Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
File:                     KsPaobFIUPLmHFkrIZGRWl5lpHg.mft (raw, json)
Hash identifier:          Pw1MpO3i3BRg+gFG71cfwVbxV+kJb9Jm01qu5vbwW5o=
Subject key identifier:   0D:ED:CD:89:2B:CA:1B:13:AE:7B:09:0F:E4:5C:72:13:7D:75:68:09
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       018F16D82735733F2CE2375C9ABB152AF533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
Manifest number:          12BA
Signing time:             Thu 25 Apr 2024 20:00:15 +0000
Manifest this update:     Thu 25 Apr 2024 20:00:15 +0000
Manifest next update:     Fri 26 Apr 2024 20:00:15 +0000
Files and hashes:         1: 0FKhVhAow14sa58JpowTK-O3YXQ.roa (hash: 1u/PqmPBZSvmpSebdw+SZZQjCq9rbAcdlXCt4tWqalg=)
                          2: 1EYYhC1YAcY-gOKqNoMuegsg82s.roa (hash: /ktSa3X/9fGyBK0GzLGTbzCCeI6s9kphP7KRH6tFcpA=)
                          3: 1zLZHJEezHH7N6rNOG6oWU5wwWI.roa (hash: DWBbaDTbMXhe529fjUplfw7TUSG/7NGnaxBaUiylBa8=)
                          4: 3rq-Z-bG_yL5D3y9IUrKbsyzuz0.roa (hash: SatCsKYgmw8h5NBfpZH83IULi0d2QVpcAt7GuVGni8c=)
                          5: 6TuDDihtdyW25uHQOPgx-JmC7gE.roa (hash: vD7BSMDciYHggxg8Z/YewReuU7WLWS5R5vvvnkfnE0Q=)
                          6: 7l-zV_vbGPew-G9rJRh6g1avHtk.roa (hash: IfmVKIOf7kELynfZj0fLkONjqY3N62BbOHBqIcCpvNs=)
                          7: 7tA8LiSnE6It8zEPB-WLhKFifTo.roa (hash: 40Jib/Ysvld3sJSGdwt4GbAytnLB8saIq6+NjGOpdUA=)
                          8: 9B2QILwos3ibzSuIwuk8feubiZk.roa (hash: K8y+rkx+uMOVJRUX8oph7jx4ol+MY4JEUfetHVDT7Js=)
                          9: BVBQIXEajc59H-aOalkOI6tCRvk.roa (hash: NfZP3p418w62gnkyUn/m/cQXZViYvytPq5eqjeMxzic=)
                          10: CilXiWLmuMfDM1eItXSzufyn328.roa (hash: zpRbHTgCtN/4IgDSBQtShAXIfBW9ZrSOFp5u5aWKiv8=)
                          11: DW-lfH9kyaNncum7dT7x5rOCbZQ.roa (hash: SvXjgERCKRuWRjA/jBh3BPqEThFSo8nDA0fh30j1eW8=)
                          12: Eqmtue-M9THkXshGZ8ImOYtg_uE.roa (hash: k61PL/C2YFzEUsSov0nswKXu2SjpSlYJ9udNp+Qx+eM=)
                          13: Fci6nEfXorkjTJ0nXOlxNWnJjRU.roa (hash: 6tjauhI98BLWZ/pn/xO/b8404IfmjoUeGoUns2B0sF0=)
                          14: FdxM5-twjL00LP1GTKnEgBCHuzA.roa (hash: N6B/cv3wS8v+4nQc8yeNZcoGVCE+alesJOfnBc/KHXU=)
                          15: GA2yEublRIBxxbyN3Ob_U23dph8.roa (hash: yN1O+Pn8npsXvCiuX3rVgU/pXnCgGgWZitr0MCaQEpQ=)
                          16: GUkg3B_ve9AwVehzWk6lbIygznE.roa (hash: 4R2xty/vJf+1/nlbWXw4iEmVpPIRDOSz3OtShnEHlNI=)
