMj92fOT_yF2q0gi5DAT70-k.mft (raw, json)
Hash identifier:          nc6fmy/COY9iPPyM2tkBXrGtgQYDapu8Kiv7uGfRfy8=
Subject key identifier:   0C:04:51:EE:A5:94:03:FC:B2:32:AD:E8:A7:97:66:D7:7F:90:A0:63
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Certificate issuer:       /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial:       019352E2FE0CC912C982C8FDB513D9DF6AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
Manifest number:          1393
Signing time:             Fri 22 Nov 2024 08:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:28 +0000
Files and hashes:         1: 05YF7vGjRHkPfqPLpzydIrsn2yE.roa (hash: 2g7nud+m9XyNGfo88CwESv3rVifkJbEiIrb2ayXYeHI=)
                          2: 0o2NeXWSotTclZDM0Uh2esFaRts.roa (hash: hT9nXtZUCAY8cP+7f6rJKU4isnOC5YASjvR3jogxOek=)
                          3: 1-JmO5KCx6FYwwDBJxHq-fR8ZiEc.roa (hash: /G55D6bOilGVOnCBUg4j7rTkhDu6lquxLY/WCzPaV2w=)
                          4: 1Mae8bV1k8uHnXHuo4PyAbtHJKg.roa (hash: 1p53T6UE89YoV4x9tRrkNc87EqbAN2eE1HAvjzcTzx0=)
                          5: 25rt-59pCJD21KAbPb1LOx7ZzmA.roa (hash: y9Nl6H8v4IqmiwrvgtYQ61grGPdd8Mc/CVMpX2IjvJU=)
                          6: 2GXuCurRAHWsSi2BTl8KqBoiDR4.roa (hash: HkB5+4lE9Y47YSofLnusnf2mlaKOjSAKYlCxpITsIlU=)
                          7: 2jRAoB9uuSgRK8LnNyUfSfzeumI.roa (hash: mqxYJ+4qztdoqf/uOGROAL62TWUcIVe6+pahJQdELKQ=)
                          8: 3QnQmxwRDVNhZUdFIugYFw980y4.roa (hash: YnNmtJUGL2cPJ5gOze0E33uIIJfIAY1VYUi3NUSWDRM=)
                          9: 4qdrOz-q0GkC7jHvX0tqYZSyr0o.roa (hash: psoHXco49BtfgBbE2PRbR49B2IQau5O0tKW+IjAn8Lg=)
                          10: 4sZuKvsvvxjzleEO9yXEU4Z6yuQ.roa (hash: r2QHq9/gRTPzooZirN3q/k5s/t8zI8wnoDqgBOXBDYo=)
                          11: 5pBYf8QowtZk1NnL1BwIAU7qaog.roa (hash: 7i34NU+vjd0A2F5WBSJyHl1U4aVPhhy20qC5izWcgRk=)
                          12: 9ksTn62uoy_MspFxfLnbbZpbObs.roa (hash: Xvji370Inigkti1wCBPvK3rwB44h79s0jYEpWrDvcng=)
                          13: 9yGldZ9RRMs7wQZhJ7izpvJr9kQ.roa (hash: oMr1gXg3C4TCLe1W+M69USjbHWqE60bgtITnFOhr4FU=)
                          14: B3eavuVh9OTv66hV4c6VfI70EFw.roa (hash: bXXhzz/XRqn3nkiySWwq+2FXVeLD7zLG+Pqlj1dHTPQ=)
                          15: B6pFlVizolO9GLxHICtxYwS65BE.roa (hash: hiwnBWh1BMNhBmNIoJSOA4ah307daL/XI02hTM1L76g=)
                          16: CKrcaV20tbY2MWzIHcBUct8vm3o.roa (hash: 1wRs9pvUXnoaPVm2hE/p/NhUASsq+CVH/x6oXNhlB8M=)
