Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
File:                     zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json)
Hash identifier:          JrtKCD4mjMJttgYjXfRKRae0kV43oMZZbyJyR91qRmo=
Subject key identifier:   E3:FD:2F:95:48:7E:C0:90:ED:59:73:DD:27:19:0B:D2:F4:BD:9D:99
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       018F8823F62431CDE7AA66F76FC48FD8D41A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
Manifest number:          1190
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: 2B1mQlbgxSaXvo16VT-tf1_f2oE.roa (hash: hlL6IdasOSwfpyusOxkW+2xzRUgHeqpGjKSz9jGe8Eo=)
                          2: 3Xyrp7wKMOKt0HRsejvTVCzh61I.roa (hash: Vxl5P+4C0ZdUgIPnUJeHQSHPVe6XcawyqFo7xgR4eFY=)
                          3: 7fSKE-lZMWP26GyEnNVEb3-0Fww.roa (hash: sYEIDE0jVZ+tg+KC9JuVXM+c8CYzQg0VPGbOo+FU0yY=)
                          4: 8LNtOUXbFEe2EbsIPSH5XczKzlo.roa (hash: TUGsr6svPuccXDxbPIJR+BOyo5thf26v13nJL/NoULY=)
                          5: 8XxunJ-g7xSrEtc5etT7HR8VZHk.roa (hash: L+KhZqIYAMKgtin1FoFJyyzRZgfXz9xTUCi9fNM6eJA=)
                          6: 9x-t3vfSWd2gTffxD8u6_zboAMk.roa (hash: wqFOy7SfmKCxQuJRhOTvWvWfG57wvdb+pa58/m4+kIY=)
                          7: FI_LgreZKWiEKEm-64lqweNAHAE.roa (hash: tG+QCFHYv2wRmRqGDdwnZ/nPygXM/WW4rE4SjbNbjJY=)
                          8: M9aRoldSPL80zu-Kaoagp2WP3ZQ.roa (hash: 8fJuMkijRNl9SzEIDk8/AYrDLIsWhRWm1dwF7UBzYis=)
                          9: Q4zuhYGG3L1WBcFO48ljA8rNBKA.roa (hash: wCgcnvjGlJ6QOzoOZEf9C5WB57PdxuAUQh1p+3p6DI8=)
                          10: Qgjn7zcutHeaWdwb72tXmvasdVs.roa (hash: EvH2ZltKuBiEErhu6P/d/tjpZOgloTr7cZFRDKQ0MLQ=)
                          11: WH-u_Lbb4qq1ki69Q6CH45I7tuk.roa (hash: bn630h7Plu6LOc7DTwB6XBtAsX4ZbAAKOsi+znYEmWg=)
                          12: Z3QWWhkZqetlhnS_zvz1qah-JeA.roa (hash: cjiJ9Y6eR4tudOQSpND0P/J0tDKTnG0VtzqaPWqXkKs=)
                          13: bxoQwGnIjgehyOU5QbPzYLAzirc.roa (hash: YPIzomdG/bJCvbXvPKS6XU87RGOYtzWiK0lVtwY2etE=)
                          14: iCxZRNuboLSQ_A-b_9ZCwnTR7Sw.roa (hash: up+wwDvYKUVV9SGfbmiipQPTpyc8xi4mM9X2/7uPTio=)
                          15: mZ6dw2-RWGiPJmI1cofllQ7czLE.roa (hash: wLTfakveqy4UzrNDZuvxH1KuNXzMRVjKwd94EzC3Rdg=)
                          16: nHz5PYvYhZiTmkWG0ByHbG1ISik.roa (hash: ePaT81BNUTRf5J10vaqe327NI/cpz3KsA1HLhDcPGYk=)
                          17: totEAJbwgqrbxhgDKUXp2mBz-CM.roa (hash: NlDd0SbheBjrsiHdl/v3fEusRqr4u/br7d/d0DHvJCo=)
                          18: vSki5H5xYPnND3laqcWNYmQeSwY.roa (hash: AhuH4VJgFtbfomd7/AjjUCKF+gk/CH+YVdW6WNtfHiA=)
                          19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: N77LYau+Y8iZqG3JWacI+NXComJ2oIIqHSiDCXYboms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f6:24:31:cd:e7:aa:66:f7:6f:c4:8f:d8:d4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=e3fd2f95487ec090ed5973dd27190bd2f4bd9d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:71:22:8e:3c:c3:2a:25:6a:3d:db:e2:32:b4:
                    a3:6f:e9:33:28:9f:36:5a:db:7f:fe:93:83:d2:4c:
                    95:eb:9e:d2:eb:68:18:74:9f:8c:3d:75:cf:2f:ea:
                    c2:bb:ac:a6:f4:51:d6:ef:92:f1:fa:8f:0a:1c:48:
                    56:04:6c:63:18:75:8d:6d:92:c5:ab:90:48:b4:5c:
                    79:3d:4d:86:d6:f3:41:83:94:63:a9:0e:e9:9b:42:
                    58:4b:76:27:ad:2d:5b:7b:38:1f:49:98:96:66:2b:
                    9c:ca:c7:c2:ab:4b:26:db:52:f4:f5:73:75:19:65:
                    bd:e3:dd:75:5d:46:50:03:eb:bc:54:f6:44:86:55:
                    21:3b:91:01:49:8b:4c:c1:69:77:c3:bc:87:f0:53:
                    36:5d:92:f2:fb:e1:c9:23:0a:8d:13:12:d0:80:9c:
                    96:79:ec:20:f7:1f:23:5a:9b:7b:90:93:c3:3d:6c:
                    28:c4:2f:14:be:71:d5:6a:c7:c4:f3:cc:f6:3d:8c:
                    f8:19:89:ef:cf:eb:57:59:a4:55:21:aa:18:27:81:
                    e5:bc:cb:ec:bd:2a:e6:02:b3:72:9f:9e:13:52:8d:
                    a6:0b:f9:ac:f9:5b:c3:16:67:0b:b1:16:4f:b7:1b:
                    46:b0:2e:d7:c7:38:8f:5d:34:ba:3f:91:59:b0:91:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FD:2F:95:48:7E:C0:90:ED:59:73:DD:27:19:0B:D2:F4:BD:9D:99
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:51:b2:18:ef:4c:13:b8:2a:4c:b3:aa:1f:26:3c:fd:69:e0:
         46:43:b2:52:ac:c1:e8:a5:d0:6b:7c:9a:4a:8d:bd:d0:bc:25:
         46:95:1a:f6:48:10:17:e8:84:6b:60:74:91:2a:d5:63:fc:91:
         0e:14:b7:ca:00:37:d3:0d:80:19:ea:1a:20:12:bf:1d:69:cb:
         77:34:15:de:38:68:c3:8a:30:2a:7f:4a:c8:a8:e8:93:41:8c:
         77:b4:30:fc:77:aa:b5:f8:9e:d3:3e:69:4e:ee:b0:a5:47:a6:
         8d:3b:4a:c6:56:5c:5d:be:38:41:71:09:55:64:d6:e9:03:50:
         69:6d:36:9e:ed:0f:43:13:f7:58:aa:53:e0:37:a4:99:7e:a2:
         90:27:bc:dc:63:e9:a7:83:09:45:b6:30:89:f1:e5:e2:aa:a9:
         8e:02:0a:08:33:26:01:44:9c:a2:7d:19:d2:50:7a:d0:c8:a1:
         51:d2:c3:4f:3d:a4:52:80:76:7e:30:17:d3:30:bd:2e:1a:85:
         cb:28:d6:2b:48:81:0f:1e:40:46:af:2d:2c:a4:d8:5a:7b:5a:
         24:79:7d:23:79:3c:c0:44:de:f6:27:f3:1a:2b:1b:22:9f:1e:
         89:3d:88:32:a5:df:1d:e8:63:cc:71:d2:53:5e:1c:de:9a:ae:
         4f:d7:03:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II/YkMc3nqmb3b8SP2NQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy
NWYxZjMwHhcNMjQwNTE3MjAwMDA5WhcNMjQwNTE4MjAwMDA5WjAzMTEwLwYDVQQD
EyhlM2ZkMmY5NTQ4N2VjMDkwZWQ1OTczZGQyNzE5MGJkMmY0YmQ5ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3EijjzDKiVqPdviMrSjb+kzKJ82
Wtt//pOD0kyV657S62gYdJ+MPXXPL+rCu6ym9FHW75Lx+o8KHEhWBGxjGHWNbZLF
q5BItFx5PU2G1vNBg5RjqQ7pm0JYS3YnrS1bezgfSZiWZiucysfCq0sm21L09XN1
GWW94911XUZQA+u8VPZEhlUhO5EBSYtMwWl3w7yH8FM2XZLy++HJIwqNExLQgJyW
eewg9x8jWpt7kJPDPWwoxC8UvnHVasfE88z2PYz4GYnvz+tXWaRVIaoYJ4HlvMvs
vSrmArNyn54TUo2mC/ms+VvDFmcLsRZPtxtGsC7XxziPXTS6P5FZsJGJgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP9L5VIfsCQ7Vlz3ScZC9L0vZ2ZMB8GA1UdIwQY
MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt
YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj
LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1GyGO9M
E7gqTLOqHyY8/WngRkOyUqzB6KXQa3yaSo290LwlRpUa9kgQF+iEa2B0kSrVY/yR
DhS3ygA30w2AGeoaIBK/HWnLdzQV3jhow4owKn9KyKjok0GMd7Qw/Heqtfie0z5p
Tu6wpUemjTtKxlZcXb44QXEJVWTW6QNQaW02nu0PQxP3WKpT4DekmX6ikCe83GPp
p4MJRbYwifHl4qqpjgIKCDMmAUScon0Z0lB60MihUdLDTz2kUoB2fjAX0zC9LhqF
yyjWK0iBDx5ARq8tLKTYWntaJHl9I3k8wETe9ifzGisbIp8eiT2IMqXfHehjzHHS
U14c3pquT9cD2A==
-----END CERTIFICATE-----
Generated at Sat May 18 00:01:56 2024 by rpki-client on console-ams.rpki-client.org