Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          dOM5PTKc9ZQpirlxLDXcpoZHJN7GYA+pi2LE46pGfcQ=
Subject key identifier:   6C:97:99:37:2E:2F:D5:48:4E:8D:AB:FF:DE:90:D8:0A:C1:9C:D8:36
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       018F701EF19F9ED486561C09EFC1C0AB1627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          0987
Signing time:             Mon 13 May 2024 04:03:46 +0000
Manifest this update:     Mon 13 May 2024 04:03:46 +0000
Manifest next update:     Tue 14 May 2024 04:03:46 +0000
Files and hashes:         1: 3uppj4eEBkUJyl1z0samOxrIm7Q.roa (hash: o1QhOBlTtHSZ8/jbbEPJ5UQ7Px1FQTjH8WcRtVFHOZg=)
                          2: 43lFo1qtDO-gITCoJRc81Kkz4Mo.roa (hash: zDJKVmpwJs2HYWMU00KWKX6mwewB6kEQq4rcPohhbo8=)
                          3: 5W4mwMVP775CxZsRYZr1PVSaTVg.roa (hash: oxCGKYz7PxwcwZKdB5HShQPVLUXLVISerUh43mQaBRU=)
                          4: 6d3UwdWkXJhNmDuUOB7_LVCvQ7E.roa (hash: vBIClPVQwCrtmvntyhrJuiImivua5m5Cz4B8z2d5Z/o=)
                          5: 9lB0bUY7M-o82ebX6twyUJsimWA.roa (hash: g8w4REkWMzgARm3E2WlRNHhUtiZIISFUzgcNnsJNmOI=)
                          6: AyAOj8oQfB13FZJr9YcHqvMqMTA.roa (hash: m4aohcLmXz3JeCVHsHRpduz7e2JfG4RI0O6Bcrb0g3s=)
                          7: BvIe2RZqXIynBm5n9j-pirL4dTM.roa (hash: djrrBx/AmkDbLwbd5XbP5wi2KHfbwkiPFHAE6mlj6NU=)
                          8: EQ4l5UjfNzWUFhc5bMZJfmX1QBk.roa (hash: SUEVdgq//QvtQ04EtQj8MecUj5SmjXMyBnQfFg/mJN8=)
                          9: JThypkQZTcphMrI9-OVfveUrIEY.roa (hash: 0n5VZUQ0xSFvLH04X9Q8orhcMU6zQZfvqJ1Rzxskh/k=)
                          10: JlyO4IQ9P1fE8GE1BwxqrKFC4xU.roa (hash: Wb+02sva3em8QlytKRbMqNYYqp+uyQAujDfuT40IzME=)
                          11: Lc7Lf2nqjSQA9IGo1LgFQXhhwqo.roa (hash: WTTMBlmY8yT2h4X8uD9sG+aeBL+8wWUSgLxdcJ5JSBY=)
                          12: MWOLfqrRefqDKgD0FRmWb5mJB5s.roa (hash: sTC0HjGQAUBSlf9jIM7Cq60mIxulcUS93PJDsBHfqvQ=)
                          13: NuxUC2dOoAySHe_WgX4neZKlvRo.roa (hash: Ue0+YlDjini2g7x5wsCTqeDVJUWQj8F0Dy+VHpUWfCk=)
                          14: OBxPFl2-czwfxmkyAGu2v-VvDPA.roa (hash: P04bG6ZZuezm/t+63qTW6oqXiuKzZWUK2qzfO1BZGiU=)
                          15: QI-MDwQsakJP1Fb7XLCzbxo0euE.roa (hash: 6C4aLK1ybfPBJ/4MBnmDKW27phOGmL48UYi0geaaZzI=)
                          16: QQ9WCB260gyOsWox8m_pKFKSpQM.roa (hash: FHb0r1qMEEIvKCbqilL0ZCuMIBzCr9rcN8dVDO/KcmA=)
                          17: VFnqHO87mjgtFT3YDKZDcHUiEkc.roa (hash: /ueV0VBDDE66CgQpbJpXiPxLlIeEZ/eeW0HRSrwzGoI=)
                          18: buv7cpbD2_qBqc3yzllspI2eDCw.roa (hash: FnBWgPfw3EM1W/P2WkOmibC96JoWkyLSwbmqexHTx+E=)
                          19: eD98CSQE1ghGqA5nillinFVUVfI.roa (hash: Lm1eYJJNp2ZCUPTZeLG9PCD7qV0IBW64k0c3kAAFf1g=)
                          20: eFupIPYVLUX4NI5PXrXqhNtbekU.roa (hash: y5RvszOs/z3WJujQajoN/cChnKTA5IhKbXvdOBsTHjE=)
                          21: h_X6ok_IYihyH9EmMXthx_7fID0.roa (hash: LqCNn34vFNpZVZTexr1YnBiWDEnFdj8e1RfJbZhHqe8=)
                          22: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: 0m5Rgg3f56Xw/64i9gERDTNA/ookvcIqGHcwOCLVlms=)
                          23: i5JIi4GsHg8kQ-fmqskpNI74f2s.roa (hash: GDFweO3tkggLfuMOhdIFO8fnEPKErDizZCVPHlKK1rQ=)
                          24: j3G2IW2AO2OgXD9QD8hhdJAtt1U.roa (hash: Ck/6cugH+YSONm1kOer+4tRhlpKw4ivYGHXVmPz9Cgg=)
