Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
File:                     xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft (raw, json)
Hash identifier:          mav1BV89qLwuAi01ftYC6BJwQuryN+AKpiTcx7j91r4=
Subject key identifier:   6E:0B:AD:B9:8B:39:59:85:AF:A3:9E:69:FF:93:0D:F7:EC:66:49:B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0194BB96C2D7EBA72EC06DC15149F6A99C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
Manifest number:          01B1
Signing time:             Fri 31 Jan 2025 09:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:07 +0000
Files and hashes:         1: 007tkEVVbeFdWC23lHAVlj7iq8w.roa (hash: kSFF2+OZuHvMqh9IGxR+H46ZzCgGbLBZK6uLjGqAPsw=)
                          2: 1AoNeiFy7-T1Dq_4EIaBEOfZTaU.roa (hash: Yp3kN0jq9Y8I5d+oqReH5Vaq5cQUSloF/3iaszuNSks=)
                          3: 7Mc8uKI3CuJHzfAac0me_qulPCE.roa (hash: jPNLM9128hMaW0UroigyiORO7/8KNP7Ud3X5l0feTwg=)
                          4: 7N9NrHquBwP1JB72Yxw3wKXBSoM.roa (hash: tk0k/4YQFljF+sCXkXGtLSrRWWK67686FK9ml55e0BU=)
                          5: 7Ve3LA44EujB0CcQC-d0qAhm-l0.roa (hash: m+1nQP8PZoMMKfnvsEtdeRuduQh4kQPe7EAYxjZtZ2M=)
                          6: 7_3omKH_36W5sk9TJ0FtDmDegrI.roa (hash: j7DIujMfej7F3u0ZVTd5ZAdTO8akmg0AJ5TgYFFwFtg=)
                          7: 8BbcZP3rUvDa9MNTjMlkDwZkYKE.roa (hash: gTEQ0GQS67JC69NKbvbCv+qNNjCezF9A5yNYPC211k4=)
                          8: 8eBlRM998u6vzAueol6N3g9Kuw8.roa (hash: bWG+9NKqE2Its4WVxgjisyOTVFtqYI5JWy+8DZPsxrw=)
                          9: 8tMrERJ0MruFgS9hGvzU_kM3ans.roa (hash: Dlgj/2TxKQxEfZoy4f6biVZQDGnfCBgqD6iWwOx/rAQ=)
                          10: AbfejDOyGB1Fp5f9bwLucZ-Acjg.roa (hash: VrDtZa3bRInUw8sSBtOTiNvtYyGNLW7/1p11txMKPsI=)
                          11: BPfvS7W2hBuJ5bH7ONIFyBLpNQM.roa (hash: Z+YaJI3n+hAZrHSLFaJRbzH6H7prTciZz+oe2vJ0h7M=)
                          12: EfK2_8ELAi6ITn6hvzWmGGcQls0.roa (hash: rc20XTbvvK90A6HeqEqYBU4Za6UytMQL0NpT0c1jsxU=)
                          13: GE9yb6wA_-AnGhqcdLgGTlugbAg.roa (hash: ZH7PRkS4L/pPq7cycPnu9u0FBb+5BWH3rlBlRKIYJe4=)
                          14: IlRPVGwhVio6wesWjA8PzUm61mE.roa (hash: l8UOAuEt0EzNQXEPo37gRFhOH8gOjMa0uCgf/0i0Q4c=)
                          15: JwrIFibd9EQYS2pWjjVihLvajhU.roa (hash: sRp1egtdf7/8NFqtDFWp0RR0+2khM4LBqF2i97hVX9Q=)
                          16: JzWIDrXeAn7rfYQB4Yhou2msfNU.roa (hash: mlTE2vYKe5RZa3BOnqWJBGXu7+PR/2pBbmicHBI8kY4=)
                          17: Nl6WQ30I0rlUQIORiUyV6SK5tO8.roa (hash: L0RsS7llvAOdpKHDAEwW73nbz88/H4M09+V2nSqfZaE=)
                          18: QkNste6bH6oo--laZ3U-NfgFMtk.roa (hash: pfi5e5UVJk4MYLtN85V4tcnJZnlKdFYmkrT96P7ASbk=)
