Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
File:                     gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json)
Hash identifier:          0+0nQz9qAJ3ZfkHC5ZWnFJBiQ0JNndSAwkACxG0UpTs=
Subject key identifier:   5D:46:B5:7B:B6:D8:CA:29:52:A7:23:EE:CB:55:98:FE:71:0F:9D:39
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       0194BABB20F04DE76511A02B56CF6EC35A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
Manifest number:          148A
Signing time:             Fri 31 Jan 2025 05:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:13 +0000
Files and hashes:         1: 1-VklZtGfRDIv9KG76liQR83-to4.roa (hash: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=)
                          2: 1-VoUxB16sFUpabKYYCaz09m0veQ.roa (hash: jBzaCnK55nBqjAgFzIbfoxSdnwHfF10JuSwdasZO+DQ=)
                          3: 2o5lxS17-TuelE1Eo35Ac7B5RQI.roa (hash: r0p74cT43WIPOHKiilDFyNpmu7ELpn61XsWmhxelkQE=)
                          4: 4locrxHyX6UeBrTCDBKq3fJjIhU.roa (hash: 57RX/2aGUXBNZq4wqCsxDNWTaoMCixeTd2hAfdAzOz4=)
                          5: BD48RnLKhQNQSxwnTl5Ut3DTaaU.roa (hash: pJeqPcMqpwy5eeOtqwiuelICHhHnGVKN+Sk6N5/HqY4=)
                          6: C36u7KfhCFOa8XdN016Wy-ytnzU.roa (hash: NBROKoh3VnJzs+HifzEAW5oRrothQyJwHy1p6FD7qNw=)
                          7: C7zRH1Jrw7K4qkebKM5gx-PMLHo.roa (hash: V9v5Bwq8jAUyaBzFj3ac3ordtwBsUduLjuOy3ng7dlw=)
                          8: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (hash: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=)
                          9: G7qOVLwRQlkEUG0XGeZBugA-InU.roa (hash: ra5AqUSh6Ku+Y4KrCiBgkUNOkURj3FGVxxn+YcD+2go=)
                          10: HcWreomVamO6igDbYdaHvUovBJE.roa (hash: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=)
                          11: P_H5I901p9uT4TULpcfUWpnfgxc.roa (hash: 5nYschX/VQUuVCl6HMxh2V0MkBgtU9xLQ/f2zZLAuzo=)
                          12: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (hash: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=)
                          13: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (hash: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=)
                          14: cZ1VjXvm2kSaXyfxbG6DWvRG8uk.roa (hash: 5UVRN3VFRKsZKsanW2WSNXa8tl9mzCzer8YNhv2aLws=)
                          15: dUDoTikRrhGqdHuoRq6nJ22ijx4.roa (hash: CZEX4tVYDKiuZFQCXPesSFgD4Ewr620I1xlB1PmSx34=)
                          16: dmn9WWC1cOw8-syFOH8rVvRUYcM.roa (hash: yTiBT+PxdCbTZTX/xwUlIfZpsEgNm89xZp8RsHoNwSE=)
                          17: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: enbijQAkv6sChVgfFiWdTmy43FYOeGBZXzN4Qwn5qog=)
                          18: kY7v-kZFRWVPM0lT7sYWUtUQwD4.roa (hash: 2dyjjHYflFomwOu3+s5WMQHZPLjaXr3S2KB2kA29nis=)
                          19: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (hash: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=)
                          20: ltR8O9eT6M3oAU_gxp7pcWB8yvg.roa (hash: 5GhoLYlXlz1l2KGazssc6/9eGWn++CM1C2ZU91tWclU=)
                          21: qE_tcfupauq7XdXPqb7KSreupsQ.roa (hash: 3EJWNtY+Qhvm2DJ7H+6VvM2/OxiFGq47XqF2H0oCbzM=)
                          22: rU4-fu2i_puERNzqsZusptLEhxw.roa (hash: oUOtoTz5sCAfhIfBXkRUrvoxsTQJBic3IEPNnf2jOds=)
