Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          4s83m81Wr5MoLJLEUr0n6qaVT/a3zpLiUz1dTX4COEU=
Subject key identifier:   17:52:6F:DB:86:7D:29:F6:1C:D8:A9:27:DA:6F:77:F1:7B:61:24:E0
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       018E885E1B4B20EF2235A3DBCDF15663D8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          1114
Signing time:             Fri 29 Mar 2024 04:00:52 +0000
Manifest this update:     Fri 29 Mar 2024 04:00:52 +0000
Manifest next update:     Sat 30 Mar 2024 04:00:52 +0000
Files and hashes:         1: 1xbspQ1A7KhPP5v2s4I73VJV7ng.roa (hash: yr/SXxWx+DPOAV3le/7AUgxfUk65TJPCG+JaJtExJOI=)
                          2: 2BHgheC4_JRyoEJPS0zHqnvLaOc.roa (hash: ATWqBqXUb3JDPU0pfQYAA/NZIQjKLfqq8jY+QVVVb9s=)
                          3: 3QYaJs19W_yDSb9LeyZMyGwlBJo.roa (hash: qiyPzk7UZuSGzYtPcXKHGz1ZMx5+vEI6gTTIUoe/ns0=)
                          4: 4-ZnZFoANKd0VJjxHWVepT-hRqc.roa (hash: AW/KbrghNw3EvPQUTwLSZ4x5vt6FIrFRqA/6vlR4zXk=)
                          5: 5KZflC7JR8j62vflaYvCSIfsOFA.roa (hash: 4f2/jvg9XNhYHYVFWXn0GEWRpyfdieVVZqdu6/LCF9g=)
                          6: 61-lIA2DfZgaqEbjQuIWT9y6En4.roa (hash: XBAGHtrNn9J5qdU3EzD1hh/f7HJGth71cqDmQ24ZBPc=)
                          7: 6fCcKJ7XLDARDRjup7qPUaUKpws.roa (hash: 80zF5RmbmdwF/KLV3Aedbgy643ygykJmiemEMir2SAI=)
                          8: 76xpigLvDSDEURZnt_4mMemHiJ0.roa (hash: yQBMbv510PEFojneaqlqF5faLpy4npIOhq35JtoSPeU=)
                          9: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: TbGfjQzPBylwRVxB85bCjGd0W4O6tDjLZuMsvg6JdLQ=)
                          10: AdAvm2HFVbjSd8tR4c5CHcK8syk.roa (hash: Nv8jy0wxZP4HUQc23nO7ZoZ1O+WNw8QctjnseqSCRWk=)
                          11: BsICvqfn6GTBFe3b5zJYcS9zqaM.roa (hash: 7diKlsoIjqHCqxreFPBOEgdVxXWkdyd5S9QNWpZUGK0=)
                          12: DoAFmvOhcrvcLwU7DebJkS837Ug.roa (hash: lTXDZk5Ffi2GDsxdQJdD13SeMO/zq/6kC7Mmy5qlJjQ=)
                          13: EfVbcoTG8o7sbM7FeYfIlKiJNn0.roa (hash: i6Y0PhmhMLQXXaE5DnFw12Kj2QGkEs5VDQB60tzmB34=)
                          14: Ex5aj_RhD3c_-9kwhCAWGii6gqg.roa (hash: pA4LxvIhpmdSQbUBj0faxR1wurHGWou4KI1n6Rg6TJ8=)
                          15: I5pvib7lUAwlzJYdOmKsbIG_mXI.roa (hash: 1WJsSPy5mw5rao86d5Fd881CLftCGx2GOMCOHWJpOCo=)
                          16: IDnBSmnvbmV8GNY-NPWfqp7d0_k.roa (hash: 3f38vEibiOlv6qIhhPW4kV+0+nK5kFfPe4udd4ANKYw=)
                          17: IcRRlivrlKJvDp19mIAlMnhGLNk.roa (hash: EsfniKX6gYA40BnllWIazQj16gEnW+6CfBGmHqxl6hY=)
                          18: IzQ0HyLFSXqAlSOLNZR1FrQGnm4.roa (hash: rljjC/WyaMRGeF1RPxZ49UnwvjnG6IyWtpua8lFCUvU=)
                          19: NwVWnLCrsEPj6q-SHyz9ViMZI3o.roa (hash: 22oHO8UiEcGJ+mul9bfeYrA5duvyBQ+UDWDV2AE7+rk=)
                          20: OBciqD5Fv0a5TJWihSBPXA4S_Z4.roa (hash: /vwyqgWUduludmHWOlHStorkgS7j3+gCOQnwuBcY8xY=)
                          21: OSrRkDl41y7jrb3d364wclYjADs.roa (hash: WXRKz6kOisiPKEA9xDxbvA9+3CzqzsEuIzO4PTRtySw=)