                          19: R3b84kLBip75k7GPmULbhXoIbqU.roa (hash: K5E+pkS/h5fH4X8KETiKNYZ7eRhJG1VsNOIGm7/KRQs=)
                          20: SEVUS6hyBF_nSMmG5OkrToXrAIE.roa (hash: w0OmfjyC0f4CIvmIcywi42SLj3xhoZpggYHJxmbe88E=)
                          21: TLZ-85HTafsI7Wy_AVdHNB_gKpc.roa (hash: R36b9i0ycLE+tL19j1dfY1U4KjVv8mIa2Vj4Y1srJ6U=)
                          22: TzDcVqI0eu0NO5tIffaqQsfGRC8.roa (hash: s+cGmP2x5KFc+EYIzVtaB/PQyMw/8R9HKcJZAhWu34s=)
                          23: TzhUhjiY0bP6ApVnmq_Ja-x3mCI.roa (hash: HxPFYAttWqJeRjjr2exc79iltET1tmccx3zQDQBuSyg=)
                          24: WLI-04iwZ5RlSFP4U5FkL0oa3Ks.roa (hash: 1IqBV1Sn8T8m9pnYSn6zDOnh73yQI/R+YmB6iq/AwQg=)
                          25: WzZZsNa6ASP9QuMZAngChcE7Xw8.roa (hash: V1mKWee2UM1PmKCD8OA6j4BRpUSNwx2Abqq1YSUXTBM=)
                          26: _c6_09Yxn787jF3zOSqN2zi7JHw.roa (hash: fF03/QtvVZTD9H3Hq8B1WNlvpPcvYBSCXIRfBWsgC58=)
                          27: b5gpab_HK7TILwUmDdNejDgIJYM.roa (hash: 0JvrJZtD6poVcPf6IUxKGlMEGreOGcutslMJnYrK4oo=)
                          28: bIi_4fRE0tlXlxYvdUIuaKV1DLA.roa (hash: LZgJv8vnMelTJyUJgwwJ3tE1MMZPwPE3xlOGvtnFEQ0=)
                          29: bVHJump0RGx19ryAWmqLIkLJ48Y.roa (hash: 2vuOwlUQ29LgZY+39MVQmiRBZ7pQ6hOFLTNpBqOHhZ8=)
                          30: cB63Z1r9bmszt3UiGrfRMzcDrIQ.roa (hash: OfqYE6/V3SpFkytUSLFQG0+N4mAevLSmPVVGZyUgGEs=)
                          31: cvTzxvHtCvFRIMaIlFPdXmJwEYg.roa (hash: Urcgs1oB0O/btjF2kDbf9S4KGTzJsPh8JNOk81b3Xfg=)
                          32: dmCFJpZKa0CtmMe8RYN9owZeD6M.roa (hash: rYkQ86J0dz2B+bk8VxBUEzc3Pvit9TXqx9oaCXuFl8Y=)
                          33: eoHDYagCSMmUUcQ4dA0Oci2ZmOI.roa (hash: 2spi7tw7ACQahG/NCtomD/p7sD8ehrxSd7Mc9OysiSE=)
                          34: ew0R0jY4ElSeR83izzkwlA0tj-4.roa (hash: CinBKDQTtHvIMtAvzloHeKpeQ0pH4N+5V1N5q9XpLoU=)
                          35: f6ksuIf6H4A6LphpKejVZ2jsxMU.roa (hash: GeLyAurSWNSdcAk+68DwEzeitg5y6n2QS/ObPZpkzpo=)
                          36: fv50N00Om_NNZEw_Ie613VpyhEo.roa (hash: RjZZ5W6Sfq7d7TrU3i+djA5jnGGWpHDVX0pQ+GIUhQg=)
                          37: g0m5RJ2ltBgx_kgKmC0ayPw5grQ.roa (hash: ckXFiuAivD6pDTnTAA6RrDZWEyU/MgPqYOnYDq1GTZU=)
                          38: g5_NiyFCJwhgSZW7w46r11iGZbw.roa (hash: lbthaEPFQvl4+AqOV1yhttCiBcSx4ghT5WpO0zzOVd4=)
                          39: hRKZkEaKdI8G9_MgSGDPqw5jUj8.roa (hash: d5j/NF09E6MX+e8CVFVt3NV4c8q7rg8FABlXBb4XuhQ=)
                          40: iaA_AlN05nMslGsYw48GXSeNyv4.roa (hash: 0sft+50eGyn3aUdimuM7hoArvvHIPqNwNc1G/fKKdqQ=)
                          41: jaxkmoKj_xEPdxf0DdwaqzoT7VM.roa (hash: Y/AjDYnpAcaWJ2ftrWZo/LCwI09/eGeIK1EbNbMPprg=)