                          23: sjGNR44IPNB6YOE5kbYUMAmAQ2c.roa (hash: sEDrCkJksXTVWaboHfAfeMVVlrdjOtJNi3rs1KmLVVI=)
                          24: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (hash: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=)
                          25: vQxaXFFye15rTmMFdspwW0lZXXw.roa (hash: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=)
                          26: whutfHrGbrMoUBiwqU4xPdyhmA0.roa (hash: IJxHyhxFaVshf8NMZql5Td0GAvIXYopqx9xBaH+8idI=)
                          27: zCFasBm0EYXOg5wMczyui1g8P7w.roa (hash: vMOSU2/g4EkiB4e8USpsHbmF4Ns22ciWga/oRAR99+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:20:f0:4d:e7:65:11:a0:2b:56:cf:6e:c3:5a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: Jan 31 05:00:13 2025 GMT
            Not After : Feb  1 05:00:13 2025 GMT
        Subject: CN=5d46b57bb6d8ca2952a723eecb5598fe710f9d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:e8:0e:b9:4a:81:2e:b3:f0:7a:5b:07:0b:
                    5f:f4:60:37:6a:ff:fc:ee:11:89:d3:92:11:87:2c:
                    8d:a4:65:a5:0d:65:b8:35:ee:5e:b4:85:14:1f:ed:
                    a3:36:63:08:d6:f1:2b:31:14:90:38:de:b2:b1:f8:
                    48:e8:6a:3f:32:4a:7b:af:29:0a:44:27:b4:e4:81:
                    ce:01:7f:96:c2:c3:81:b3:b1:f6:67:7f:8c:42:d6:
                    5d:62:5c:fc:31:8d:97:c6:3d:29:97:e9:7c:f9:16:
                    22:4d:0b:4e:db:04:f0:d6:72:2d:11:a6:e9:0d:62:
                    ed:9f:8e:b1:be:5a:62:ff:9f:da:f5:78:68:51:0f:
                    b7:ce:46:d9:b0:ce:6c:d8:81:16:84:d3:4e:57:a1:
                    04:3c:6f:07:b0:80:b7:49:f2:6b:73:60:30:f9:92:
                    7d:24:bf:26:47:9c:b2:67:6a:25:26:41:2a:15:bd:
                    fe:88:f0:ab:14:38:de:36:e0:35:35:4f:3d:32:5c:
                    0b:79:29:4a:bd:17:e5:44:23:4a:89:fd:c0:c4:54:
                    85:16:c8:95:de:b5:cb:3b:bf:f8:da:cb:2f:ea:08:
                    0f:4e:aa:16:c0:18:a4:1d:c8:37:47:52:f5:f7:e5:
                    75:3a:33:f1:a5:f8:bb:1d:85:84:aa:db:25:2f:55:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:46:B5:7B:B6:D8:CA:29:52:A7:23:EE:CB:55:98:FE:71:0F:9D:39
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:2d:a8:86:75:35:e6:51:42:b6:db:a3:c5:2c:71:9d:8b:
         cb:dc:15:fd:c2:d1:c2:82:1b:e4:41:8c:c2:06:33:86:3c:7e:
         a4:f2:01:72:d3:07:ad:dc:d0:a2:cf:de:85:ad:47:12:1d:c3:
         9c:3a:49:53:d1:20:0e:b0:68:d9:bf:7a:03:74:21:e1:d5:3f:
         62:c5:ed:e2:54:55:fe:85:c3:31:78:ef:7b:b6:38:87:ad:b0:
         7a:e0:e0:ac:c3:67:f8:d3:0a:cf:1c:36:ba:e1:cb:6a:4a:03:
         99:3f:88:9e:b7:18:60:97:32:73:c7:91:c4:ba:c6:9e:c5:d7:
         53:78:b9:3e:44:76:b8:d9:c0:9c:8d:5f:f0:a4:15:fc:f3:04:
         41:42:ef:b8:99:a1:e1:f3:92:f7:0c:4e:ea:1a:2e:56:ad:d6:
         3c:6e:0d:fb:54:18:fe:f2:51:68:36:18:35:ac:39:e1:b5:f8:
         6d:87:96:58:3c:fa:22:b5:d2:b4:04:67:89:32:f6:96:0d:ac:
         b7:bf:a1:eb:aa:14:40:b3:ae:2f:41:9e:97:e8:a6:40:33:55:
         de:11:46:45:a9:76:e9:ae:eb:56:4d:f5:77:85:60:61:53:67:
         44:2a:f5:7d:43:e3:10:44:7e:5e:aa:e5:a1:86:20:39:e6:11:
         db:6e:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:55 2025 by rpki-client on console-fra.rpki-client.org