Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          ogeDCNfRv3TtH7P8w96u2DafmwM1nB0COEEvatXWYgs=
Subject key identifier:   21:E9:B4:CE:0C:03:33:8F:BF:CA:A9:66:3B:F9:A2:DB:2D:B8:4D:86
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       018F95A90BA6E1EA6778607834B61CDB1B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          078D
Signing time:             Mon 20 May 2024 11:00:34 +0000
Manifest this update:     Mon 20 May 2024 11:00:34 +0000
Manifest next update:     Tue 21 May 2024 11:00:34 +0000
Files and hashes:         1: 0UTXOAgdv44NT-webbKqrJ6I32k.roa (hash: NIKsY0aYORF0kVJ0BESW1Gb/BnS6Y4YoelmHVE7jyFw=)
                          2: 1n9nwdvGLJLZojjaEOk9Jf6KSnk.roa (hash: mvs8YZspPM8iLmp46iMspfkGI5JTebybFekGDWlFdso=)
                          3: 29Ki8ArkRJ1mC6t9JP1BO9qf_oA.roa (hash: C4SIxHKXKvIvIV9sKiOgoGHo010eQgTyGjH1i0ezxaQ=)
                          4: 4GsBweMmylJnQydnUEyhKmaOIy4.roa (hash: sxI18AK4fQLllXhTJeC+Vs7Wy/aH8FZTrQrK7CbcfPY=)
                          5: BQLm8_UGqz5wcLKbg-S1JpitIU0.roa (hash: sHaMrmC1lO2rZfEEUjGbo5FYVsmxDI8lV0TRCisXwO8=)
                          6: BoQzcBCDVi3N5-N5OGfIOOCnbgA.roa (hash: k1vm1+ID1RDGsgoEmRKEzLU3ac9vzd9OUmHSYH2WCcs=)
                          7: D7DvCExBQgY8WFr0p209nYcx6KE.roa (hash: dMytONdHpO/TSkESKgHgZMzQTupoAO2jUDaLGKFIoyM=)
                          8: DkiUW_mAdLfWumyrdq0jAo973H8.roa (hash: FZUSXk6hJRq3kH6+kVEV0JoHzJrBo+7CEFka4bb+VJM=)
                          9: Dn_6n4sRdyNu_OWPwL7e7SbMQ4E.roa (hash: brlolQgrQ90bw9qrSGxbM1W+PQQ7H9966Xf7/kBwWC8=)
                          10: FDd0wJTLWHr9TyZVfIV8cPoh5wM.roa (hash: QBg6EO7WVYoSR9mOILzNZEn420XjHwdyaq/mdRPxqGA=)
                          11: I6RrquLr7nlOXFxx9fHyvxs5XKg.roa (hash: FZfMn2m8vw7El4gjbHA3hcI3MyxMeyuuJoFJFr+HGo0=)
                          12: IHezm1rZSws2Nnt-C_MlrveEKQU.roa (hash: UlVwTzdNzAMLAqo2Zp5QeTRG8oCLd51dbebrhvfPKYI=)
                          13: M2hbsMpmnbWK9EkUNss2aBCadYk.roa (hash: 5L1lSTVQgBL9Fa2pVtW5FMx8uBLa3RQ5cNYn8oX44VU=)
                          14: MLFqFWl1IRWNvyF0FM7VdYASwj0.roa (hash: XJY1IF/S5KEJ847vmvTgQ4fuvVnpjGaHiiaBHcVGdZo=)
                          15: WIERuWm0enBkYOYMrqQzankQzLU.roa (hash: gfzkvm5iwhDgvqrFKV1wVvKu1fcQf/i6ba95FCdepG0=)
                          16: WVzIJqlMZLO9nhTD6kMChlSSA5w.roa (hash: EIvQWV9PL6AU0LO44zE5MSxFRQKBxrJ+Xe7XOLxSq5o=)
                          17: WtIZdpIxdJzn4CD7BdZaiRzH808.roa (hash: nYnjT0eJuzv7Yo5WCNzccV31rXto7yttma8NoZpzE04=)
                          18: ZLb2CaW5Fbwf1pm-CszaEr2Qmiw.roa (hash: 1+mfKV0Vhb33wQnyOZ9Xj1TnRfSjmDDXo8jnHr9CjJc=)
                          19: ZXMm-kyuB3sdWdOsEVd4jJ5di-U.roa (hash: JQNEEFBlq0ZgxzqfOTANND5jqygO2Z/oyOeqPBhhWkI=)
                          20: _fj0S1ECWH141M9UR5HgoAfPvK8.roa (hash: ebvq0J7Krqy9StNMoZUwGu8w/MdHOdENHXouCrlBReY=)