                          17: H3Qth0cf7gR81WfdxKbXnnxjI0w.roa (hash: ZRxi0m0082wOG0W6QJ/cadztjnoHokMJzOLacuBOqlQ=)
                          18: JDyfPjuu8O21XuPbVBlEgME0ovs.roa (hash: JVnJOUEz0c15IMtFNsCdpIT356uFvFJeqovZJKicjvA=)
                          19: JxP9I2tMRoNZ-gwdnWdV35J_YBg.roa (hash: hJdeltkLEPBSlnL/hxV81MRjLvMWR7Hn4UtyrpPol68=)
                          20: KYmbfN0nXJ3lsMe5CzqorriNptU.roa (hash: 1ws1csJQ+EZyj7EGYPKTGwNtesx2Uk83lzzEG2BvIgw=)
                          21: KsPaobFIUPLmHFkrIZGRWl5lpHg.crl (hash: g8WWbbOMqstGJK3GdP2T0prgbyynqExqWC7mJHkwUGA=)
                          22: Mg73Jgr4vsOmNjQRMNrlgFhlkgU.roa (hash: ESNX9iTiyNTxuyg88/CA30/c7Po9blaV9ejWIodjKSs=)
                          23: PgzpZiCOnztbEiXtzZcuWJvcUuI.roa (hash: wYJr/wbr1Q5kXyKlLogtXPN8ZIJYTLWLnqoUigDoyX4=)
                          24: RUCZCCJ6SA2kVf11N_rIhN-E82w.roa (hash: ZlDIyq9sS+xRGEdQhcQoz/ChPf3UE5OoHMGzaAgnlVk=)
                          25: Sz_nRSwcvvnxGaU-s2z8ziuiY1I.roa (hash: 7Slxnvvj7pb5wbJ4unfy+kM8eQaEgPLoJluqhkCnB8s=)
                          26: TCC2cO8NAfEE3ZyezePSlvhcDHc.roa (hash: ccyxzb7AkXkdPOxFm8m73FoPq3sCe4leXxrKRd8C6t8=)
                          27: UA7rBHXQV0UhM-K-ysy32yYTNXU.roa (hash: ttS8CW4RlwXr8n2lix+CwREvHGD9iXYGAUVOvapBepo=)
                          28: WMbSM4FaheLpF2EtBwn0CLZDsV8.roa (hash: XPVUYfHebgV5SqO5f/qhOV6aYtXZRvCHc/CXg+Q0QJo=)
                          29: WzD6wwxp9KsF3z8cupOwnHuyDC0.roa (hash: YLmBA19iudLZo8dlvPlp3psQuBsYwtSpKpVBgbO9OzI=)
                          30: Y-6jxPWiR5ni_avkEf519NR4Eb4.roa (hash: 8MddGF1DjY0MQkHuR34ib/+oi6I6G5EcSksQzhPKk0Y=)
                          31: Y0N-he4jZG3EJ0No0WqcyETq-3c.roa (hash: T0Rw7dx027EuStGy3dgPN3/4EaPE6+bpqnxyUWBjOzc=)
                          32: Y9EIHhMPnKXuif-FS0PtQidKeEo.roa (hash: YGQSklfQLJbCAQgOe4Zu7uxSfRcK00D3oGqljpllN/0=)
                          33: ZtMAkmjbH0OEc8xGqP2jRvngrG0.roa (hash: 16kLgb0DhEM98Ahvx9wj6xFky/CVGqcwKUHAyfydoUY=)
                          34: bZq-Kl2oe7uucOKKTtYKhiHHkNs.roa (hash: 4vn85rSXohNIsOez26kM5uNQ0QCMjYOnuudOxr3oGe8=)
                          35: c8C48vfkOvgvyxSs7qY7T5EVtnE.roa (hash: 8wJbFJ9/sI53w1m6Sl7XpsfuWhKQ1Vo0Ez9aysm7PNQ=)
                          36: chtSFJ7kPvIV9tFGJRtLXasLERQ.roa (hash: qMJZm+41eV9sHi2EPEUwCzpXMs9xfJZVh3fGJVsMBls=)
                          37: dujHmv0L92g0R_ZKa-ZsKJGA8g4.roa (hash: mKrUY7lsbPXD4ibei9Px1eojbzHaQiZQdw2oahoJ7ys=)