                          17: CSFcpFxG-xZm92yXJbwgZ7TwZKY.roa (hash: c6w8vEeK1UQRLO2YClqpXLYhTxmpNAFFC4ezK0V6ZYw=)
                          18: E0RHeNpw66nYgt7sepNRImGItxc.roa (hash: P1SvbJfLGaGKKWgvxwTHVym9lO6QS5TjgKhwnE6gIZU=)
                          19: Fozqy-C4hz_jCh3p1UJQPRp9e_s.roa (hash: jzJVPgEC6vPmWJ1D/eYRMRCPnnLTwJM4RYVwA97we0s=)
                          20: G7auL5FYxzz4eomTjvGltrtLg28.roa (hash: xTA78KZCMTbp3vfHMqbeAtVhmgiMOT5NeKzEoYj3ayc=)
                          21: IJzECDC89b9SaEgZjypz80X1mKY.roa (hash: PTZC5Ap4lEE44qaie82pb/hv8FjsgNkOec+flM3pOkY=)
                          22: IoCZnPTQYzbvp7QshsfAPnIkeNA.roa (hash: nwGWSW+nvIUTD9E1Dc3a3d7WxyiDZsS/YRcID8YeoWE=)
                          23: KksK7vE9KEFcF4K2vabFtS2UObo.roa (hash: Daz+ZKhVeRr2AsMFajIBDXUAl26P8eGi7u7/Kq7nHKo=)
                          24: MXvEiO-yRBychltLNeVCG305pG0.roa (hash: NGGKU0vaEtZ+QGKXGgEEpCzi3r9muOvXGtD3HaSjGbE=)
                          25: NCXGMvqR9IQHKfmDFn49zwvAOsQ.roa (hash: vcVV8e0KREOOz/rC7HWKOalIwbj9jgJelzk/7M4+hyk=)
                          26: NvR24CUQtJXYVHZQRNb-GCWKt5s.roa (hash: 2zxXAmDy9QOiftgD3M/6unwKn5GgghSH7EgBfWC1FZI=)
                          27: OIGwK8leAqm38R7MvkXAH6TX7zA.roa (hash: /HPC/1gjCgW0UviH0K4ZNXSI3x5lhm9O5jjHUPoehAk=)
                          28: PBLkogbUTUw67OgQCkTPZ-3kTD8.roa (hash: pdTngGpZHVRDwMcBUzFdFdjW4tMnCNx1MqgBqHY/iBs=)
                          29: PcIJVOX03_X0_HtEwXUVAlt0c9c.roa (hash: 3L/t25cCH5a4oXC6pgwSSeLykCsACu/3IVbVLkiiUr0=)
                          30: QKPjasEa6LKOHGwtxIWqahMqjPY.roa (hash: ZN/Rns+XsFt2j4C0jjvf48ujpuBkdRE4cvR7wvcp/tQ=)
                          31: RH7CvezPkFg2SoEaOXVQ8dWGBLs.roa (hash: RgRD0OJLe7LOd5VMn2Kxwbw9FBAtMQnmoqGo+zoghCY=)
                          32: SjWTSMA0UUCpk8YgJUpTte7Z9Vc.roa (hash: +NrrDWKM9vRq4PwgJgw6fssXim+9H6VihAB0392u2eE=)
                          33: VSCWU6zaBCJXAdKZiBY377iX57M.roa (hash: 4ErXo/SBzpSbn2b3kZUJZxbc+u8Frso09yJw++Fq44Q=)
                          34: VYVt0bxFTXxImrtu0uBV7EzLsOg.roa (hash: aRRTZ9cEWYyMhlWKGnd58DCK6V7dGT11w6+eg6n7GGA=)
                          35: WN9pD3oJxPgMuaTxa9Bk-dDo37k.roa (hash: upZ+IKyvMRIfhfJSehgoPOC4vMdtS3Qrdew7y09DAjA=)
                          36: YB50-gWYKtcNVjCDzjzpWnrcTuQ.roa (hash: BjDAXFg7Gl4ZVpHBYEoBHZhmaJJ0xPUhAUt6sMWGTB4=)
                          37: _M4XtXI7X-ChrWtHm54jTaaK4w0.roa (hash: YHRMrL02Wge5dYrpV317O7to1ff7PZWtwwwPIr7KCSw=)
                          38: aQEN-a6Q9Yl5xQv4ychBnB6KYBg.roa (hash: lop/qw/P77astILj1kTfu/56rTtTkClnGAfvey44/VI=)
