Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
File:                     rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json)
Hash identifier:          pRnx+/dT8zC+2zGvlMFQdx7nBNX6AeSShDXucrg5i10=
Subject key identifier:   88:7E:19:04:02:5C:CD:E9:40:45:4D:A9:E3:96:78:64:00:47:A1:EE
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       018F866CAC41C394E66E0F1F03DB4857591C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
Manifest number:          119C
Signing time:             Fri 17 May 2024 12:00:19 +0000
Manifest this update:     Fri 17 May 2024 12:00:19 +0000
Manifest next update:     Sat 18 May 2024 12:00:19 +0000
Files and hashes:         1: 1no7mIlPgrjGGPboAQeF_6v17z8.roa (hash: WBzZEDjHYRrYFwUvhyGA0hE80adZnx6zkMTmEWqKkVM=)
                          2: 25-45slE78mfp_LvApPOpZ-tAUs.roa (hash: 4Alqubx9Oks5NL9KWX6+svEfzuxkQ7aHvbC1YO+uCt0=)
                          3: 3wwNRj6Iw2VyBth42BlXrOyNILk.roa (hash: EXEvVFxnYg5FSBSMurKNkaJdHwxpBkvk2CY1VYM6iys=)
                          4: 41l1kiBJ4uQhoInGZmh7tQhxPWM.roa (hash: AzkiaLSDeiF0ObL6P0dm+ULjnzgTP+kCrgE5qwIxX+A=)
                          5: CHf_cTzmdkF7qew1AeAbjle7obM.roa (hash: nSTP6U8yrh3e16Uz96q7ugRBm6vla5/AWu0XzV84wUg=)
                          6: E_bSdfXNNwpmIVYDLvt9lBGxswY.roa (hash: MIjCg3n3Z9sdZAO27N3TPvwQ05VTp1FXZS8hFzk4zJU=)
                          7: Ffe50Vt73e6wVaZ13_k_-KDI6ew.roa (hash: B0LhC2sLEHVNLerYpp9hRIlErEsXK6CYSMKewqY5fz8=)
                          8: H2bDtkwfftiC1Y6tqE-HE2cdN3Y.roa (hash: 4/vGWf1uLPc4pnM7663q0gu32KePNEgaYYHoqd8ZgMA=)
                          9: HMchJeotIH6djsdLbe4zMY9Mrls.roa (hash: rAwMw2+mcr5HKOWgcP+rbgAotB6plxocppoMoL9dU9Q=)
                          10: JhjA55FD-cfI3Wz2j8FkE-tneDc.roa (hash: I0RgHTbq/Q6npd8W6BRzin2Vk7MtBNfZNIMOI7B9LQI=)
                          11: MPoBn62aJcWRZREL6bYSr3u0Ufg.roa (hash: DW85oTtl1k7coMlzptdYrEA/eF+wu9PgyL8e1/UZJmQ=)
                          12: OjZxjF2XLWWUE663ywMJDMOaPQ8.roa (hash: fpaBZSPSwFBq0eKY/naz3G7r2Tm2jfEjCswOVbGzCQ4=)
                          13: TTrD6Od_QmX1qVk4WOcopR8_gUg.roa (hash: Xq4yi8Z+bnburKxcRR4Lo8Mh2DsmDFWtawnV51P2u6k=)
                          14: V17jz5R-arXrNIGEQU-bV_-V6uY.roa (hash: z8veVHEgC3FX6ZHW9MbQUN79lseLf+LnyMDP3+fPSOs=)
                          15: Yah4gRqGRVvvkDi8rYOxbZtChW0.roa (hash: H1Cx5EcE/yB1fYuHPj9GbVPy/UJmJgySkaanK/CCK/k=)
                          16: _iE_2MQNp2b3V61CeNOEIXZHbcs.roa (hash: Odr2yO1qkmgbLxwWKL+9y336XqttJ63pR5gTDMzBEAc=)
                          17: bBX9W9vffFA1CKzckOpDnbV22Ts.roa (hash: QOnOfko0+25LERw4Rnf/RxE+1IxCn+Oh6NKjSejTDAs=)
                          18: oxKWRW1N2gw8hi2y3-XnWrt9Yow.roa (hash: U7rqvK2orF51VzLOFi9A2WWQ3tZex09yXCx8Dg0aDko=)
                          19: rD_SQlr9nwqaKHrfr3i6V9xuEYk.roa (hash: 5sgkwIirQp5SZxCboDMGWEDv1wiDNbOqQc8QYANpKrY=)
                          20: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: 7iYffXSrlRzIDw6gBweVl1mLGLImafmnvi+wIdYfj/g=)
                          21: t9SONAjqj8BPm7mOkgG4yjKIBho.roa (hash: Iu3drvVIKPwpiKUw0uRkRhF8W1CfxTNxOf1AZ8hkjis=)
                          22: whHd_YaTVA0huQdMsHGmoLqQX64.roa (hash: VsRCENZOyJMMrquyVLXthSbvYZlHLNikp4q9ccaDJmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:ac:41:c3:94:e6:6e:0f:1f:03:db:48:57:59:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: May 17 12:00:19 2024 GMT
            Not After : May 18 12:00:19 2024 GMT
