Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File:                     H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier:          Q91YP4++VCLXj2kbEQkavbUVEbtkFLrHVoDv3rUaEHI=
Subject key identifier:   BD:A6:3E:26:6F:D4:B5:B6:5F:45:31:23:1A:5C:48:91:BE:30:B6:50
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       018F429F150635184B705DAF1BF063439EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number:          116F
Signing time:             Sat 04 May 2024 08:01:12 +0000
Manifest this update:     Sat 04 May 2024 08:01:12 +0000
Manifest next update:     Sun 05 May 2024 08:01:12 +0000
Files and hashes:         1: 4hKNyrQBlU-aKnAN9Kcc0yFDZ94.roa (hash: abH+siyDouRG1bLr6XZ8jt1Z65yHIICvT/QgEFviMpA=)
                          2: 5PnfiWqHvU94LIGxtK6dCyKSrS0.roa (hash: u+s/kcUh8whWX1FWK8jKP/K8mLiqguFyceSCxZxr0Sc=)
                          3: 5SKhKMleRuhIzcl59ladxxLV0Dg.roa (hash: 6h1EPo55Wc99DgQ5vWLTN7UeuiwktYYVTYE+x33rRA8=)
                          4: 75RkS9aOXq_q2dEDtMyTIIyqEiw.roa (hash: JpgBDWrqi7vvIJ0+4y3mHBzWWV8FnaGQj56KwSq7gN0=)
                          5: 77p_62RJmOpi6mgwEZSccs5CFB4.roa (hash: NMIOcac7+fjIYAtqBuNzNqpFPozowPwmCYC2g5CAr/8=)
                          6: 7FsYndCfamKUevqQtFan2ZS6mjQ.roa (hash: hK7hMzCGEyS1lVnIAPPIABj5Q32KqCEtpK483nya0/4=)
                          7: 7ZoqxrROcBX5SOUM1a2KG7SMt0o.roa (hash: Wi4xQjWhgHo+5y6wqb5nz0LdKZZfv79g1T3dtEcdp38=)
                          8: A0-rI9JIPT7usOkJyiCyUTLqZy0.roa (hash: g+LA9VcQvsTWrceFQC07z9XvTPhLrC6ySYUcL68f8dc=)
                          9: CfrA07qP_wBAEjKFtsS6fwHrIGI.roa (hash: NOHEU1NIHyOLrSQmCF6+XT9WH4i9LVOkv59dlQcxKnU=)
                          10: DIkn4G6WBOzTyN_riXHTULazgbY.roa (hash: xpow8jcBSTdfGaYyqh0qIWaM4BYDcx5Cct4OP0uTZ4w=)
                          11: F26nxdff3i75xop2GZg9fikoNOY.roa (hash: nnVW9PXJHyG0jYXfDHyD/QfBcetH9X79xsq/iSvHbWM=)
                          12: GrSsCaDDtlnLDVJrHrKe_A7JQpc.roa (hash: NlEYXuUgautypu41sK3cgIo4ITtRFV4+42hT7f+1Kwc=)
                          13: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: FZjEdQELhqvpuMJexUks84pfccsP7xCtBLq0rjAzKQg=)
                          14: K-9nO8ZWS13GI4yAcyVyyybJSPA.roa (hash: UDHzYowCTkxmF6K9YeG9RjekMYBcF/toJHUs5zZQCtU=)
                          15: LfEFKfDN105i8PGNZbJVUCv3mmM.roa (hash: nrPJ9XCwacdagPpt2E4Hxv0tKA1o8y7i1cDFTOhYkrs=)
                          16: RWH6AKApyyUg0MDBNbM36IDYOUM.roa (hash: ZuoODxTCHvu1KAkYQf6lWcYzm6xXVHKK/CIIt+8Awck=)
                          17: ThohdcEQvLa1edFnwr05Pnh8yFY.roa (hash: ABHNVLoc98frs0Og+NrmXUeiJfs4WIGEZ1B21sdN4Z0=)
                          18: WFCq_LysNx-pl32Lrxwn2wjXD6M.roa (hash: Of7QR5IE4+8Cm0bfPeyFWX3a0kjmvb8W1VHtfhK9INE=)
                          19: XOMMN3FJmgpFH5gC7LamC2T0o1A.roa (hash: Yselrg1zLbUl8IpOGDUGcshxFxSkqYZALQH6EJ9j64A=)
                          20: YXc_rzACXJKMk6D3bHKje-hsJoM.roa (hash: ul6ZTHBWWfbex1sEmUXF2Zh1QG9KDb3ZlA83UVF6Q88=)
                          21: _r6M_xbZNmjJF_UNgUFvnKHb2AM.roa (hash: qmnfsJbzD3wGitM1QKSGgmMqu5kWcXcy7YR2ZbY6XvM=)
                          22: aVPeSeOrLK-hnGy_U6CSkoo7dK0.roa (hash: jWwybzlZyB9d377/BC7aPNITmhuEaIMTsWAaK/8Inm0=)
                          23: drW8f270OQ7Zuv8cl2-L-xlySEs.roa (hash: GrGtezSBiX1CsljCEonvgjTZtt9LlMhF8aaCTgeLxU0=)
                          24: eemHFeAzxqgE156Kc25OsoclIek.roa (hash: XM2eDuy4pEZe/vFQTnWc2ybeGlyVD5kraC6+lXGBoYg=)
