Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          ar6CS2wdlepQs6pbVLFHGn0E0mRtuJv/JlNonD1hTsY=
Subject key identifier:   4D:0F:CC:7C:F1:D7:E7:38:02:3F:E8:BC:6B:9B:83:7A:F6:DB:C7:70
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       019351D07ED9B0BC04D98F3606B64870874A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          13A4
Signing time:             Fri 22 Nov 2024 03:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:38 +0000
Files and hashes:         1: 0Do0LybEPQ5dl4PCwV94JXoLDhE.roa (hash: 36a+wYrqBP0VVGHPyz9OU7OxzhIUKaQzf1bflVl7oLo=)
                          2: 0KiFzX0UXCgCeV2Rbkd6U-Ki1Z0.roa (hash: FPOt4Ppii27CLYDB/f54X1dKTqG9bLO7joxZ2/c2EU8=)
                          3: 4UH7V0wM__QER66W_4MI9Xp-RlQ.roa (hash: HAd3twO0mwrEjIbr0imHTs/cecnXR8gP5KAbVrxfaUg=)
                          4: 9kC1OxAVD6283ygsWoPpUlXhj2I.roa (hash: rskJG4wOkucxHLRcMmYNXKIdvP9eDrHEuqOAQc7vx3E=)
                          5: BKb7XG_Y_snDtXcgAHsqhtFo8v4.roa (hash: USVDlvAYbm2wUpjn6m+8YObV5uuluIJcM9CqrwH+yGQ=)
                          6: ByBEl16wKKDlLETxRb-r9dTPxho.roa (hash: NB+L3MCgW9YWrFsDSKfA24L96PY7+UAkKOFdy8EzrUI=)
                          7: D-hE4n1bXicqNfeDE7ZvbtkQlTA.roa (hash: qhFsLgQb4olfqryZa6dqCEPsLJK2L8ZNZ4hbRex6rmA=)
                          8: EHpvnjfQiDyfGdckEYfptrkMFI0.roa (hash: +XiX9fcGBfceIjYznREQjmRJNJd+uzvLdskDOj5FYP0=)
                          9: EQHS_X4ZA2vPpeDlxyHkdBLRb0k.roa (hash: uYghtR55VIr8gKkft8BN5OGlOHoMMDBkI3ckdNUq4Eg=)
                          10: Eu6Nn84yrYtCnpqrqBa6Z_bZ8Jw.roa (hash: uuEo2yb8bRzkHAHR2VNdu1EU18Qger62EBysLhAu3xo=)
                          11: Gy-dZbPqJMPoLku8DtINIxNcqOI.roa (hash: zOtFTQhFRBUcwhr6o3tzf8Qk+RQcIBGZcizpbTOReik=)
                          12: KeP9lH62pt5NuBHhaBRz_mWpe2A.roa (hash: kYH80uKvJ/fCU4mR5ZkbGGTzBmWKfcbx3Ubfvq1ooTk=)
                          13: LqUDjXqRP4A8vbaMCAdib7o-6IQ.roa (hash: RLFvFn2DFW7NCdlSXMUQxNQqRRrg8bhHVQCAVaR/y68=)
                          14: Qldu5XIlS7iSFOWMVyNKARo1dQI.roa (hash: W0XA9aoegPuEssIL62UnUwZLoaRy+OE+vaB7L8hCjKQ=)
                          15: WreLBkc7rCoDiGjmUZEEw758-rM.roa (hash: pjUgFaOx8IohAMw+orN/aqs0pC4fgVVpSKqALqq5tXQ=)
                          16: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: u03E+UoXh83We6/H1rQhxmqTm6MVC2oaHQPH2pyPw7U=)
                          17: av3h7N1L9UJFRGsqyo1zrtpEqRw.roa (hash: VTVKSoDwtHxUERTxz3zKX5sNN1HMZmbwUMlUnE/214g=)
