Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          d/CkUeEqWp7urObs27KU/4ho9MSDWpUMglC402jFYYo=
Subject key identifier:   A7:BE:F1:69:73:19:4C:C5:F9:44:54:11:7A:5B:6A:B2:AA:3C:35:E5
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       018F87114B1A16AAFDB7E1C79CE5DF0B19FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          119C
Signing time:             Fri 17 May 2024 15:00:08 +0000
Manifest this update:     Fri 17 May 2024 15:00:08 +0000
Manifest next update:     Sat 18 May 2024 15:00:08 +0000
Files and hashes:         1: 2QK0xoOoN7XnJgbQdE6HFwN-NoE.roa (hash: zyb9ckt9li3yERnSNGYLAEx/zQbWYoe5jjgmfxejwfA=)
                          2: 4UH7V0wM__QER66W_4MI9Xp-RlQ.roa (hash: HAd3twO0mwrEjIbr0imHTs/cecnXR8gP5KAbVrxfaUg=)
                          3: BNgBpEt1tZkPxUxApsCywvrSXkQ.roa (hash: WHPuKeNKplj5K17IzJHphieiIxGwbNyA1WQSFi/oV6Y=)
                          4: EHpvnjfQiDyfGdckEYfptrkMFI0.roa (hash: +XiX9fcGBfceIjYznREQjmRJNJd+uzvLdskDOj5FYP0=)
                          5: EQHS_X4ZA2vPpeDlxyHkdBLRb0k.roa (hash: uYghtR55VIr8gKkft8BN5OGlOHoMMDBkI3ckdNUq4Eg=)
                          6: Gy-dZbPqJMPoLku8DtINIxNcqOI.roa (hash: zOtFTQhFRBUcwhr6o3tzf8Qk+RQcIBGZcizpbTOReik=)
                          7: KeP9lH62pt5NuBHhaBRz_mWpe2A.roa (hash: kYH80uKvJ/fCU4mR5ZkbGGTzBmWKfcbx3Ubfvq1ooTk=)
                          8: LqUDjXqRP4A8vbaMCAdib7o-6IQ.roa (hash: RLFvFn2DFW7NCdlSXMUQxNQqRRrg8bhHVQCAVaR/y68=)
                          9: Qldu5XIlS7iSFOWMVyNKARo1dQI.roa (hash: W0XA9aoegPuEssIL62UnUwZLoaRy+OE+vaB7L8hCjKQ=)
                          10: WreLBkc7rCoDiGjmUZEEw758-rM.roa (hash: pjUgFaOx8IohAMw+orN/aqs0pC4fgVVpSKqALqq5tXQ=)
                          11: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: M4jH5keLyJjNZTgpFzgipIJFprLudNlvGtMl9wioGcs=)
                          12: av3h7N1L9UJFRGsqyo1zrtpEqRw.roa (hash: VTVKSoDwtHxUERTxz3zKX5sNN1HMZmbwUMlUnE/214g=)
                          13: gbIc_bvjAm4XrVtEykfwi366soo.roa (hash: cHi3jdu8qR9GC7dhCYr95Z/38HVlkJcGyK5d8lmF9QU=)
                          14: nBV_sWwx-vgZYqaQ-JNmvTK8rSE.roa (hash: 8MNkrB3hLKuDoA+6qBTFit4zHUEmZp2bYda2YXYJPC0=)
                          15: oQ6oQutjVyoyrWQ0VnFuFIKk0qQ.roa (hash: Nwb8XkBJofB69HPRWHIz/YuxCMC7s2Si9XLC0DVJuD4=)
                          16: q6x66SBm505HYUsBD_qG35EnKdU.roa (hash: g6sXro765sRwJogPFROxsiKq6pc7p7jkSyk6U1r2l1I=)
                          17: rRgT9tTxhR-bZVBbPUmVqxPs9gc.roa (hash: 5E0NWQW5/HzTmYkUc/Tu+3buu+lE+RqG6cikbPHbuzw=)
                          18: tx2Teufl_xgZI3A4VxyaIf3zbMs.roa (hash: OKEXO0LyJ84TiYriP8zUZ5+iDw3vyxgvgRQBMhlBvhE=)
                          19: v9WDebORle7sLicg4zlEJofUdx8.roa (hash: 8FGwgBKLdMfxYsHim50ZsJBJ6u03VcnGpUytJOLhDfM=)
