Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
File:                     SeUWlMTUa0_MAvrnHl25QqcQjkc.mft (raw, json)
Hash identifier:          LbwM8Ri+IjdG+aJUFoEEGY28y4O2RJdvhb2sAYAwp7Y=
Subject key identifier:   9C:85:C5:7F:E4:AB:38:B9:04:12:6A:3A:F9:75:62:E9:CA:00:A6:CC
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       018F600537244128695448CC0C6DA58EDBA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
Manifest number:          07C0
Signing time:             Fri 10 May 2024 01:01:45 +0000
Manifest this update:     Fri 10 May 2024 01:01:45 +0000
Manifest next update:     Sat 11 May 2024 01:01:45 +0000
Files and hashes:         1: 1-sdLyNh6hlJQir7aI6q15ve6Mg8.roa (hash: wCXFeL5eO0Qkxev4Eciyp1prZdVXlLBPlJTUbhCYIMM=)
                          2: 3XbdhDgzpcMMlYI0AL9SENrD-kI.roa (hash: 8qt2zIEeHAui23YIk2Ya6Om0o+Hh/uw7mObeoyvLGxU=)
                          3: 4_u5etgo27VkkJ9aRm9yE5UubS8.roa (hash: cZVtReYzb69l+TEWsjvkvcUXVIUUHOe6YwgnDYrH+6A=)
                          4: 6E39cCrSgvy_LbjvTRWK2nfYSx0.roa (hash: NatURe2gPMAzIoNOxh4gJVEXewic65AjKHtHM5G9/YM=)
                          5: 7MPHOAKYNCQ2xVVtX-dAO9Hplgo.roa (hash: FBM48UW/xbimb/aJNqUJybJDXrMCRyhkyDQ3AZjUS3I=)
                          6: AAaiuRODfTGEUfrhe-gv2hsNgVA.roa (hash: 0Jq1ZeGDM3pEH+vp/o3v4eZIERfK5h1j5LaRjoQ2LM0=)
                          7: AZCIbV1AjNVpLGvcP33omOVz8Gc.roa (hash: vw/NrSezF90xzZMYh5Kpw4JIpfWEYSz25E42iMGblC0=)
                          8: BAlOgoIsmPUmc14hL_4idboOq7c.roa (hash: nwsRaPfmt/uqx2MQel9bLy5S7dr2nh8ZIEs9nh6vdro=)
                          9: BaN2SHSRmigZmqGETkS5UrgAXSc.roa (hash: 3yRX5O5QrF9IQzLzpoXj+0AApPO0j2FXSTxiu9CkVlE=)
                          10: EXiNu2cB9vgr4kJF3OkTMYDYBH8.roa (hash: 9ktLg8uxfUa8OLDDcOWd3rcSG5BewY0UOtO7Xt4lsLY=)
                          11: EaVm-815146B0JfE87lsUZX5_QA.roa (hash: OAA1xcbVOuYQEEru10RAdhyPlXBmSial6bqjqnQ1Dsg=)
                          12: PCBfSV5_lfy2glKXbk15D1wu1HY.roa (hash: UGZx0w4Fy1zDzqZhYpTK6hHi4xJtKeR0w2Q4xW7SZlo=)
                          13: Pbs48PiseYpM1Rm3Wb3mz0zyzuY.roa (hash: CZgbp1ybs7H07deEr4q6FASBffJOukOUIxbk33RUF5o=)
                          14: SeUWlMTUa0_MAvrnHl25QqcQjkc.crl (hash: JV7a1OTQneDbFpeu3JM4I8weh8ThfpkYvadAGw6IHRY=)
                          15: WUkofYn04yMSwquxuWlMW4mkzMA.roa (hash: 8WOEPrwg4PjZtPdNRMnDYT/aMN89KmerjOv8ZE8jMCo=)
                          16: bnxDiHRGx6Oc7bDIY901qxWHovk.roa (hash: X16BVh8vl4vN27nJYUEl0aq7IvExn4DShr1TOfp0/8I=)
                          17: hFGJINVEt4ftaLRW68GmieH_BnE.roa (hash: 9E4AE+rQ+a3SR9l9k7qEf9uVvkCgRfq35VdS2VefDEk=)
                          18: ozL6hGZHCTqnlTIjscDI-TOinzQ.roa (hash: DO7Cm/djGR9L5fCqy/j5zvtpoP9nEXWUGksC45qP83U=)
                          19: r58BG7PDZNONzAu1H1rM_owWuUM.roa (hash: T3Ca7LXgeR+axtFfYGSOAeLSyM84O96oAukjwwlG+ho=)
                          20: sm6o9-wKEkqJWRlmpJRrK4tU7O4.roa (hash: J67o4BC977NPU+WUAlYoVCom6jn7snzVTMmmfs2coJc=)
                          21: snKK9GOQSHFim5mBO2Ciu_9DK3E.roa (hash: R4PA+1wIy9SBYHNac3IHKhvJvmPa5zvDhBUSVeoVv7g=)
