Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File:                     xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier:          2rIufhhNf26lvb7gmXK2c5CtM2+twworKAB5hsHCKV4=
Subject key identifier:   70:09:68:74:0A:6D:99:63:EA:69:5F:05:5C:4D:B6:8B:40:18:4F:71
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       018F856FC0E89F66AF2DEB3D73B801BD6D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number:          116A
Signing time:             Fri 17 May 2024 07:24:04 +0000
Manifest this update:     Fri 17 May 2024 07:24:04 +0000
Manifest next update:     Sat 18 May 2024 07:24:04 +0000
Files and hashes:         1: 0s0zJRP-fEL-qCCDozdUGmr3Bu4.roa (hash: eWixYgiBqsGT7OxguEnkAe6LyWpDdZP70oLdfERdbis=)
                          2: 1GqqfK79naNqTiPKsBwIxWeuYQk.roa (hash: ztB4HQN3Fk3j/d2bCSjVy10yKnmflPIOJ5VvisanNI8=)
                          3: 1LlpTsWQFO96LcJrk_twoS22sAQ.roa (hash: MRHdQ7c1mU04x3Cbe8RTRIHuusv4ru9S1y4L3et1DxE=)
                          4: 251OoSPydsMj5VB0uNEAPS3Lfjw.roa (hash: oNa5NqWT3U+ey/USzLEN0HCRzPE26SREbn/rWoyC3Y0=)
                          5: 4Tgk9okg8m6RmD2HDF9TBzEzmno.roa (hash: un+gzT3az6wOUI0ZSVT9XfALXhMiq3rWbGscId7/kTo=)
                          6: 5MznBrmyh5eYiGyUjr7nhVy8m_U.roa (hash: jHaSZ51300WM6XphxlUN5+ngte39LKa4bMxNuQqTATY=)
                          7: 6F62s0rmP1FGLkvtXDbcN85JJWI.roa (hash: 9r1UAhglLgpR03a5o2CpyIX/uHo5M6m8DtGFICqwjwc=)
                          8: 6QxV4ZeNXwjsHQTajz7n4QTUVAU.roa (hash: mBgGdjyd2/yc+zjfaUJ5y+aPZjru7/0q+36KKXGXZNc=)
                          9: AF3u5Cu60Djsn1kMmfxcdJYMMLQ.roa (hash: fq3xRAcFR6Nvvw8vA9O9fJpKHw9LWpQYs07Wx4DmqOs=)
                          10: APRp7rHpEjYjR8ZrUG2fyAOxowU.roa (hash: bUA1CuSmyE/2BEwa5cuF2WIZQjckyqdMqQVTwHAmqmY=)
                          11: Ap95SaLiiFP5D0tWbu7OhXNwqKo.roa (hash: pMAjW+olMdvwBHXRjHVce5P4Silbp8+KKpuWkQ85oQY=)
                          12: DwAcDj-IXHAFcEv5XXMkajL9h_M.roa (hash: giM03R2ZX/0WviE9+Tst7cosBZ0vjKalaAEo/Q9BXjI=)
                          13: Ga7wvivWxzTZGG4tjIKeujxDuiE.roa (hash: uc/r+PsFBJj641PbJPm6emfLb4ltCF2M7NzbmGDeAeI=)
                          14: HSiaxXVXwWysUYFpyvsWBCaw0Ig.roa (hash: w/Gec9okyw/b+Dn4PNdv0ZS7rGuPMSGYumSYUVjB/W4=)
                          15: JtiKKVee7G4AlnuVRIk98Kp3bBw.roa (hash: EnLiUkNQgUzHG+7DXQZH13YTAwYgb38bNmWdC5oJLvQ=)
                          16: KKyPsfccdUEQCyunv0cypw6VjYo.roa (hash: ZIa/LGPNpDjmSQrIOtNS9WMb7tbHSpJnuj11XZy8zuo=)
                          17: LkKGmjIrQHVyfVZaU0Bemwd2jAc.roa (hash: wPAxzITYVqc1DXs1jR9MTjj6YbVHQUXtWS/Ru/2oBuQ=)
                          18: Nw9eU_0Apu4zcQOjcsWwDHRxzhE.roa (hash: i3YUnke0oW7VO6bxrFGyUtEFG2IHJHLvrdoMuv8PxIs=)
                          19: P6t3Ek1tFUryPNaoW-Ygc_wIGZs.roa (hash: B6pHJ1dkapebeGgq7Vp4IUpJY+p1v6dDWChQb7P9lNQ=)
                          20: QYJ91Ob9n2WxBD97KkvaRI4bBrU.roa (hash: ebsBTQsoG8i9TbazUcPHNumpwSdzYtDjnbmM9zu6icc=)
                          21: UGwqomISx8dmkHOgLw242k5n8KA.roa (hash: tlHE+rLQjhfcNcIpIGb7d4iag5nMQYpNoc8BnqmbZZw=)
                          22: V0mcNPKN6DxKhp1nvp6_BdsLq_I.roa (hash: 7etC+9whE4MqwVAIVsP7IAoODFIzdi0cu5kPqxFLWGI=)
                          23: W4o4ps3Eh-rYPKzjgr7IjIokSI0.roa (hash: 1CH+bluYNGmqwLaZbVSVa3RvtqQjRE9BnYdQJQdHOh0=)
                          24: cBwzx2i840MHn8lcrjURxD5UcgQ.roa (hash: VgPPRC0vbRG9zy8qSLCdJuf8mLr9ZFq/IPEMPQiHbwo=)
                          25: iBswy_b2YM3CON98eT0iEYnnP4w.roa (hash: nXV9M7Tl2uCB1UY+7DTJyMGouwtT7kyudxdPJq5TmtY=)