                          25: f64AO_DFHs5aRhyAy8MxACW35dw.roa (hash: s7et8njEcWYi7mxvS2ior/kIIp0VtLHkJmNlD6rsvZg=)
                          26: n7q6o5aK8tmVuKe0eknz0TtkW2g.roa (hash: ai/JjOwgEjNhzcFvy6XRWy+jCa/PuAfOPjbSRMpuXxQ=)
                          27: nwFBz7CBL89ah53T3HH1mmse0ts.roa (hash: zKHR1hdzvWN8kRONqFUlndoj4buDoIZXko4V1k8oRR8=)
                          28: pPsAzWPis3IZ_7RXngccHUrtbgY.roa (hash: J30CBLPnrf9IZC7+HUhF4hUSKYzGR71ZDEHxTYO7pRg=)
                          29: rtaG6J30XkQFOPmcKeF4v2NhzNM.roa (hash: g6CvH+gMJlaFTgHEknJF1D1T2mjlfE1O/Zu6XehZZoU=)
                          30: uuH8l7HE1j68kpZWjLoCbvFy7Oc.roa (hash: UxWh93F+ImuKNVWcNVYl2Mn+I7QFIJ8ZlqzUkVOm7nI=)
                          31: zMdGV8ZWFSGl8gUbe4MMOhhqZZk.roa (hash: yJw7MbY5WkKTUg/Rf9elpLAKIT1ZgkA8DoMSYGb5m+A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:15:06:35:18:4b:70:5d:af:1b:f0:63:43:9e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: May  4 08:01:12 2024 GMT
            Not After : May  5 08:01:12 2024 GMT
        Subject: CN=bda63e266fd4b5b65f4531231a5c4891be30b650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:5f:12:15:45:14:ba:3e:f0:7a:d2:14:28:
                    d0:fe:d9:e6:b2:1e:1f:6f:53:0f:b7:ef:20:09:6b:
                    b9:32:c8:fa:64:e3:b1:ef:2c:8d:4b:8f:3e:ed:52:
                    0c:60:b8:92:69:9b:d1:58:a5:58:a7:70:67:9f:18:
                    e9:c9:27:02:0a:e4:b7:cb:46:70:d9:ff:eb:1f:03:
                    a7:0e:51:a7:34:2a:ff:8a:cc:c6:6b:99:ea:e3:22:
                    82:f5:17:c2:5a:78:a1:4e:09:74:f4:62:ca:44:42:
                    65:e0:a4:7a:fa:fe:76:b0:65:97:fb:1d:2e:63:33:
                    26:15:0b:59:77:f7:c5:1a:02:ac:16:83:41:8c:89:
                    3d:71:9a:6c:58:6c:37:b5:05:c7:3b:6e:9a:0c:74:
                    97:f6:8d:7a:37:ce:15:c7:66:9c:b9:a4:fe:2e:15:
                    a8:c8:45:dc:ba:2f:1d:f5:de:fd:66:61:8d:e6:e1:
                    9e:6f:ab:58:d6:a1:b6:93:fc:e9:4d:cb:3a:fd:42:
                    24:e7:5c:2d:a6:d5:d1:5f:a5:77:54:ea:81:e0:38:
                    f2:6d:04:b3:ca:b7:e5:70:85:bc:fd:90:ec:06:e9:
                    0b:e1:ce:c4:6f:96:b9:e4:8e:33:c0:1c:74:72:55:
                    ca:d7:fa:4a:c2:f1:04:6f:ce:6f:2c:86:42:13:9c:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A6:3E:26:6F:D4:B5:B6:5F:45:31:23:1A:5C:48:91:BE:30:B6:50
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:2a:80:fd:b6:8f:d4:e1:52:8f:0e:36:d5:cd:11:be:d5:
         01:d5:b1:74:91:ec:35:59:44:ed:6a:fd:6a:f4:db:b3:18:10:
         bc:64:c3:bc:3c:80:cd:f5:55:60:5f:99:86:ff:7f:ac:d5:d1:
         04:9d:3d:50:f0:9b:3a:61:04:52:48:d4:35:ec:0e:36:a7:c7:
         73:9d:e3:de:93:be:da:92:3e:8f:ca:d0:33:8c:5a:a5:dd:ad:
         2b:cc:20:96:45:b5:83:a9:cb:5a:37:06:e6:4d:06:10:0d:13:
         1b:e3:29:94:64:7e:db:c5:9d:84:60:21:dd:31:5e:ce:c3:41:
         01:08:c6:ca:7c:de:e5:8b:b5:b1:40:76:21:91:d8:b5:ff:1f:
         21:a4:a5:29:9e:55:dc:67:b0:a5:4f:9a:fd:f9:3d:e3:71:78:
         18:24:a7:43:85:55:8f:14:fe:e1:62:eb:b8:8d:61:b8:d7:f8:
         8f:77:61:c7:57:1d:2d:bf:46:3b:ac:c9:c2:b5:24:47:34:4e:
         a2:17:b1:8f:4e:14:16:f5:e3:e8:9a:57:91:c5:03:da:1e:b0:
         3e:da:3b:82:02:3a:96:3e:44:12:9a:01:de:80:6a:aa:ff:fa:
         dc:4c:10:fe:c3:1e:dc:61:e2:8e:fe:35:fb:09:d0:e8:39:fc:
         0e:2a:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:44:18 2024 by rpki-client on console-fra.rpki-client.org