Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          Er8dc82g61zAzokAgYdU8gbm+dUx66uHd1Ux3ilG45s=
Subject key identifier:   70:F6:1E:77:39:9A:5B:32:BE:0D:E9:D8:A0:1B:49:C6:16:29:90:10
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       0193549C5ABFC0DE94A49193D1F020CCF922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          1392
Signing time:             Fri 22 Nov 2024 16:02:33 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:33 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:33 +0000
Files and hashes:         1: 1ufd_RPN0fsdBrS1IdDb7-xTsdI.roa (hash: MMVI8ouFTemmdvWHXbXbf9NTyqUK43bdSPFivtzEZWo=)
                          2: 1xbspQ1A7KhPP5v2s4I73VJV7ng.roa (hash: yr/SXxWx+DPOAV3le/7AUgxfUk65TJPCG+JaJtExJOI=)
                          3: 2BHgheC4_JRyoEJPS0zHqnvLaOc.roa (hash: ATWqBqXUb3JDPU0pfQYAA/NZIQjKLfqq8jY+QVVVb9s=)
                          4: 3QYaJs19W_yDSb9LeyZMyGwlBJo.roa (hash: qiyPzk7UZuSGzYtPcXKHGz1ZMx5+vEI6gTTIUoe/ns0=)
                          5: 4-ZnZFoANKd0VJjxHWVepT-hRqc.roa (hash: AW/KbrghNw3EvPQUTwLSZ4x5vt6FIrFRqA/6vlR4zXk=)
                          6: 5KZflC7JR8j62vflaYvCSIfsOFA.roa (hash: 4f2/jvg9XNhYHYVFWXn0GEWRpyfdieVVZqdu6/LCF9g=)
                          7: 61-lIA2DfZgaqEbjQuIWT9y6En4.roa (hash: XBAGHtrNn9J5qdU3EzD1hh/f7HJGth71cqDmQ24ZBPc=)
                          8: 6fCcKJ7XLDARDRjup7qPUaUKpws.roa (hash: 80zF5RmbmdwF/KLV3Aedbgy643ygykJmiemEMir2SAI=)
                          9: 76xpigLvDSDEURZnt_4mMemHiJ0.roa (hash: yQBMbv510PEFojneaqlqF5faLpy4npIOhq35JtoSPeU=)
                          10: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: h+VhirCiIwVE6xQdnvHWFjbWKHimCsdGCozzGHCjEE8=)
                          11: AdAvm2HFVbjSd8tR4c5CHcK8syk.roa (hash: Nv8jy0wxZP4HUQc23nO7ZoZ1O+WNw8QctjnseqSCRWk=)
                          12: BsICvqfn6GTBFe3b5zJYcS9zqaM.roa (hash: 7diKlsoIjqHCqxreFPBOEgdVxXWkdyd5S9QNWpZUGK0=)
                          13: DbeSAuOJu4JeHdnVUNkDEswpKBQ.roa (hash: ps4UelVLKgRGUBwV1CET+RNYVlB4eRmJESFJHvXROA8=)
                          14: DoAFmvOhcrvcLwU7DebJkS837Ug.roa (hash: lTXDZk5Ffi2GDsxdQJdD13SeMO/zq/6kC7Mmy5qlJjQ=)
                          15: EfVbcoTG8o7sbM7FeYfIlKiJNn0.roa (hash: i6Y0PhmhMLQXXaE5DnFw12Kj2QGkEs5VDQB60tzmB34=)
                          16: EsRnx6aNckfmRpAvFeYyHl-QUlU.roa (hash: O4RrLXoEwitUAA8HiABpfijSREKvtyy2kTiLg/H85dE=)
                          17: Ex5aj_RhD3c_-9kwhCAWGii6gqg.roa (hash: pA4LxvIhpmdSQbUBj0faxR1wurHGWou4KI1n6Rg6TJ8=)
                          18: I5pvib7lUAwlzJYdOmKsbIG_mXI.roa (hash: 1WJsSPy5mw5rao86d5Fd881CLftCGx2GOMCOHWJpOCo=)
                          19: IDnBSmnvbmV8GNY-NPWfqp7d0_k.roa (hash: 3f38vEibiOlv6qIhhPW4kV+0+nK5kFfPe4udd4ANKYw=)
                          20: IcRRlivrlKJvDp19mIAlMnhGLNk.roa (hash: EsfniKX6gYA40BnllWIazQj16gEnW+6CfBGmHqxl6hY=)
                          21: IzQ0HyLFSXqAlSOLNZR1FrQGnm4.roa (hash: rljjC/WyaMRGeF1RPxZ49UnwvjnG6IyWtpua8lFCUvU=)
