Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          q1OJ19RtwoXwdWSZxbhfdTnSfXj5y+95G5qHKi42Y44=
Subject key identifier:   62:6A:AF:3D:E1:1B:D3:51:81:07:6F:F3:B2:4B:DF:4A:C3:C0:D0:D2
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       018F36D1F9F863A8BC73E861B1E7F229570E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          11E0
Signing time:             Thu 02 May 2024 01:01:21 +0000
Manifest this update:     Thu 02 May 2024 01:01:21 +0000
Manifest next update:     Fri 03 May 2024 01:01:21 +0000
Files and hashes:         1: 1-GCP9g1Tzw6tEHrbmde_QZstbl0.roa (hash: ACBWeO3kYXEz31Be4W9Ls52dxSEWia1D519HMA4uyxM=)
                          2: 1-nvG2wLhMuzq0_D9uza5FHT46j4.roa (hash: A4yp1ue9G5kDZWXdR+pwltuTixm7h6g6q1Un0UW/gyY=)
                          3: 1-xQKwDNTpnsoOHzj8pkwrOvtPrU.roa (hash: Ho1ozyykpzO5+yk1kciIesToqY6Ji2pN47i8KDrPoYU=)
                          4: 2WqL6XEnHHxt5ZLjVw0wuKqLTxs.roa (hash: A+CMUySWaszuKDBHWqJtyyanWO0LO2E5rcXMD55JrDs=)
                          5: 3RzuXjK7yVNtgAHrvCvf7eF6aw0.roa (hash: Y/D+4NC6VflipmscZHLXDFp1Np3UQMfwCg5en3BfdLQ=)
                          6: 3XTDmiZ7ND3kdyVvOCOTM3zIDp0.roa (hash: erCu50ye4bDDr/KtN0TO+rXeaDlVOqTzM98X81T6H5Y=)
                          7: 4VnBZCzFsxb_bzHaWTl5y-4W7SY.roa (hash: bTRcboggUdxy298fUAisWanI4vN7HgEVYgR1tQ/WBl8=)
                          8: 578nhKomOnjdOIg4tuq39WyEgHw.roa (hash: gCARJ683Nk3toGdh0tY327HqB3AYAVFTT8MJy+xK6Bw=)
                          9: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: wbtRa8DDF0/xRVSXu0DV7OMgM3DiGw2YktT3nz5xWGI=)
                          10: Apgp14VUjYCkW-QV78hbmB9gpB4.roa (hash: hOPvfuTvjF3q3IU1CLoUxiCLwokBshJVS7UrGFsBp48=)
                          11: CK5K_BNvVih9J60BoJi_6ujbAsg.roa (hash: C49PTOdF/STWwhoF0PXtHdLSFI8QyfxFChZcBbuu0j4=)
                          12: EXs_CZo3VyMCSUwjnpa6GUJPCnY.roa (hash: ye9lngNWiExnN4Cn+xVGuetQJhhKmHTcgIj5YTalkdg=)
                          13: FOzUWVBUQB_yvYUFZ78FWvWpveI.roa (hash: d1GxHFNhz9ldhBmOdKCZ4i1P6fC+kmHIjVf7G6ek78w=)
                          14: Fo4b5eigIlzy9-7p_CtteRImC-4.roa (hash: rbZ7rypjcfNu0BpWDmIebrpXM+e0f2xYe6ChlIBsCEU=)
                          15: Fxhj6mGGKYYnw_GMI9sqhb-VqmQ.roa (hash: /impvWVRJMFfKFt1LBGYda7WrBtAGWsFZnBGRGySfpE=)
                          16: I6ap7oeK_nPS5VyMT7PytvS0W2o.roa (hash: mGnJLeGTdtsUbzARrLbFkzK4o0t3b2HEW1BF1kem8Ts=)
                          17: J2ZW-p9V39OKok3QnrMxcemcg80.roa (hash: /k4dQ4DIXkgLN1G3833mUN7ADU8IRnvhxC+NzruuZX0=)
