Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
File:                     Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json)
Hash identifier:          UU5TtBLv9zM5vkF1kHlThfn8Y7xL/YtiUP3TCJSaw9A=
Subject key identifier:   90:DA:16:64:BB:EC:AE:7D:83:E8:8F:40:D3:88:D4:0E:88:CB:3C:BD
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Certificate issuer:       /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial:       018F877F37A48BE02C116B37696E62537B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
Manifest number:          0D95
Signing time:             Fri 17 May 2024 17:00:12 +0000
Manifest this update:     Fri 17 May 2024 17:00:12 +0000
Manifest next update:     Sat 18 May 2024 17:00:12 +0000
Files and hashes:         1: 4yXg7FfDFvVHTPL7kPVxRBijnCY.roa (hash: wdW8U+53e56cWGi5HjUZx7XUp/8QoOMJlmgQUJcfsio=)
                          2: 8xlKfMmJYRONSLuaMNvuJW-j2r4.roa (hash: /Vmg0O9sAZzoICi6C0Z6NjXnF3A939Fkh96CTNH1cNw=)
                          3: 9Jf9mm7dyS_yyQIOO5qAuNQBZII.roa (hash: z6PkUw09yqlmRd8xOu71hoHNy+p5D2PhqUHJtrd2WfE=)
                          4: 9XkT2H0VW9ZP10GBudtwsPWxU4k.roa (hash: XpwL9M1S4Q2V+CWiRBdGODc9P8QUnjU5zEXKz9MSCxs=)
                          5: 9XwfTj6sHI9khJFNNWBsSn9iWds.roa (hash: DGmHN2hq6aKkb9GGpx+XFWWiaqnKwC++5F4rGL0KzT4=)
                          6: DgK8esd9QgPl7eewefCLJABxc4k.roa (hash: hmsuJz0tE/YLIW7bs1P+TOa90oDLgMjdsyO1MlO+bDg=)
                          7: ERrJ1zEBtJ8fwKkpjbMrRKNBUMw.roa (hash: sWw1bvgb2TjhnRBxGL+kHZyOPMPVLzkvxoj8+syuVU4=)
                          8: ET747Zx2WhMsw9ASl97jopKOmHE.roa (hash: P2UzAPuOimWeDMaDjm3sbbm2XRHT8cGwEWmgWGvxaZ4=)
                          9: GbBkaEZxJRz-5wxCx77Dw_yL1s0.roa (hash: VZ3F4vQh3oYYDCrI81r7/04BDQLhbWTQZUr5vWVVnJA=)
                          10: GswP5odf4qhhN2_miP7MKVrE8NY.roa (hash: 4dAmgBiAeI9yRLIh7lolRv37bd3+p2lzTOKeKxRWsEY=)
                          11: IAGeSI8t1VyYjiQd-pa8hGLurNE.roa (hash: XPoOxENnvl66DMkUTyaVSZDrqzYLzYQp+PJYmYsR0PQ=)
                          12: LdYowE-_7EMd5OAgF1JFOKH9iTQ.roa (hash: 9FXhGvkbgo8uDB74jU3MDRjGJrBV9uFOp1XnC91wykk=)
                          13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: 6jVabB5pLnCUkfSKAoJ1u5KPsxeLtAQ6Zl1DfJOU2IU=)
                          14: RaBs_Yj3i9V3dwc6fjAnBfythKc.roa (hash: xxhGz0S9OD//YWGhiMfQzFwAuy9++9pGzI87N3/byps=)
                          15: XSnZLLaq59qHkb6JKWUVJT544TE.roa (hash: nbNbgFoyL0JZYYPtY57q9Zw7aaDr2uFOVSvKmYf+QMc=)
                          16: ZdQ0dnM2KgIPqVQcIYkKaEvTsME.roa (hash: wzUTiLbYojo2qSogLs6xGWRQIpokpDkLOWBvlKQ1C28=)
                          17: cFiGwvEn-4RAiXsHmJwkYRs4Z3o.roa (hash: VIOpogHeSUrcasC7odIIEHcgU8YTmmjOL5CVtawRClU=)
                          18: dlQV75OnuBNgozQjPwqG5aodaYw.roa (hash: 16FKew/IxBb6CS+fmVyyC6cD9CnduWjykB+LKiN+jO4=)
                          19: ebBqD7HizPIx_L7-ZztTGtEV7PM.roa (hash: QwHUk4Q9MZ7MaV35EkeR/V5ckqn84lACyBVF1qHu2I4=)
                          20: hRIm-B1b9CmgZxKcmsBtbenPhc0.roa (hash: gvLlhMndSaxjGOCWZW4gWMTDRvGQAwBYLcQnKkIY+zM=)
                          21: ptTJW3Gbn3KkloBTWMPFHwUFmsI.roa (hash: RJOa/PGzN2eXuKFdtvvlPx3Gb66Z23+TEyic3bYfR/A=)
                          22: qSN79NLWEN1hpd8dvkO_HOk2gjY.roa (hash: hLNQZMVsOxEzP8n+hQvUwpyocdqbaCjB7C6d4sqhaFk=)