                          38: eYlapWnUhSg9-Qxqh9_ljL6aCoU.roa (hash: IW6WMrPrr0g6EoZrxkkj3Jd256jzfwa8vHozP6mCZC8=)
                          39: g7yGwbxbAtdZTgTXVcUB1gQkYu0.roa (hash: Antl1Yl/f8Kck9j4xwBFfPslSsJD9ZG4Fwi1aGoiG8E=)
                          40: jp8qX4Eac_y0tBMssyEbzGUHPzg.roa (hash: EeZ09A5JLDJhCz0P2yg3c7i8YnFZXB2/5NfTMmnRi3w=)
                          41: lF4f9B8efZeW_6Q_bN28o1qp7DQ.roa (hash: T2nDt5ziIHl2OtO1gvSnJ5L+D8JJ3fWv4HKSmlsEr+c=)
                          42: m3WVo4FqFMS-tp15_cmm5LNyjww.roa (hash: HPQt/yxvQ5t3FbzAqyDvRw3D/flNba6xI+R+FW3pOL4=)
                          43: oRoT8DT0Cgyrb_3PsNxDRuUfC_c.roa (hash: 5DNZBY23yP4YkRroNrbI0koLpbgpz8IhOn5j3dVVDK0=)
                          44: oeQhXFM3YRcRlDkk3NBN-FfyTFs.roa (hash: TqrrM4TOht5TFWdSNhBfNn2l4anaAPEgNygo+4cvNvw=)
                          45: omlXP2V-IuYFDrx2ZEFxpfANjTY.roa (hash: ECXoWJuehWykjzgKIw3IR70F1vAWch7VMUJuVRE0mNQ=)
                          46: pMNjzfsOU1ZjncErr4l9SrBLu-s.roa (hash: Y8RuUSg6pbhRxcsHTbMEoVGqY7iWXPAZEKQRKMp8/+c=)
                          47: pO93P0IPYxO60nqJWtd1hBeKP9M.roa (hash: SIzxMj/XvF5LrDffQ0fyqanFpqj40boRNXhrY9lHK74=)
                          48: r4Eaj--rFMB9wD8kdGoigBut7Bw.roa (hash: KCqy8YkMTkhA91IbnEh3vbgp23oF7sxxnYRptoSOEAM=)
                          49: r4fDgncTrWaYDjak1pzrx19XdoU.roa (hash: HrwWcOTmAxfph+VT66NxvNEgibv5Z5rQgiMUnDaBtiI=)
                          50: r6tKbat-GCPmxEVKD-lQsCJmkRg.roa (hash: EnNWDEGB56oOsYhuCjlZzxCnJHfCRj7E/Ihb756Y/js=)
                          51: rRgfhJR4TT9dzLqJcDGdlpW1Lok.roa (hash: rKFzq8KjYrmf4ByGWZ0AJvg3JiKHfmUeLEg5WftlB6Y=)
                          52: sbpH_k3HU2nFTejfY5gmv-qAXt4.roa (hash: M0Cl2slCnZ5YXg8pR1/cOyxD+3LRpJhXJTOoKzzVR+U=)
                          53: tNwdP70jzlTV9xZoFigwMfc-60Q.roa (hash: 2MhvZ1Sw2mDQdv6NCYer9vtcwq+Si1VNGQZwXyAUc0w=)
                          54: u8lAGB5d6N7aiN8lluJhDwoHl4M.roa (hash: 2k7EbOZhky8jcDEmIkBQd6iN6Vy9AKjA3w+UEEGRvtE=)
                          55: xx93XCVjdf6KmYD8MIhraPm2Vts.roa (hash: a0B0SLbw/86bcpPvlW/G1eW8OjBEOZGYsz1ODlHkWaY=)
                          56: ykHo5a6h4r1WrH3MBOM7nNEboUg.roa (hash: I1rffRTavqLbme6K+HGbX0bX1hn8FXbIywkeMCXge3g=)
                          57: zSaQY4MWlz6YpJCJCUQIexnNgtI.roa (hash: GNzCRbYdAZ9JgvR+ANFEZ+ogiZ6AvqH7yJgkni6gnLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:16:d8:27:35:73:3f:2c:e2:37:5c:9a:bb:15:2a:f5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Apr 25 20:00:15 2024 GMT
