Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
File:                     pXbrLMRi5uS_Deabn2NIdd67quI.mft (raw, json)
Hash identifier:          tyEuPqXLpvklpiIzF03jPn6pE4ZsxPuTixBKWOw8NP4=
Subject key identifier:   CB:F7:2E:3E:6A:4D:44:5A:37:44:F7:57:B9:A8:C3:3C:C7:BA:09:AF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018F4BA20F2456EDC2A052E4A999027D0E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
Manifest number:          1233
Signing time:             Mon 06 May 2024 02:01:02 +0000
Manifest this update:     Mon 06 May 2024 02:01:02 +0000
Manifest next update:     Tue 07 May 2024 02:01:02 +0000
Files and hashes:         1: 0-_GiMrQ_kBCiqs9PT60fUJStkA.roa (hash: zvp0vIvPuKyFs2aQvx6tqP6/dRw1a9wXc9uIkbzwx0o=)
                          2: 01knJTZP-oeKazqwQ1MILI7KFkA.roa (hash: XHyEn40jsiyfbqHfrngX8+xEQQ7CWvJJjXBp8TKPPwo=)
                          3: 1-AC1q_5bgsPmROAB20L2UcteE8g.roa (hash: KCd5dSAmkg3NSbIZraJVGiZwCgWBnzCFp+FCSCQYGnw=)
                          4: 1-Qz2RwTh4YZwL-YwvaxgJVlXJC8.roa (hash: lIbRJC1f9aX6M+q2gIB9gpeOxnMfH24UeiDY6iSsAkE=)
                          5: 1-mcK9Gsw5V9poIuyO2hNOILm7cE.roa (hash: XOBFCFel/Rob2VQ7PXBqbqLsRypyTBakHXAwZghaFS0=)
                          6: 1kZrDD2SugdCQxS9yHpZJE_leSA.roa (hash: //wg6FUcHF2cGZ9ZL08Z5vrTbROfMSjzGjjNevrPlY4=)
                          7: 37Ma40sf-bcVCPVGvcKdCncPDrM.roa (hash: Ani6qT14FiQAiEaGYt6068UQIsGaAWq+tHMUGDheBGs=)
                          8: 4TframMVc_SCxepgvO0QV1jqsTc.roa (hash: bvtBZMNh2mwscIkbkIkLNM8afHHfmMCUfinIqGQJ7uU=)
                          9: 4oAof6-6CHyWIMnD4LAB3eOe730.roa (hash: 70v1HMxWB6NjLPdRNGjxMl49BBDJZb/riZsctifnoVE=)
                          10: 6wkQXJYdywFqz960nNr_W-aj02U.roa (hash: 9ZuYXnnzNRzo+J+7mV9QJSCCPr1dje4UssFeV6fu/to=)
                          11: 7_5DEvBLZrcUSLFgSHeEBjqVCWg.roa (hash: 1jl/hTprRpNQ7g0H7ZGExCXo7Gjz6z7EqaFomXXV9Lg=)
                          12: 97SmY25z5BLHRkHcMPX-k5s4IL4.roa (hash: gaeub3zxuFrpPZZ9lflWbFxg/sfB7OZ7+3zMKW3Rcag=)
                          13: 9XL3dFcncdTVunXQYu7X25f9fpY.roa (hash: uoINFd7ZeVEqbiBuW2nOwB387pah9uWGIJOb1dnrbNE=)
                          14: AlnFP2-OnHXs0Eb_bJ5hC7nG3cc.roa (hash: gL4zvkYZgwzOL8ct0SaRMVtqZNZqoG8oS9EgIzgORXE=)
                          15: AvqK7fCgDQjM013QtrgQ6yDiy_o.roa (hash: 6XJVvc7Twjxy4pBK2HYeOAK60ZqzluHrP5oYnFk8OtM=)
                          16: E57y-NG731mMD5GqU14JO1_eG_M.roa (hash: sb+MTVM6N9+aT3XijvC/nqsPi6G7EyAumkhcwiHzjVY=)
