Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
File:                     pXbrLMRi5uS_Deabn2NIdd67quI.mft (raw, json)
Hash identifier:          fAj14nPLc/ZHP7/g9fFl9NWmyPfVbdXSOTTVHEeVlJ8=
Subject key identifier:   7F:5D:7E:94:09:06:BA:8D:86:98:76:13:6E:BB:A0:0F:CC:16:0E:CF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01934DF3C5DB85F3CC264DDFDBE9EB8BE386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
Manifest number:          1466
Signing time:             Thu 21 Nov 2024 09:00:41 +0000
Manifest this update:     Thu 21 Nov 2024 09:00:41 +0000
Manifest next update:     Fri 22 Nov 2024 09:00:41 +0000
Files and hashes:         1: 0-_GiMrQ_kBCiqs9PT60fUJStkA.roa (hash: zvp0vIvPuKyFs2aQvx6tqP6/dRw1a9wXc9uIkbzwx0o=)
                          2: 01knJTZP-oeKazqwQ1MILI7KFkA.roa (hash: XHyEn40jsiyfbqHfrngX8+xEQQ7CWvJJjXBp8TKPPwo=)
                          3: 0PSxMZsIL4KFY6z5P4F4rb7AhbU.roa (hash: l5e4TMTjbBxBuLOdmwzAbWqJ+hSxAW8G9GEfM/WBbKw=)
                          4: 1-AC1q_5bgsPmROAB20L2UcteE8g.roa (hash: KCd5dSAmkg3NSbIZraJVGiZwCgWBnzCFp+FCSCQYGnw=)
                          5: 1-mcK9Gsw5V9poIuyO2hNOILm7cE.roa (hash: XOBFCFel/Rob2VQ7PXBqbqLsRypyTBakHXAwZghaFS0=)
                          6: 1bRPzSb8IHbfflf9YsOg-9hnf-g.roa (hash: 5lOX3Ipj8P0YWaHSa5sE9wTAvoxIvxxnfCMb7xecWsI=)
                          7: 1kZrDD2SugdCQxS9yHpZJE_leSA.roa (hash: //wg6FUcHF2cGZ9ZL08Z5vrTbROfMSjzGjjNevrPlY4=)
                          8: 37Ma40sf-bcVCPVGvcKdCncPDrM.roa (hash: Ani6qT14FiQAiEaGYt6068UQIsGaAWq+tHMUGDheBGs=)
                          9: 4TframMVc_SCxepgvO0QV1jqsTc.roa (hash: bvtBZMNh2mwscIkbkIkLNM8afHHfmMCUfinIqGQJ7uU=)
                          10: 4oAof6-6CHyWIMnD4LAB3eOe730.roa (hash: 70v1HMxWB6NjLPdRNGjxMl49BBDJZb/riZsctifnoVE=)
                          11: 4xLax9OsL5R3lImItcSpXXuz_b0.roa (hash: lNKnHIzysluMT8pYwD3y6O6/g6BzCJKiJBkK2b44X9A=)
                          12: 69OAoX-JeNZUOl-TnEPwTiCTmIk.roa (hash: zLFVR6+zJdTf35GCMGa2PDyqfCk1z+xOyZXcoOt2tv8=)
                          13: 6wkQXJYdywFqz960nNr_W-aj02U.roa (hash: 9ZuYXnnzNRzo+J+7mV9QJSCCPr1dje4UssFeV6fu/to=)
                          14: 7_5DEvBLZrcUSLFgSHeEBjqVCWg.roa (hash: 1jl/hTprRpNQ7g0H7ZGExCXo7Gjz6z7EqaFomXXV9Lg=)
                          15: 93AC_YG_FUsM0NWpmTy5xN29Iu8.roa (hash: Sh92gzer6lx+FTATUw2pdLOsOgVqQxlwfFWHocsNNfI=)
