Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
File:                     mwwNBCJVZtuV6a07LvYFAUl1qqI.mft (raw, json)
Hash identifier:          M5/19aKSQvUUGRjNGKamByG+rqggY7pMKwoz662Ctlg=
Subject key identifier:   B6:00:F1:B6:B5:D2:14:77:30:EB:11:57:C3:7D:C9:FC:F6:B5:F2:FB
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018F140E646A452CAC8F9F0C7E8A2A1BC681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
Manifest number:          11EE
Signing time:             Thu 25 Apr 2024 07:00:38 +0000
Manifest this update:     Thu 25 Apr 2024 07:00:38 +0000
Manifest next update:     Fri 26 Apr 2024 07:00:38 +0000
Files and hashes:         1: 1-FAjEw6NXHsuuN89DHvb7QJ-Rr4.roa (hash: b1mI7ZaarxlNqIpS4EuIE8T1ttfZkVIL0Ten5/Vp5l4=)
                          2: 3xO7zlpjR0JWXUuPCD9giwAuQho.roa (hash: yb/FZcFdQz562+WgbhDpVUDs9WWVy5GDxVmW4kSW+/o=)
                          3: AoxcLgyQLE_zR-_SOaReq0gcaQk.roa (hash: SgB8ZHO2zDVNn50G9zLaOQKhefiCQk0e4nY3/DeuqTs=)
                          4: F3VJ-SO0zfNM5tCuf5y9LalK4bg.roa (hash: Yr9ksVdEepicmoi74xs3Oi5TlcU7+hziHQ/2kPr9V9A=)
                          5: KiyU1CerUwL9bnZw3_crUzhYBcI.roa (hash: JQMhSmPH5ncM53OwQlSblW6gFsmKFivTqVwlCYuF8iI=)
                          6: KpFaoZuC3D45DNlwgbD0p6Ecq28.roa (hash: OGrvOM0QpkvRc711kTuu8boWoNAT6HFsRFSxXut+cxA=)
                          7: T0UVWbdYIrv2Glp_7UXvfOTbTDE.roa (hash: Xx7iACcyu7JmusXCDqkUYxLwfoOcHJio0M/ou03hYZc=)
                          8: TMYjvw-6gKYGnCyflEbl3Utm43s.roa (hash: CRaHJ8ZOE69q9RlKCsU9g/Atx8bQM6YPM8kT6HQPtGE=)
                          9: WNWPj9NmFRIZ1sfG8Zf1UQf_Ww8.roa (hash: h0F5TxvDDdXlQT/KTBKM1AeoFDfb/HKXCo6QZJraAaU=)
                          10: WeO6eOAoehKboYH89gKliL8BTGk.roa (hash: tvqXHpH1oGXVuqRsbyO5jvANHqqkZ/ayIlUi1aZRTNY=)
                          11: XIr7vREav9FpHWaeRG66U-V2T1I.roa (hash: PxrE7fYbb1QmrFVOUi/PP18esVuNy4IZ/Pyl5v93vNE=)
                          12: Y-BKZ1cfWzjJJUqiMSsuxC5Q2YA.roa (hash: qV7qscVoRRJoF93ZZPbuEf9m3/hYGTEhvnNqmSNXCXE=)
                          13: ZPVHCd-HO3DHyMWeYzW6PkoAMEs.roa (hash: 90Amxzj8HViMfby7f34COdZK8iPztJltjVQ9+bDMXp4=)
                          14: Zsl203PnuBDj54gkT5X2UnsDFUw.roa (hash: 6R8IollvFkmeRmgmp+RbFfm1S4Z2LnAmlna37ivHyk0=)
                          15: _2w89-yDl6LCMUbk9LxssNG83Uw.roa (hash: 9Ll0d77Sv65H4Fswc7aPyB64A1RLAAHJJIXFbExYZt8=)
                          16: avmIpm-dYYvDhA51JJi1PlxSnqg.roa (hash: eyYkQKKooDbBkKGud2iNtZzNNuC4hLf1oQNOFaBGXfo=)
                          17: i5i_77-KtCYBi84lPpMCCi0RxG8.roa (hash: vM6jQ3zqXtoIVUTL0Rj339wTt+dppEpw/wnHdRhJtdM=)
                          18: mwwNBCJVZtuV6a07LvYFAUl1qqI.crl (hash: rsTx7d7dJzgEDkiZ8oYZnq1/xxQ2kOQkCGAmii5Eg9A=)
                          19: orcN8FWyW-UfC57aAnuPj53HOv0.roa (hash: NW5a+OP0PXTNy2BdSE6h6xsR8Sc4HF91EpBwPXrjYEM=)
                          20: py65vHjJSOA_bKOI9pXYOFs_ybU.roa (hash: OA+a2v0mo0Hh5arF3X/LyvCtA3k9B3JzQIaxyfLjLcU=)
                          21: spJX3IEx26bpEvpSJ8lp2DUnCNE.roa (hash: BdV29pHI8jyuKXQaC3AvvmoPXn2ya9/CqfhQ33t1SrI=)
                          22: u9i6G99krjw4DvLq8PXudZFOns0.roa (hash: NoQX+rOKXvWRugqMUj3NeQRVvctGTBZQGESKrA+Cpw8=)