                          39: aweHtd0iUIRjAgpJ-pvj7FfaRQg.roa (hash: WhWRUTJX48hA1noXHpgoYMywcrmUd0GrEZKEMqqh/3w=)
                          40: dv9nN-TA3dgXlQMgVOupidrX4go.roa (hash: +V0L780yp/D7z4w3+FtlcVoZt336Skgf4DcHqPtAUys=)
                          41: e0Grg-uy8nQrLcQgYE8P2g3CCfY.roa (hash: yg5BS3czdFssDdfArgE+skNd8XOOEl0FTxlTQGkq2FQ=)
                          42: ejajdk45-Eq4t262sBIeGEWpK4Y.roa (hash: wUCO8W657Iqx5q4oha2yarlO5Wkca0EevtxLcwycd/Y=)
                          43: iTL_pGRYTAc4j8ouGY1LLxgqxAc.roa (hash: a01W3anHPw/vx9LhEDwWCq1b6+17QW2gsHoR9dWQTvU=)
                          44: jCVyWniqjPfPDwf28e_7Vfi2qI8.roa (hash: 3sdtnB85fbpPezSw8IGT+Ge8jZB0ViVbngtSm4hsa3w=)
                          45: jMUsVg3OUZkWvyZtPJHrkVPNzxY.roa (hash: Ux5zN3dcVIrb4es7HNoi0S4lpgrNCUFOwI/bjNv/AfA=)
                          46: jVnEMj92fOT_yF2q0gi5DAT70-k.crl (hash: LwXpKGroQi3150/CvDaW6GSIakjLfyqxdLWK88SUXGg=)
                          47: jj0_L5yRtHfgEdASZ9N_lfLqg3I.roa (hash: +1shz8OVo4tm8lAHrjtcgTZhW2wWOCbNvMQTjPUaMMk=)
                          48: lJk3Drm-VEVGzbucKat8hr7csso.roa (hash: KjlxMoabRzVyTimuFByOyrgJp9Cb8+p/ltNSATjU24E=)
                          49: oSJM09QHV0GzXuoxOjk4Zqx8TSI.roa (hash: VqjsiXELrHCDhTUA8+AffuqQnc/BGEx0RKLpA3KMzUQ=)
                          50: oePKa1nQMGf7ro2WDxPiEuk4RC8.roa (hash: h3tQncIGs0XnpUp8TjBje5a/WlaSF6RKO4j/x3Mi/F8=)
                          51: prnIzC8lXOBfZI7rEL_m96cU768.roa (hash: XB5+O9aaCy/PgQsgbbOy/MRLGcnUBc6Qs7IzMXSo/P8=)
                          52: qxQRjFpAYtwEWIJSya9A6x0-itw.roa (hash: WRSbJrZG0LfZRTw6e6ZwG7KOhYbxVc664ac8s82F6+Q=)
                          53: sLDDaW5VGVxEPE4WIWcG2bcHRvw.roa (hash: Bt5d/0juJE/e5JjWu6+B0+9ToF0cGiCLjkgF3yMD09o=)
                          54: sS5oFO1LNpIE84H9S5H1o35rnkQ.roa (hash: purg2FdP9LTOXpRkBe7gf9eHNHPcsnRBUpBrFuo6RUE=)
                          55: tkzaAm2OQNSxaqP0c_gdlNT7ffM.roa (hash: LWIzQYm8HyKmgEeSh6Po6c+cxhkT3x/PTz3YUrmNs74=)
                          56: vy0wFgZTTwKXlAYxRUm-1_b7OWs.roa (hash: y+JbuebjH+AYPIICUGUXLtR35FPiLcBBa5mbn2tfr+Q=)
                          57: xbnOwG67x_J_Lmx2P0ojD593KaY.roa (hash: 61Uuy9DeJ/ClIBwz/d8ZI+Bs1fUc5CvhvgmPjGtzMGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:fe:0c:c9:12:c9:82:c8:fd:b5:13:d9:df:6a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
        Validity
            Not Before: Nov 22 08:00:28 2024 GMT