                          23: tJ5VpsLXByfieS_5QSgO8HDUgys.roa (hash: gxHgQpbS2ThI39xCXmHPh+CO7uQ0bDrX+YtpACBNXgk=)
                          24: uZz4TDumVqkrTuFirdctLyTxnx4.roa (hash: nmoiCb9vZStBwVqo8Bc5iMb5wSnzo6eANG1zIFBWPVQ=)
                          25: vd69oEQY9A3sHjhWOgsLVWdU3P8.roa (hash: iH8l0IhnoWzF+x78Omo1nDI5sixKG5BmCy30r6bhC9g=)
                          26: vewgHkmjIleJA0Grt4UW-DpORdU.roa (hash: cpsmMoRvTDO+rP2QrFIkbfSw5BJ/3QfwV2AUUgzRAhk=)
                          27: yio-NRG8O-iQMumeZwQcBGw91NQ.roa (hash: SElkl2oCUJ5kwOVSjmWGtIuWY0MT8tJZMaJq5oRjP0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:37:a4:8b:e0:2c:11:6b:37:69:6e:62:53:7b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
        Validity
            Not Before: May 17 17:00:12 2024 GMT
            Not After : May 18 17:00:12 2024 GMT
        Subject: CN=90da1664bbecae7d83e88f40d388d40e88cb3cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:a7:c3:e2:ac:a5:5d:a4:6c:2c:df:23:6d:
                    87:f9:72:97:f0:42:47:24:8a:35:45:ba:43:f5:09:
                    a5:14:9a:8e:ee:7e:1e:4b:df:69:d9:04:75:ca:5e:
                    3f:47:9f:cf:c7:c3:f7:10:8d:ac:6e:20:ca:0c:89:
                    4e:83:b1:e3:96:37:b6:c4:bb:71:aa:39:8e:75:6c:
                    a8:dd:cf:fc:7e:b0:24:ce:cd:bf:f7:35:f0:5a:2f:
                    6a:37:cd:a1:f1:ae:31:1f:2d:07:46:f2:95:63:66:
                    55:5a:e3:5a:e4:3e:4b:9d:91:56:87:7a:93:f6:61:
                    a9:68:4c:65:78:b6:35:c9:78:ac:6d:fa:5e:a7:22:
                    e3:08:e0:b0:39:6c:f3:2b:32:59:41:c9:fc:a5:47:
                    2c:a0:38:d5:3d:31:d6:11:79:7e:df:36:af:00:00:
                    ca:43:59:af:c6:32:f5:a2:09:24:75:83:b7:49:8b:
                    35:0e:32:0b:fe:92:cb:31:f1:02:47:a5:84:12:3c:
                    36:49:24:0c:2f:7a:a9:87:d5:75:65:95:2c:e1:eb:
                    52:01:0f:a9:53:8b:c6:b9:e8:af:0b:cb:c7:7e:20:
                    b8:d5:51:40:86:88:a2:7f:7c:c8:06:42:e8:4f:48:
                    55:57:f3:74:ca:1d:29:b2:b0:e4:f1:a7:36:9f:3b:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DA:16:64:BB:EC:AE:7D:83:E8:8F:40:D3:88:D4:0E:88:CB:3C:BD
            X509v3 Authority Key Identifier:
                keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:71:74:4d:05:3f:1f:d2:29:ae:9e:83:82:94:49:c7:18:1e:
         0f:47:1a:0d:f6:d5:47:d4:20:28:11:4e:cb:8b:19:03:b7:7a:
         1f:ea:80:b7:aa:d7:c1:15:46:3c:3a:ca:db:a0:68:88:86:81:
         bd:90:66:9e:63:ee:d8:c6:e7:ba:99:96:00:33:31:bf:9e:7e:
         e6:6f:34:85:2d:ed:10:1c:2a:a1:25:1b:27:e8:e3:fd:68:23:
         3d:dc:0e:64:b7:50:86:90:d5:3b:36:af:30:15:37:7b:ba:5b:
         e7:fa:98:bd:f0:b3:17:83:da:20:b6:a9:51:59:70:03:31:fc:
         57:25:ca:f2:af:33:b1:83:b6:c7:d0:f8:10:14:15:19:84:a4:
         89:fe:73:97:76:df:79:57:cd:0e:dc:82:90:e7:e9:3e:f0:07:
         c0:2a:c2:d6:cf:ac:ab:0d:2a:83:40:7d:2b:2c:9f:ae:2e:0c:
         15:86:31:80:d0:27:c3:66:a5:c9:6c:ed:10:b7:e6:3b:7d:94:
         4d:33:52:5e:9d:32:8b:68:73:d0:ff:43:c7:1f:61:4d:fd:21:
         35:dd:b2:ea:9d:6b:cb:96:5a:8f:a9:55:bc:f4:92:92:5c:f0:
         28:51:b7:dd:be:18:9b:59:92:66:60:4f:5f:38:a5:32:b8:52:
         de:af:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:10:17 2024 by rpki-client on console-ams.rpki-client.org