Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
File:                     SeUWlMTUa0_MAvrnHl25QqcQjkc.mft (raw, json)
Hash identifier:          p1VqPprsThIJzZ7pFEpZwCqqfMgGLW+d6OvdpolOWJo=
Subject key identifier:   F5:22:B6:6D:B2:7E:04:E0:DF:40:5A:68:8C:56:2F:74:AB:05:04:AD
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       0193508681A73CF978BDF4E337E4205A5005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
Manifest number:          09D8
Signing time:             Thu 21 Nov 2024 21:00:12 +0000
Manifest this update:     Thu 21 Nov 2024 21:00:12 +0000
Manifest next update:     Fri 22 Nov 2024 21:00:12 +0000
Files and hashes:         1: 1-sdLyNh6hlJQir7aI6q15ve6Mg8.roa (hash: wCXFeL5eO0Qkxev4Eciyp1prZdVXlLBPlJTUbhCYIMM=)
                          2: 3Wyu8LKaJIymBfME05UwUZ7jfWg.roa (hash: lS1sn2D9+05c7WlW7Lrth8L3s9BErm1N0Hqhyoo/MK4=)
                          3: 3XbdhDgzpcMMlYI0AL9SENrD-kI.roa (hash: 8qt2zIEeHAui23YIk2Ya6Om0o+Hh/uw7mObeoyvLGxU=)
                          4: 6E39cCrSgvy_LbjvTRWK2nfYSx0.roa (hash: NatURe2gPMAzIoNOxh4gJVEXewic65AjKHtHM5G9/YM=)
                          5: 8T_A_hADjiLDXw0YhuGmVmP58rQ.roa (hash: Xv7c+7UBSd9KDIOvKf2qvcd3i/vobpNgbEukMMuNa9k=)
                          6: BAlOgoIsmPUmc14hL_4idboOq7c.roa (hash: nwsRaPfmt/uqx2MQel9bLy5S7dr2nh8ZIEs9nh6vdro=)
                          7: CF8z_JfS3FdOLTWt4pnSrOuvkCE.roa (hash: 1UuENJ9cfPTe14LLOiQoAMn0K55s1jJl4lh0E2Ff2ZE=)
                          8: DS8zOixqtvUkWP19TGqx8SyjfPI.roa (hash: LxVHadY6chs/qedBOrWZVkHdNkQ+1GaPVDVhnC3DaPI=)
                          9: Dlg1wwlQI4GWU4jsoTwAetJQuqE.roa (hash: BhaFGn/eBUADFiWvOdxfaouWkhh8/r/9CybNKL+Gs0Y=)
                          10: EXiNu2cB9vgr4kJF3OkTMYDYBH8.roa (hash: 9ktLg8uxfUa8OLDDcOWd3rcSG5BewY0UOtO7Xt4lsLY=)
                          11: LyymrIY-UlgWUjWtdDuKMlcR9JI.roa (hash: nl2XYIwwXWy75WMO4c25WWNMef+sBoQpyGWT/ULyrnw=)
                          12: OAN6Jw81_7aj5c_92rtjdeLgY1Y.roa (hash: hkwtPLALbUBGnS4b6NiLXRM3FlHZ26ZqTepo0GwwE+E=)
                          13: OYbsDpHb_iFC9TgkN-hl0t9Ag8w.roa (hash: BPP5Lba3qOdQq+FGAds2IsSWGOVix63S93Qc/Uj/fsQ=)
                          14: PCBfSV5_lfy2glKXbk15D1wu1HY.roa (hash: UGZx0w4Fy1zDzqZhYpTK6hHi4xJtKeR0w2Q4xW7SZlo=)
                          15: Pbs48PiseYpM1Rm3Wb3mz0zyzuY.roa (hash: CZgbp1ybs7H07deEr4q6FASBffJOukOUIxbk33RUF5o=)
