Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File:                     1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier:          6zuC0k3cu6JFCZcszoTK5XsAKwmPJWzenqC0jE+h/rE=
Subject key identifier:   90:31:A2:05:62:A4:4A:96:BA:9D:C0:4A:6A:83:78:45:23:11:C7:FB
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       018F4945BD04782F502F2003C6C0FF423023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number:          115C
Signing time:             Sun 05 May 2024 15:00:58 +0000
Manifest this update:     Sun 05 May 2024 15:00:58 +0000
Manifest next update:     Mon 06 May 2024 15:00:58 +0000
Files and hashes:         1: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: lC4oqDjnbTYg3N/WhXK8nl42aF6+i30JKQT4Ofqf49k=)
                          2: 1pvbd9pf2ZD3mGzrAGan63RcRsE.roa (hash: SMNg5ZLAaNiRNf3/8kV9SIk2TjsCaGy1OMMfVoOj/oA=)
                          3: 63ong1PXxAsMuI9LsKO02cXfqFc.roa (hash: P5P7Hyf4vETRSjxCsbyqxr5/eBxx5HBDKDmAeJZQZbA=)
                          4: 8qpOQEkld-OCE327WDPvfwz8NTc.roa (hash: TbtnOjFPISiCKQ5Eo05EabfgkT3k9A2fhlIo4BBx5I0=)
                          5: Bj2LFAbOgKMR2NXBjTclhHV1aag.roa (hash: Q830XGnF8ByDmLrlT/LkmqVLHKlTHq70xGiNb0VwqA0=)
                          6: LNgDnrHM7ii_QTnTkLinr59AUeQ.roa (hash: IWp+z7twTuEbxlkzYqPjQVg6B2xaBrvNskt7X77HYxE=)
                          7: M378Jiav0hx3KAeGl5YoW97pz7M.roa (hash: 3DaI+UOX6y9aSwUvdKOCFjAsxxuUV/XFPhSSwOdAKcI=)
                          8: N9c3boAv5mJgjG2higtglPUJGWI.roa (hash: 2BLOMJNgeLw4GeqAKNj6M2zM/JazTZVIrWMx3Gl/6Lg=)
                          9: Qyttwg3pmxGgDqXwllRkY9Ul1tw.roa (hash: gpYEbp6fN/SNv3pbuSJLohmNIbw2RU7bBH2ATBZa0uA=)
                          10: WS1I5F3tfVRefUOCCZS0zMys8pw.roa (hash: XvfvmXsajGJCjetXfhgprpx/Rlg9PZwrmpDaP494WRw=)
                          11: Xp9hfRxRR7lOz3lcCrQlhbfMSNg.roa (hash: OUzYewoO1wZfzK9KvpJBo57693PN2Eib3QkzW0hchio=)
                          12: bo3Au_JS80UuU5XPgVVcU4UAl2Q.roa (hash: hmPm6ijITvgkAMuVXFKWvViNfsI54a7uN1RwdUKJvn8=)
                          13: cOfIzPHzxzO1k9-eyVc6POQcSq8.roa (hash: p+iWrAPwc3HN52EdbThkLHZjd5jV8Cs8TQ72IX/IMH4=)
                          14: f049LRi_jvtJNCpihFFUT2fZhT8.roa (hash: wOBAhY+Y/ISRTlCwOfE7p5S1+iVVvAFO0CQVKBvRRIk=)
                          15: j7PzXo_C9wrJS3cCrUgQVgE5aq4.roa (hash: TpwUYrkVwIBKmq3kWfm1uZapg5jg9Q9t+zAXqND6e3k=)
                          16: jEKmzPSGlitg2Y612KKDOs_lDg8.roa (hash: ytYdVeAglMXZKzGzfZBgmDlroGq1yRkb/AVRpMzC56A=)
                          17: m-LpYapnSdCJzKWk2xzexUp2fes.roa (hash: 4y2XyVBZuZsM4SUdEmcs0nDofBeBjYmBa3UBc9IuwYo=)
                          18: s3xN3EuKyCaYnSH-ezxDexmB20Q.roa (hash: LQ60hRL6xjznjAQ2w/wkWJ/AJ/Q5sFaId7RoqI+m/2I=)
                          19: sy0TYoXuL0Hz8DIGwy3rz_e-tZs.roa (hash: 5GusHLC5gSab0J6A1QYWk8PsA40CWk+3VnxiN3/265w=)
                          20: vKJBGSjWvGiP2-0Ac_g8pCCJoq0.roa (hash: TQXfDEJaWBuIVRDifgPe75hUlhqUjg92NoyfFjag6ds=)
                          21: zj8ix-9wNIiIl1G99PjmHJBfx50.roa (hash: I5GVyjdZbps16VY4UCizUYfKV+pmqkjFbyIgL1mY2ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:45:bd:04:78:2f:50:2f:20:03:c6:c0:ff:42:30:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: May  5 15:00:58 2024 GMT
            Not After : May  6 15:00:58 2024 GMT
        Subject: CN=9031a20562a44a96ba9dc04a6a8378452311c7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:e3:5f:8c:3c:31:97:12:7f:85:a5:50:ce:
                    ab:e8:a0:62:3a:69:85:11:51:b7:9f:4e:a7:ff:d5:
                    2c:79:d6:6c:31:98:4f:5e:6c:39:ef:c7:f0:fd:a9:
                    b5:bc:03:a0:39:33:70:b0:9d:ee:f7:f4:25:17:6b:
                    b1:29:9b:c0:50:ff:f9:a9:3b:3c:cd:01:33:3e:eb:
                    18:bc:99:ea:43:b0:42:68:33:9f:7a:4f:2e:dd:ea:
                    31:41:2e:18:03:ba:3b:0c:72:b7:81:0b:9b:f8:ee:
                    b5:1a:70:e1:d4:78:87:bc:e6:99:a6:f3:6b:c1:15:
                    b8:7f:b6:da:e6:c0:23:14:61:f7:93:80:2e:e9:7c:
                    85:b6:86:d3:98:34:6c:ef:7d:f1:ca:fd:7b:5f:f2:
                    94:14:34:35:7b:d0:d2:30:fd:0e:51:f4:15:26:f1:
                    d8:7b:7a:65:3b:29:09:19:87:7c:3a:f6:8b:48:83:
                    21:2e:6e:e8:8b:65:89:b2:24:21:86:ac:4e:5f:11:
                    98:9d:f4:af:05:d0:6d:6a:b0:c2:9b:9b:df:db:2c:
                    0b:f6:40:20:2e:fe:27:c4:fd:e2:2f:0b:a9:c2:95:
                    d6:85:6d:19:67:93:48:7e:ec:5a:6d:6a:d4:d1:c1:
                    2b:70:54:44:01:e9:51:64:60:3f:3e:34:bd:44:af:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:31:A2:05:62:A4:4A:96:BA:9D:C0:4A:6A:83:78:45:23:11:C7:FB
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:a3:e3:74:37:ee:b5:d8:39:ef:96:d4:81:11:69:c1:1e:61:
         21:05:12:9f:58:82:fe:da:37:0f:26:58:91:7c:5f:57:44:41:
         5a:26:b7:a3:0a:68:24:5c:bd:93:99:b0:78:5f:10:92:d3:db:
         ee:5d:a1:8d:3a:33:61:2d:1c:20:2a:54:21:be:5c:91:92:a8:
         bc:b5:16:d8:8a:90:c8:f0:ef:db:7a:a6:fd:28:41:41:a3:3f:
         a4:a7:6d:73:54:8f:0e:66:39:78:10:dc:47:6f:e0:f2:8a:e3:
         68:61:8e:90:39:7d:6c:0f:14:a1:65:0d:fb:18:86:4f:da:fe:
         72:e3:cc:d9:20:56:6d:db:c7:2e:63:13:89:10:9c:37:67:3e:
         bb:c4:48:94:5d:47:cf:b3:03:34:1d:0f:60:6a:03:97:4f:7e:
         9c:0c:da:59:e3:62:87:30:10:ac:c4:56:36:bb:84:be:df:1e:
         eb:be:02:2d:f8:74:20:df:ea:09:3d:3b:f3:8c:ea:23:80:b0:
         93:68:57:57:13:ee:a5:99:e7:64:c9:ac:d8:cd:92:4d:22:c6:
         e3:7b:87:6e:58:a9:c3:55:55:4e:39:66:1b:1e:25:e9:08:60:
         64:bc:8e:d8:2e:a8:a1:29:de:f4:1d:0c:68:cd:51:ee:d3:dd:
         10:42:e8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9JRb0EeC9QLyADxsD/QjAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjQwNTA1MTUwMDU4WhcNMjQwNTA2MTUwMDU4WjAzMTEwLwYDVQQD
Eyg5MDMxYTIwNTYyYTQ0YTk2YmE5ZGMwNGE2YTgzNzg0NTIzMTFjN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e3jX4w8MZcSf4WlUM6r6KBiOmmF
EVG3n06n/9UsedZsMZhPXmw578fw/am1vAOgOTNwsJ3u9/QlF2uxKZvAUP/5qTs8
zQEzPusYvJnqQ7BCaDOfek8u3eoxQS4YA7o7DHK3gQub+O61GnDh1HiHvOaZpvNr
wRW4f7ba5sAjFGH3k4Au6XyFtobTmDRs733xyv17X/KUFDQ1e9DSMP0OUfQVJvHY
e3plOykJGYd8OvaLSIMhLm7oi2WJsiQhhqxOXxGYnfSvBdBtarDCm5vf2ywL9kAg
Lv4nxP3iLwupwpXWhW0ZZ5NIfuxabWrU0cErcFREAelRZGA/PjS9RK8N2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAxogVipEqWup3ASmqDeEUjEcf7MB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3KPjdDfu
tdg575bUgRFpwR5hIQUSn1iC/to3DyZYkXxfV0RBWia3owpoJFy9k5mweF8QktPb
7l2hjTozYS0cICpUIb5ckZKovLUW2IqQyPDv23qm/ShBQaM/pKdtc1SPDmY5eBDc
R2/g8orjaGGOkDl9bA8UoWUN+xiGT9r+cuPM2SBWbdvHLmMTiRCcN2c+u8RIlF1H
z7MDNB0PYGoDl09+nAzaWeNihzAQrMRWNruEvt8e674CLfh0IN/qCT0784zqI4Cw
k2hXVxPupZnnZMms2M2STSLG43uHblipw1VVTjlmGx4l6QhgZLyO2C6ooSne9B0M
aM1R7tPdEELoBA==
-----END CERTIFICATE-----
Generated at Sun May 5 19:19:47 2024 by rpki-client on console-fra.rpki-client.org