                          17: EyjxFNIEM6WKkRgNFLZ3ai3sirI.roa (hash: nNSfLSXHbhfkowUWcfaoLJMfOdg1NdNf+wK9vua6FTo=)
                          18: Iv8YIZXwJCONA-LaFw643_5X1Ng.roa (hash: 0qg0QIBH/gvqhQI34MLqfqYUTGqj0FV/0g2C6VZznGc=)
                          19: Jj868NtS0c9kji8EHkSVavq5k0Y.roa (hash: 8a+NVgspf5Xj23jYjX/7JKMrOBx9YJUUjK+qIH8lARI=)
                          20: L4_OEwfphYFUu2O8AamkOTy4e7E.roa (hash: Ej1s9MyacyfWz2sIpk/8qYcq2bg6guFF18QITRc7viU=)
                          21: OTEQ2P2MROWs6AxOW4hUmKOckKY.roa (hash: d4O1L+olwqfmOF/tNkzuFgXJZ5zDqOtPqmyzAEOPIK8=)
                          22: OvLNoI0dEvpzrBVtu3fY1ox9I64.roa (hash: Vrtw8dT1eiYpCEor+zJYvYq7iK5rM/yHUJKXasDkxw8=)
                          23: P-jJo4yDAI19dVv1fLWkueAv-EI.roa (hash: hCFXc0skRdCR9KHxC42z3OBn0tsHHRYB3Vs+5YtZvGs=)
                          24: PfNtGBYMWktms-iewPo-B2YDCek.roa (hash: kM0buE1RpMaoMtH40JhVg2d0QOttaLXsigXDQ708YE8=)
                          25: Q7Cj-5aPxeVME_68h1isL89jtZI.roa (hash: qjFOZXFzdJbjF7HjxoALXKTxFVsqXw2E6t+aEgtAGAs=)
                          26: TLDJ4bsC1L8bdvfLSl0wCY3GNyM.roa (hash: ppaMD8e+30vb87JsLxRBF9bSIhdD9jiTiA8gc5vMShU=)
                          27: TyZTYxAEJNHHkGRjgj7NowaJNJA.roa (hash: qtI8RkVXdPdkkq19hPGcpFbutELsCTVT6eg6R46kSVQ=)
                          28: U7L9BQRf-HQyVLP2ivxAsU0IDSM.roa (hash: z1Rf4YxrxddcIRSX4O72Eas/nbjBA9Gzih2m6h59FKE=)
                          29: WKZEG84-shx5CZeoMtYJKfIeqh0.roa (hash: lGE1eHDQdvQs5ZzeEPwHeW9djCWeayqg7osiz8NnyRw=)
                          30: WXDdDzTwfzyyriRRG19spnDACXM.roa (hash: DYoJQ2QkjjrvqiqbBb3wdjGKMJRQlIOWK8xQDl8EqXY=)
                          31: XPo6j4yi2iTwUawiP-FGRXHwfjU.roa (hash: nTjtDkSCeH6wR6Hq3A1vAtfvZLheHyrlyf6tUPctZEw=)
                          32: axBnmS-_ALxC2zXGHDc3Gl2VqxI.roa (hash: F9OPmVfE0cbWbMWSwGiAKSAdAr1V01L3XuLoxhZuAL0=)
                          33: dfDt1MtSA63pMp9SQXFzzOlCT9Q.roa (hash: /UoYW2ZRPLcJVYhJYvH5c/cKH9ILKkQKTgdgtxOZUyk=)
                          34: hU9-mHAg23uLrOPdPYE4hJvXUcA.roa (hash: CWIIzYVI1WyA72E9xcF17h6Igu8m9hZn0gOqHL/Kd94=)
                          35: hhGQdb0gUs0rM7eARMGyPkve2pk.roa (hash: T/S++TalorieoLa2CZwE8UGHH+8o6AVSmyTcTYJeBIY=)
                          36: j3OvivYXXScuY3Tet8VxJLva2bw.roa (hash: JwSGu0YT0FovxO0WFLRMvHo0MTGSIR5OzTSuaVfKsmI=)
                          37: kMzTs15lml0u--8DeDIZ3ahYB-8.roa (hash: hmu1j5piIsrOJ4koHYlWa9Aa3VoNfnl47fPB74RcAdg=)
                          38: kxmQzWugqan0M500ckn8R8o9ldA.roa (hash: 4q9+lxButaqdJHDypR9OvpuBgB34jHQYguH/hWDYa7M=)