        Subject: CN=887e1904025ccde940454da9e39678640047a1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:ed:2d:23:a3:01:20:59:5f:d6:60:cf:f8:
                    f6:8a:f7:48:8f:52:c4:a8:8a:48:70:4e:e4:1f:ef:
                    e6:37:ef:d4:b3:b3:43:fe:ef:54:94:a3:9b:17:ef:
                    fd:a4:4d:a8:a7:e9:bf:ff:69:e3:94:7f:28:70:e9:
                    9a:ad:8c:39:22:eb:22:d2:74:ff:b0:95:dd:ab:b2:
                    0e:78:2b:44:a1:b2:bc:91:79:7c:21:bd:77:dc:d1:
                    ba:c7:78:9c:65:cc:5f:48:d6:e1:98:81:d8:e5:11:
                    f4:96:f0:2d:1b:e2:44:cc:3c:37:b6:60:c7:1c:cf:
                    c8:0c:9e:86:a5:6e:73:c9:f4:b9:f8:97:f3:9d:01:
                    60:ea:37:c7:9f:d5:35:9f:c8:1c:f5:08:63:9c:a3:
                    d3:2b:31:bf:8b:25:0f:5f:9b:2d:bc:84:35:4e:7f:
                    14:de:86:ed:91:18:e3:de:97:24:d8:76:3c:73:4e:
                    ae:0b:6e:ce:d2:86:1e:d6:56:3a:69:c9:5d:2b:9b:
                    9f:ee:45:c2:c0:59:9b:94:b4:b6:9b:60:80:b3:84:
                    3d:dd:6d:8c:5a:7b:ca:21:5c:ee:65:79:e8:c0:02:
                    1d:01:10:96:a6:54:70:78:79:43:21:0b:91:a7:5b:
                    9f:73:74:8c:6b:a4:4c:b1:06:00:b4:4a:63:67:86:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7E:19:04:02:5C:CD:E9:40:45:4D:A9:E3:96:78:64:00:47:A1:EE
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:75:12:d4:1c:63:7a:a9:3f:4c:4f:a2:81:cf:df:f1:78:
         a3:67:0e:62:a0:7a:42:38:f0:92:66:87:e1:fa:be:f6:d3:73:
         2e:d8:90:2e:07:f8:50:ce:87:f1:34:ec:41:ad:32:dc:cb:47:
         70:0f:9a:fd:c1:e6:7f:9b:92:1d:18:ad:c3:dd:94:49:fe:a3:
         75:9f:c6:28:4a:64:05:e5:99:d9:91:8e:d7:f1:96:cc:fb:db:
         e1:88:a2:b4:65:8c:c5:97:1c:0b:f1:8d:30:c2:6a:5a:b4:d5:
         4c:81:72:a8:fc:6e:12:c1:93:b2:29:f5:fb:74:ce:2e:63:e1:
         a4:35:bf:3b:d4:a0:33:9a:c6:c0:0f:65:1d:13:9a:84:da:cc:
         d2:b6:72:9f:33:36:ea:5e:cf:40:90:ed:7c:2d:be:6a:5b:b1:
         3e:3e:35:86:37:20:c9:27:a2:d4:1c:44:38:1f:c7:bc:73:d9:
         75:38:48:7d:25:d9:06:33:67:18:6b:36:5b:38:e8:9c:e8:0a:
         54:b4:0f:e3:ad:2b:29:33:e8:ce:8d:04:80:08:34:e4:c6:f6:
         fe:a9:b9:cb:ad:06:57:fc:7c:48:18:e0:7c:51:8b:f8:3a:c5:
         67:7e:fa:30:51:00:f4:9b:66:bb:a7:66:98:36:8e:4d:2d:45:
         63:f1:9e:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbKxBw5Tmbg8fA9tIV1kcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjQwNTE3MTIwMDE5WhcNMjQwNTE4MTIwMDE5WjAzMTEwLwYDVQQD
Eyg4ODdlMTkwNDAyNWNjZGU5NDA0NTRkYTllMzk2Nzg2NDAwNDdhMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj7tLSOjASBZX9Zgz/j2ivdIj1LE
qIpIcE7kH+/mN+/Us7ND/u9UlKObF+/9pE2op+m//2njlH8ocOmarYw5Iusi0nT/
sJXdq7IOeCtEobK8kXl8Ib133NG6x3icZcxfSNbhmIHY5RH0lvAtG+JEzDw3tmDH
HM/IDJ6GpW5zyfS5+JfznQFg6jfHn9U1n8gc9QhjnKPTKzG/iyUPX5stvIQ1Tn8U
3obtkRjj3pck2HY8c06uC27O0oYe1lY6acldK5uf7kXCwFmblLS2m2CAs4Q93W2M
WnvKIVzuZXnowAIdARCWplRweHlDIQuRp1ufc3SMa6RMsQYAtEpjZ4b1pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh+GQQCXM3pQEVNqeOWeGQAR6HuMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPR91EtQc
Y3qpP0xPooHP3/F4o2cOYqB6QjjwkmaH4fq+9tNzLtiQLgf4UM6H8TTsQa0y3MtH
cA+a/cHmf5uSHRitw92USf6jdZ/GKEpkBeWZ2ZGO1/GWzPvb4YiitGWMxZccC/GN
MMJqWrTVTIFyqPxuEsGTsin1+3TOLmPhpDW/O9SgM5rGwA9lHROahNrM0rZynzM2
6l7PQJDtfC2+aluxPj41hjcgySei1BxEOB/HvHPZdThIfSXZBjNnGGs2WzjonOgK
VLQP460rKTPozo0EgAg05Mb2/qm5y60GV/x8SBjgfFGL+DrFZ376MFEA9Jtmu6dm
mDaOTS1FY/GeQg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:18:10 2024 by rpki-client on console-ams.rpki-client.org