                          23: umtffh81wVCZe70mgfvSYY0T6sU.roa (hash: sOVm6sL0424croNjBKACvUEEOdhXOVel+Eer2C5HHJw=)
                          24: uxcFBuO41vdhNTUqA_Ri5oOJldQ.roa (hash: wsaGeYinPJvMyKuZOhZEMKlq6JG6fZsVJG4kslaMORg=)
                          25: vFKzn2sy-BWwHTa31NW1pXNfZ7A.roa (hash: TsTsWI23d2G3FjyNuBo28+kHdnYrcOhxnhyH/8cpnCs=)
                          26: xW6nvlSjAM87LjUyhasEH1_9Q3k.roa (hash: AzYFHEdSmLcwpRbvjPkaXxN7DtkaLDj02R52p8kFiuA=)
                          27: ykDzqLxYQhpwXnX08HmeUqxcfpA.roa (hash: zDUehePsiHje/PItJ3TojUORAqgVbSV35CL0F4IkugI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:14:0e:64:6a:45:2c:ac:8f:9f:0c:7e:8a:2a:1b:c6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Apr 25 07:00:38 2024 GMT
            Not After : Apr 26 07:00:38 2024 GMT
        Subject: CN=b600f1b6b5d2147730eb1157c37dc9fcf6b5f2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:e6:90:32:08:b9:88:dd:fd:43:db:ac:78:
                    b1:a6:65:e1:8e:b5:0a:61:60:55:c4:df:92:d0:1f:
                    0a:92:95:59:69:7c:2a:f2:e9:ca:ad:3b:01:2b:05:
                    32:1c:6e:83:80:64:91:5e:3f:a9:4b:d7:48:fc:59:
                    e2:83:a3:64:ca:e7:83:fa:28:fe:e0:54:27:ce:70:
                    63:9c:52:97:b6:10:86:9d:46:b9:36:ab:49:fb:5d:
                    5a:13:a1:9d:7d:76:22:c9:f8:e9:ae:64:2f:31:da:
                    4a:07:6a:96:0b:96:9f:cf:e8:4f:e3:eb:98:d3:d9:
                    06:7f:46:6c:27:a8:f4:76:43:3d:f1:03:54:3e:c2:
                    f0:4f:28:d8:e4:87:a2:6c:11:42:e9:7f:56:9d:3c:
                    34:1d:e4:26:44:37:f4:60:a5:04:9c:b9:ae:1f:f5:
                    83:cf:1b:4d:55:af:f3:fb:ae:93:8e:f1:a4:ca:ad:
                    c8:23:8b:85:62:21:02:9e:6a:48:57:c5:9d:e2:ec:
                    b0:cc:89:83:ab:29:6c:6a:91:a7:05:bf:94:c9:61:
                    68:4e:79:4e:e3:3c:72:88:70:65:20:59:bd:62:52:
                    97:3a:cd:05:58:20:bf:bf:81:9f:d1:54:34:0e:55:
                    c8:25:22:fe:18:cb:35:55:42:be:35:6e:63:dd:00:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:F1:B6:B5:D2:14:77:30:EB:11:57:C3:7D:C9:FC:F6:B5:F2:FB
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:7e:56:a4:93:97:a4:52:7a:e9:44:11:08:f0:cc:a8:b5:a6:
         74:fd:46:e7:90:4f:34:ed:4f:c7:77:eb:cd:c9:ca:19:32:d2:
         fe:97:d6:3c:3f:50:74:1e:63:e0:c3:c2:9f:8a:94:a0:60:32:
         3b:46:50:6f:0f:7e:d2:b2:82:f7:dc:c0:e6:af:44:80:50:2d:
         0e:2e:cb:f4:48:3b:4c:5c:8a:46:b0:d1:33:27:90:f7:da:3c:
         7a:1c:4f:fd:53:d6:c8:ed:eb:8f:48:81:5f:f1:f9:47:6b:1b:
         77:49:00:57:9d:d0:1b:56:85:67:06:ea:e1:61:fe:1a:a6:07:
         2d:2d:67:97:1b:ae:14:06:eb:89:d9:1a:53:a8:18:31:59:2a:
         67:bf:0d:9f:2a:60:ac:bd:00:50:d1:cd:ef:f4:f4:a9:45:ec:
         eb:f5:5d:ab:51:27:26:fd:5d:7c:b8:6d:ec:b5:b9:7d:83:66:
         42:93:6d:57:04:d8:35:3d:56:84:83:c1:92:ed:a6:47:4d:3e:
         7f:63:9e:63:9f:d4:cb:92:d4:2f:b6:53:9f:64:01:a2:25:0f:
         52:5f:cb:97:64:99:c0:88:e3:ce:cb:dd:57:12:ae:11:7c:79:
         0c:10:4a:1b:ae:1b:6c:da:51:fc:af:f0:36:9d:c2:2f:e3:1f:
         5c:d6:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:12:06 2024 by rpki-client on console-ams.rpki-client.org