            Not After : Apr 26 20:00:15 2024 GMT
        Subject: CN=0dedcd892bca1b13ae7b090fe45c72137d756809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:11:51:d1:e7:43:e3:76:eb:f1:10:bd:e3:
                    d5:54:af:3d:e2:c9:23:02:ac:d7:af:ea:e1:21:45:
                    56:9b:62:45:3b:26:02:16:33:2d:2c:79:c7:c4:02:
                    41:6a:c8:74:c4:f2:03:e1:07:64:a0:31:28:8e:d1:
                    25:64:1c:86:e3:ce:3e:d8:9e:36:b9:04:64:c5:8e:
                    ce:5e:f8:83:06:2d:cc:65:f6:14:76:65:ce:58:18:
                    52:64:ed:8d:66:d3:6d:fb:70:34:f3:6f:0d:76:23:
                    60:d0:01:f2:7e:38:f1:65:e4:9e:32:2b:9a:10:3a:
                    f7:6d:e1:cc:60:10:e6:d9:38:49:41:22:ad:eb:0b:
                    c3:05:7f:6b:2c:19:b8:eb:9c:b7:b7:48:c5:21:b1:
                    99:7e:17:30:25:6e:ea:4d:04:41:82:87:70:bc:f5:
                    a4:bf:cd:85:66:66:0d:e3:c3:84:06:d3:a0:42:f3:
                    9c:20:c9:f3:8d:d3:ba:41:dc:86:0a:93:dc:9f:e3:
                    3c:13:98:0c:9d:d4:1f:c0:33:c1:9d:c9:ba:19:59:
                    ac:b7:26:09:fa:58:58:c4:41:99:17:05:bc:e0:ea:
                    ea:af:dc:4f:e4:3b:ab:1c:4d:df:f0:95:e2:0f:fb:
                    ea:c6:3e:4a:8e:13:d2:65:1e:ea:af:81:c3:3b:0a:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:ED:CD:89:2B:CA:1B:13:AE:7B:09:0F:E4:5C:72:13:7D:75:68:09
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:48:38:de:60:67:e1:84:34:c9:c3:e8:a7:6f:c5:b0:43:
         3c:ff:f0:12:22:f5:24:f0:8b:86:30:ee:0a:45:d0:d7:d0:97:
         91:de:ad:d2:33:3e:38:b9:1d:10:21:f3:a6:3e:88:2c:39:00:
         21:7e:08:18:8e:9d:a1:18:ed:df:ab:85:ba:22:70:40:71:e8:
         df:65:6a:93:40:fe:78:58:68:9a:d4:c7:15:79:1c:ef:2d:48:
         a2:7b:37:c1:bc:6a:62:61:6e:79:a0:40:7d:03:2f:dd:20:f1:
         d6:a4:3b:e9:d3:89:fa:c6:91:00:f9:f5:58:0c:60:43:f0:2d:
         cd:df:ac:05:c1:3e:25:6f:cc:dc:d3:27:af:03:39:5d:76:e4:
         07:20:f1:a7:a2:dd:b7:84:bf:31:bc:9c:37:69:1c:70:2a:92:
         04:22:3a:a2:43:81:73:f5:a3:bd:ea:3f:07:08:51:b3:e3:5b:
         d7:bd:10:8b:d8:c1:cb:08:c7:fb:1b:8a:8e:52:7c:2c:38:95:
         dd:3f:da:2e:cc:5a:96:20:d3:70:0e:3b:89:86:fe:66:a6:e2:
         9f:f9:d7:27:41:05:d1:22:af:ca:2f:2f:4f:a8:73:c9:f1:a9:
         0b:4a:e7:d8:45:1d:72:71:77:d6:67:b6:bb:00:27:16:4e:cf:
         17:e1:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----