                          21: c6vv9Gf7WrGLyQuEKxR_phDLB5k.roa (hash: wuwqO/Y7TMp7AenDU2WrhX4oP1hR9IDT2Tg3/x1EU6g=)
                          22: c9CefuZKv2gKpsdNzHFw8YgMSiU.roa (hash: zy3IIalav8vexHepBRndQl2O7JfinV/2BmNULSVOc1I=)
                          23: ht5OSGZXYj_vIlEEsUtpuP2OreA.roa (hash: IS+Wxk/JOCeRFQuSE1WzVkV+pQ1rmRQRRI/7M1njeO4=)
                          24: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: g4sy9ZzWjFCHwc0PvTWKD2M+Ef8UbfJW68kYNCQD3iQ=)
                          25: ksBpITpVU9OCjDg-K_dfVluJol0.roa (hash: 27EFBQmmA+qF6z4lcYLA4RR0/ooZK3sZs3R0tIqi3ys=)
                          26: m-oc_A6ovxSCdRXBe84XB4RKw2E.roa (hash: pRVHQM2h/gVXG01VcJQd9QbPzX99593m9vEqvvK+y5Q=)
                          27: mwAOEy6fBCEXFlqUWscNMnA8DSk.roa (hash: i4b3bpx1i6M62etR6GtBmYrt7+hKlhkrkmpV1J+NTgM=)
                          28: ncwptn4sVcS_MwtKwRqGZTzNuwA.roa (hash: wSj6/Tfx8toc7js8uKC9PT6t3Ey2WGezS4MWWJJK3VE=)
                          29: nr6R1CHv5Gmg4V2CaUKqmg73fEc.roa (hash: ow1tAahTQ7Xb/YdT5t/NbiiDXdyE2M8+iM8Wm/e0pCU=)
                          30: okOYZ7kMGRyz0hARkkB8Wh_AtIs.roa (hash: 3QNe+8iOy8RKS7HGnD26YfOfLVkCDpD+RQCqCzlBKxw=)
                          31: sj02OVb6GppEKEINuWDg1lRcxSo.roa (hash: IZoPlXM0T13KUx/EAXZuOPhonraWEYr5Gs77jsOk1oQ=)
                          32: toP5GnV52DlBESZs01B3usSGFPw.roa (hash: PzFP/2vQgFgiwZiV0R44IZDp0sFrH0VeXeyTZhHb/Gk=)
                          33: xWPNARwQpBOISHplMFnCveHulHs.roa (hash: x76KeY32RoMHizZiEdzZFB17pD6cChQ50fAuj/G7f2U=)
                          34: y5j7zvcWLYE_UV0zTvXs5AtGDJg.roa (hash: 7Miiw4DQqC2MPx2FDB9uAhN78esl7fcK40dky+TC/1o=)
                          35: ynfihzFc7YfJIUEvGPDHZQ2TRdY.roa (hash: TgU13S8UJnw2iJGjrqcpBH4pRmvAxXdYOGtOO9GDgQw=)
                          36: zPVRCFoYWkGx7d6M9-S1C4SExnY.roa (hash: rWdbgV5GgqlJmuQB6zTTcbZta+R9VK1Wx3HnYwizOlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:a9:0b:a6:e1:ea:67:78:60:78:34:b6:1c:db:1b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: May 20 11:00:34 2024 GMT
            Not After : May 21 11:00:34 2024 GMT
        Subject: CN=21e9b4ce0c03338fbfcaa9663bf9a2db2db84d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:9e:27:cc:e2:8a:e7:72:2f:a5:85:4d:70:
                    ff:bb:cf:69:d3:31:93:4d:7c:0c:15:81:57:9f:df:
                    b2:21:1e:83:14:a4:c0:2c:06:ac:38:da:d6:c2:6c:
                    17:2a:f3:78:fb:81:ba:d8:86:f1:6e:8e:33:c2:d2:
                    01:dc:3f:a8:67:70:83:f0:a9:64:7e:fb:ca:25:ae:
                    d8:06:7f:8d:60:b2:ac:ad:c8:d9:74:f1:d1:d9:d6:
                    9b:5b:dc:09:c9:0e:49:6a:78:6e:89:e5:14:d6:59:
                    0f:6a:76:e7:c2:ef:cf:1b:a3:54:3b:81:8e:78:bb:
                    2a:50:9a:05:31:48:6e:74:70:19:56:d4:e4:64:37:
                    c9:a7:72:5c:2e:13:64:be:53:6b:bf:2a:7e:ea:c6:
                    e0:23:13:d9:84:db:e4:cb:b8:d0:65:f3:4c:59:23:
                    67:c6:74:5e:7f:44:be:c2:18:15:77:5e:ff:29:21:
                    3f:f2:2e:a9:20:49:1d:ee:3f:b2:75:fe:71:84:6e:
                    98:53:f6:10:da:20:8c:48:f1:93:64:f5:b4:ce:bb:
                    4a:e4:16:e7:99:38:3b:c3:36:f8:81:b2:1b:4b:12:
                    73:4c:b3:10:ba:e7:78:ec:b6:5b:5e:72:61:61:14:
                    91:af:a6:ab:9f:62:58:1e:50:9f:d4:c7:d6:e6:e7:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:B4:CE:0C:03:33:8F:BF:CA:A9:66:3B:F9:A2:DB:2D:B8:4D:86
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:62:84:a3:f0:e0:38:8f:d4:fb:be:ff:85:fd:56:4b:dc:94:
         b9:53:52:ae:27:5a:d7:d7:61:48:d6:2f:fb:14:24:7c:0c:b5:
         a1:04:3c:a1:86:24:10:b8:61:be:c4:65:63:bf:28:eb:9b:28:
         a2:26:d2:9a:7a:cb:25:aa:ff:9e:e6:34:3d:78:9c:bb:a6:78:
         c0:d7:13:5e:13:ef:10:99:53:8b:a1:72:c8:17:56:c5:3c:7f:
         2c:0f:c9:2b:e1:50:25:8a:0e:d9:f2:45:1c:42:94:4f:bd:96:
         8e:52:f2:13:50:4e:3c:0c:0f:9e:4d:63:be:56:37:3e:e6:a1:
         e8:13:e2:83:08:b5:ff:3b:d5:7c:02:bc:a2:f9:de:04:bf:3f:
         e9:32:b2:62:5d:ff:0c:b2:c1:e5:ee:c3:6e:bb:29:11:72:63:
         a7:0b:cd:fa:e5:b8:14:48:56:7a:09:01:a0:06:11:44:7d:f0:
         e3:50:7d:d2:01:38:f2:2f:33:4e:4a:34:3b:d8:63:d9:05:7d:
         18:59:55:1e:3a:c2:06:00:c4:35:40:d9:d9:ec:12:00:2c:bc:
         8c:b2:ff:8f:98:c1:2a:cf:50:7f:68:7c:3e:be:a1:57:78:05:
         48:1b:46:7a:06:0e:e8:8a:1b:db:8d:74:78:cc:56:ed:61:e4:
         22:ea:dc:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+VqQum4epneGB4NLYc2xsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjQwNTIwMTEwMDM0WhcNMjQwNTIxMTEwMDM0WjAzMTEwLwYDVQQD
EygyMWU5YjRjZTBjMDMzMzhmYmZjYWE5NjYzYmY5YTJkYjJkYjg0ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWSeJ8ziiudyL6WFTXD/u89p0zGT
TXwMFYFXn9+yIR6DFKTALAasONrWwmwXKvN4+4G62Ibxbo4zwtIB3D+oZ3CD8Klk
fvvKJa7YBn+NYLKsrcjZdPHR2dabW9wJyQ5JanhuieUU1lkPanbnwu/PG6NUO4GO
eLsqUJoFMUhudHAZVtTkZDfJp3JcLhNkvlNrvyp+6sbgIxPZhNvky7jQZfNMWSNn
xnRef0S+whgVd17/KSE/8i6pIEkd7j+ydf5xhG6YU/YQ2iCMSPGTZPW0zrtK5Bbn
mTg7wzb4gbIbSxJzTLMQuud47LZbXnJhYRSRr6arn2JYHlCf1MfW5udyMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHptM4MAzOPv8qpZjv5otstuE2GMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGKEo/Dg
OI/U+77/hf1WS9yUuVNSrida19dhSNYv+xQkfAy1oQQ8oYYkELhhvsRlY78o65so
oibSmnrLJar/nuY0PXicu6Z4wNcTXhPvEJlTi6FyyBdWxTx/LA/JK+FQJYoO2fJF
HEKUT72WjlLyE1BOPAwPnk1jvlY3Puah6BPigwi1/zvVfAK8ovneBL8/6TKyYl3/
DLLB5e7DbrspEXJjpwvN+uW4FEhWegkBoAYRRH3w41B90gE48i8zTko0O9hj2QV9
GFlVHjrCBgDENUDZ2ewSACy8jLL/j5jBKs9Qf2h8Pr6hV3gFSBtGegYO6Iob2410
eMxW7WHkIurc+w==
-----END CERTIFICATE-----
Generated at Mon May 20 16:13:47 2024 by rpki-client on console-fra.rpki-client.org