Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File:                     izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier:          ZwQ+nA32dki194uzR1/SaSEbuUtDr4hKceB5sfRdvpM=
Subject key identifier:   80:8B:27:33:4D:E3:BF:88:F1:C3:E0:E0:01:65:64:DF:01:3D:90:AB
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       0194056A399FA92D044B733050EA8DD91D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number:          55
Signing time:             Fri 27 Dec 2024 00:00:35 +0000
Manifest this update:     Fri 27 Dec 2024 00:00:35 +0000
Manifest next update:     Sat 28 Dec 2024 00:00:35 +0000
Files and hashes:         1: 1-VmFvbdwine_GCcQDaykLpCz_Lc.roa (hash: /HhkyMMLzR+EDBQMNo5iaHpbzZC3H2S6CjnVaHqtW2c=)
                          2: 3dj151CcfZIGnXqypDirRFcMjno.roa (hash: tW1399GGGUxEr17kQDRErTZDHN0xCzhOjSTbK/hqo2I=)
                          3: 4NBrh8F2e2z4lKH1jUc358a92TU.roa (hash: JVZxJE33rKtSzDWjPx+i2iZOwGlA/wv2eGC5lbzykgM=)
                          4: 7kAFgmOD-3aKhpv_HRSrF3P_lis.roa (hash: 6Rs5xeW81UhNginecbED3hZ2TxaIInGUv73DkfI8h30=)
                          5: OW8kyJmiTRXaQAx3Aa_mEkS3wbg.roa (hash: Cey1HMUt6aN2enbb7QuZIexa+ZKrTxg6Ekk66gFfybE=)
                          6: SwxxPt5PZvIMHPOPp3FRpWoPh9Q.roa (hash: AdYY7m1WNPb9l9/DIWdM3egYrbUI4Qo/0booMdzEWcI=)
                          7: TLTbXyrdD1AoKFGBbq5QbWTETsQ.roa (hash: buvwQhudzpWq/zhOHtc84BMsHXEyZccraoymnv4rozQ=)
                          8: Wi9xPleSVPld-_T6rvbdTH6XPEY.roa (hash: O8RFL0TsG4Vu0BnTr+lVac7yUEI6bwHQMNoRRA4UVdI=)
                          9: YC6Sz0oLwIztuKY3i_ROq0-siDQ.roa (hash: r1yGR8JI8PwbHftQCjfLf9d4icjX9lnK0gC/Pew7SX8=)
                          10: Zo73C-UEQ7OSgVUml5i7iyuhGPA.roa (hash: 5iw6S9rnYwu/P9ztfRyAX1TUn0K+JArBkCtjozybrjU=)
                          11: _c27ezCEana2QXuNkocMF3hTuZs.roa (hash: TuRblDXX+RHr9BOJoalHD9wHHXXBVP6091X7lSMyybE=)
                          12: bP8qHUcte-as9lVjHC7xMuO9_ow.roa (hash: EkS+UM473kWOvtCKCsWztUJudtOnXX6nhFB9YPs901A=)
                          13: cjjyYzQNNVM-to4Qce9ghuOKDWk.roa (hash: so0DzPRJFzkW+r2EJDJUwoLS/0Fl3JkoobTZGTkK8TM=)
                          14: dsviOlbxpeLdefnstk8tLFxxNmQ.roa (hash: 35z2jXHg83DJB0wWhuxRfV7BNKqT77uKK3usgGp7ZX8=)
                          15: g_UNWCP0BPwj-XE2FVQiP7Sa4hY.roa (hash: tTmFLnH4tDZnujWOH98nGESNElgA7ZuGkk0OD/ylJJ4=)
                          16: hbAi6kCzl7rAJV8bYok9S9sdpMA.roa (hash: iyv3agVRhEWUDv+UUgBbDsY6lXENTbJN9l2wUjgZ3Qk=)
                          17: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: 3b99TFJGGcimVPbWxo7aAYITKW5XJbORBPxwaLRUyOM=)
                          18: mu3gKejwctxT41g1UxDM6TARK30.roa (hash: Z1NZk7sww1EENM4LR+MmXoS53Ch2QlfEdfJema/Wb/g=)
                          19: rFIc61Wi8Myn50LNgtmkpSs0fcE.roa (hash: R1wNd4VOV8U6dB6+7CF1z5MdUZyIPKBhlyp2d5md+ls=)
                          20: sQYwUu9NXiwQ_HluJtK1sQ4Z1pc.roa (hash: DE4xyQzThDVLrEd1cMSQsRF0ssnhh5D1m6g/ReH1+rU=)
                          21: tedxv31Rrx5zDEpovVsTdVFr5s4.roa (hash: 7+ByAmj7IQWqLR/di/6ER98p0Aamq6zhEeCEFidNMes=)