                          22: P9X5blNwXNXHu9jjGAxXEQfsh9Q.roa (hash: HFgXq984TPXAkcg1XviKV88cbI6HIDcX49grDiGGIa8=)
                          23: QCgilTqnMMJkW07b6OJY7SjK-ws.roa (hash: 1PYJLHO3D0Gm/N8h65PxqIkyHzyZvFPyTwspl/Ug0h4=)
                          24: QbSYQCObDvKu8W-7T45R_tRcvcQ.roa (hash: G3PsqWwZG4a4wRVOKKyf/BizSWqF3l/XniAnc/aFIYE=)
                          25: SceNX_tyRy7gJUoCHzS26PlTN8E.roa (hash: 1Xte90eVS4NFabrcdI+zeKONa2G/bCMBJSpqRSajpFQ=)
                          26: TilEHtV5Q7oBynf2yfZAsUPzvpU.roa (hash: Fxmu3WxEv3nsLFYjiGFGYWlzYETClo8Wbk7NlPOtsAU=)
                          27: U-ddm29i5lJoii6xSN6t59JsnLk.roa (hash: 2dhGpbr3c91e4Qchh4iJkBEiC/ACTE/sr3wvK7a0Q9s=)
                          28: UcTqtCKQcZlB4PIYilqMtfbm3_c.roa (hash: uMcdtoOkj24hDk7N3SLwOyzXqC4/E1+TRAA33oBiqz4=)
                          29: Vmipr-X6gHN5Q1PB6CDobcADB6w.roa (hash: xDoEEAaLwgRhuP5a8eB+xSrlrmSYgfibGIcvpe6aoZc=)
                          30: XVF0peaCr55nmB-4MiOAc-KEEx0.roa (hash: GUGYC+8wxswIWbFv+dbYVCzbiLPC4vys869TxMIcax0=)
                          31: _14UI2g3BqKnLNzfJm0N8fSPg2U.roa (hash: E56+XB6YoYcOX14d2HmQoXWgXyvc+u7SrBmRwfuIYkE=)
                          32: bwZN-tYNM3aSYrpFLaHORRihrvI.roa (hash: I9AVD6Q1iuk0dnloFpv6WDx3rWDClOHGm8KtCfvtJdo=)
                          33: e0v6ITCw2UAP8tMgP0lI94-7GTU.roa (hash: 6DvvIm6ZxZGXtbxLh0ipdNbLj5Hnpss3yRxC+q/BrNI=)
                          34: ewPHwixuoGzJSn3UTLB1GN1cmYc.roa (hash: MM2xlnmtTrAXAWpy3anT+OaEKwNQPzDpV49u02Wy8fI=)
                          35: f4saC9ioyxme0e9zb_0tHqMZKec.roa (hash: eav0UM5DKKgusMR/LAZ+8CH0ZzHoZtPLS7sCYWWXOHM=)
                          36: fELT9iZJ2sFix0sq_AAIGTCrUaA.roa (hash: WAxoEQryZAeRir7tCuCMQqb0g0/qbwm+tMByKEmXSu0=)
                          37: grbQplUCB7ZM2GYHkmxlRFdQnJw.roa (hash: g2uvb+HCbbwSpTG0h/8B8b8REf2HmmTDgswYLjRSsf0=)
                          38: hbyI9JcK6o3VXMO4XROByAkoXc0.roa (hash: iKD+Y7Qq10xDMOnX2SS88ghYbL8l9MGV5RzAHHw6UIk=)
                          39: jUtKE4FK6pP66kkBOjDDaGzwqCI.roa (hash: 3Zgj37u8D3PSrFTShPjOGOp6oxpXATBj2ullep6jG0A=)
                          40: kWtprA61ek6MIm_L7WBKWSXIZt8.roa (hash: dLKI8eAsQDsBcGMzWMkQNZW0bmdQFBv/eZWGNG0sJh4=)
                          41: l2smdz3z-xi9zXbA3XKdeIhm-GU.roa (hash: MZVi1kmrXqSh8KlS9K8FuD6fi7igUWbugQqrXbVbPGs=)
                          42: oJ3f5GER5dM8GWeWyACY5YuLa28.roa (hash: mCpiGCL5gL0CkzAq4iJLx1OB0M473FwfIKvA4YiN6/4=)
                          43: oS-fNv5NWYpkhUFvD6uSEw9rpqk.roa (hash: CX02VG3apaSiekOtp3IPm/ZcfoXEFo9RXura+RII2l8=)
                          44: rZYszYEVGFVrJXrbSIX6PjeEgyI.roa (hash: dOzMNo9/KE3/2NDAV95xD+V0/zW9g4X2K2AMFzBqtuU=)
                          45: rrripexqqD0GXDADs1RuY5f0jkM.roa (hash: LNIJG4/3eC49LM/IPF+AmM1eJhQq0quBhjg1YqhmNu0=)
                          46: thHrsD-yqevP2knHpfUauu7RlpU.roa (hash: qRqD1tlUXSxeS9yKFZTjYvsHbEourXQbS1jNvP8sYuw=)