                          22: Jz0Q4OX4mle2_Og9zqbO_7IwueU.roa (hash: SCRZw7bi8x1rj8Tqmg/Fu3I0I/3ZrBANZKi7+dSFa58=)
                          23: NwVWnLCrsEPj6q-SHyz9ViMZI3o.roa (hash: 22oHO8UiEcGJ+mul9bfeYrA5duvyBQ+UDWDV2AE7+rk=)
                          24: OBciqD5Fv0a5TJWihSBPXA4S_Z4.roa (hash: /vwyqgWUduludmHWOlHStorkgS7j3+gCOQnwuBcY8xY=)
                          25: OSrRkDl41y7jrb3d364wclYjADs.roa (hash: WXRKz6kOisiPKEA9xDxbvA9+3CzqzsEuIzO4PTRtySw=)
                          26: P9X5blNwXNXHu9jjGAxXEQfsh9Q.roa (hash: HFgXq984TPXAkcg1XviKV88cbI6HIDcX49grDiGGIa8=)
                          27: QCgilTqnMMJkW07b6OJY7SjK-ws.roa (hash: 1PYJLHO3D0Gm/N8h65PxqIkyHzyZvFPyTwspl/Ug0h4=)
                          28: QbSYQCObDvKu8W-7T45R_tRcvcQ.roa (hash: G3PsqWwZG4a4wRVOKKyf/BizSWqF3l/XniAnc/aFIYE=)
                          29: SceNX_tyRy7gJUoCHzS26PlTN8E.roa (hash: 1Xte90eVS4NFabrcdI+zeKONa2G/bCMBJSpqRSajpFQ=)
                          30: TilEHtV5Q7oBynf2yfZAsUPzvpU.roa (hash: Fxmu3WxEv3nsLFYjiGFGYWlzYETClo8Wbk7NlPOtsAU=)
                          31: U-ddm29i5lJoii6xSN6t59JsnLk.roa (hash: 2dhGpbr3c91e4Qchh4iJkBEiC/ACTE/sr3wvK7a0Q9s=)
                          32: UcTqtCKQcZlB4PIYilqMtfbm3_c.roa (hash: uMcdtoOkj24hDk7N3SLwOyzXqC4/E1+TRAA33oBiqz4=)
                          33: Vmipr-X6gHN5Q1PB6CDobcADB6w.roa (hash: xDoEEAaLwgRhuP5a8eB+xSrlrmSYgfibGIcvpe6aoZc=)
                          34: _14UI2g3BqKnLNzfJm0N8fSPg2U.roa (hash: E56+XB6YoYcOX14d2HmQoXWgXyvc+u7SrBmRwfuIYkE=)
                          35: bwZN-tYNM3aSYrpFLaHORRihrvI.roa (hash: I9AVD6Q1iuk0dnloFpv6WDx3rWDClOHGm8KtCfvtJdo=)
                          36: ewPHwixuoGzJSn3UTLB1GN1cmYc.roa (hash: MM2xlnmtTrAXAWpy3anT+OaEKwNQPzDpV49u02Wy8fI=)
                          37: f4saC9ioyxme0e9zb_0tHqMZKec.roa (hash: eav0UM5DKKgusMR/LAZ+8CH0ZzHoZtPLS7sCYWWXOHM=)
                          38: fELT9iZJ2sFix0sq_AAIGTCrUaA.roa (hash: WAxoEQryZAeRir7tCuCMQqb0g0/qbwm+tMByKEmXSu0=)
                          39: grbQplUCB7ZM2GYHkmxlRFdQnJw.roa (hash: g2uvb+HCbbwSpTG0h/8B8b8REf2HmmTDgswYLjRSsf0=)
                          40: hbyI9JcK6o3VXMO4XROByAkoXc0.roa (hash: iKD+Y7Qq10xDMOnX2SS88ghYbL8l9MGV5RzAHHw6UIk=)
                          41: jUtKE4FK6pP66kkBOjDDaGzwqCI.roa (hash: 3Zgj37u8D3PSrFTShPjOGOp6oxpXATBj2ullep6jG0A=)
                          42: kWtprA61ek6MIm_L7WBKWSXIZt8.roa (hash: dLKI8eAsQDsBcGMzWMkQNZW0bmdQFBv/eZWGNG0sJh4=)
                          43: l2smdz3z-xi9zXbA3XKdeIhm-GU.roa (hash: MZVi1kmrXqSh8KlS9K8FuD6fi7igUWbugQqrXbVbPGs=)
                          44: oJ3f5GER5dM8GWeWyACY5YuLa28.roa (hash: mCpiGCL5gL0CkzAq4iJLx1OB0M473FwfIKvA4YiN6/4=)
                          45: oS-fNv5NWYpkhUFvD6uSEw9rpqk.roa (hash: CX02VG3apaSiekOtp3IPm/ZcfoXEFo9RXura+RII2l8=)
                          46: rrripexqqD0GXDADs1RuY5f0jkM.roa (hash: LNIJG4/3eC49LM/IPF+AmM1eJhQq0quBhjg1YqhmNu0=)
                          47: thHrsD-yqevP2knHpfUauu7RlpU.roa (hash: qRqD1tlUXSxeS9yKFZTjYvsHbEourXQbS1jNvP8sYuw=)
