Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File:                     NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier:          jSBlkYatFTfQfPHSMDagpT55SyumevSc5aGUF/eToSE=
Subject key identifier:   B6:D7:94:5D:3C:59:91:14:D4:7D:E2:71:CC:16:F7:46:25:58:63:4A
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer:       /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial:       0193584052409BBB6AC293D58D7A6F655ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number:          1389
Signing time:             Sat 23 Nov 2024 09:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:30 +0000
Files and hashes:         1: 1etTTR5Zupa-rEaJi22kBmuZ3M8.roa (hash: SSaLAojgRGt43M1dfAkdoFdEtO+ZG6jzZq4/+c9t34o=)
                          2: 2oN7qNENX-73Mp2kXFNBmkhiLjA.roa (hash: T0KdxcykM0xd0nrjwbRpTneRmO/OQHNpAmWRiWkSEPY=)
                          3: 36RgZgj_85NBzNI7LgbMLUFLab0.roa (hash: s2i274Zt2y5tWiBlR0EVJQcg2KhI73Z2AWZoSHOcHxo=)
                          4: BC7ieHX3m3Iq4RDiDoxABauAeYM.roa (hash: rXMakeJzPeg+BdMd3XpJ7NxiNHjzLU2EOibO7UjmOvw=)
                          5: FkUrsPp3r4jbUnbWrjIq3uDlRew.roa (hash: uMEGfdRLyCjtf5hJF3Vv6KDRc6MJliaX8HpExeauWmM=)
                          6: H8LG-Jxo1jQvjPZQ29U1ITbynB4.roa (hash: pAWiZ45UtcjOaDYzLamhUDtPIGPorvbMTlNphEXas70=)
                          7: I5-S39Hf8Ud_311l97GZEu_3kDg.roa (hash: +yUSHgBD+l/26ZEAwaanT9u1JGd8AU+0te+sdgjMgtY=)
                          8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: mPFF6Z8v49R0dj+nXG0v16lJUZcozmQfx3rQ5ehng4k=)
                          9: OXj5ffsARS0_xCpqBV-euEX9rXQ.roa (hash: tvHmd7rio0zVKa56k3RnGRbgbpK8b3p39aKatd2vhDg=)
                          10: QrEc5VlePkRUrj0BBNGsfQr603s.roa (hash: bdMXBs00habtsN8miQK8EtPeO5HElRuDJVE7tXRQnNw=)
                          11: _rOrmearDBwszoxH17eywsvUlag.roa (hash: hy+JNOGnypqLCKbBhoXe0krN4kNWRumI8oPpZHbt0ys=)
                          12: cMW-Zdolm_oqj8UMw8MRuC2DwrQ.roa (hash: D+uvI1F6z81+X+x2rajQx/UmEcxmiGXEz5/6YHJcsbk=)
                          13: cfj6u29wK7qsTJJ7asYcbuezmEQ.roa (hash: orXEGngy7C+E8VOzPDTnLFIDj63ur5sFYqTtGW7zyLo=)
                          14: e0ZulBvPgTV3r0ljio5PYllRsuI.roa (hash: NQoUX4B1JUqioZjJjw+bp4jHlOO3PUUz/M8Ahoj/y2g=)
                          15: g17VcGIry43b1jhcbCqk6x6GiNs.roa (hash: ZoKEFQaBp3L8DpKqJzThTeCjRKGEQO4KDVlIOA3sy1A=)
                          16: nAhlQGDCg73twYkDSR6TjKNltIk.roa (hash: 1BJ4EotGGfc0sJNtHnCAXiRbJLfjSV68VHjIRxCwZxA=)
                          17: n_1QmiOkn6Q7niCKvucLsLG-8pI.roa (hash: iDsmRsq7CNApSo7V5fVe1oTexBmF/nU61xFORJCiTYY=)
                          18: orBDAfSjI1NCg3af1O2rIizGDuY.roa (hash: UUdDrV3WwUhmQqkZLdxfylOh/5wqavyvkkIvaN4OFEE=)
                          19: ro8r807SFlHgEdC0lWiLqwHjeD4.roa (hash: mE0wCqZZDknJbdaExWoon366yl17A1XrryTH35EDcCU=)
                          20: sgVitHDTEgpWPJMX0iarJ3BdHLE.roa (hash: mcBMb+aKk0K4/WRRG84SDy8dFyXjAkwF+q7GFdOTQsk=)
                          21: u9xyCBdP7B_Z_iu_16TbVRl-9NY.roa (hash: IVAQGbqPHsg63piIkLwHuEKbfq3PFMWZHAb5uz7fTTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:52:40:9b:bb:6a:c2:93:d5:8d:7a:6f:65:5e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
        Validity
            Not Before: Nov 23 09:00:30 2024 GMT
            Not After : Nov 24 09:00:30 2024 GMT
        Subject: CN=b6d7945d3c599114d47de271cc16f7462558634a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:fd:f6:a2:37:27:ee:e0:c9:a7:bd:80:5c:
                    5a:76:03:09:40:b9:75:7f:72:91:4a:7b:50:0f:83:
                    6f:f0:b2:e6:05:9e:2a:01:e6:e3:b7:07:fc:13:73:
                    63:49:4f:af:cb:43:74:c9:44:4c:5b:ef:10:66:1b:
                    b7:c4:55:df:3f:63:35:43:05:8a:cf:41:70:c4:96:
                    6a:46:9d:99:19:c6:14:fd:2f:26:c7:52:9d:2d:b1:
                    ab:c6:fa:53:fd:aa:0f:1a:60:03:29:40:f1:89:3c:
                    60:ed:ec:00:51:c7:0a:d6:8c:27:ea:82:f8:07:de:
                    e6:e7:0a:bb:f6:fc:26:cc:79:d8:5a:45:1b:7b:eb:
                    90:59:14:c4:5d:6c:e7:d1:73:ac:67:da:3c:c4:18:
                    34:f0:2a:e6:31:ad:34:11:15:a3:0c:29:a9:14:f6:
                    14:72:4d:c0:6f:3f:63:f7:0f:8e:4d:87:13:70:03:
                    39:04:4f:c5:95:93:b5:e1:23:72:c9:5a:ac:d7:19:
                    59:21:65:de:06:3e:4a:78:f7:8d:70:94:2a:0f:6b:
                    be:52:94:6a:43:a8:bc:db:1f:08:b2:6a:2a:3d:6c:
                    da:3b:e2:3a:d2:8c:53:0b:a2:89:78:80:1a:72:5a:
                    c0:d2:6d:c8:99:39:40:90:74:68:cb:a5:9e:e3:fb:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:94:5D:3C:59:91:14:D4:7D:E2:71:CC:16:F7:46:25:58:63:4A
            X509v3 Authority Key Identifier:
                keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:13:0e:b8:65:d7:06:13:8f:98:37:da:8b:c4:d5:da:5d:
         a4:c0:f4:6e:8b:f2:fd:be:09:e5:07:96:0e:7c:91:ef:88:27:
         83:8f:d5:47:f3:59:80:66:12:67:15:c2:96:dc:4c:76:6b:72:
         cc:e0:ce:d4:2f:38:ba:4a:58:5a:6d:75:28:95:53:f8:9d:8a:
         ba:d1:3b:e1:db:f8:9d:97:1f:7a:70:65:20:09:6d:f4:c9:78:
         12:d0:c7:d2:99:2c:b7:dc:23:c9:97:3a:ac:2f:c1:08:58:f9:
         38:0f:73:1e:d2:22:3b:40:19:30:a4:e6:4e:60:9e:f1:ec:f4:
         3a:1f:21:cf:39:5c:b0:ec:fa:37:7f:95:0c:e9:8a:7e:c0:6c:
         9b:66:d8:be:ad:c0:1b:c1:68:b9:65:56:da:8d:c1:8f:4a:03:
         3c:b5:be:f3:9e:05:22:20:b9:b2:66:c1:a9:79:41:1f:37:40:
         4a:8d:ea:fa:8c:17:f5:93:ff:ca:43:67:34:30:5d:1f:06:42:
         cc:ed:9c:07:70:77:6a:7f:62:22:47:7c:26:e0:97:d3:bf:06:
         fa:d0:1f:67:77:5d:3b:40:9c:e7:86:ac:1b:26:84:d5:0e:37:
         fe:79:94:0c:70:fc:89:6c:41:3b:36:40:3b:2f:87:85:b4:54:
         15:4a:d1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQFJAm7tqwpPVjXpvZV7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2
MGY2ZjMwHhcNMjQxMTIzMDkwMDMwWhcNMjQxMTI0MDkwMDMwWjAzMTEwLwYDVQQD
EyhiNmQ3OTQ1ZDNjNTk5MTE0ZDQ3ZGUyNzFjYzE2Zjc0NjI1NTg2MzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN799qI3J+7gyae9gFxadgMJQLl1
f3KRSntQD4Nv8LLmBZ4qAebjtwf8E3NjSU+vy0N0yURMW+8QZhu3xFXfP2M1QwWK
z0FwxJZqRp2ZGcYU/S8mx1KdLbGrxvpT/aoPGmADKUDxiTxg7ewAUccK1own6oL4
B97m5wq79vwmzHnYWkUbe+uQWRTEXWzn0XOsZ9o8xBg08CrmMa00ERWjDCmpFPYU
ck3Abz9j9w+OTYcTcAM5BE/FlZO14SNyyVqs1xlZIWXeBj5KePeNcJQqD2u+UpRq
Q6i82x8IsmoqPWzaO+I60oxTC6KJeIAaclrA0m3ImTlAkHRoy6We4/s7swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbXlF08WZEU1H3iccwW90YlWGNKMB8GA1UdIwQY
MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMMTDrhl
1wYTj5g32ovE1dpdpMD0bovy/b4J5QeWDnyR74gng4/VR/NZgGYSZxXCltxMdmty
zODO1C84ukpYWm11KJVT+J2KutE74dv4nZcfenBlIAlt9Ml4EtDH0pkst9wjyZc6
rC/BCFj5OA9zHtIiO0AZMKTmTmCe8ez0Oh8hzzlcsOz6N3+VDOmKfsBsm2bYvq3A
G8FouWVW2o3Bj0oDPLW+854FIiC5smbBqXlBHzdASo3q+owX9ZP/ykNnNDBdHwZC
zO2cB3B3an9iIkd8JuCX078G+tAfZ3ddO0Cc54asGyaE1Q43/nmUDHD8iWxBOzZA
Oy+HhbRUFUrRUQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:10 2024 by rpki-client on console-fra.rpki-client.org