Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          A1ElQvx+eYssg8RVJrKvbVneBxxE/UNoAvBHzBX79fk=
Subject key identifier:   E0:DE:BC:6A:D8:F1:F0:C8:B3:1D:BC:BA:11:BB:43:4C:31:B9:D4:BA
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       0193640DDE88E909BDC5671C1FEAC5476D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          1419
Signing time:             Mon 25 Nov 2024 16:00:50 +0000
Manifest this update:     Mon 25 Nov 2024 16:00:50 +0000
Manifest next update:     Tue 26 Nov 2024 16:00:50 +0000
Files and hashes:         1: 1-GCP9g1Tzw6tEHrbmde_QZstbl0.roa (hash: ACBWeO3kYXEz31Be4W9Ls52dxSEWia1D519HMA4uyxM=)
                          2: 1-nvG2wLhMuzq0_D9uza5FHT46j4.roa (hash: A4yp1ue9G5kDZWXdR+pwltuTixm7h6g6q1Un0UW/gyY=)
                          3: 2WqL6XEnHHxt5ZLjVw0wuKqLTxs.roa (hash: A+CMUySWaszuKDBHWqJtyyanWO0LO2E5rcXMD55JrDs=)
                          4: 3RzuXjK7yVNtgAHrvCvf7eF6aw0.roa (hash: Y/D+4NC6VflipmscZHLXDFp1Np3UQMfwCg5en3BfdLQ=)
                          5: 4VnBZCzFsxb_bzHaWTl5y-4W7SY.roa (hash: bTRcboggUdxy298fUAisWanI4vN7HgEVYgR1tQ/WBl8=)
                          6: 578nhKomOnjdOIg4tuq39WyEgHw.roa (hash: gCARJ683Nk3toGdh0tY327HqB3AYAVFTT8MJy+xK6Bw=)
                          7: 6eaLu8HvuypgRQzUQk4DhdQNOUc.roa (hash: gZKuYiGZyqQSgY3KYfNK2Gk2aSPTSG4yqAgJ7eVGEu8=)
                          8: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: RyD41yJ5WxtcQa/i5aOigdWrxxhJhrdz1RGunlJ/Uig=)
                          9: Apgp14VUjYCkW-QV78hbmB9gpB4.roa (hash: hOPvfuTvjF3q3IU1CLoUxiCLwokBshJVS7UrGFsBp48=)
                          10: B3KNnolGrQDmnfk7IjNksUipV5I.roa (hash: fDdBargYk0MUf5sHiNtkM5jN3MpxOwFk4ozQ1bBX6JQ=)
                          11: BF1aKQgU32zhVkVveBcxfYdFo_A.roa (hash: 4VHYQfdvo1Gw9gq/LRFT+na/5KUN84mAh1Zsb3MkqO8=)
                          12: CK5K_BNvVih9J60BoJi_6ujbAsg.roa (hash: C49PTOdF/STWwhoF0PXtHdLSFI8QyfxFChZcBbuu0j4=)
                          13: D25zhQzai8agFUS_KW3gEEdqROM.roa (hash: Vnhfh2I9dXZanO+LBrIWf3BGqPx8Rg0Qf8c8TdfgnhU=)
                          14: FOzUWVBUQB_yvYUFZ78FWvWpveI.roa (hash: d1GxHFNhz9ldhBmOdKCZ4i1P6fC+kmHIjVf7G6ek78w=)
                          15: Fo4b5eigIlzy9-7p_CtteRImC-4.roa (hash: rbZ7rypjcfNu0BpWDmIebrpXM+e0f2xYe6ChlIBsCEU=)
                          16: Fxhj6mGGKYYnw_GMI9sqhb-VqmQ.roa (hash: /impvWVRJMFfKFt1LBGYda7WrBtAGWsFZnBGRGySfpE=)
                          17: I6ap7oeK_nPS5VyMT7PytvS0W2o.roa (hash: mGnJLeGTdtsUbzARrLbFkzK4o0t3b2HEW1BF1kem8Ts=)
                          18: IwSbcS93CkBa7rBmB13tJy7Kv7c.roa (hash: 2L7Xk/HojCr9ZD7DX8Fs/tCE+8R7+tH14mnbs5kTbig=)