                          48: tz73bHfk6lkyUVzMDxrqeXqmF_4.roa (hash: /ufN8cuUwifcbZRfRjvd0dOgUngjqpzBoHaUjbO30a8=)
                          49: wKHTGlPu-KsncMFp8LtB3FcYyDM.roa (hash: nUiu6Mi3+URdfMNj+S34mHQDsF+ilDoMNQTK2hL9UiU=)
                          50: woX2g61_RG1vf9a7PZ6bLYDnMt8.roa (hash: 5snYYemO6TlDDk3fW4ies5wd4G6onkGpVq5s4+6X98U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:5a:bf:c0:de:94:a4:91:93:d1:f0:20:cc:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Nov 22 16:02:33 2024 GMT
            Not After : Nov 23 16:02:33 2024 GMT
        Subject: CN=70f61e77399a5b32be0de9d8a01b49c616299010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:d9:f2:2b:14:5f:60:82:45:b1:ca:ff:2e:
                    63:25:d6:5b:e2:e0:31:09:cd:fa:10:e9:c4:38:40:
                    1e:a0:9c:ac:06:ca:9e:f6:77:2e:b9:73:b2:38:ad:
                    35:88:a0:4a:6c:42:d5:4b:c3:59:ab:b3:d3:36:69:
                    a1:b9:87:c0:70:a9:69:e9:5d:67:47:2c:23:db:b4:
                    19:92:e9:7f:d4:e1:c7:5f:e2:41:f2:ed:23:57:9f:
                    45:6c:0a:a1:c9:7d:f8:2f:f0:ff:03:da:9a:c4:a8:
                    02:50:11:ea:b7:19:e1:f6:fc:61:26:66:c1:bc:d2:
                    a8:f9:c4:9c:2f:e5:ad:dd:20:b4:0c:eb:ca:e9:4a:
                    0b:c8:b2:43:d2:56:3b:2f:d6:4f:bd:2b:77:57:65:
                    db:52:fe:09:04:54:a2:2d:0c:19:c1:87:2e:fb:27:
                    91:c2:ba:9c:45:bf:43:28:18:ef:6b:21:66:d9:07:
                    d1:c0:fc:1e:dc:69:b7:77:1b:32:fe:39:b8:c4:bd:
                    99:9b:79:97:5c:44:ef:0d:5d:af:dd:18:6a:ea:cc:
                    ef:38:77:9a:da:af:14:26:c8:af:56:36:e4:01:a6:
                    5f:71:24:80:0a:d8:ff:2f:b6:67:c6:b1:c1:32:e9:
                    12:fb:27:74:26:ac:c5:0e:34:e6:20:3a:4a:42:79:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F6:1E:77:39:9A:5B:32:BE:0D:E9:D8:A0:1B:49:C6:16:29:90:10
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3f:ea:ae:d0:3c:df:bd:08:f2:a0:f2:b1:b3:3e:e2:11:36:
         dd:34:38:dd:8c:07:2c:73:b3:0b:b6:a6:71:2e:b9:7d:98:76:
         17:10:25:14:f8:40:bb:6f:85:f2:b2:5c:c0:aa:29:a0:0d:ee:
         a4:57:31:51:2b:25:82:13:07:8b:32:ad:e9:ec:13:0d:2f:cf:
         68:68:15:7a:35:84:a4:19:47:c6:de:18:09:a2:dc:a5:4d:6d:
         a4:7b:52:d4:d4:c7:1c:a3:74:e7:72:c9:47:22:24:90:4d:f5:
         29:a6:b9:b4:d8:bf:5f:50:2f:c2:e3:59:0d:40:35:72:ef:03:
         22:8c:a8:03:7a:6a:c2:76:97:81:cb:ac:67:60:84:13:71:48:
         23:c0:de:24:9d:47:3c:f5:eb:39:f0:3e:ee:10:e3:d1:e8:f0:
         d3:5d:55:0f:30:46:28:4b:ee:1a:be:53:8d:fb:af:2d:98:eb:
         3e:7e:6f:b5:cf:25:d9:00:2f:fc:1f:17:37:e5:24:90:9c:56:
         b6:96:36:bf:db:1b:52:38:29:5d:a1:b7:14:a5:bf:41:02:7a:
         0d:ce:dd:85:47:00:bc:b6:e1:47:8d:0d:ce:d4:f9:4d:03:51:
         a7:c8:f9:c8:0d:06:f9:11:24:ca:e4:9b:71:e6:c6:2f:0d:62:
         5b:55:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----