                          16: 97SmY25z5BLHRkHcMPX-k5s4IL4.roa (hash: gaeub3zxuFrpPZZ9lflWbFxg/sfB7OZ7+3zMKW3Rcag=)
                          17: ATBJfF4r9EBpNoYcOly_NMkTAgA.roa (hash: ra7LXswiTpR5EFikxwRiC3AKYYM6A5TxClX1bFjjIGc=)
                          18: Af4nsGDJm7huCRdNdLEVbcYTfxY.roa (hash: bP2gRiWYqDV8bUmrj5Ov+X1eyfP12v+GJ2AIagFCBVk=)
                          19: BypXmvpbhcejR4GI0vMradnMRTw.roa (hash: NjidUx2eOTT21ACdp42hgjnWSe/W7zlhHEjr0Vs7aSw=)
                          20: DrJShOXg4imTyLAVTwF8SccdnlE.roa (hash: Vj6lL1s6X5XUlOFJopvC3rK9RWULI1CfINE1e1D8RYQ=)
                          21: L4_OEwfphYFUu2O8AamkOTy4e7E.roa (hash: Ej1s9MyacyfWz2sIpk/8qYcq2bg6guFF18QITRc7viU=)
                          22: OTEQ2P2MROWs6AxOW4hUmKOckKY.roa (hash: d4O1L+olwqfmOF/tNkzuFgXJZ5zDqOtPqmyzAEOPIK8=)
                          23: OdQViNXeBuqWudg2QQRq7Y93sFA.roa (hash: rf02zL7xYxLc16wbrx7JPSqCbvSpgrmv2dD3gYI2pPI=)
                          24: PfNtGBYMWktms-iewPo-B2YDCek.roa (hash: kM0buE1RpMaoMtH40JhVg2d0QOttaLXsigXDQ708YE8=)
                          25: Q7Cj-5aPxeVME_68h1isL89jtZI.roa (hash: qjFOZXFzdJbjF7HjxoALXKTxFVsqXw2E6t+aEgtAGAs=)
                          26: T09axjj-H9A_PmZSP4957CDJz2I.roa (hash: NgMAQHcMr3j6FdIAPjxvuruXOoAOHCn8KOjMmgPFxjE=)
                          27: T4IvO-xwyr_3GKR1cHEKn1c-vF4.roa (hash: vFG7JLUjllBPDpeQWcnE+ztb4V4ctAd8QaFfxMdiBAc=)
                          28: TyZTYxAEJNHHkGRjgj7NowaJNJA.roa (hash: qtI8RkVXdPdkkq19hPGcpFbutELsCTVT6eg6R46kSVQ=)
                          29: U7L9BQRf-HQyVLP2ivxAsU0IDSM.roa (hash: z1Rf4YxrxddcIRSX4O72Eas/nbjBA9Gzih2m6h59FKE=)
                          30: UqsaG06FSmCyBqX3iCIv9imBD_4.roa (hash: 92AtYDYD9srBlRO10yj4cvvn9vj+gujGiqzLzk9bS7o=)
                          31: WKZEG84-shx5CZeoMtYJKfIeqh0.roa (hash: lGE1eHDQdvQs5ZzeEPwHeW9djCWeayqg7osiz8NnyRw=)
                          32: WOkO-8hA5xyk5Rh2X4nrx-gb4T8.roa (hash: trF/MZDYdU9smPlm6sSWMqoaTVK1fsevSfusKQTa6Fk=)
                          33: WXDdDzTwfzyyriRRG19spnDACXM.roa (hash: DYoJQ2QkjjrvqiqbBb3wdjGKMJRQlIOWK8xQDl8EqXY=)
                          34: XPo6j4yi2iTwUawiP-FGRXHwfjU.roa (hash: nTjtDkSCeH6wR6Hq3A1vAtfvZLheHyrlyf6tUPctZEw=)
                          35: aVtFH88y7uCWbrWqw27027nph-0.roa (hash: YbCx5cqoCzuNfIj9BuD9IgDcRkaV62g+OdGWlSdBxao=)
                          36: dfDt1MtSA63pMp9SQXFzzOlCT9Q.roa (hash: /UoYW2ZRPLcJVYhJYvH5c/cKH9ILKkQKTgdgtxOZUyk=)
