Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          bEV2O8XGpGkrGRfIzHpWhuq8phBm8OwShfJ6OkO565M=
Subject key identifier:   2B:8E:34:B9:0C:89:9E:4F:85:C5:AF:57:BF:B5:D3:9F:A5:A1:00:3B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       0193519999EE977EA92882BE7F899A56A1BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          0BAE
Signing time:             Fri 22 Nov 2024 02:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:41 +0000
Files and hashes:         1: 1-A7e3OxgbKABUxQu2Z-Dm_3volk.roa (hash: cw+9+g/r7M6ZwBPIkQb9aQ+Tb/mnLM6y3cRr7jkuYx8=)
                          2: 3FvXOaH1rr-NzPW9JMrL6HxXPAA.roa (hash: 4XvaZztEinRzWxk24SgFcPl5wZRZT64IYtvVavLHnkI=)
                          3: 5W4mwMVP775CxZsRYZr1PVSaTVg.roa (hash: oxCGKYz7PxwcwZKdB5HShQPVLUXLVISerUh43mQaBRU=)
                          4: 6d3UwdWkXJhNmDuUOB7_LVCvQ7E.roa (hash: vBIClPVQwCrtmvntyhrJuiImivua5m5Cz4B8z2d5Z/o=)
                          5: 8W1YvRKTNxNHXcpafBwAW_Jzd_U.roa (hash: OM0lj8/zK/Z3Ttr3IbFQSNIZ3Y2MB4tDFS6TNpiqthw=)
                          6: AqYkIwPm8VssssVnZxyM3IGjXyE.roa (hash: St04dGLDsebiRYF4T20T3prubiZ1SGVjaIuYF0kaWBM=)
                          7: AuqCoJQ5ubHRKbMsfsBmo2TJuZY.roa (hash: ruysbP054VNPHsrCR+fKIvj1LNJllrAl5eTjkjDKHdc=)
                          8: C_ptDo_qiAOoOvo-8qAXY88vBfQ.roa (hash: 1pTHKMzDAlMlQWVM+wYMeFKqdkUepdgj73yRGng1bLA=)
                          9: Ewi178fMBhny3XH4fbaPVNK1kHI.roa (hash: FjpOp9zA3mmbzEScZh7oxVXYTjGBdOvK34L/967VpYM=)
                          10: G2Puv8YdjTeeoo07Tkk-Jv84cmQ.roa (hash: WYCyd4nKC21CWDYxTFtUCkGI8VYrkYS735IL87PvFDk=)
                          11: J2NB3I7BT5yNjIu9nMz0481AfuM.roa (hash: 2KQp/0Ct0cz+WuLXqw3fZMF/z/AwIdkDJ4+a3XLOwvA=)
                          12: KTNlV2eYF7IIMYwPO8cYu2HA0Fs.roa (hash: 3fA7q9trMfroJGR9RRJ27aAdHX/2pvcwCNwNsymfVCU=)
                          13: Lc7Lf2nqjSQA9IGo1LgFQXhhwqo.roa (hash: WTTMBlmY8yT2h4X8uD9sG+aeBL+8wWUSgLxdcJ5JSBY=)
                          14: LjmFXmG3iq8eWifChf8l_WBW0CY.roa (hash: r8b7r2e27NQ4x4f9WdRVKo3oqmo0M4g8tUj6HtHEzAw=)
                          15: MWOLfqrRefqDKgD0FRmWb5mJB5s.roa (hash: sTC0HjGQAUBSlf9jIM7Cq60mIxulcUS93PJDsBHfqvQ=)
                          16: NuxUC2dOoAySHe_WgX4neZKlvRo.roa (hash: Ue0+YlDjini2g7x5wsCTqeDVJUWQj8F0Dy+VHpUWfCk=)
                          17: OBKmHO7_tvQEUlikmplaW6BAcmY.roa (hash: zMv3sIm0u2b5nS/NdoUlucScFaCADV5a94ddXw1w9fo=)
                          18: OBxPFl2-czwfxmkyAGu2v-VvDPA.roa (hash: P04bG6ZZuezm/t+63qTW6oqXiuKzZWUK2qzfO1BZGiU=)
                          19: QI-MDwQsakJP1Fb7XLCzbxo0euE.roa (hash: 6C4aLK1ybfPBJ/4MBnmDKW27phOGmL48UYi0geaaZzI=)
                          20: QQ9WCB260gyOsWox8m_pKFKSpQM.roa (hash: FHb0r1qMEEIvKCbqilL0ZCuMIBzCr9rcN8dVDO/KcmA=)
                          21: VxBsqFGxcDEfNjHagUUZc5Jh8g0.roa (hash: gVXRksRNAdHlVeqqAZ0LTldX0AaTe+Vfm96NUBj6yiA=)
                          22: dUSPPDqYhHS14Q7K7WJEP_wMiiE.roa (hash: WhlJaVy+sR8jRDcAjFuDjJRVsx5UT2/wCHXHdx377nU=)
                          23: eFupIPYVLUX4NI5PXrXqhNtbekU.roa (hash: y5RvszOs/z3WJujQajoN/cChnKTA5IhKbXvdOBsTHjE=)
                          24: eeg0P3ydaEqBySoS1sXHIQZ_s-c.roa (hash: Oj0dUpOWbbEv4+SvXS278ROAmsY9/VyeefDaTROmgfM=)
                          25: gloDldGV_yiqhByp2YZjaMEm5jo.roa (hash: a9iqtqeZpEJMf9PD+xFUrpzPm3ZpiQVQ8tPSLcxqnI0=)
                          26: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: n3wHtMl5bgdIw4s13/9rg9y01CCTJzugIif0DohNOf4=)
                          27: i5JIi4GsHg8kQ-fmqskpNI74f2s.roa (hash: GDFweO3tkggLfuMOhdIFO8fnEPKErDizZCVPHlKK1rQ=)