                          18: LfHjXdZHRQL0vxBfosVsKaXznQs.roa (hash: OYQKxcMcZvDxvvzQrTx1ZkxSyoRz2S7G9QqBXYtjrSU=)
                          19: Lz1TkDrmLronOQL-iGwHJ8D_qD0.roa (hash: 4fXPAqY7JjCQZGH7ZXlTp8ySNivgefj4UQRruneSbK8=)
                          20: ONQ6m9RH_jQrVocIk_ZT988sP1o.roa (hash: 5KbB+O5qyUkq0mctiRtCCY/nfHphN/7IrLvy0f8WUwQ=)
                          21: PeqcY-g9SyMKDy5mSwOJsh-7YVk.roa (hash: +Aj4hE6opTlQ3Ya7ElxLHic9sE9TbK+hNiKNOZ4NljA=)
                          22: QCAh3hrgTdyjA9jp23VP5BR5ssc.roa (hash: 67v+S4M+OJkHQKSjONS+gIXlGU958TtCuJrJ0plfMyA=)
                          23: R8YKmaAwbxaY1MGf6xC8acYgiMk.roa (hash: pqQduW8Xgtiv+Mr6XEuLBc8HveSqCzEc2GGZKG+RpXI=)
                          24: TWbC3nsibzoGFzHSuwpypPDvgug.roa (hash: mU2e/dxZN5gMzal8EL9kGD3iGU9L1Xjn9180EB2afoQ=)
                          25: XTbdC5czZcejYHGqtqRZUn2mU-w.roa (hash: joo54/IsylRIYq35VEMAMWpDlK0UpDDA5f3OpETcfRw=)
                          26: XxOkr5Cx_fIbZKkClLRQf0D6ISE.roa (hash: dRzehVYoFfJQe4NSTlaw75NiOxBAYAu8f2HinJYNbAY=)
                          27: ZYFws6gpq1Ou-M_m_OrKX_dmH9Q.roa (hash: RGUpa6zI6Iy61mTHgH0VMpPNJxB+7VjYvXNZp/LWbJ8=)
                          28: bdVbtzYPYD9Q2_d-Kh44ldZokf4.roa (hash: CygtYAV68pNiItWcvbjTMsCmWK39gnx0MaLmVruLNhg=)
                          29: bfd1UQk-YppLck1tc7BlmoKdeG8.roa (hash: In2v/jrZDLXjkLRY+ZK+DM8EpVcI1vkklt7kcq7mBYU=)
                          30: dTXmuqAdUiaORH9_k6_OEflaGJ0.roa (hash: Y6xTs4fv/PmDrMOT6et08oHXBwWg0pSPHGe5dlh0Hi8=)
                          31: dmcDgcBSWhib5MaekgQR3YJRaVc.roa (hash: 5guBv4Sg27HBhhwasCmTQand9+udt9D8e0/P4b9+YfQ=)
                          32: dvgT4Lb5QfA9jnRXZkcLLivZKTM.roa (hash: +MpKeXv7ilKXj0es3FrbJ0Fxq4wVqCr6QKsXbrXMWTg=)
                          33: g6P5RbuAoeSL3xnxKIDysGbwIMY.roa (hash: rRpE/4ZEPUZ1KTIOVu7KZEdAHRRW4w+jpQBLCwVNhyI=)
                          34: gcXteKmntgbAZd0CQrGgTaer6ws.roa (hash: k6MtUkUyWMYdtWLrpT/MXYSWE8ts4N8nR0DY2nJ1i3A=)
                          35: hamXwVRc9HWCybxdSRYL-cEpjBU.roa (hash: VdBeWB8dhPxZN6vVvEDszaLcG75mGEP6Lwe9BxojBSg=)
                          36: mEpUR2WkTuF-YCX6nSxY-sT7rNc.roa (hash: wrMnWnUs1qx2NmLilNCeTQp5ckKkiaDnDvHx7grSLRc=)
                          37: rM4FtYUL9uu_prr8-cUTV_QpdnU.roa (hash: +hFJr6yfTFHJt5dq2bBKKuxZOlkQVNeVOdJMyBAIuNs=)
                          38: uzQqirHgInc5wLO-uQxBlqyjQ3I.roa (hash: zS5Gt0Z1XqHi7h7cZO4ZALbFikodH9MR7sKg+TtVa98=)