                          42: k3fdDpRnYW1puGPAdZW3zJLrikc.roa (hash: MOyen5FYTobn0i8+SVk1m2UVuxEMDB5mjZe5TTfdSCE=)
                          43: lOMkAn3p7itqCHBeeXlxxaphM6c.roa (hash: cMYJno9lroXT4DTdXozCFKGSWvSrqRJvLivdgKAVt44=)
                          44: mWRcPTsuhg9xh5JfwKOepQc5IZY.roa (hash: fAMfdy4tHi0OXNcw2HslIC4l/PjMRZNfEgniyr66rbQ=)
                          45: mop8nfMfTxbi-gtSPoL2cTluT6s.roa (hash: m9fasP21t368npNwYN02Mmh/46cDHTXRAqM/s4xzO1g=)
                          46: oU8jOuJCWyZ6J12EBaNUpL8ETSQ.roa (hash: gRq29X9RknsapXVkX5US3QxMDOIPVXyrwYgBY1VB4fw=)
                          47: qJpv61jiMhWbh0-YBV72Unfxk9g.roa (hash: 67rAeZvLRul8Cbfh7JFkOjOkAfzYv8x6mKbbv3njJEE=)
                          48: rTjDIDHjbM9mwtWSmP35qch8D0U.roa (hash: ERNMtUZ3sWRkCWgXYJOR12CY9e3ST6WzW8U4b8X2OPg=)
                          49: tBNLGSa7-FfeIZNEOeDE2pPVawk.roa (hash: VRtlNfAOqEbdmySjM4kNFfykxA13GkdH4rVCCy+6VM8=)
                          50: tnbiWkiWP0-4fL4NxQUbYvTjgG4.roa (hash: lrxrId3+LP2vVj3RfADN4AwbJIrs51zgJxX6CPDuVIU=)
                          51: uCPHAmRjgbG_EIztnDwwKpnulDo.roa (hash: 1fC9X3ZFuTIT6SI6hc4lSLzxlwOBSt/sthdO1/cHYs0=)
                          52: uXhGyv4rNf1oSuhgnhrWtnMY7HA.roa (hash: RYWR2EtoitGF7PoJ9h/nOqKUNR3J4YFJF7gCGFVyXUk=)
                          53: urHwRdIvECaxJkMXMyEqy2Rxr1Q.roa (hash: +jUcEbZa8d21e0pKpTuKxhB5zpA9inCsB5KIZB1FyFw=)
                          54: w2O9eOlQqLH114BgDYJVsNvoJRs.roa (hash: L8s7HCwSb2WD1XxmTWYYwY7RKx9RtykcWg4cYYaa1bA=)
                          55: xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl (hash: 5XTruacHcdf9qIrdWqJGUXIWEcezMQCO1t9Seqrl0NU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:c2:d7:eb:a7:2e:c0:6d:c1:51:49:f6:a9:9c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan 31 09:00:07 2025 GMT
            Not After : Feb  1 09:00:07 2025 GMT
        Subject: CN=6e0badb98b395985afa39e69ff930df7ec6649b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:6c:53:fa:fb:88:7b:0b:13:f5:ea:32:a1:
                    48:49:f1:ef:16:78:4c:15:98:8d:fc:28:c1:7d:a2:
                    23:bd:ec:0c:6c:f4:c4:17:8a:52:6e:88:c1:1a:f8:
                    25:53:96:b2:ff:41:1a:4a:2d:a9:01:29:ab:55:fe:
                    11:d9:8a:16:3c:59:f5:da:b7:00:1b:bd:8c:7b:51:
                    05:6e:a4:5b:34:84:d5:c6:3d:16:ff:8c:4a:b2:a3:
                    8d:c0:81:2b:9e:7c:9d:c1:27:a1:cf:2d:08:58:50:
                    7d:f1:a2:6a:95:40:ce:77:d3:1c:f7:fa:eb:92:98:
                    e0:2a:9a:d0:7f:69:23:17:85:12:80:ae:fd:46:44:
                    c4:3e:18:64:97:7a:29:91:8f:bd:99:5e:39:31:ae:
                    fc:90:70:0d:27:4b:4e:15:db:0e:9c:ba:52:0f:f4:
                    d2:bb:c6:14:cd:6b:32:a7:55:b1:f2:85:f8:46:78:
                    fa:82:91:a1:11:70:ef:cb:04:44:85:f4:8c:19:26:
                    3d:3a:ce:4d:f4:5b:f5:71:fa:bd:c8:2e:ef:d1:04:
                    4c:7a:2a:98:3c:ec:c9:0c:16:03:3f:df:ce:c9:76:
                    1c:3e:64:c6:4d:2c:f8:e2:72:82:7f:fc:95:ac:ec:
                    12:4c:a3:1c:d4:f4:96:fe:77:c0:a3:1b:b9:ca:21:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:AD:B9:8B:39:59:85:AF:A3:9E:69:FF:93:0D:F7:EC:66:49:B4
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:16:72:af:c5:58:f7:5b:85:9e:3d:08:f6:66:9e:28:ca:
         f1:d0:67:0d:dc:e4:d1:ad:f0:65:3c:bd:9c:f2:33:5c:96:ff:
         0a:7a:c7:cc:74:6e:f6:15:3f:5d:52:dd:29:46:7e:fd:62:a5:
         f4:b8:e6:46:e8:be:90:f6:a1:f1:80:e7:05:5b:5c:bb:03:cb:
         5c:50:e2:c4:44:b7:f2:aa:ab:e7:e7:ab:6f:1d:d8:44:db:c6:
         79:ae:56:5a:d3:59:ca:06:89:8a:d9:b1:a5:4f:bf:d4:d2:2c:
         5f:9e:bb:cf:1e:d0:26:cc:16:a6:db:50:5f:8f:e6:dc:a9:90:
         6a:c8:d2:07:8b:64:8c:e0:49:c0:d1:bf:6e:63:08:0e:08:69:
         5d:f9:11:b9:20:5c:8f:46:7c:eb:bc:58:76:99:5c:59:7f:7d:
         af:50:5f:6b:75:68:e1:a6:53:2c:7e:f8:26:f5:88:71:a9:8d:
         53:cc:fa:32:36:57:8f:2e:3a:2e:ee:a2:a2:5e:ca:28:44:c9:
         10:ef:d0:11:9b:96:17:e4:ad:1c:1d:5b:ea:7a:6f:5c:28:20:
         1e:0f:bd:67:98:85:6f:c7:b4:e5:24:1d:e0:3c:95:bf:a7:ec:
         2a:56:7e:b2:bf:6e:9f:b8:1c:ef:c1:9d:ce:90:4b:3d:d0:4a:
         47:f7:4a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lsLX66cuwG3BUUn2qZyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTMxMDkwMDA3WhcNMjUwMjAxMDkwMDA3WjAzMTEwLwYDVQQD
Eyg2ZTBiYWRiOThiMzk1OTg1YWZhMzllNjlmZjkzMGRmN2VjNjY0OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oVsU/r7iHsLE/XqMqFISfHvFnhM
FZiN/CjBfaIjvewMbPTEF4pSbojBGvglU5ay/0EaSi2pASmrVf4R2YoWPFn12rcA
G72Me1EFbqRbNITVxj0W/4xKsqONwIErnnydwSehzy0IWFB98aJqlUDOd9Mc9/rr
kpjgKprQf2kjF4USgK79RkTEPhhkl3opkY+9mV45Ma78kHANJ0tOFdsOnLpSD/TS
u8YUzWsyp1Wx8oX4Rnj6gpGhEXDvywREhfSMGSY9Os5N9Fv1cfq9yC7v0QRMeiqY
POzJDBYDP9/OyXYcPmTGTSz44nKCf/yVrOwSTKMc1PSW/nfAoxu5yiEfQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4LrbmLOVmFr6Oeaf+TDffsZkm0MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXn8Wcq/F
WPdbhZ49CPZmnijK8dBnDdzk0a3wZTy9nPIzXJb/CnrHzHRu9hU/XVLdKUZ+/WKl
9LjmRui+kPah8YDnBVtcuwPLXFDixES38qqr5+erbx3YRNvGea5WWtNZygaJitmx
pU+/1NIsX567zx7QJswWpttQX4/m3KmQasjSB4tkjOBJwNG/bmMIDghpXfkRuSBc
j0Z867xYdplcWX99r1Bfa3Vo4aZTLH74JvWIcamNU8z6MjZXjy46Lu6iol7KKETJ
EO/QEZuWF+StHB1b6npvXCggHg+9Z5iFb8e05SQd4DyVv6fsKlZ+sr9un7gc78Gd
zpBLPdBKR/dKmQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:40 2025 by rpki-client on console-fra.rpki-client.org