Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          VfjZMRkKJonp6qfsf/h8yKV5qkgVb/empAOnHiwtsRw=
Subject key identifier:   4A:76:75:2D:DE:5C:68:AA:63:54:BE:A7:67:1D:DE:16:0A:07:51:0E
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       018F41C49CA04248D5C9A9BDF055D6B100E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          1181
Signing time:             Sat 04 May 2024 04:02:35 +0000
Manifest this update:     Sat 04 May 2024 04:02:35 +0000
Manifest next update:     Sun 05 May 2024 04:02:35 +0000
Files and hashes:         1: 0QtZZ3q___k2VAGd2mjbVqSAzj0.roa (hash: RluxHyo/n3rdUeJJ24UIhirM6sWLcxulRGZH1XlHeh4=)
                          2: 39KjStmC6WuX48HVAMyh2tRprDw.roa (hash: 4jEluOmbgKgO8r32mgcvYz2hqhO8z3BtQ7Z/bnQGhVw=)
                          3: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: 1XOVAZjM6erbeX+lqDjPu0/PS1nHbQ9CmlksrFJj7fw=)
                          4: CKfPfd6hoC4hwUd8KckxZEmDB3Q.roa (hash: CxtCeJVWGz1y7sXMjGjTFZSPWBJF0JBmmRGZsh/CaBY=)
                          5: DK6_dWb6ffGTlpgyP63vrlGmXms.roa (hash: LEoKFFsQD3XnhYahnkDkz9brhPgr1e3rCDO34aDADTI=)
                          6: DtrLhY0ruG-JUa-r8j0oLSSo95Y.roa (hash: Y1euoqRmoOD5HkZ1WfjTdlz9g8GNe/DpgO8EsQVD9Xk=)
                          7: EXDyXW6wNu1Wa5jQu3iA4t3gbwY.roa (hash: 84HBOgJp4gCIXPl5CNQr/w9Rn5c9jxQZhYB7PhHhUls=)
                          8: FCfQfkaEwlpJDTB5m3uxkZZ3-zM.roa (hash: ZVUh82rLI/XdllSvRNpYnu5TNIvuYWoSeUyg+sNnd+A=)
                          9: JJmBJTN8cbsxGPOrp8As3M-ZbMI.roa (hash: Gdcve6s9uGlNpOs4lSC6BQyRoeP9YHR7nUgcEveKH14=)
                          10: RdB733AkKx9FDf2DuopfIUy7Y_M.roa (hash: W4UuNbb0U7fCmlmFei56IQQZJ24MpDYu/U908nP/ucU=)
                          11: Zbo58G9mKmdMCdnY0Gt0h8oH4WQ.roa (hash: 80Ritc9Ka/JpikzYP/h2a9At4CQZFsz4lKCIezlse4I=)
                          12: _FMDz97zmP9d1JHVKIiKjgP6Uqk.roa (hash: hucwfh1Y1KRd61JRraABpWkGTogS7KMVU2I9KLUZPuQ=)
                          13: gtLYwVAPNPe8yArWSoJ0z-AOZ3w.roa (hash: n7FSMVGluUYq1CQM0zBz4t//1Q18BTqOkasxj8KTl5k=)
                          14: srmmTgMLRm0CPG-BIhv3UaX0v5o.roa (hash: 2EBtvsAQd40gI/7hx9Lx0d+6jJaV2g8ODlw/2OMbsCc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:9c:a0:42:48:d5:c9:a9:bd:f0:55:d6:b1:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: May  4 04:02:35 2024 GMT
            Not After : May  5 04:02:35 2024 GMT
        Subject: CN=4a76752dde5c68aa6354bea7671dde160a07510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:02:9b:c6:e9:42:c0:04:af:1f:e6:5e:2c:da:
                    5e:b6:f2:28:84:75:d6:97:0b:f3:d3:14:a0:f0:42:
                    fa:f8:85:1d:5e:4b:23:75:64:42:66:7a:b7:8f:54:
                    2b:1a:42:3a:00:2b:cd:f1:bd:88:24:7f:b5:b0:54:
                    46:b2:4c:e6:51:0d:18:af:85:24:76:f2:34:08:85:
                    c5:86:ee:1f:df:b6:59:58:ff:83:0f:13:63:9b:cf:
                    e6:e4:7f:2b:e4:85:cb:53:9a:99:7a:16:64:64:9e:
                    46:39:1f:a6:ef:19:22:e2:5c:64:1f:8d:6a:22:2b:
                    b4:72:e5:8b:2b:81:f4:47:95:2d:fc:0f:01:63:b4:
                    2a:0e:e2:bf:6e:a1:3e:33:00:c6:59:6c:c4:49:ba:
                    db:5d:0a:ef:b2:cc:6f:62:2c:c0:7d:8e:49:58:ec:
                    4b:5e:8f:05:a7:31:7d:d5:26:47:3f:d3:d6:ce:86:
                    ee:74:37:53:76:4f:b2:14:f4:07:13:91:f7:12:fd:
                    c1:2e:9a:3d:41:2d:06:3b:f0:8c:d9:4d:40:55:33:
                    c6:1c:d4:f7:4a:96:78:09:8d:89:ad:2c:6b:67:9c:
                    29:e4:3f:c5:05:a8:74:c2:92:fc:49:b2:fd:46:99:
                    4e:07:fb:bb:bd:d3:9b:ce:24:fd:94:4d:6c:1b:ce:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:75:2D:DE:5C:68:AA:63:54:BE:A7:67:1D:DE:16:0A:07:51:0E
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ac:79:98:67:a9:a9:07:6e:89:cf:24:38:0f:9e:bb:70:76:
         90:c2:a2:26:19:64:88:c8:03:55:83:50:92:06:de:c0:87:c3:
         27:58:51:a9:67:7b:c7:7c:b0:da:c4:0c:55:86:b1:2f:62:fe:
         a5:ed:cd:ec:7c:64:9b:05:dd:d0:0d:15:8f:4b:fd:b7:06:e8:
         b8:6c:9c:8d:28:9b:f4:0c:34:5e:58:ab:7d:33:d9:e5:29:c9:
         c8:36:ca:bf:8c:bd:7e:80:00:dc:ca:04:60:ec:50:fa:e6:d1:
         88:2a:58:0c:ed:c4:89:36:5b:af:bd:e3:96:86:56:32:58:1f:
         63:e5:77:e8:9c:ca:38:5f:15:8c:92:58:cc:0b:77:47:53:c5:
         2f:d1:98:49:f9:3e:69:3a:e5:01:95:71:b5:20:4d:3b:f9:5f:
         83:90:ca:15:ae:9f:b5:43:25:70:42:74:f9:a0:03:a6:e4:49:
         6b:cf:cb:a8:52:90:e5:87:7e:82:da:cd:58:fc:cd:2d:83:59:
         1d:55:d7:4d:a5:25:b4:56:32:75:c4:b5:27:49:c3:a2:5a:e5:
         44:8f:80:f1:01:40:da:93:ce:a2:85:7b:43:cb:92:31:0f:b6:
         26:54:12:57:92:65:70:68:2b:b4:44:dd:f8:d1:c9:4b:8f:78:
         7c:21:42:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BxJygQkjVyam98FXWsQDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjQwNTA0MDQwMjM1WhcNMjQwNTA1MDQwMjM1WjAzMTEwLwYDVQQD
Eyg0YTc2NzUyZGRlNWM2OGFhNjM1NGJlYTc2NzFkZGUxNjBhMDc1MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AKbxulCwASvH+ZeLNpetvIohHXW
lwvz0xSg8EL6+IUdXksjdWRCZnq3j1QrGkI6ACvN8b2IJH+1sFRGskzmUQ0Yr4Uk
dvI0CIXFhu4f37ZZWP+DDxNjm8/m5H8r5IXLU5qZehZkZJ5GOR+m7xki4lxkH41q
Iiu0cuWLK4H0R5Ut/A8BY7QqDuK/bqE+MwDGWWzESbrbXQrvssxvYizAfY5JWOxL
Xo8FpzF91SZHP9PWzobudDdTdk+yFPQHE5H3Ev3BLpo9QS0GO/CM2U1AVTPGHNT3
SpZ4CY2JrSxrZ5wp5D/FBah0wpL8SbL9RplOB/u7vdObziT9lE1sG86WDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp2dS3eXGiqY1S+p2cd3hYKB1EOMB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAax5mGep
qQduic8kOA+eu3B2kMKiJhlkiMgDVYNQkgbewIfDJ1hRqWd7x3yw2sQMVYaxL2L+
pe3N7HxkmwXd0A0Vj0v9twbouGycjSib9Aw0XlirfTPZ5SnJyDbKv4y9foAA3MoE
YOxQ+ubRiCpYDO3EiTZbr73jloZWMlgfY+V36JzKOF8VjJJYzAt3R1PFL9GYSfk+
aTrlAZVxtSBNO/lfg5DKFa6ftUMlcEJ0+aADpuRJa8/LqFKQ5Yd+gtrNWPzNLYNZ
HVXXTaUltFYydcS1J0nDolrlRI+A8QFA2pPOooV7Q8uSMQ+2JlQSV5JlcGgrtETd
+NHJS494fCFCNA==
-----END CERTIFICATE-----
Generated at Sat May 4 04:41:09 2024 by rpki-client on console-ams.rpki-client.org