                          22: wAbjcIV7ghNvyRnkWUNEt6DFB38.roa (hash: /6yK2Sprwji33MmS5o++un6jqsPakbfHu2BQWaACjzM=)
                          23: wK_oDmvQI0bsQF7OUQK98Z5kR_4.roa (hash: W8yAf96xxhZbVLFnDqtClYNkau1ibL7YiLD4BB2aSxU=)
                          24: yxdmuN0Ax2hqqXj37g9qa3ZZnAo.roa (hash: QOKP1g+ey1Y3HcYF5aXodB8/GII8EEy//Zkwdc8bGkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:60:05:37:24:41:28:69:54:48:cc:0c:6d:a5:8e:db:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: May 10 01:01:45 2024 GMT
            Not After : May 11 01:01:45 2024 GMT
        Subject: CN=9c85c57fe4ab38b904126a3af97562e9ca00a6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:22:14:c3:d9:b2:6f:c4:24:aa:39:2d:b1:
                    4b:da:1b:9f:97:f2:49:85:c1:cc:6f:5f:79:ce:6c:
                    6f:2a:b8:f8:f1:91:ab:93:98:b9:0f:d3:d4:12:ec:
                    e5:f2:df:91:87:40:7a:d8:bb:86:60:bd:f1:a9:cc:
                    bc:17:c9:fa:f5:36:90:00:c5:6d:04:9b:31:4d:fa:
                    57:ef:fe:72:34:5f:b8:57:cc:6e:35:be:99:26:e5:
                    88:37:be:19:b9:e4:0c:9d:53:ec:7b:42:e1:f4:a6:
                    c2:66:b7:42:b4:03:94:69:7a:47:da:a3:5a:04:a5:
                    9b:f6:1a:b9:e8:62:0b:55:0e:65:32:0c:68:fc:f7:
                    4f:68:fa:fb:55:0d:5e:25:fb:96:ea:2a:2c:c9:23:
                    90:ba:8e:5a:1e:87:d5:f2:2a:4e:9d:2b:55:4b:5b:
                    46:13:ef:13:dd:7e:69:33:ac:94:1d:f5:a1:ab:b9:
                    c9:0f:49:61:46:10:42:e0:c5:3c:5a:30:7f:63:53:
                    b4:ef:05:d0:cf:0f:50:55:a6:24:c2:15:bc:78:b5:
                    3f:67:ed:7e:ec:1d:2d:17:ef:c4:19:4f:22:bd:28:
                    e2:1c:f6:e3:30:19:59:d0:eb:d2:50:82:c5:ff:3f:
                    fe:75:b8:03:08:2b:64:40:f5:ba:cf:dc:64:2c:a2:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:C5:7F:E4:AB:38:B9:04:12:6A:3A:F9:75:62:E9:CA:00:A6:CC
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b6:90:75:e2:ae:70:79:27:dc:72:81:86:72:9e:23:ab:c6:
         92:1a:32:d0:4e:ed:61:84:72:60:cc:d0:14:1c:77:6c:6c:f5:
         b8:a1:a2:fa:08:fe:c9:87:9f:b3:9f:4a:6c:b7:07:96:5a:89:
         88:d3:70:0e:ec:ce:94:e4:ad:7c:e3:30:93:fe:0a:be:9a:76:
         c7:4a:a4:ca:f1:40:7b:14:ca:d0:14:89:be:ba:a3:42:2e:9b:
         c3:ad:ab:26:fd:7c:e7:36:42:c4:92:80:f2:8a:d1:15:2a:34:
         3a:57:0e:81:55:82:07:83:b6:d9:6c:05:ed:22:5c:8d:fa:79:
         04:3d:ef:1b:41:d5:57:03:39:9b:c7:13:80:8e:48:d9:57:74:
         4f:91:7c:87:b1:2f:35:fe:3d:e0:e7:9e:83:ce:b8:72:65:3f:
         bd:2e:cc:e5:db:39:1a:3b:31:0c:48:b6:8b:66:6f:34:3e:13:
         30:92:0e:cb:3b:48:f2:86:f2:af:d8:89:3d:b4:41:ea:13:83:
         eb:06:1d:26:f7:f2:70:8e:96:16:ef:1b:06:74:bc:86:33:74:
         46:dd:08:59:74:b3:09:66:c3:0a:67:29:84:69:af:f8:a1:c1:
         69:08:fc:cd:d7:17:65:e7:2e:02:06:44:f1:79:d8:a3:1f:cf:
         a9:5d:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:32:09 2024 by rpki-client on console-fra.rpki-client.org