Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
File:                     Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json)
Hash identifier:          trr/UX9Djx90sH+dmTsCPg3srORFBR5sb5EmSp6FgxY=
Subject key identifier:   19:79:08:5E:AA:41:C5:DF:33:C1:EE:D4:21:79:70:F3:E6:02:E7:D3
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Certificate issuer:       /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial:       019350F48787232D5184805A94068A9405A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
Manifest number:          0F8B
Signing time:             Thu 21 Nov 2024 23:00:22 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:22 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:22 +0000
Files and hashes:         1: 4yXg7FfDFvVHTPL7kPVxRBijnCY.roa (hash: wdW8U+53e56cWGi5HjUZx7XUp/8QoOMJlmgQUJcfsio=)
                          2: 8xlKfMmJYRONSLuaMNvuJW-j2r4.roa (hash: /Vmg0O9sAZzoICi6C0Z6NjXnF3A939Fkh96CTNH1cNw=)
                          3: 9Jf9mm7dyS_yyQIOO5qAuNQBZII.roa (hash: z6PkUw09yqlmRd8xOu71hoHNy+p5D2PhqUHJtrd2WfE=)
                          4: 9XkT2H0VW9ZP10GBudtwsPWxU4k.roa (hash: XpwL9M1S4Q2V+CWiRBdGODc9P8QUnjU5zEXKz9MSCxs=)
                          5: 9XwfTj6sHI9khJFNNWBsSn9iWds.roa (hash: DGmHN2hq6aKkb9GGpx+XFWWiaqnKwC++5F4rGL0KzT4=)
                          6: DgK8esd9QgPl7eewefCLJABxc4k.roa (hash: hmsuJz0tE/YLIW7bs1P+TOa90oDLgMjdsyO1MlO+bDg=)
                          7: ERrJ1zEBtJ8fwKkpjbMrRKNBUMw.roa (hash: sWw1bvgb2TjhnRBxGL+kHZyOPMPVLzkvxoj8+syuVU4=)
                          8: ET747Zx2WhMsw9ASl97jopKOmHE.roa (hash: P2UzAPuOimWeDMaDjm3sbbm2XRHT8cGwEWmgWGvxaZ4=)
                          9: GbBkaEZxJRz-5wxCx77Dw_yL1s0.roa (hash: VZ3F4vQh3oYYDCrI81r7/04BDQLhbWTQZUr5vWVVnJA=)
                          10: GswP5odf4qhhN2_miP7MKVrE8NY.roa (hash: 4dAmgBiAeI9yRLIh7lolRv37bd3+p2lzTOKeKxRWsEY=)
                          11: IAGeSI8t1VyYjiQd-pa8hGLurNE.roa (hash: XPoOxENnvl66DMkUTyaVSZDrqzYLzYQp+PJYmYsR0PQ=)
                          12: LdYowE-_7EMd5OAgF1JFOKH9iTQ.roa (hash: 9FXhGvkbgo8uDB74jU3MDRjGJrBV9uFOp1XnC91wykk=)
                          13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: jEYLoTBPvN4PUHThbE6MNT2hUb9zxN0hWRAduhbxnZ8=)
                          14: RaBs_Yj3i9V3dwc6fjAnBfythKc.roa (hash: xxhGz0S9OD//YWGhiMfQzFwAuy9++9pGzI87N3/byps=)
                          15: XSnZLLaq59qHkb6JKWUVJT544TE.roa (hash: nbNbgFoyL0JZYYPtY57q9Zw7aaDr2uFOVSvKmYf+QMc=)
                          16: ZdQ0dnM2KgIPqVQcIYkKaEvTsME.roa (hash: wzUTiLbYojo2qSogLs6xGWRQIpokpDkLOWBvlKQ1C28=)