                          19: LfHjXdZHRQL0vxBfosVsKaXznQs.roa (hash: OYQKxcMcZvDxvvzQrTx1ZkxSyoRz2S7G9QqBXYtjrSU=)
                          20: Lz1TkDrmLronOQL-iGwHJ8D_qD0.roa (hash: 4fXPAqY7JjCQZGH7ZXlTp8ySNivgefj4UQRruneSbK8=)
                          21: Nq_K0V58b_RZHQFCMyEVVDSUuFM.roa (hash: oUJ2gS1mYflwws+s0vM9A97LKvRD10X80EUvCfshvsk=)
                          22: ONQ6m9RH_jQrVocIk_ZT988sP1o.roa (hash: 5KbB+O5qyUkq0mctiRtCCY/nfHphN/7IrLvy0f8WUwQ=)
                          23: PeqcY-g9SyMKDy5mSwOJsh-7YVk.roa (hash: +Aj4hE6opTlQ3Ya7ElxLHic9sE9TbK+hNiKNOZ4NljA=)
                          24: Q5Vb9PBwr2G3lU38Yc3d28gPrlU.roa (hash: vAiJOdYfIkG0dnGX0lYi47BXHMIgCOE1/W4Gnpv/y4c=)
                          25: QCAh3hrgTdyjA9jp23VP5BR5ssc.roa (hash: 67v+S4M+OJkHQKSjONS+gIXlGU958TtCuJrJ0plfMyA=)
                          26: XxOkr5Cx_fIbZKkClLRQf0D6ISE.roa (hash: dRzehVYoFfJQe4NSTlaw75NiOxBAYAu8f2HinJYNbAY=)
                          27: ZYFws6gpq1Ou-M_m_OrKX_dmH9Q.roa (hash: RGUpa6zI6Iy61mTHgH0VMpPNJxB+7VjYvXNZp/LWbJ8=)
                          28: _YV4OANZ9Q2mNvN_19ZmnU9-NMM.roa (hash: JTjd4HNLE1R5GPOX1gt/L8//rpimGljni2zarnzzp70=)
                          29: bdVbtzYPYD9Q2_d-Kh44ldZokf4.roa (hash: CygtYAV68pNiItWcvbjTMsCmWK39gnx0MaLmVruLNhg=)
                          30: bfd1UQk-YppLck1tc7BlmoKdeG8.roa (hash: In2v/jrZDLXjkLRY+ZK+DM8EpVcI1vkklt7kcq7mBYU=)
                          31: dTXmuqAdUiaORH9_k6_OEflaGJ0.roa (hash: Y6xTs4fv/PmDrMOT6et08oHXBwWg0pSPHGe5dlh0Hi8=)
                          32: dvgT4Lb5QfA9jnRXZkcLLivZKTM.roa (hash: +MpKeXv7ilKXj0es3FrbJ0Fxq4wVqCr6QKsXbrXMWTg=)
                          33: g6P5RbuAoeSL3xnxKIDysGbwIMY.roa (hash: rRpE/4ZEPUZ1KTIOVu7KZEdAHRRW4w+jpQBLCwVNhyI=)
                          34: gcXteKmntgbAZd0CQrGgTaer6ws.roa (hash: k6MtUkUyWMYdtWLrpT/MXYSWE8ts4N8nR0DY2nJ1i3A=)
                          35: hamXwVRc9HWCybxdSRYL-cEpjBU.roa (hash: VdBeWB8dhPxZN6vVvEDszaLcG75mGEP6Lwe9BxojBSg=)
                          36: jCtFFYddBOZsCs5sV5-7mLB-Ppw.roa (hash: xMZYItm+1J8uZ7Ve70otLC2sBuM2cwiA8tFRnGyx/kU=)
                          37: lNQRP99FnhzAEJy8b6lz4Fz-w6A.roa (hash: a5biW+2Mc1ioENXRoYIlySJVUsdd1qciExnLyp8IL6w=)
                          38: lUgkTKzWxVjvj5WUHEEW5ZpkeWw.roa (hash: NIrpqPXg6Y+cqJAUH1hS7VXx5xaTjjn3R3yGXoXw/Iw=)
                          39: rM4FtYUL9uu_prr8-cUTV_QpdnU.roa (hash: +hFJr6yfTFHJt5dq2bBKKuxZOlkQVNeVOdJMyBAIuNs=)
                          40: sUVWXmZRG1P9X-Nwzk4NT4fzocM.roa (hash: E5HOF6BQTJX2Fi/Hpg5/nEj+Av5bwmmyd7iyTtAMtdY=)
                          41: wELnbMzbWnY8YVtoPK0EjsF4__4.roa (hash: QD1dbp0kDfXzglph2ce8/EZjVLdMzIXb+00DsZLp7k0=)