                          18: gbIc_bvjAm4XrVtEykfwi366soo.roa (hash: cHi3jdu8qR9GC7dhCYr95Z/38HVlkJcGyK5d8lmF9QU=)
                          19: nBV_sWwx-vgZYqaQ-JNmvTK8rSE.roa (hash: 8MNkrB3hLKuDoA+6qBTFit4zHUEmZp2bYda2YXYJPC0=)
                          20: oQ6oQutjVyoyrWQ0VnFuFIKk0qQ.roa (hash: Nwb8XkBJofB69HPRWHIz/YuxCMC7s2Si9XLC0DVJuD4=)
                          21: q4Wqt8E70K29pbI9B4Dgb3LAjzI.roa (hash: 7rceFhg8C/icwID3OjObptzOT3ybymh87IV5qEMEn+M=)
                          22: rRgT9tTxhR-bZVBbPUmVqxPs9gc.roa (hash: 5E0NWQW5/HzTmYkUc/Tu+3buu+lE+RqG6cikbPHbuzw=)
                          23: tx2Teufl_xgZI3A4VxyaIf3zbMs.roa (hash: OKEXO0LyJ84TiYriP8zUZ5+iDw3vyxgvgRQBMhlBvhE=)
                          24: v9WDebORle7sLicg4zlEJofUdx8.roa (hash: 8FGwgBKLdMfxYsHim50ZsJBJ6u03VcnGpUytJOLhDfM=)
                          25: vC20hVff9_XHTawqfnvxGoo0EXE.roa (hash: i6DXpY+r65lKQcWiaUS58lp8KelaXAzLOhK2R+NTRsA=)
                          26: yUrAg6xhvDRhKhGqOZWE3Urt7UQ.roa (hash: IO4wEOvCL6S5RXGmZn06n1dU7te+7wDYEvDGRBxP44k=)
                          27: yYRI6BUhqgDZz5u0dJFeC8_JsLc.roa (hash: U+U8tf9vZhdcK8bLOth+Aggy7OkQi7vrWiwbxf2jVJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:7e:d9:b0:bc:04:d9:8f:36:06:b6:48:70:87:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: Nov 22 03:00:38 2024 GMT
            Not After : Nov 23 03:00:38 2024 GMT
        Subject: CN=4d0fcc7cf1d7e738023fe8bc6b9b837af6dbc770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:e5:6c:5b:ff:e7:ed:a5:4f:a2:4f:74:b9:
                    a1:73:59:52:ab:da:93:90:6f:47:7d:32:23:df:fd:
                    7a:2c:a8:48:7f:36:b5:b6:e8:a7:67:e8:c4:60:2c:
                    6f:4e:c7:bb:3c:c7:38:8d:e2:11:a5:06:39:75:65:
                    cc:13:8f:23:2f:7d:1a:7d:6f:d8:17:b6:c3:a0:e8:
                    31:34:d6:72:59:6f:52:79:fa:33:78:0d:84:02:89:
                    25:28:33:0f:12:5a:7d:14:58:2f:ed:8c:a8:a9:43:
                    5e:ff:d5:6a:25:d5:1f:60:04:f1:9a:dc:7a:03:20:
                    0e:5c:b2:df:c6:2a:24:a0:fc:a1:4a:8e:7a:97:08:
                    21:07:ae:34:3f:61:64:53:69:42:f4:1b:da:f7:3b:
                    d4:df:a8:fc:62:8b:5f:60:ff:0d:71:f7:b2:77:b1:
                    9a:23:86:ff:57:fb:0c:ee:58:e8:a5:f6:d9:b6:c4:
                    cb:81:81:dd:81:69:54:c1:14:35:46:5d:aa:94:e3:
                    00:d8:8b:d2:82:95:cc:7c:c4:5d:6e:ec:88:3a:46:
                    09:17:7b:3f:24:c7:e7:7c:fe:88:80:26:23:e0:c2:
                    af:4b:4a:8b:cc:05:d4:47:ee:1e:47:ec:e7:7c:bb:
                    10:08:3f:6a:f0:65:c7:64:41:89:da:8e:71:60:5b:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0F:CC:7C:F1:D7:E7:38:02:3F:E8:BC:6B:9B:83:7A:F6:DB:C7:70
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fa:14:4f:ea:6f:14:98:16:66:40:9d:3b:dd:b8:d5:1d:9b:
         b4:b3:c2:bc:d2:72:83:a3:51:fc:74:2e:08:74:2f:b6:d6:48:
         aa:26:7a:9a:70:06:d1:0f:1e:cf:05:c5:b0:e5:c0:c9:c0:ea:
         45:a9:d8:13:26:ea:f9:14:be:bf:3f:4f:3e:27:c7:c3:74:a0:
         cd:07:59:ac:f9:e1:6d:9c:3a:f2:ef:41:ec:88:99:f4:9a:45:
         f3:e1:2e:a2:44:c9:4c:31:56:7c:98:aa:68:40:06:66:5b:52:
         9b:cc:4d:71:76:cb:f5:42:c1:fb:5d:cf:09:9b:0a:91:ed:6c:
         68:14:e8:ee:84:fc:7b:88:67:ec:c4:00:29:70:29:f8:85:4f:
         f7:e6:5d:19:6b:d8:23:4c:0a:95:26:23:2f:df:0c:e8:b0:b5:
         0c:05:92:8b:20:33:8a:69:b3:b0:34:7b:fe:52:ca:32:23:c8:
         60:a6:19:90:24:c4:78:01:02:40:43:6d:e5:3f:8b:79:75:97:
         34:52:3d:e2:5d:f6:51:62:69:77:b6:77:5d:87:6d:3a:ff:6d:
         c2:5a:ba:d0:12:df:46:63:d2:04:a5:5b:3c:22:f0:ee:26:c7:
         ac:4b:05:57:d1:16:89:da:55:4a:38:f6:65:e7:77:b9:ba:6b:
         cb:58:6f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0H7ZsLwE2Y82BrZIcIdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjQxMTIyMDMwMDM4WhcNMjQxMTIzMDMwMDM4WjAzMTEwLwYDVQQD
Eyg0ZDBmY2M3Y2YxZDdlNzM4MDIzZmU4YmM2YjliODM3YWY2ZGJjNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZHlbFv/5+2lT6JPdLmhc1lSq9qT
kG9HfTIj3/16LKhIfza1tuinZ+jEYCxvTse7PMc4jeIRpQY5dWXME48jL30afW/Y
F7bDoOgxNNZyWW9SefozeA2EAoklKDMPElp9FFgv7YyoqUNe/9VqJdUfYATxmtx6
AyAOXLLfxiokoPyhSo56lwghB640P2FkU2lC9Bva9zvU36j8YotfYP8Ncfeyd7Ga
I4b/V/sM7ljopfbZtsTLgYHdgWlUwRQ1Rl2qlOMA2IvSgpXMfMRdbuyIOkYJF3s/
JMfnfP6IgCYj4MKvS0qLzAXUR+4eR+znfLsQCD9q8GXHZEGJ2o5xYFu0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0PzHzx1+c4Aj/ovGubg3r228dwMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/oUT+pv
FJgWZkCdO9241R2btLPCvNJyg6NR/HQuCHQvttZIqiZ6mnAG0Q8ezwXFsOXAycDq
RanYEybq+RS+vz9PPifHw3SgzQdZrPnhbZw68u9B7IiZ9JpF8+EuokTJTDFWfJiq
aEAGZltSm8xNcXbL9ULB+13PCZsKke1saBTo7oT8e4hn7MQAKXAp+IVP9+ZdGWvY
I0wKlSYjL98M6LC1DAWSiyAzimmzsDR7/lLKMiPIYKYZkCTEeAECQENt5T+LeXWX
NFI94l32UWJpd7Z3XYdtOv9twlq60BLfRmPSBKVbPCLw7ibHrEsFV9EWidpVSjj2
Zed3ubpry1hvDw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:22 2024 by rpki-client on console-fra.rpki-client.org