                          37: fgV_JeBERHr3GQU0RjgmCT4j0HM.roa (hash: 42rw9tFrCKARIx3P8hymciUe4n9lif+jtIQ2kqw6t3g=)
                          38: gb4qI6zjxfSrtIq7BtSjgkAr8yU.roa (hash: joW1jJH2+dlVfj9wgWHO0G3rrt5bT0h0/H0nN+61P1s=)
                          39: hU9-mHAg23uLrOPdPYE4hJvXUcA.roa (hash: CWIIzYVI1WyA72E9xcF17h6Igu8m9hZn0gOqHL/Kd94=)
                          40: j3OvivYXXScuY3Tet8VxJLva2bw.roa (hash: JwSGu0YT0FovxO0WFLRMvHo0MTGSIR5OzTSuaVfKsmI=)
                          41: kMzTs15lml0u--8DeDIZ3ahYB-8.roa (hash: hmu1j5piIsrOJ4koHYlWa9Aa3VoNfnl47fPB74RcAdg=)
                          42: kxmQzWugqan0M500ckn8R8o9ldA.roa (hash: 4q9+lxButaqdJHDypR9OvpuBgB34jHQYguH/hWDYa7M=)
                          43: ogbGCuW2LMZxp1GfJEE5cR4aDr0.roa (hash: 1BaCz8yH2d4cX/6I2UbCDFYZci3GMSA2d7F/vk/5yuo=)
                          44: pBgr8z2YIeUfbXYQIj49rbpJUHU.roa (hash: yoaI9P8cplgBNxv2L6XtL6X1gxRMp8ZQfosDkGp943Q=)
                          45: pXbrLMRi5uS_Deabn2NIdd67quI.crl (hash: 7IuKHD7DEAHAENdEttUDZDTd9kjo8HxnnNbIXEO3FtI=)
                          46: rP9pakvx44En7j408-QN9rnJbx0.roa (hash: HS083Rq0+0878mDqAZ27f4t0z4HSeEWNRWSlMZGySR4=)
                          47: rkAjSoRQYvHDBQwHMULLhg8pJxE.roa (hash: McAHsriYAZ2050uQZUJSDML333trjc4+xfmEnyiqqeM=)
                          48: t7Rz42dce0i5zAzJYPL5lASxwxk.roa (hash: KeMMOhaC1ZVvpzUfJEcGrQDqSdgEthZUxyBkAL8jV0s=)
                          49: tKRKLT4k6gTBGXUwVqoQP5wf828.roa (hash: mHlH0m5gNtQodNsj6u7qW5OHRqBubPK99/1nL+d+Ats=)
                          50: tQllPLqKORmMjXOWWosnoGvRp_8.roa (hash: /jUpJqw+lrMpVPgPqETCwHyaBJ97Y/H8siMwQdRoWqQ=)
                          51: v7CEyulOfWiBVGa2Zo7udyX5XqU.roa (hash: 6Rg6HrQTHGl2atmyyDGVykOBG0t3dIMm6MxR8AxPN84=)
                          52: wDivuVtF4ZlarCLWhTxi7mlMgfg.roa (hash: jlze6m6UfFOKshbpZ4bVM8048TUbLfRO5Dc7G7dPPqE=)
                          53: xOgqaNCDIHxji6PamQXBkAWHCnw.roa (hash: UpM7Vp+4YBZIHTDBe6UWaRbh1VgduDuWAFoCVD1XKFY=)
                          54: xpYHX-DI9oS0E09H1b6eTJBMRX4.roa (hash: PfCqtrVjlIyPFDcqHqX2lePA32+GAhJ2/8ZSx9AsWsQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:4d:f3:c5:db:85:f3:cc:26:4d:df:db:e9:eb:8b:e3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Nov 21 09:00:41 2024 GMT
            Not After : Nov 22 09:00:41 2024 GMT