                          42: yI3kcyJzRggP15m85MpeIq1GwBo.roa (hash: r/04rAUqk78VwXUr6beqzDxtFmgnHuWo4GBXh8YpN3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0d:de:88:e9:09:bd:c5:67:1c:1f:ea:c5:47:6d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Nov 25 16:00:50 2024 GMT
            Not After : Nov 26 16:00:50 2024 GMT
        Subject: CN=e0debc6ad8f1f0c8b31dbcba11bb434c31b9d4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:6b:e6:3b:a6:5d:e5:3c:63:63:0b:cc:96:
                    22:ae:71:70:d3:e4:29:66:d1:e8:8d:91:a0:13:bb:
                    b5:ed:4d:25:85:c7:98:04:29:7f:0e:e2:36:28:c1:
                    40:43:d2:47:d4:d0:cd:37:ed:14:ed:79:57:7d:30:
                    d5:50:47:ec:27:dc:61:0a:a5:21:18:17:05:7a:4a:
                    0f:b1:1f:66:a7:ed:48:a3:8b:8a:69:9c:ec:55:cb:
                    64:ee:e5:61:ac:4b:ee:91:3d:e6:a5:e3:a1:a6:3c:
                    1b:5e:01:95:57:85:40:f0:de:6a:e4:86:ad:0b:83:
                    cb:68:ba:8c:69:dd:52:c7:bf:c1:2b:25:26:dd:cc:
                    b9:fb:d4:ab:65:89:62:0a:ae:0e:1f:30:6d:a0:e4:
                    b6:f4:1f:53:52:19:62:3f:9c:9d:03:96:03:a7:fa:
                    a5:5f:05:05:36:9c:1b:60:f9:76:2c:cb:43:df:ce:
                    99:b4:57:5e:a1:be:06:df:16:85:94:5a:c2:a3:46:
                    a4:99:f7:cd:9b:55:66:76:8f:4d:25:dd:28:7b:9a:
                    41:8d:e0:f1:80:37:3e:f8:b9:48:3d:11:65:f0:36:
                    c9:fa:77:e0:33:6e:a9:8a:1f:2e:a6:8f:c4:99:fc:
                    df:35:53:bc:00:65:8e:9a:6c:14:37:78:36:e8:b0:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DE:BC:6A:D8:F1:F0:C8:B3:1D:BC:BA:11:BB:43:4C:31:B9:D4:BA
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:d2:c6:6f:7d:10:4b:43:8e:4c:cc:cd:31:d6:c9:4e:d9:
         61:7f:45:8e:d2:06:f6:26:ec:f0:5f:f0:31:56:b7:b5:1f:92:
         21:de:96:6a:a5:33:26:7e:18:d4:c9:25:b2:2c:2f:15:67:07:
         c5:ae:f8:2e:87:d8:da:2c:75:bb:56:09:b2:ef:e5:9a:95:57:
         33:9c:cb:44:a4:db:48:4c:de:1e:ec:d1:d8:d4:11:60:4b:43:
         0b:68:a9:1f:e4:a2:2d:15:d4:d8:bd:08:a2:de:7d:75:93:6e:
         b3:f2:6b:2d:8a:1b:2d:3d:f1:67:01:97:11:3d:2c:4a:0f:84:
         8f:4d:8d:59:3e:a4:30:7f:70:0f:93:0b:63:ef:bd:1e:b0:50:
         d8:0e:b5:a8:3a:9e:0d:43:c7:0f:f3:1b:6d:7e:cd:c7:29:3a:
         37:b8:34:b2:90:33:36:82:42:6f:f9:46:cc:e4:48:59:05:21:
         95:1d:c9:9e:f5:2b:1f:ef:13:c6:f5:83:8c:c6:2b:f6:da:56:
         1b:91:4c:9e:d4:a8:99:4f:3b:6f:02:2f:45:86:27:a3:49:1b:
         b5:28:19:3a:ba:6f:e1:0d:db:93:2d:b2:7c:65:b1:c9:34:b0:
         cb:95:f2:ac:57:05:57:3b:d7:21:07:21:68:f5:af:58:dc:0a:
         dc:bc:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----