                          17: cFiGwvEn-4RAiXsHmJwkYRs4Z3o.roa (hash: VIOpogHeSUrcasC7odIIEHcgU8YTmmjOL5CVtawRClU=)
                          18: dlQV75OnuBNgozQjPwqG5aodaYw.roa (hash: 16FKew/IxBb6CS+fmVyyC6cD9CnduWjykB+LKiN+jO4=)
                          19: ebBqD7HizPIx_L7-ZztTGtEV7PM.roa (hash: QwHUk4Q9MZ7MaV35EkeR/V5ckqn84lACyBVF1qHu2I4=)
                          20: hRIm-B1b9CmgZxKcmsBtbenPhc0.roa (hash: gvLlhMndSaxjGOCWZW4gWMTDRvGQAwBYLcQnKkIY+zM=)
                          21: ptTJW3Gbn3KkloBTWMPFHwUFmsI.roa (hash: RJOa/PGzN2eXuKFdtvvlPx3Gb66Z23+TEyic3bYfR/A=)
                          22: qSN79NLWEN1hpd8dvkO_HOk2gjY.roa (hash: hLNQZMVsOxEzP8n+hQvUwpyocdqbaCjB7C6d4sqhaFk=)
                          23: tJ5VpsLXByfieS_5QSgO8HDUgys.roa (hash: gxHgQpbS2ThI39xCXmHPh+CO7uQ0bDrX+YtpACBNXgk=)
                          24: uZz4TDumVqkrTuFirdctLyTxnx4.roa (hash: nmoiCb9vZStBwVqo8Bc5iMb5wSnzo6eANG1zIFBWPVQ=)
                          25: vd69oEQY9A3sHjhWOgsLVWdU3P8.roa (hash: iH8l0IhnoWzF+x78Omo1nDI5sixKG5BmCy30r6bhC9g=)
                          26: vewgHkmjIleJA0Grt4UW-DpORdU.roa (hash: cpsmMoRvTDO+rP2QrFIkbfSw5BJ/3QfwV2AUUgzRAhk=)
                          27: yio-NRG8O-iQMumeZwQcBGw91NQ.roa (hash: SElkl2oCUJ5kwOVSjmWGtIuWY0MT8tJZMaJq5oRjP0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:87:87:23:2d:51:84:80:5a:94:06:8a:94:05:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
        Validity
            Not Before: Nov 21 23:00:22 2024 GMT
            Not After : Nov 22 23:00:22 2024 GMT
        Subject: CN=1979085eaa41c5df33c1eed4217970f3e602e7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:72:9b:54:26:f6:37:5e:fc:8e:d2:1b:89:
                    f4:64:42:b6:e9:62:d4:5e:de:fd:c7:2a:54:c6:5c:
                    6e:94:12:f3:ae:e1:fd:ad:c9:d2:74:f5:9f:6d:42:
                    c0:45:cc:c0:cc:d3:78:e6:51:0f:c7:f0:8f:5a:4e:
                    b4:72:ba:7e:4c:ae:98:f2:72:f1:8e:46:36:69:95:
                    f2:19:a0:f5:31:b0:ff:d8:80:34:dc:5a:42:93:e9:
                    2d:80:09:bc:8c:1e:c1:81:fe:a7:3c:dc:00:30:39:
                    66:ae:e0:d1:9b:0f:2f:2a:5d:26:84:77:42:01:ea:
                    29:0c:33:5d:40:5b:34:75:72:a4:fa:9d:a2:74:31:
                    0a:c1:89:d3:9a:0d:e8:18:41:40:94:e7:87:f3:e0:
                    cb:8c:d2:e4:64:e2:7b:79:72:cd:fb:56:e5:e7:53:
                    f0:8c:ac:55:ca:c2:e0:3d:79:cf:aa:36:1d:e4:a1:
                    bf:67:32:e4:9a:d8:91:f2:95:39:20:fa:c7:da:4d:
                    27:cc:d6:e3:60:6b:6c:27:d6:9e:53:f1:ee:e9:e1:
                    06:62:45:b8:f9:e8:f1:a6:93:d3:18:ca:fe:bb:5a:
                    03:92:e9:89:1f:dd:2b:4f:49:c4:60:c3:ce:45:3e:
                    3c:c5:19:80:5e:c1:14:04:e3:d8:36:f6:06:51:19:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:79:08:5E:AA:41:C5:DF:33:C1:EE:D4:21:79:70:F3:E6:02:E7:D3
            X509v3 Authority Key Identifier:
                keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:98:35:e0:80:6e:6e:6c:b7:f8:ae:72:8b:fb:26:5e:57:c6:
         3a:e8:05:ae:2d:a7:c4:ef:ec:5a:64:26:0c:98:99:55:36:01:
         13:76:98:80:f8:f4:9d:b2:ad:5d:ce:b2:b9:cb:05:c4:a8:96:
         6b:5a:9e:09:bf:c6:0d:53:15:3e:f8:28:ee:d1:23:2c:95:41:
         5c:f7:dd:01:89:82:57:16:88:87:e2:fa:88:34:13:1b:a2:d8:
         dc:41:1b:68:52:11:02:96:fb:5a:66:ca:86:77:6e:56:90:69:
         89:44:a6:af:f2:e7:d5:18:9e:7b:59:58:15:6a:44:ea:1c:1a:
         ad:76:a0:a9:50:80:86:28:6a:c7:32:61:82:0a:dc:9a:03:3a:
         65:14:6c:68:2e:95:74:eb:80:3f:d4:76:86:94:4d:49:7a:23:
         cd:07:d4:ca:1e:f6:9a:0c:5b:a3:75:14:b2:65:d1:2f:7d:54:
         9c:f1:9f:a7:fd:e5:17:22:ea:fe:2c:be:90:55:84:19:42:91:
         6d:b8:2b:f0:e8:f3:63:07:b8:a1:89:fc:d8:9b:bc:b5:4c:2e:
         3c:2f:c5:14:aa:33:57:bf:15:7c:01:a4:20:18:98:e9:05:59:
         6e:3a:ba:fb:a4:84:d1:db:03:7b:07:a2:aa:a1:4a:4f:0b:eb:
         d1:12:02:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQ9IeHIy1RhIBalAaKlAWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjQxMTIxMjMwMDIyWhcNMjQxMTIyMjMwMDIyWjAzMTEwLwYDVQQD
EygxOTc5MDg1ZWFhNDFjNWRmMzNjMWVlZDQyMTc5NzBmM2U2MDJlN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNNym1Qm9jde/I7SG4n0ZEK26WLU
Xt79xypUxlxulBLzruH9rcnSdPWfbULARczAzNN45lEPx/CPWk60crp+TK6Y8nLx
jkY2aZXyGaD1MbD/2IA03FpCk+ktgAm8jB7Bgf6nPNwAMDlmruDRmw8vKl0mhHdC
AeopDDNdQFs0dXKk+p2idDEKwYnTmg3oGEFAlOeH8+DLjNLkZOJ7eXLN+1bl51Pw
jKxVysLgPXnPqjYd5KG/ZzLkmtiR8pU5IPrH2k0nzNbjYGtsJ9aeU/Hu6eEGYkW4
+ejxppPTGMr+u1oDkumJH90rT0nEYMPORT48xRmAXsEUBOPYNvYGURlhmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl5CF6qQcXfM8Hu1CF5cPPmAufTMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5g14IBu
bmy3+K5yi/smXlfGOugFri2nxO/sWmQmDJiZVTYBE3aYgPj0nbKtXc6yucsFxKiW
a1qeCb/GDVMVPvgo7tEjLJVBXPfdAYmCVxaIh+L6iDQTG6LY3EEbaFIRApb7WmbK
hnduVpBpiUSmr/Ln1Riee1lYFWpE6hwarXagqVCAhihqxzJhggrcmgM6ZRRsaC6V
dOuAP9R2hpRNSXojzQfUyh72mgxbo3UUsmXRL31UnPGfp/3lFyLq/iy+kFWEGUKR
bbgr8OjzYwe4oYn82Ju8tUwuPC/FFKozV78VfAGkIBiY6QVZbjq6+6SE0dsDewei
qqFKTwvr0RICqA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:19:32 2024 by rpki-client on console-ams.rpki-client.org