                          39: yyJFPD9STXOOYSxrYSAtBAF2v-I.roa (hash: 6yo+ZE1FyAREJOqQ5VTactKiEZt6403wbWa+yy3AzYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d1:f9:f8:63:a8:bc:73:e8:61:b1:e7:f2:29:57:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: May  2 01:01:21 2024 GMT
            Not After : May  3 01:01:21 2024 GMT
        Subject: CN=626aaf3de11bd35181076ff3b24bdf4ac3c0d0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:86:69:01:15:55:4d:1f:41:b4:15:f0:18:
                    d4:ba:fc:a4:30:a8:e5:5b:33:d3:f3:6d:2c:14:f1:
                    17:83:93:2e:31:f3:c9:59:f5:f3:49:43:f3:77:37:
                    1f:39:0b:da:4e:f8:2c:fe:bd:b7:c4:98:af:cd:ea:
                    76:93:e8:44:bf:2c:d3:07:4e:b4:dc:5e:82:d8:9a:
                    16:fb:39:6f:d5:ce:e5:4c:6d:69:ae:ad:db:17:97:
                    a1:24:92:97:38:ca:8a:b7:f8:9b:83:f6:0f:25:e6:
                    e5:05:b7:9d:45:1e:30:32:5e:e0:1c:26:57:9c:de:
                    95:da:0c:50:5b:c4:5e:d4:ee:30:25:10:b0:2e:9a:
                    9b:ac:5a:92:73:7d:8e:1e:81:a7:1c:d5:de:06:9a:
                    35:73:74:2e:1a:1f:25:7e:72:22:db:ca:cd:81:30:
                    c3:4d:f3:b4:5f:f8:42:1d:0a:61:ec:ae:c5:4b:9e:
                    2b:7b:7c:25:bd:b1:51:0f:22:04:88:43:5d:31:e5:
                    a1:f0:1f:c4:fd:74:10:f0:ea:94:d7:e9:56:10:0b:
                    38:4a:52:69:e3:ec:d1:9d:eb:6f:2f:76:d0:f3:f1:
                    61:92:48:96:fc:cd:cf:1a:54:75:1b:29:e7:0e:ce:
                    ed:e5:2b:6d:af:b9:14:5f:40:f7:b0:21:0d:72:5b:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:AF:3D:E1:1B:D3:51:81:07:6F:F3:B2:4B:DF:4A:C3:C0:D0:D2
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:56:5a:ac:d0:d9:e3:2b:77:c0:5d:86:f2:6e:e6:b5:02:1d:
         d0:cf:e2:99:08:6c:ad:14:2b:33:32:a5:07:b2:34:22:ca:42:
         ea:1d:b9:ae:96:5a:8c:b6:db:94:3e:7e:5e:9b:c6:60:c3:6d:
         25:87:94:47:7d:9e:ae:d8:52:46:d3:eb:38:36:d4:b7:bd:c0:
         fa:6c:c9:17:c8:c7:63:24:09:b8:6e:9a:b9:84:4d:6a:b6:d7:
         ec:49:49:f8:ab:5f:a8:df:a6:ce:81:96:85:cf:7a:ce:99:65:
         d6:b3:3d:f9:5a:26:7f:95:a8:ea:3b:b9:1d:2e:81:3c:f2:71:
         00:5e:a6:80:58:2d:26:ff:0c:42:9a:9b:19:4f:64:11:81:16:
         45:34:8f:ce:8e:5b:7d:94:36:fb:ef:90:45:a1:ea:e0:44:f0:
         be:66:f1:34:66:3c:68:5d:00:50:7d:cf:7c:cc:13:34:81:b0:
         7e:19:bb:78:f8:48:92:9d:b7:16:eb:b4:43:09:5b:6b:92:17:
         ac:19:96:97:78:92:76:85:31:74:9d:5a:e0:32:01:d4:ae:14:
         03:79:60:15:d9:a8:ba:a3:20:8d:35:c8:a4:ae:54:2c:72:78:
         d9:ce:52:b9:fd:18:b6:e2:74:13:87:03:c2:57:97:9e:32:a9:
         99:c4:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----