            Not After : Nov 23 08:00:28 2024 GMT
        Subject: CN=0c0451eea59403fcb232ade8a79766d77f90a063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:ee:c4:2c:b3:72:e7:8b:68:9d:a4:b9:5b:
                    0a:34:94:d2:cc:e2:64:5d:9f:7f:b2:eb:a1:93:96:
                    fa:04:47:f9:7b:5b:91:3f:98:26:fc:d8:93:db:20:
                    2e:de:c5:4a:80:71:2b:7e:47:b8:bb:76:8a:6c:5e:
                    67:56:a8:0f:a4:98:de:3f:d3:5f:df:26:e3:a3:63:
                    01:2c:9f:51:c9:c4:1c:c9:98:ea:96:a9:ed:9d:86:
                    be:bb:58:d6:d9:9a:fb:9b:ae:fd:f6:93:2b:6f:a3:
                    b9:e8:34:fa:4d:9f:cb:c5:d5:08:7c:8a:86:43:18:
                    7c:3d:b7:0e:4b:45:ee:7a:ac:e2:b8:97:dc:e9:39:
                    3e:1a:1d:e3:cc:8f:ab:de:da:a7:5a:68:e5:d6:96:
                    cd:e8:1a:2b:ac:5f:11:92:5b:1b:16:32:10:91:22:
                    40:d7:b4:aa:e0:16:c4:36:f7:82:85:eb:56:4c:39:
                    2b:04:1f:75:6d:ce:bf:68:ff:89:11:dd:bb:7a:bf:
                    cd:c1:50:d1:c3:54:b6:37:3e:19:0e:96:2e:c5:7e:
                    0c:37:df:1d:d2:fb:71:6b:aa:46:5e:a6:69:05:e2:
                    49:b9:f3:a5:f6:80:cd:63:73:89:14:a6:e5:f7:0d:
                    a4:a8:85:43:84:74:0e:43:61:9a:25:30:8e:b2:0e:
                    de:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:04:51:EE:A5:94:03:FC:B2:32:AD:E8:A7:97:66:D7:7F:90:A0:63
            X509v3 Authority Key Identifier:
                keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:91:2f:21:c6:60:1a:60:54:e6:8f:94:33:5e:f6:f0:2d:c8:
         cf:b4:97:01:00:25:44:a0:b7:73:d2:56:2b:e7:01:de:79:0e:
         46:16:1d:39:0b:94:d1:3c:53:b9:36:5e:11:3d:39:9e:7b:6d:
         b4:c7:2c:f8:ce:68:8c:61:50:41:bc:eb:a0:ad:5c:ea:c6:3d:
         f1:f7:19:a3:5b:7a:df:14:26:3b:60:a2:b7:2e:53:71:d1:a5:
         92:f3:5e:89:c2:31:d2:f7:ac:f2:b0:fc:0e:57:40:ae:18:43:
         7a:4b:9f:42:c8:ee:f3:3c:b0:40:21:b5:af:34:ef:84:38:3f:
         4c:ef:cf:ed:67:00:d2:a3:91:f9:22:8f:61:09:60:e1:51:db:
         ec:74:13:73:3b:22:e7:1e:d4:fb:fb:f1:ed:28:23:6c:eb:ec:
         3c:6e:99:54:24:e1:b8:ea:ce:2a:0e:eb:b1:5d:2c:85:6c:61:
         8c:0d:56:ca:f7:d1:f9:f5:7b:db:79:74:bd:75:ca:18:e5:c4:
         e9:df:51:3c:48:b6:96:a6:1a:43:1a:2e:43:46:b0:fe:d8:e2:
         3b:57:08:dc:37:47:dd:8c:c0:26:1c:2a:35:de:ed:31:d5:d8:
         4d:fe:27:0c:fa:a9:aa:99:b1:3d:fc:a4:74:1d:0d:67:74:28:
         a7:49:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----