                          28: oxoCgwVUUfyql_HY9r9zViZ0PSs.roa (hash: t6iQhbBGcDxyByT+ndZTkfld3jPaC1oNDnSRYIr1yc8=)
                          29: qud88SSydu5bBSdEjLkozELRd_Q.roa (hash: 5gouVEDUvVvtvkxjirvau8+SZpUfdGJUMW/ANG3HTqE=)
                          30: tlTu7-tgOqpjbVLrLnUQYOKLBeI.roa (hash: ePFH5AKIjYEntFG2ZNHUNTlusIfhi/JY+r4E/yxdsxo=)
                          31: v5LODHxFLjuVgKWqDj8QoghGtNg.roa (hash: s+MbrxoGmf59dmbcfUESgmY1n7WYdnazx+9bD/gF/8A=)
                          32: xcmVqoxnpIPfXbOTPAky9t0O0QI.roa (hash: P05Vxn9UkBS+yOMfsrzDOvqTfH6hGg7PVIs/wyb23eE=)
                          33: zJGlBXu-kjdHbQhY6cMC2OIODsY.roa (hash: L7bqdYe2k5cRc7c6z8mJHV3wrN9N5B+Dhqw7iAZ8Pmo=)
                          34: zYbMkRrgu81Ql8bM-vCqldNdjeI.roa (hash: 2j3W3orBJw9IWu2g+puT4L3yYHqD1a19iT+vtQnoHn0=)
                          35: zg-_Zrj2RXyJqdGBVB1a4fGL-io.roa (hash: 8SiqMBI7Y3i+v3DrHLpTrhU8p+ii+/fTpNwkjyLQXD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:99:ee:97:7e:a9:28:82:be:7f:89:9a:56:a1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Nov 22 02:00:41 2024 GMT
            Not After : Nov 23 02:00:41 2024 GMT
        Subject: CN=2b8e34b90c899e4f85c5af57bfb5d39fa5a1003b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:dd:99:21:ad:89:ad:82:b9:f5:bb:60:06:
                    4e:bf:ee:cb:88:4c:75:8d:90:cd:d9:1c:fd:d2:4d:
                    95:21:24:04:71:1c:f2:b6:f7:ca:5d:35:c9:e0:9f:
                    99:be:d1:57:52:12:f7:3e:11:ae:ee:89:aa:e6:9c:
                    4b:30:ac:62:71:ec:e1:cd:aa:a6:c2:b3:08:db:23:
                    d3:64:a4:cc:1b:c4:1a:d7:e4:94:e5:eb:5c:27:7b:
                    a5:35:10:c8:08:a4:76:70:0d:37:6a:57:17:74:75:
                    f4:da:f5:0f:bb:96:eb:ad:03:87:33:2c:86:b0:ff:
                    68:dc:e4:a3:1b:63:ba:7e:f3:e1:f0:a1:43:7b:cb:
                    23:66:9e:ea:0b:40:0c:ba:a1:85:f4:74:e4:ff:1e:
                    ad:85:bb:fb:13:06:17:60:24:71:56:55:ed:d1:b1:
                    5c:88:c4:90:ba:33:c7:cf:5a:cf:5a:a9:63:e3:cb:
                    77:c0:f7:00:1e:cf:a9:ff:bf:bc:a6:09:66:1a:f1:
                    b3:86:3b:d5:98:04:62:e3:eb:11:da:0e:77:a9:b4:
                    ed:77:90:82:6e:9c:03:de:44:57:6b:34:80:ee:f1:
                    fb:4f:73:b2:cc:63:51:3b:82:32:f0:b0:bf:ac:95:
                    c5:3d:6f:65:b4:13:c0:1b:cf:88:5c:b2:54:da:a4:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8E:34:B9:0C:89:9E:4F:85:C5:AF:57:BF:B5:D3:9F:A5:A1:00:3B
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:df:2d:c2:57:50:30:d2:e4:48:6e:b6:90:f1:16:5a:fa:
         29:50:21:fb:54:82:b9:25:1a:68:7f:7f:34:eb:a8:76:67:5a:
         0d:7c:93:16:d9:d2:a4:c9:09:7c:79:97:e8:21:74:5c:5f:c6:
         e4:c9:fe:a3:28:ad:97:2c:89:7a:bf:55:f1:b4:f7:8c:40:59:
         ca:5d:b3:b9:18:c0:61:35:e8:c0:a6:6d:a8:73:cb:64:34:a0:
         0f:35:99:6f:86:7f:ad:94:0d:72:38:59:9b:f3:a5:18:bf:64:
         2e:54:78:c8:8b:4a:4b:d2:12:7e:62:72:50:14:1c:a5:df:73:
         86:13:61:22:26:bc:16:58:20:82:9b:0b:b0:ac:f2:bf:30:f2:
         79:91:ed:28:bc:a2:3e:fb:a5:ef:cd:34:f4:0e:a6:c4:a4:13:
         fd:94:a2:b6:ce:2b:a7:4c:a8:8d:c5:0b:7e:70:a7:c2:3f:de:
         cf:a6:22:ed:46:dd:03:e6:f4:c9:4b:c7:98:70:23:e9:ce:f3:
         81:43:b3:c4:aa:b5:d6:bd:9a:e7:19:5a:a6:39:91:e6:51:7c:
         26:9c:55:19:04:1e:b0:4e:4a:fa:93:2a:c4:ca:09:ea:2b:37:
         96:bf:ca:11:38:af:d9:f4:4d:40:85:20:f9:9b:0a:bc:26:a0:
         fc:e0:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:44 2024 by rpki-client on console-fra.rpki-client.org