                          39: ogbGCuW2LMZxp1GfJEE5cR4aDr0.roa (hash: 1BaCz8yH2d4cX/6I2UbCDFYZci3GMSA2d7F/vk/5yuo=)
                          40: pBgr8z2YIeUfbXYQIj49rbpJUHU.roa (hash: yoaI9P8cplgBNxv2L6XtL6X1gxRMp8ZQfosDkGp943Q=)
                          41: pXbrLMRi5uS_Deabn2NIdd67quI.crl (hash: bZKMxlivSuAERVN/K0P7paYqE3yk54WgikYZ60a41HY=)
                          42: rP9pakvx44En7j408-QN9rnJbx0.roa (hash: HS083Rq0+0878mDqAZ27f4t0z4HSeEWNRWSlMZGySR4=)
                          43: rkAjSoRQYvHDBQwHMULLhg8pJxE.roa (hash: McAHsriYAZ2050uQZUJSDML333trjc4+xfmEnyiqqeM=)
                          44: t7Rz42dce0i5zAzJYPL5lASxwxk.roa (hash: KeMMOhaC1ZVvpzUfJEcGrQDqSdgEthZUxyBkAL8jV0s=)
                          45: tKRKLT4k6gTBGXUwVqoQP5wf828.roa (hash: mHlH0m5gNtQodNsj6u7qW5OHRqBubPK99/1nL+d+Ats=)
                          46: v1XHW22dr2QZDeBaRGWo949sl98.roa (hash: q2zutVFp/kvMHYnycUy5U0rZOXUn4Zs5Ao5oph025mk=)
                          47: v7CEyulOfWiBVGa2Zo7udyX5XqU.roa (hash: 6Rg6HrQTHGl2atmyyDGVykOBG0t3dIMm6MxR8AxPN84=)
                          48: vK7quuDSBYcDW04PnbcKHxV1OY4.roa (hash: ybnD7c/Zfplg7YrZZdyScbvHowbc7bkVeq2zBDuE2CM=)
                          49: wDivuVtF4ZlarCLWhTxi7mlMgfg.roa (hash: jlze6m6UfFOKshbpZ4bVM8048TUbLfRO5Dc7G7dPPqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:a2:0f:24:56:ed:c2:a0:52:e4:a9:99:02:7d:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: May  6 02:01:02 2024 GMT
            Not After : May  7 02:01:02 2024 GMT
        Subject: CN=cbf72e3e6a4d445a3744f757b9a8c33cc7ba09af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a7:de:68:6e:db:1c:f2:e3:91:72:09:af:b3:
                    d2:74:c0:0c:51:b8:57:ea:77:cb:6d:b0:12:18:96:
                    96:e4:92:6c:95:cf:07:0d:9b:70:01:4b:3e:39:45:
                    68:c2:b6:b1:71:b0:e1:12:ca:60:c7:e7:d7:8a:6c:
                    5b:65:9d:db:d1:19:2b:99:29:59:6a:aa:0d:5f:9f:
                    bd:bd:f3:e5:85:0e:18:f8:53:df:af:6b:8f:72:dc:
                    2c:b6:74:f8:54:a0:47:00:75:0f:10:b6:d5:a7:63:
                    6f:05:aa:ad:e8:c2:0f:44:de:50:2c:45:68:a0:fa:
                    2e:34:e2:dc:1d:97:2e:da:56:60:59:ae:ea:dc:82:
                    dd:11:7c:db:6a:62:93:88:8b:ab:3c:ef:d9:9e:47:
                    cc:a9:b4:0a:fc:7b:28:df:60:18:ff:12:60:32:3a:
                    d3:08:76:26:8b:f8:23:2d:67:3c:73:e4:6c:af:07:
                    30:f9:f6:50:cb:9b:88:09:62:1e:fe:b9:bb:6b:0a:
                    46:e2:17:c6:76:29:5e:82:3b:d6:c6:59:e4:20:c6:
                    d8:c5:17:f0:83:8b:87:4a:99:36:df:7a:73:36:78:
                    f0:ec:2f:86:4f:fb:bf:e4:9a:57:85:ef:59:2e:0a:
                    1c:58:28:1f:2c:6d:0a:a5:97:70:5d:45:fc:45:70:
                    de:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F7:2E:3E:6A:4D:44:5A:37:44:F7:57:B9:A8:C3:3C:C7:BA:09:AF
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ac:d3:66:ea:4c:7e:3a:97:bb:2c:0c:c7:f5:99:5a:e8:31:
         02:fc:7c:60:bc:e9:9e:e0:ad:51:d3:3d:10:a6:b8:0e:33:93:
         db:91:c8:2a:aa:c6:1a:44:32:c2:90:6a:d7:d2:f0:83:2b:97:
         b2:5b:40:cf:3f:da:0b:92:39:9a:3a:7e:ce:44:67:4a:78:80:
         44:ed:f2:b2:e5:fc:0a:19:cf:b1:1b:cf:76:94:93:cf:6d:68:
         5e:73:4b:5e:4b:8c:0a:fe:b8:81:35:2d:b0:d7:8a:f2:f2:f9:
         1e:cf:e3:12:d4:1f:2d:b8:9d:78:fd:13:38:ab:aa:73:00:db:
         8a:57:a7:a8:a4:78:3e:3f:32:53:65:9e:b3:9a:08:01:3e:1a:
         92:75:c7:ff:56:0d:99:a2:db:ac:0e:ab:7c:b9:fe:26:25:e3:
         de:a0:43:d2:05:d1:91:6a:05:6e:03:8a:f8:4a:be:fa:d6:96:
         18:ba:b9:af:a3:90:80:5f:a4:44:54:94:3e:ee:81:71:e5:b0:
         d3:e6:7b:27:66:9a:93:cd:b9:0f:50:07:7f:7b:0b:f8:9e:ee:
         26:29:0f:40:ac:0c:f4:e8:a1:be:96:5c:c6:eb:ce:e0:11:24:
         c2:d7:7b:66:90:2c:fa:da:ec:9a:a8:0c:2b:ea:5d:da:fb:c0:
         95:0e:19:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Log8kVu3CoFLkqZkCfQ6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjQwNTA2MDIwMTAyWhcNMjQwNTA3MDIwMTAyWjAzMTEwLwYDVQQD
EyhjYmY3MmUzZTZhNGQ0NDVhMzc0NGY3NTdiOWE4YzMzY2M3YmEwOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8afeaG7bHPLjkXIJr7PSdMAMUbhX
6nfLbbASGJaW5JJslc8HDZtwAUs+OUVowraxcbDhEspgx+fXimxbZZ3b0RkrmSlZ
aqoNX5+9vfPlhQ4Y+FPfr2uPctwstnT4VKBHAHUPELbVp2NvBaqt6MIPRN5QLEVo
oPouNOLcHZcu2lZgWa7q3ILdEXzbamKTiIurPO/ZnkfMqbQK/Hso32AY/xJgMjrT
CHYmi/gjLWc8c+Rsrwcw+fZQy5uICWIe/rm7awpG4hfGdilegjvWxlnkIMbYxRfw
g4uHSpk233pzNnjw7C+GT/u/5JpXhe9ZLgocWCgfLG0KpZdwXUX8RXDe1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv3Lj5qTURaN0T3V7mowzzHugmvMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKzTZupM
fjqXuywMx/WZWugxAvx8YLzpnuCtUdM9EKa4DjOT25HIKqrGGkQywpBq19LwgyuX
sltAzz/aC5I5mjp+zkRnSniARO3ysuX8ChnPsRvPdpSTz21oXnNLXkuMCv64gTUt
sNeK8vL5Hs/jEtQfLbideP0TOKuqcwDbilenqKR4Pj8yU2Wes5oIAT4aknXH/1YN
maLbrA6rfLn+JiXj3qBD0gXRkWoFbgOK+Eq++taWGLq5r6OQgF+kRFSUPu6BceWw
0+Z7J2aak825D1AHf3sL+J7uJikPQKwM9OihvpZcxuvO4BEkwtd7ZpAs+trsmqgM
K+pd2vvAlQ4Z+g==
-----END CERTIFICATE-----
Generated at Mon May 6 04:16:21 2024 by rpki-client on console-ams.rpki-client.org