                          47: tz73bHfk6lkyUVzMDxrqeXqmF_4.roa (hash: /ufN8cuUwifcbZRfRjvd0dOgUngjqpzBoHaUjbO30a8=)
                          48: wKHTGlPu-KsncMFp8LtB3FcYyDM.roa (hash: nUiu6Mi3+URdfMNj+S34mHQDsF+ilDoMNQTK2hL9UiU=)
                          49: woX2g61_RG1vf9a7PZ6bLYDnMt8.roa (hash: 5snYYemO6TlDDk3fW4ies5wd4G6onkGpVq5s4+6X98U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:88:5e:1b:4b:20:ef:22:35:a3:db:cd:f1:56:63:d8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Mar 29 04:00:52 2024 GMT
            Not After : Mar 30 04:00:52 2024 GMT
        Subject: CN=17526fdb867d29f61cd8a927da6f77f17b6124e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:55:02:1c:6e:7d:e1:fe:fb:9a:4c:36:38:
                    98:27:23:47:d0:d3:a7:8c:7f:41:8b:0b:43:32:c6:
                    32:b1:ea:3a:a7:6e:3b:be:c4:f5:81:9e:90:55:f3:
                    46:4a:e2:2b:e5:e6:25:83:a5:f1:8f:9c:7b:63:f4:
                    6c:c5:0d:a6:65:6a:00:5a:51:99:a6:59:64:da:f0:
                    32:62:b4:fd:35:6f:e3:54:81:32:b4:86:36:29:5c:
                    5c:c2:02:e8:2e:81:cf:63:1c:a1:b8:51:7d:e7:32:
                    a9:13:fb:d5:dc:61:86:47:40:da:f9:6a:f6:a1:bd:
                    e1:7b:5d:b1:3e:2f:7f:7d:98:b7:c8:ca:a3:ae:0f:
                    f4:c0:7f:ba:cc:60:12:f7:51:d8:dd:e4:50:a4:09:
                    1d:2a:74:cd:12:34:3c:32:80:df:9a:ce:19:5f:6c:
                    57:df:46:3a:c1:3b:33:73:84:ad:1f:58:4c:3c:9e:
                    64:76:f4:90:88:3f:e6:d4:0f:2f:a7:a5:36:42:01:
                    41:48:c3:07:57:9e:43:92:f0:70:6d:61:87:65:05:
                    da:fc:b3:47:76:dc:07:67:b8:30:df:54:8f:9c:ef:
                    69:94:93:71:40:70:15:e3:5f:ed:a7:b7:82:01:a2:
                    92:2a:de:48:11:83:fc:f3:5d:3d:f2:67:19:e1:82:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:52:6F:DB:86:7D:29:F6:1C:D8:A9:27:DA:6F:77:F1:7B:61:24:E0
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:e4:8b:bb:ff:dc:a6:9f:2c:13:c6:ad:fd:56:51:7c:5a:
         cb:5b:11:20:bc:07:93:fb:d7:95:0d:96:5f:fe:e5:d5:dc:3a:
         22:68:66:ee:ec:e7:92:3b:71:7c:72:f0:47:22:71:31:d9:36:
         5b:d5:92:34:5c:54:57:d7:79:38:d3:36:ad:e9:47:2a:d7:a3:
         e2:3c:aa:30:3e:b7:b8:fd:71:54:98:a3:47:c6:9f:82:d3:58:
         28:7d:94:3b:95:20:4b:65:eb:eb:49:c1:29:e2:59:2e:97:c3:
         49:61:30:ef:bc:90:3b:46:f8:81:1f:af:a8:4e:bb:84:87:f7:
         a7:ed:fd:af:8a:3d:75:8d:f0:03:02:e1:d9:1f:cd:c0:de:79:
         d0:d5:c0:03:eb:3d:ae:82:86:21:35:fa:1e:d8:8b:6d:27:f9:
         3d:96:e2:f2:4f:49:e9:97:75:92:88:80:40:c2:4c:ed:63:a9:
         50:af:e2:4a:b6:c3:7e:1d:d1:1f:3d:79:39:c1:ee:96:10:e4:
         db:35:00:24:cd:ba:b9:11:18:5c:9b:ff:ad:5e:a4:49:e7:09:
         71:0d:bd:02:5e:f8:7a:85:2f:9c:38:bb:0d:c0:f8:52:76:98:
         ed:5c:a3:26:a5:8c:dd:ff:2a:e8:07:f5:5a:43:06:81:df:4a:
         3c:a4:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:14:33 2024 by rpki-client on console-fra.rpki-client.org