                          22: tfV9lhE4FoJp16kUlc3Yu14Utjg.roa (hash: 3lQjoj+RVqGzeTgaqcql+GWWBcaFShf34pE91EusvHA=)
                          23: vxQZeK6cv6GPML8GT15GLJraLKg.roa (hash: AZhK1kvRAEacKCfVqSrRlTY68xImN6iTpQMuCALlMek=)
                          24: zB9lSUL3fbsMyKzRk-CfCNUppgk.roa (hash: 4PTNCiPX9DKwhamcRPZBIonDg17MgFB+0L8lXZhBDcI=)
                          25: znkhaKLQ_cJMTTFqHIVMPkyc8_k.roa (hash: z5cgWn9ZQspuG9RcDc0kklzp69KCEQWX9R5oJPgBkgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Dec 2024 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:6a:39:9f:a9:2d:04:4b:73:30:50:ea:8d:d9:1d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Dec 27 00:00:35 2024 GMT
            Not After : Dec 28 00:00:35 2024 GMT
        Subject: CN=808b27334de3bf88f1c3e0e0016564df013d90ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:9d:13:f6:44:17:0a:51:ef:b6:ad:98:01:
                    99:00:3e:1b:67:f3:70:f9:03:49:e6:43:3e:d6:66:
                    50:6b:de:68:71:d3:c9:c7:01:76:a0:76:c2:37:e3:
                    aa:d4:cc:7a:80:4e:78:74:03:66:5b:b2:d2:7e:31:
                    29:e4:b8:fd:c7:6e:f5:88:de:08:a0:13:ae:44:10:
                    b1:d2:bb:ad:60:b5:33:4f:43:ac:5c:f9:86:a6:5a:
                    36:3c:3f:bd:e6:1c:49:75:9a:8a:bc:5d:0a:c1:53:
                    5f:41:f6:97:b0:f5:f8:24:5e:f9:24:42:16:0e:13:
                    60:26:6e:be:58:7c:99:e0:2d:61:b4:ba:d1:5c:eb:
                    34:25:16:a0:85:31:0b:61:4e:3c:34:e3:92:35:34:
                    fa:90:79:2b:05:a5:55:48:9e:d4:19:80:10:a1:21:
                    f4:1e:8f:fd:5b:39:77:32:66:8a:88:ae:7b:f6:32:
                    a4:f8:70:f5:0f:78:4e:2d:23:b5:f5:dd:d2:36:f4:
                    ce:60:cd:35:72:4c:dc:16:cf:05:b5:6f:4d:ba:ec:
                    31:a1:2d:39:0c:69:02:8c:3d:2a:2b:de:e0:cc:21:
                    29:88:e7:fc:89:87:26:ef:30:a4:15:c4:4a:d5:01:
                    42:78:8e:4d:68:79:cc:98:2f:d4:ce:29:33:c5:68:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:27:33:4D:E3:BF:88:F1:C3:E0:E0:01:65:64:DF:01:3D:90:AB
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:bd:88:04:13:d0:9e:83:97:d3:dc:0c:b1:e5:85:0c:fc:
         e0:be:b6:1d:19:f6:51:d2:27:6b:cf:a4:ef:ac:b5:9f:9d:4e:
         06:4f:98:40:b7:2a:e5:e7:0b:53:6d:99:ea:29:7e:d5:8c:b1:
         f7:e2:ec:7a:a9:37:90:fe:86:3b:4d:8e:1c:d9:51:a0:fa:10:
         28:b8:8c:d6:90:4e:29:c6:b8:2a:d7:99:17:f9:53:b1:b9:a1:
         a2:83:e4:3f:aa:91:3f:00:37:2d:15:b6:80:90:67:ff:ee:91:
         29:11:a8:1e:5d:6b:cc:2f:16:94:d6:7d:b9:7d:15:61:42:e5:
         2f:e8:8d:12:e1:43:05:bb:18:40:5f:f7:9f:dd:7b:10:ec:1d:
         25:b9:6c:3d:87:91:9a:7c:05:78:88:27:49:a7:4a:ca:21:91:
         08:29:44:e7:35:6e:6c:63:19:88:37:ab:e4:21:ea:52:ac:ca:
         28:19:33:18:60:da:8a:d0:f6:c8:59:f1:c1:20:89:e1:3e:74:
         d1:19:e2:9c:6a:dc:48:1f:a8:c1:c4:ae:3f:b4:d2:10:5e:fe:
         12:8f:90:f6:3a:63:ad:b2:5a:d6:73:f0:a0:f1:6b:88:9a:94:
         55:1a:49:c0:1b:43:05:2f:a0:36:b5:17:54:91:79:eb:2b:d0:
         3f:56:10:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 03:21:22 2024 by rpki-client on console-ams.rpki-client.org