                          25: jSlcelaaiNdziciY81pjMJO2UfQ.roa (hash: 5eKAIt++PubRzoXs7SQBOuLUYY9HKhrrLKgBkdkGVZA=)
                          26: nvgJ_RzjOcnu2bx3BEegNwq1YNA.roa (hash: BaaxOK8QFHhBroYUjNFklyUkzBSI82HW1MpcAyxPe7I=)
                          27: onnIfxZ8YzyOyj1zqXPcigellOQ.roa (hash: 3ZEK1LSsflRt0DA2YeuXG0gcjvtnnHt+YYQ41ilx1p0=)
                          28: tdGqFLuUIAwdzdyptrVHtqC3ngs.roa (hash: U2pVABz5n7iYc98APgs9dtzJAxqBrdquRg/g62vBr2g=)
                          29: tlTu7-tgOqpjbVLrLnUQYOKLBeI.roa (hash: ePFH5AKIjYEntFG2ZNHUNTlusIfhi/JY+r4E/yxdsxo=)
                          30: v5LODHxFLjuVgKWqDj8QoghGtNg.roa (hash: s+MbrxoGmf59dmbcfUESgmY1n7WYdnazx+9bD/gF/8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 04:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:1e:f1:9f:9e:d4:86:56:1c:09:ef:c1:c0:ab:16:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: May 13 04:03:46 2024 GMT
            Not After : May 14 04:03:46 2024 GMT
        Subject: CN=6c9799372e2fd5484e8dabffde90d80ac19cd836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:c2:13:6d:3f:b1:ea:34:b5:52:37:79:30:
                    69:f4:fb:0e:8b:06:77:41:47:c2:b6:9d:75:1d:c2:
                    82:3c:9a:c0:55:d0:6b:d2:02:bb:43:d9:55:74:17:
                    36:75:1f:18:f6:af:7a:45:a3:64:27:45:22:81:1f:
                    8a:da:1b:63:44:5a:bc:09:ca:d2:a6:c9:58:8b:d6:
                    a2:a9:88:63:6d:e9:de:10:76:f4:64:f6:8a:db:65:
                    f3:26:2d:3e:ab:8f:54:07:29:12:f2:5e:3e:ee:51:
                    d5:9a:10:1e:8b:44:32:e4:d7:c0:98:46:37:ae:46:
                    63:d9:d3:da:e6:f2:d8:43:a0:14:89:f6:08:72:43:
                    00:82:d0:7f:68:ab:d8:60:2b:57:93:0a:65:e7:d2:
                    e5:fe:f8:61:5f:59:57:af:d8:0c:c0:83:f5:38:92:
                    e6:98:80:f0:db:9a:6c:21:0f:57:0d:36:26:5d:54:
                    2f:0d:b1:54:e8:f6:1c:fe:54:2c:e9:1b:5b:2f:79:
                    7c:e8:35:09:9b:be:bd:50:77:a0:6d:d4:89:00:2b:
                    66:3a:3c:4f:31:8f:59:82:9e:d3:64:aa:85:bf:24:
                    ab:a1:89:64:e9:f8:fa:2b:b9:5e:cd:e1:a2:4d:a7:
                    e7:b0:1b:c6:14:ba:17:f8:14:85:d4:0b:c5:25:04:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:99:37:2E:2F:D5:48:4E:8D:AB:FF:DE:90:D8:0A:C1:9C:D8:36
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:71:c2:eb:aa:aa:36:33:7c:ae:fc:c0:55:ea:b8:0b:f9:42:
         02:8c:85:78:c2:f5:fb:cd:d0:20:7b:f1:58:f0:4d:49:00:08:
         a4:73:f3:34:2a:09:0e:d3:57:f0:36:07:3d:1f:7c:95:2c:b2:
         3f:5e:d8:e6:e5:e2:fc:24:82:ad:4c:6e:c1:a0:41:ca:89:96:
         e5:b8:94:72:b4:bf:35:c8:9b:82:3e:2a:bc:c1:33:54:a0:cd:
         64:33:5b:bc:5c:ac:3b:49:df:2d:5a:b1:ad:57:7a:82:11:bf:
         e7:c0:a9:a9:69:2c:77:22:07:7c:4a:99:32:c3:85:5d:4c:fe:
         be:f0:e3:f2:a4:22:a5:c2:74:fb:61:f7:d5:d5:6c:b6:e7:a0:
         60:a3:94:5f:c1:6c:2b:73:9a:33:2e:10:d7:96:ab:1d:05:05:
         c2:14:01:fd:3d:02:55:88:49:75:0b:b5:89:9a:5d:12:47:85:
         9e:74:68:8d:28:33:78:8c:5e:9b:d2:6a:94:16:3e:1e:b6:9a:
         a4:4a:c9:b3:c3:56:a1:a0:57:94:5d:9c:18:83:3f:46:2e:40:
         13:b0:19:43:31:5c:52:67:d5:be:7e:52:4b:49:8c:c7:08:a1:
         c6:7d:83:62:a3:78:ac:bb:fa:87:4c:d5:9c:51:9a:b4:e3:09:
         39:ce:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:40:11 2024 by rpki-client on console-fra.rpki-client.org