                          20: w7qI8pvEDEdJqlc3ykkuUuO0-LQ.roa (hash: YtZDzCNvtMl5Sq2p6JzMcm95szg4xSFA01GvOJNJr3k=)
                          21: yUrAg6xhvDRhKhGqOZWE3Urt7UQ.roa (hash: IO4wEOvCL6S5RXGmZn06n1dU7te+7wDYEvDGRBxP44k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:4b:1a:16:aa:fd:b7:e1:c7:9c:e5:df:0b:19:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: May 17 15:00:08 2024 GMT
            Not After : May 18 15:00:08 2024 GMT
        Subject: CN=a7bef16973194cc5f94454117a5b6ab2aa3c35e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:04:49:57:69:4b:a3:a4:be:c1:c0:4b:a0:
                    15:ee:ff:84:84:a5:9d:ed:8a:25:64:53:95:88:d9:
                    ec:83:af:21:f2:2e:d0:38:39:be:43:31:fc:4c:6c:
                    2f:d7:f6:fc:99:de:78:00:70:9d:e8:f9:1b:fb:f7:
                    7c:d4:14:c4:10:a6:8a:25:56:71:be:c5:5a:66:48:
                    aa:77:fd:48:09:a3:fd:c1:b6:03:0b:db:de:63:af:
                    1b:1c:18:cb:7c:ba:bc:9e:64:23:60:94:d7:f8:49:
                    19:56:84:6a:b6:58:eb:c3:6a:ee:a0:a8:86:21:dd:
                    bb:87:3c:f0:97:83:a6:a8:70:22:37:21:14:aa:a8:
                    f1:9b:02:cb:e9:f4:02:9f:14:d4:13:ce:39:d0:4a:
                    67:ac:6e:3c:57:2b:45:e2:9c:79:cd:c2:d4:cd:06:
                    d6:67:8d:f1:21:cc:79:6b:2e:85:a2:3a:c9:1f:da:
                    b5:08:6c:5e:41:7b:01:81:8f:cb:2f:d7:30:64:d5:
                    ba:fe:f9:d1:5f:62:68:df:f5:c8:57:ec:01:b7:d8:
                    41:e1:8f:43:d1:ae:53:07:e9:88:d7:a2:ea:91:8a:
                    17:5e:f3:d7:03:b2:f5:f9:b7:82:6d:bf:e1:bf:75:
                    d7:dd:39:a7:ad:11:2d:10:bd:11:ae:09:cd:38:45:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:F1:69:73:19:4C:C5:F9:44:54:11:7A:5B:6A:B2:AA:3C:35:E5
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1b:56:22:fa:38:49:90:ec:c8:b5:56:ef:8f:d9:50:8a:d3:
         97:a7:3e:52:de:52:1a:2e:8f:97:95:8f:9d:66:c6:84:83:14:
         1a:fd:94:71:63:71:0a:9e:c7:02:71:5d:a5:69:9d:db:1a:52:
         b9:90:13:0d:74:26:92:ce:18:6f:17:3f:3f:75:ec:fc:04:92:
         b1:6b:92:06:08:d2:c7:94:53:ab:d2:36:bb:ae:54:78:e1:82:
         51:75:54:1a:fd:79:97:02:3b:a5:74:2a:57:d2:6c:7d:68:48:
         0f:aa:f5:d2:c2:3d:72:ec:1a:69:60:8e:4a:fd:58:c3:9c:08:
         57:51:38:53:69:d6:16:bd:6f:52:a5:87:d0:ed:d7:e9:e3:48:
         cb:7b:f7:fd:4f:5d:da:4a:62:8c:08:a9:ec:ff:1c:f6:91:47:
         1d:cc:f2:3d:e7:3a:33:69:3d:34:df:8b:d5:49:4c:49:41:5b:
         d0:85:e2:4e:53:f2:62:2b:a4:97:cb:1d:de:2d:02:c5:70:2c:
         a0:e7:1e:38:67:c8:c8:b9:d5:29:a3:9b:6c:40:ec:9f:f9:f9:
         4c:31:a0:36:da:99:01:ca:f0:e7:9e:26:34:e3:a5:d2:30:e0:
         1b:47:1d:10:24:ac:b1:60:66:6e:1c:3e:bd:00:dc:3d:2f:9f:
         da:0d:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:34 2024 by rpki-client on console-ams.rpki-client.org