                          16: SeUWlMTUa0_MAvrnHl25QqcQjkc.crl (hash: d5ueRPHa9AUGcF93JKCq/Z0hnJyqYQeTTw2MGt4Vkjs=)
                          17: Styp8rsptuXYcoBCl04uh5P60kc.roa (hash: hTkjFiv+kU7yRjGZDmSqy7IaMI+RD0MNX8dkMF3F9oE=)
                          18: WUkofYn04yMSwquxuWlMW4mkzMA.roa (hash: 8WOEPrwg4PjZtPdNRMnDYT/aMN89KmerjOv8ZE8jMCo=)
                          19: Y9eUI0D-QBR9EFWZtKSMnX6TeQs.roa (hash: iiRJwUinossOhRLP4shu3y1y9CxF40/3arCTNh2uVR0=)
                          20: bnxDiHRGx6Oc7bDIY901qxWHovk.roa (hash: X16BVh8vl4vN27nJYUEl0aq7IvExn4DShr1TOfp0/8I=)
                          21: o9q2JQ00Lo7O0_z_aqMtBQ9SI-Q.roa (hash: c7Lnbxm4y6lyv6AKHBsrqU4UNx9RuY/tSBlM800K4Ig=)
                          22: ozL6hGZHCTqnlTIjscDI-TOinzQ.roa (hash: DO7Cm/djGR9L5fCqy/j5zvtpoP9nEXWUGksC45qP83U=)
                          23: qGSQdjcXyhT0QLKjchrOjSnQ7gE.roa (hash: EQAqL99JSflycP0fZPJYNQJHHrRVzzt52ckpMKtIf7g=)
                          24: r58BG7PDZNONzAu1H1rM_owWuUM.roa (hash: T3Ca7LXgeR+axtFfYGSOAeLSyM84O96oAukjwwlG+ho=)
                          25: smVfooDQO_edmWP8jl4HY2uLMN4.roa (hash: C6dCRCbGaSEDCBfxFQJhOOVnvCCLMm8Zz+RgpeYAJQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:86:81:a7:3c:f9:78:bd:f4:e3:37:e4:20:5a:50:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Nov 21 21:00:12 2024 GMT
            Not After : Nov 22 21:00:12 2024 GMT
        Subject: CN=f522b66db27e04e0df405a688c562f74ab0504ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:e3:68:fd:8c:c5:2d:44:33:31:c3:d1:7e:
                    73:f1:d5:3b:82:3b:a1:03:a3:6b:65:b3:a4:a7:a0:
                    78:71:c2:b9:92:b3:43:e2:52:d5:ea:a7:93:28:c3:
                    d7:99:22:04:9b:7c:f1:2b:0e:ac:5c:02:17:01:13:
                    90:4b:cd:5e:1f:26:98:a0:b4:87:89:65:a2:61:cf:
                    bf:56:89:27:97:fa:bd:cc:57:f1:ad:ce:d7:a7:7f:
                    56:57:68:66:b6:db:8c:66:2c:d8:49:f9:1b:8e:f7:
                    f1:30:bc:31:8f:c1:87:61:f7:17:df:79:ce:80:37:
                    90:82:18:2b:26:13:68:0c:e2:18:d4:a9:82:b7:b7:
                    67:a6:42:a6:88:07:86:51:d5:4d:9b:9b:58:20:e8:
                    d0:a7:60:fe:f9:ac:15:37:36:52:e0:a6:ad:a5:c0:
                    7a:dc:c6:2c:27:2e:5d:fa:21:51:5f:0f:1c:23:26:
                    0b:55:37:a8:65:2e:31:c4:da:bd:33:bd:d1:30:d0:
                    a5:8e:2b:91:77:b1:55:96:a1:a8:12:83:73:42:2b:
                    93:4c:64:b0:e5:19:f4:7b:9d:1f:8e:29:61:10:2a:
                    f5:07:3a:d6:82:fb:ee:d6:eb:59:b6:b7:59:e2:48:
                    ad:ee:98:c2:0b:af:df:d5:a9:71:68:d5:af:2f:27:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:B6:6D:B2:7E:04:E0:DF:40:5A:68:8C:56:2F:74:AB:05:04:AD
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:f3:d6:62:ae:94:a9:58:a5:0c:5c:a3:73:e1:16:57:54:
         4a:c4:3a:57:75:ec:25:d6:d3:e7:ff:c3:68:e5:5a:ab:9c:42:
         0c:c6:7b:ae:54:75:83:9e:e2:a3:31:7d:28:8f:98:df:17:83:
         28:9e:ab:8b:d7:3c:ae:1c:ca:0a:2d:e1:1a:2b:f9:70:c8:1b:
         1b:94:56:eb:2b:56:b5:f0:ed:73:53:0f:64:86:85:cb:6f:c1:
         20:b7:ed:f9:8a:7b:14:6c:04:37:4a:90:28:bd:84:c3:34:e2:
         6c:81:98:f4:f7:d4:ba:e1:02:31:7d:28:b9:54:ef:21:be:24:
         79:9a:dc:d5:b1:ed:58:fd:59:c5:0d:f4:a9:d7:87:3f:d0:65:
         2c:09:58:32:25:84:ab:ef:dd:bb:a5:23:98:fb:9a:94:a3:cb:
         a3:07:0b:ff:b9:d8:65:fb:a4:de:d9:81:34:95:ca:14:de:10:
         fd:32:3f:48:c7:39:25:6d:53:f3:9f:f6:c2:f7:77:19:3d:ad:
         dd:28:e1:2b:2f:58:d7:69:6c:18:e5:f6:59:71:a7:13:3a:d2:
         ef:44:b5:1b:2e:11:e1:6e:12:b7:2d:05:c8:c4:f9:4c:46:b2:
         91:68:a6:08:87:1f:81:2e:dd:7e:79:c1:0d:25:98:ff:48:a9:
         25:9a:08:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQhoGnPPl4vfTjN+QgWlAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjQxMTIxMjEwMDEyWhcNMjQxMTIyMjEwMDEyWjAzMTEwLwYDVQQD
EyhmNTIyYjY2ZGIyN2UwNGUwZGY0MDVhNjg4YzU2MmY3NGFiMDUwNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xPjaP2MxS1EMzHD0X5z8dU7gjuh
A6NrZbOkp6B4ccK5krND4lLV6qeTKMPXmSIEm3zxKw6sXAIXAROQS81eHyaYoLSH
iWWiYc+/Voknl/q9zFfxrc7Xp39WV2hmttuMZizYSfkbjvfxMLwxj8GHYfcX33nO
gDeQghgrJhNoDOIY1KmCt7dnpkKmiAeGUdVNm5tYIOjQp2D++awVNzZS4KatpcB6
3MYsJy5d+iFRXw8cIyYLVTeoZS4xxNq9M73RMNCljiuRd7FVlqGoEoNzQiuTTGSw
5Rn0e50fjilhECr1BzrWgvvu1utZtrdZ4kit7pjCC6/f1alxaNWvLyfdiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUitm2yfgTg30BaaIxWL3SrBQStMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMPz1mKu
lKlYpQxco3PhFldUSsQ6V3XsJdbT5//DaOVaq5xCDMZ7rlR1g57iozF9KI+Y3xeD
KJ6ri9c8rhzKCi3hGiv5cMgbG5RW6ytWtfDtc1MPZIaFy2/BILft+Yp7FGwEN0qQ
KL2EwzTibIGY9PfUuuECMX0ouVTvIb4keZrc1bHtWP1ZxQ30qdeHP9BlLAlYMiWE
q+/du6UjmPualKPLowcL/7nYZfuk3tmBNJXKFN4Q/TI/SMc5JW1T85/2wvd3GT2t
3SjhKy9Y12lsGOX2WXGnEzrS70S1Gy4R4W4Sty0FyMT5TEaykWimCIcfgS7dfnnB
DSWY/0ipJZoIJw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:17:04 2024 by rpki-client on console-ams.rpki-client.org