                          26: jlpFggD5Aem_CzVyVQXdvozwWbA.roa (hash: vSmGy4GlYe54BucB4VoDZMwjp2cQBIrajcWhKPz1T1o=)
                          27: lrogFmyX4sTB3IkWct1SZZ1P_Uk.roa (hash: XeNrtpzKKHaNWbxqjSbF28pLmWygQ6WrE8Lipd59t6w=)
                          28: nKpow_ySVhMGmTi2pce6rga3xvU.roa (hash: Eb2Q8o34ULKvSBi+qFwOJnbe1JddV8md5Y8Vh0pvR8A=)
                          29: tdYI_AEPeLnJcAjQCdQTMx3MpfM.roa (hash: anzlJ9g4eLc/VN6v2y4enkaTnqMHaHMzqUv7HyT2XQ8=)
                          30: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: f4TTdY+dU2Y19gkYY86fIvncD8MwRfm+/kUMxfgqmpY=)
                          31: yUZufN98w9b0b4D_jtkhYykoa2w.roa (hash: pdlQcCca6OW9QqS1LivN9H5nAFTKyKPwdoQnRa00At0=)
                          32: yttueKFa7PozFAK2TOsfxdwOlh8.roa (hash: LAjeALKY5kE/+/hJOJARNkLL5Vqdp4ezB9xD1KYPZyE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:6f:c0:e8:9f:66:af:2d:eb:3d:73:b8:01:bd:6d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: May 17 07:24:04 2024 GMT
            Not After : May 18 07:24:04 2024 GMT
        Subject: CN=700968740a6d9963ea695f055c4db68b40184f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:24:5a:84:cc:10:d7:71:59:a8:e3:98:cf:31:
                    96:a1:b2:79:89:86:9c:9a:dd:be:79:ae:46:b4:56:
                    98:d8:ac:64:44:0c:20:bf:86:aa:46:96:ae:ed:50:
                    3b:29:18:f7:39:64:d2:c5:ed:87:a0:b9:3c:1a:77:
                    cb:4d:91:a4:09:97:aa:e4:cd:ce:33:7d:90:da:fb:
                    cf:56:79:c8:4b:8d:bf:b5:14:87:8e:86:09:3c:12:
                    9c:6f:e8:53:04:5f:b4:57:0d:f5:7a:53:8d:4b:6b:
                    0f:5c:d3:cb:f8:a5:af:f7:63:66:17:e9:08:68:d4:
                    f2:52:3a:6b:e7:d6:89:56:47:54:5b:25:22:f7:51:
                    ae:8d:35:7e:0d:e3:f1:f4:8b:b2:96:d8:f7:dd:02:
                    36:4c:47:14:c0:6c:ac:38:bd:f3:45:2b:bc:d6:4b:
                    3e:e0:d8:0a:2c:f2:55:4b:23:62:a6:92:22:1e:9d:
                    b1:0a:17:76:9b:bc:51:30:51:e1:de:9d:49:6d:3e:
                    2f:38:1c:e6:23:54:eb:64:c9:e2:85:fc:92:a0:a4:
                    5b:ce:c3:0c:a0:52:a1:09:2f:19:58:f7:f4:06:4f:
                    d5:96:ad:89:61:04:3a:e5:81:a5:18:5e:34:4d:9a:
                    02:02:4d:33:18:d1:b3:67:e6:6a:90:56:77:8d:a3:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:68:74:0A:6D:99:63:EA:69:5F:05:5C:4D:B6:8B:40:18:4F:71
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2a:bb:fc:e6:fc:65:6e:bc:3f:70:34:73:5c:4c:0b:dc:69:
         3b:65:df:74:70:4c:07:ed:ae:d1:e5:69:61:87:63:87:90:7e:
         79:c6:9a:96:bf:0b:2c:47:98:09:07:06:df:41:1e:84:85:69:
         20:5d:34:38:c4:03:0c:49:41:1a:9d:80:f2:db:71:a8:b2:f7:
         b4:02:06:59:d7:2b:ff:fa:4b:ab:4a:c1:3a:b5:fb:e0:a6:9b:
         6c:df:e0:39:7c:6b:d4:98:25:8e:be:a0:a9:18:0d:fb:99:8a:
         17:e6:c3:bf:1b:ff:15:cb:33:b4:d8:e1:44:4a:4b:8c:f0:b5:
         ff:17:2c:c8:3a:15:ee:aa:28:32:7f:89:81:24:0c:bf:8a:76:
         5c:2d:99:6a:4d:52:14:8f:a5:9d:ba:7d:41:f2:b2:d6:77:2c:
         50:c3:20:89:93:d9:c6:c6:29:d2:fb:68:42:cc:c3:60:e7:2d:
         bf:ae:75:e5:00:52:05:38:ad:b5:83:10:b2:1d:05:c1:0f:f0:
         eb:6f:13:6a:85:ae:54:0b:54:15:c3:ec:84:8a:00:6b:1b:e6:
         93:81:d0:fd:76:f1:5b:42:4f:ab:06:29:a9:d5:63:61:fa:d9:
         72:d5:6e:c6:3a:09:10:49:40:34:43:6f:1f:d7:b9:1c:65:bf:
         82:58:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:44:38 2024 by rpki-client on console-ams.rpki-client.org