Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          Z4732eOAMOnYEgt/57rUeSi3PB7MSbh+cQOE1Ms2Gyg=
Subject key identifier:   FC:87:65:BC:84:70:3B:DA:87:55:2B:9A:69:84:AC:FC:85:F9:E7:1F
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       018F3EC25072ADD6113ED4F17DC828192BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          0EB2
Signing time:             Fri 03 May 2024 14:01:12 +0000
Manifest this update:     Fri 03 May 2024 14:01:12 +0000
Manifest next update:     Sat 04 May 2024 14:01:12 +0000
Files and hashes:         1: 0R3HKPvaLGo5XwxWtv3pb7eMF8k.roa (hash: swWV//Z9e4bsvEizHUmsftfoYcEaDm9hxuX8YLMdbTw=)
                          2: 0RqWxe1Aky2xKh77aAf93lbLo_o.roa (hash: v11ZXAHzlstSf/1fofTn6uP4aK3wB0AkvNvJkKjo0lM=)
                          3: 1-nke-fez5zrZwhNSQ5KOwL1AbQ8.roa (hash: 3FvDtr6anC8P8oZykYNoHJF5fbrylCSBu4bEHVSDKAc=)
                          4: 6rndazStRhujioBo258P1qoEokI.roa (hash: 6wE2CNetUvC2npq5P1oHVbWJr1WIckeukGLMJrAehUI=)
                          5: 8AuhcfEEKRYItTQR2Jzn24jpH0Q.roa (hash: UpDWF5Jm47svdTCLuOJWo29C9tGMJFSEL2+I7wUYfO0=)
                          6: 9UrruotFS7qOEkYxt1B0lLUOzK0.roa (hash: KyzGLXsoGQnJ/wQzvhnn8rIJTHO/Iw4q8l+4NEEYGcs=)
                          7: GgG7mhsdhXiKLzMaykhJkKr7XQc.roa (hash: ThHO0GR2tTK56Cek+hOZF3ZgwKtV1BPggarDdsG/xTI=)
                          8: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: L+F8JtX2zow7Pf8NR5d/hCfd+9z2qSRdPvKE36Sz9Qg=)
                          9: LlQ3T9I_EgsQeFFLw2Yh5YAdyOc.roa (hash: tA8jPai58KlNBdFWmiZy7u4vKi7VBfLlMWaP1G9yfAo=)
                          10: Mcr2grpdZ6ceJcF7dJAFb5qY09c.roa (hash: qz8niuYFBYG7dAq3MamzEb9NmZfRLOCRyXOmOfohvVI=)
                          11: R0tAQ9KjIKBc2QiDyFzcE7i5K0w.roa (hash: SVbesCqfYBucQwRnkPBALlRK2xgIi9KhpTB7E9x5VJU=)
                          12: X8i2WUIHeMMAMXhte2eivaCZS6A.roa (hash: CXcpnLAbgNQRrOYKxiexYs2FXHaaspTSzPfgRFKe2VY=)
                          13: Y577KKfqIsp7QDdMBl2F4MY1-G4.roa (hash: 0cmOffiRW3TLrgkplG0Ai0LBg6YXtDmTeyCVkJpysTE=)
                          14: cSepb9T6Lng0m6WYRtjgXpO0YaU.roa (hash: UyEm90Xriuqzt4t95YgibwEyy/yb5W/6O9YIwObAhU0=)
                          15: k7OLCLcGWuJVRPjnSOQ6FqAtJvw.roa (hash: JcPegvpqcZVXptVrRb/xo3V+E78ZSovEhfR1dssN010=)
                          16: lRKEJCWf1G-9fiu8MNvh_SrxEhU.roa (hash: cwPKS0Zi5ojw2cm1hJWLbEhJSDfhkK6HWI0wSMrwbfs=)
                          17: nUmuqQtCmwZJovIT6p8aelgI-S0.roa (hash: oREHW4GSEh6DMeYwrQihMuc4QtcFuWqaZQDWYDWgOls=)
                          18: rCaJXWTXMHeftsm0uha6bLyatyw.roa (hash: fBst+utr/pa+HIrl84EdnssR/80byA9TrB3JxM7TKkY=)
                          19: tOzvSomg2VWv1IjQAXLRHrIVAcI.roa (hash: Oap7WaQ2Oa7PXrx0CSPBJeLX/S5JuZsPryrc+Vh8dc0=)
                          20: vgIt_iq9tk8qxfV4W9y72m3p1HU.roa (hash: 7WFvQ6efwirSO3JkbFiAbpThAv21zzWe2sNIe1tPU6w=)
                          21: wblRrkdqz0BMoHYQYXIoLYR3D9c.roa (hash: mQNcivvfX1lIGQUZpX1rBGtJeKuQbVQmWKE71aDxB4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:c2:50:72:ad:d6:11:3e:d4:f1:7d:c8:28:19:2b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: May  3 14:01:12 2024 GMT
            Not After : May  4 14:01:12 2024 GMT
        Subject: CN=fc8765bc84703bda87552b9a6984acfc85f9e71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:f0:a6:f5:99:85:7d:67:94:a6:57:57:6e:
                    fb:f8:71:5e:93:21:04:42:97:22:6b:c6:25:e4:57:
                    5b:e0:88:a2:90:40:84:85:3c:ca:6b:0d:3b:67:b1:
                    89:b7:25:c4:e6:fa:19:54:02:60:2e:34:b1:b6:e6:
                    37:c6:83:84:cf:f6:1d:23:8f:ee:37:68:7c:2b:9a:
                    5f:d6:3f:bb:f9:8c:60:e7:cc:a8:59:33:7e:db:e9:
                    b2:ec:bc:a3:91:6e:4e:0f:69:c2:48:27:b2:64:f2:
                    e4:d6:d3:56:c9:4f:97:aa:a6:f7:2c:52:83:f8:3e:
                    ec:f5:ab:a4:4a:18:de:4c:19:06:9d:3a:6f:69:cf:
                    4c:bc:6a:31:19:81:5d:c8:d4:7e:66:3a:37:45:ce:
                    d8:5d:3e:3d:c8:5d:2d:65:1f:fc:7e:d1:82:6d:fb:
                    41:77:08:18:9d:10:fd:69:8c:cd:16:ca:68:05:b7:
                    56:81:86:98:22:80:69:47:41:88:74:fc:a3:d8:6c:
                    c5:9e:b8:64:70:47:26:f8:45:87:70:35:ee:91:6f:
                    b2:b1:5c:b4:70:5d:64:7e:6b:73:5a:3e:21:12:01:
                    7b:fd:8b:b8:4e:79:02:ae:15:b7:98:de:2c:5b:ed:
                    2e:ee:02:39:d6:f6:55:75:58:ec:77:fd:6b:bd:82:
                    2a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:65:BC:84:70:3B:DA:87:55:2B:9A:69:84:AC:FC:85:F9:E7:1F
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:81:b7:c8:a7:bf:d5:a0:b8:6a:ef:f2:fa:4f:b6:fc:28:5b:
         20:e3:b1:14:db:2c:e4:46:a0:74:bc:08:dc:d9:6e:00:8c:04:
         a0:9d:c2:de:fb:59:30:fc:99:7c:84:ad:fc:cd:1f:69:b7:8d:
         01:4c:f0:b0:a5:69:e2:7c:2e:89:9a:ba:6e:3d:ab:e8:74:51:
         f8:c0:ae:a1:8d:ce:47:a3:46:4f:6b:40:c4:fc:c4:c2:93:37:
         57:9a:7b:15:cf:74:df:cd:bb:c2:31:f5:99:40:55:6d:46:33:
         ac:cd:57:03:ac:38:0e:ca:2c:77:2d:76:4a:14:dd:f9:da:49:
         34:c5:32:61:43:69:48:80:e5:cd:92:8d:81:5c:0f:87:7e:1b:
         a1:85:d2:cb:d8:e0:4d:ee:5e:44:14:cb:a0:1e:b1:32:cf:09:
         29:da:68:70:53:a0:6e:19:5f:6d:80:f5:a7:91:e3:be:66:22:
         f9:7f:25:2d:49:46:62:bb:16:41:b0:88:c8:1a:66:6c:6f:28:
         2b:ae:2e:cc:a5:3f:f5:87:7b:d6:dc:2f:62:12:dd:53:56:12:
         ce:ab:89:0b:14:35:3c:85:bb:52:b1:4f:a9:0b:c4:e9:70:c6:
         36:e9:70:33:e0:64:ac:19:4e:1b:a4:96:d5:79:13:7e:7e:0d:
         7c:c7:e6:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8+wlByrdYRPtTxfcgoGSu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjQwNTAzMTQwMTEyWhcNMjQwNTA0MTQwMTEyWjAzMTEwLwYDVQQD
EyhmYzg3NjViYzg0NzAzYmRhODc1NTJiOWE2OTg0YWNmYzg1ZjllNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNPwpvWZhX1nlKZXV277+HFekyEE
Qpcia8Yl5Fdb4IiikECEhTzKaw07Z7GJtyXE5voZVAJgLjSxtuY3xoOEz/YdI4/u
N2h8K5pf1j+7+Yxg58yoWTN+2+my7LyjkW5OD2nCSCeyZPLk1tNWyU+Xqqb3LFKD
+D7s9aukShjeTBkGnTpvac9MvGoxGYFdyNR+Zjo3Rc7YXT49yF0tZR/8ftGCbftB
dwgYnRD9aYzNFspoBbdWgYaYIoBpR0GIdPyj2GzFnrhkcEcm+EWHcDXukW+ysVy0
cF1kfmtzWj4hEgF7/Yu4TnkCrhW3mN4sW+0u7gI51vZVdVjsd/1rvYIqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyHZbyEcDvah1UrmmmErPyF+ecfMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoG3yKe/
1aC4au/y+k+2/ChbIOOxFNss5EagdLwI3NluAIwEoJ3C3vtZMPyZfISt/M0fabeN
AUzwsKVp4nwuiZq6bj2r6HRR+MCuoY3OR6NGT2tAxPzEwpM3V5p7Fc903827wjH1
mUBVbUYzrM1XA6w4Dsosdy12ShTd+dpJNMUyYUNpSIDlzZKNgVwPh34boYXSy9jg
Te5eRBTLoB6xMs8JKdpocFOgbhlfbYD1p5HjvmYi+X8lLUlGYrsWQbCIyBpmbG8o
K64uzKU/9Yd71twvYhLdU1YSzquJCxQ1PIW7UrFPqQvE6XDGNulwM+BkrBlOG6SW
1XkTfn4NfMfmVQ==
-----END CERTIFICATE-----
Generated at Fri May 3 18:24:59 2024 by rpki-client on console-ams.rpki-client.org