        Subject: CN=7f5d7e940906ba8d869876136ebba00fcc160ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:1c:55:12:d3:05:b5:7e:58:3a:13:0b:1a:
                    1f:32:ee:c3:00:07:ac:ac:69:c1:19:29:3b:22:69:
                    d5:10:c3:9d:08:c8:1b:ef:81:ca:e1:3c:c1:72:9c:
                    da:87:ef:66:75:51:e1:9b:43:52:48:25:ba:4d:f4:
                    d5:16:e5:a5:50:8a:75:6d:ed:1d:61:ed:88:a0:5e:
                    7f:ae:d8:ca:0e:e6:30:15:e2:4e:08:6d:29:5f:87:
                    2b:c3:76:23:84:7f:e0:9e:7d:6e:cc:6e:1a:59:09:
                    b6:54:5d:1c:0a:b8:1c:6d:fb:a7:ca:d7:2a:12:ef:
                    14:52:f9:95:c9:e6:98:3d:3c:14:e1:58:91:d8:bd:
                    c6:7b:27:5e:03:31:d5:60:8b:1b:9f:61:2f:e1:a1:
                    78:34:f4:8b:98:db:e5:b2:85:c7:d5:56:9b:00:22:
                    9e:d5:3d:ad:c8:f5:2f:d1:d9:aa:c0:4a:bc:16:67:
                    11:1a:87:f2:63:48:cb:c5:61:60:f5:b3:22:d3:cb:
                    38:f2:e8:31:90:74:24:08:62:1b:65:82:ba:3f:39:
                    c2:2e:00:2e:53:f9:b8:ee:25:b4:1f:b8:18:a4:88:
                    33:30:f9:d2:f6:14:49:11:cb:04:0d:aa:50:4c:50:
                    ad:2b:62:bf:e1:e3:46:f8:bc:15:87:76:d9:5f:4f:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:7E:94:09:06:BA:8D:86:98:76:13:6E:BB:A0:0F:CC:16:0E:CF
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:87:f6:67:30:89:a6:a3:b6:27:d9:46:10:a2:26:92:4b:
         b9:fc:cb:e1:f0:21:b5:8c:51:2a:7a:d1:8a:5f:dc:72:34:2f:
         f5:69:a4:d7:e8:30:f0:49:af:bb:79:d0:af:85:46:ae:1f:ed:
         9f:23:93:d1:fb:53:1f:c6:bc:2e:a8:6d:7b:01:5c:2e:87:41:
         32:36:3b:86:e6:d8:5e:89:86:15:35:54:99:ca:60:3b:81:f0:
         af:7d:6c:02:bb:39:54:ae:3f:7a:7d:6f:06:b2:c1:88:95:01:
         e7:f2:5f:a5:0c:ca:d7:3d:45:17:84:59:ae:2b:b7:36:94:a9:
         47:12:93:33:31:3f:b9:12:51:1f:57:39:8a:b3:c0:0c:ae:9a:
         59:bc:ca:11:fc:f8:ec:b4:28:8e:6d:90:0a:68:ec:d3:8f:d0:
         11:a9:f1:1a:d3:90:f3:a5:45:ab:1e:dd:cf:fa:69:f1:1c:db:
         ec:83:97:ce:34:48:d3:76:a2:5f:a9:d1:02:66:90:ce:14:8e:
         4b:f8:42:86:3f:59:db:76:8a:a9:be:64:f0:d7:d0:c6:46:2f:
         c4:36:6d:1f:1d:b1:47:1e:ca:2c:25:e4:60:b0:e7:f5:11:d7:
         76:31:65:0a:48:00:2d:a0:6b:50:fc:f4:8a:47:63:80:60:6d:
         b7:b7:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:55:14 2024 by rpki-client on console-fra.rpki-client.org