Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          YI6H9t7X47IA+lO469Lu765LyLihz+CAM0aW3D7fWjo=
Subject key identifier:   56:E7:8E:6D:16:60:FB:EA:48:6A:42:24:3E:20:03:F4:B7:6E:E0:96
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       01935651CB4D516C29E6751FEB171B0BCF20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          BE
Signing time:             Sat 23 Nov 2024 00:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:21 +0000
Files and hashes:         1: 2zuiWIRVsCGIMXZP-VUiRKrJsBw.roa (hash: rDrN2/1yqI2isO0bDwSecP+OryMGm57h1qiBG+FZP9o=)
                          2: A01CLQgLmJIAx2YuoN-xXMgntDA.roa (hash: fYcwlBJcDihetmhak+Kvts06BU1nRCJwunu1kPOPZPI=)
                          3: BSeF2QjloQlZN6QLQ6nn7iJoirM.roa (hash: w/6yeC46CDF4AvByMe/hHeUxS5LXCoiFgo+sCNnZrqQ=)
                          4: CD05z5h8Fjwsst4XHRJ-36q7auQ.roa (hash: T2ZSnZevG2oei1gZUSMRppOxumdX7e1ZhTvKV8l7GL4=)
                          5: HNgX5sOk7KOrNo2XJhRZ1qmNqHY.roa (hash: d3szMe/pokdzikygggFMTGPbgLkQJjBnMrOk8SOt7GU=)
                          6: HtjvO8XpFfxN4LdHo7p4fFk-RlY.roa (hash: s1+r43gnlayjJw2CEFB9rKgOM69J2t5zsC6SYoCuz4E=)
                          7: JSc8ipJChG3I2_kLqVEXUMPalYE.roa (hash: W+Va4UhikI45vtRw/Jh6mJUm5G4Gu4jktxSWq0M/RME=)
                          8: JslR_i6OAWVZoleeYPrWrmS0vmA.roa (hash: yTsCmGAZod3FNGZPHsswSzhYe05gs7LexbM46bFWlNA=)
                          9: OXiXJC1Rng_oQQ0si1CwBBU0fZg.roa (hash: md0dQWvVb96m2jjYHWotAh9fBAtPCJ/r7TdWA9GoQ+A=)
                          10: QEvCAu8cQk-07HJbiJZmlGwwge8.roa (hash: 340OzYpDkQFegBN8HNogZZLO0cn49vr1OH6P+rlPKuw=)
                          11: U7hCeKegKYMgB5pMLISHp2CSgUo.roa (hash: hyTOanbomA8c17RGXgefv8go/BejpU1GKTrSFDIG5hw=)
                          12: W6kwgbKnyDhSQYIpktG7UuJlYbc.roa (hash: +ya7BrsGqOO9VEXM3KXXmQQAfWpN5f6Nmz4eZ0chrYY=)
                          13: XSUQ3zFw6tqzFdp6pPGp52mrG3A.roa (hash: OS0u6ea3WRW90wNaGgH+ZsYaVZ/QzMHOri+oBaJD2fQ=)
                          14: aLtFbX90ZQ1cdDqMRji35JdR1pY.roa (hash: uB3lHuuL21XWo/jrkn1C9Xp0wsF0DHpDPtmZWzY02Fs=)
                          15: fkw6LsSec9BCdr3ghfpcGABpxIk.roa (hash: +ktxsiY6R/9lmmqu8ccbjxOtKpm4Uuh9dMR/sVl1OIw=)
                          16: lrICgfXIeI6P1J01asPb1xriNbo.roa (hash: B7aiCpWY3j+Or7GDfVjyokGHIglOFDLrDPV6fTxIjfI=)
                          17: pvvH_Jx-GmtXuQ1bMU6AfVoxLFI.roa (hash: AdFOqDrW6fd6ffnwuxTFfAVdw3clWFci2ShQRkzazhQ=)
                          18: u8qNW9VYzSINDikYEq1f-ez8tIk.roa (hash: UkOyP/F1rcoOHsvtDCDkpCUaZq+hIT+JH6Q4KUXUY/8=)
                          19: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: 1t4kUu2OQrsWFm6h86gTYbAfWo8DLgNj3B6qdkgXU64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:cb:4d:51:6c:29:e6:75:1f:eb:17:1b:0b:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Nov 23 00:00:21 2024 GMT
            Not After : Nov 24 00:00:21 2024 GMT
        Subject: CN=56e78e6d1660fbea486a42243e2003f4b76ee096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:77:f9:ec:da:af:fa:3c:92:e2:30:e5:4f:
                    5e:70:a2:f4:a8:2e:4c:4a:b5:10:95:2b:9f:9e:df:
                    e3:7e:0a:e2:68:48:d4:9c:4f:69:73:93:a3:8c:e5:
                    0a:18:c0:29:ba:5d:ea:bf:db:54:e6:44:c4:d8:6f:
                    41:88:20:ad:fd:26:80:14:b7:31:11:bd:40:ae:b9:
                    26:8f:f7:76:6a:34:a9:f0:ff:f1:9e:56:40:e3:8a:
                    bb:2c:2b:37:f5:43:07:5b:8e:e3:4b:2b:56:57:3b:
                    79:50:17:ae:42:ef:eb:b2:e2:78:1d:92:d3:af:21:
                    37:16:5c:d3:a5:92:95:e8:8b:35:2e:28:21:89:53:
                    1d:57:8c:5a:f4:85:74:10:9f:7c:ce:5e:d3:22:bf:
                    4b:ce:7e:87:f0:10:86:2a:00:b2:e5:7e:9d:bc:8a:
                    c9:d1:e8:6a:da:bf:95:5d:b3:e6:50:32:c4:c7:87:
                    ef:6b:2b:65:d0:e0:17:5e:32:8c:08:5f:b9:c4:f0:
                    43:db:b2:b0:52:fc:f8:bc:18:85:2c:6d:8d:a2:a8:
                    5b:34:a2:e9:11:9e:ae:60:81:04:45:8f:12:08:d4:
                    35:d2:f9:37:e5:ba:21:12:af:49:d5:c2:81:97:c8:
                    a1:9e:c3:97:6f:8b:a0:e7:bc:35:72:7c:98:5a:06:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:8E:6D:16:60:FB:EA:48:6A:42:24:3E:20:03:F4:B7:6E:E0:96
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:1b:db:bd:bc:2b:9b:ef:0e:5d:fe:37:f8:48:08:09:06:
         f9:42:2b:95:19:55:72:33:d5:b8:33:dc:aa:2e:8b:91:69:88:
         64:91:5a:bf:8b:83:0e:27:6d:89:f1:d3:57:3c:12:76:2e:ae:
         db:5e:7e:7c:75:7d:e1:f4:20:9c:cc:a7:c5:13:97:57:84:6b:
         8a:5a:33:4f:eb:1c:01:94:bc:68:cb:d7:06:26:16:99:70:5e:
         ac:98:cf:32:df:75:50:3e:7f:2e:cf:e7:11:48:5c:8e:88:71:
         e6:8f:e5:ad:96:a1:79:8a:9d:30:be:d7:bd:a5:e6:27:f3:f7:
         22:e9:1b:9c:a3:58:c9:44:a5:30:52:2f:1e:42:dc:29:8f:c9:
         2d:a2:13:fe:b5:75:f8:db:3d:fd:dc:64:32:fc:b5:d7:c0:ee:
         aa:ab:35:25:a5:6a:7e:be:63:6c:24:ce:8c:80:54:5c:50:59:
         c2:05:69:28:a6:f2:c8:40:48:26:ee:aa:3a:9f:0b:71:c6:a3:
         be:d2:e1:48:cd:42:54:33:75:b4:f7:63:3c:4f:c3:c2:91:b6:
         3b:44:da:c4:c0:32:cf:18:02:c7:cb:c3:94:40:fd:68:43:eb:
         0f:2b:c3:fd:89:85:85:df:71:d1:8e:71:a2:59:11:65:da:95:
         f3:35:6f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWUctNUWwp5nUf6xcbC88gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx
ZDA5OWIwHhcNMjQxMTIzMDAwMDIxWhcNMjQxMTI0MDAwMDIxWjAzMTEwLwYDVQQD
Eyg1NmU3OGU2ZDE2NjBmYmVhNDg2YTQyMjQzZTIwMDNmNGI3NmVlMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzh3+ezar/o8kuIw5U9ecKL0qC5M
SrUQlSufnt/jfgriaEjUnE9pc5OjjOUKGMApul3qv9tU5kTE2G9BiCCt/SaAFLcx
Eb1Arrkmj/d2ajSp8P/xnlZA44q7LCs39UMHW47jSytWVzt5UBeuQu/rsuJ4HZLT
ryE3FlzTpZKV6Is1LighiVMdV4xa9IV0EJ98zl7TIr9Lzn6H8BCGKgCy5X6dvIrJ
0ehq2r+VXbPmUDLEx4fvaytl0OAXXjKMCF+5xPBD27KwUvz4vBiFLG2NoqhbNKLp
EZ6uYIEERY8SCNQ10vk35bohEq9J1cKBl8ihnsOXb4ug57w1cnyYWgbsfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbnjm0WYPvqSGpCJD4gA/S3buCWMB8GA1UdIwQY
MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt
Mjc0NzNjYTYxMmRlLzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl
LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCAb2728
K5vvDl3+N/hICAkG+UIrlRlVcjPVuDPcqi6LkWmIZJFav4uDDidtifHTVzwSdi6u
215+fHV94fQgnMynxROXV4RrilozT+scAZS8aMvXBiYWmXBerJjPMt91UD5/Ls/n
EUhcjohx5o/lrZaheYqdML7XvaXmJ/P3IukbnKNYyUSlMFIvHkLcKY/JLaIT/rV1
+Ns9/dxkMvy118Duqqs1JaVqfr5jbCTOjIBUXFBZwgVpKKbyyEBIJu6qOp8Lccaj
vtLhSM1CVDN1tPdjPE/DwpG2O0TaxMAyzxgCx8vDlED9aEPrDyvD/YmFhd9x0Y5x
olkRZdqV8zVvzA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:17:30 2024 by rpki-client on console-fra.rpki-client.org