Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
File:                     MH9f4nQKK23kw3CdKWQRWzyWfaE.mft (raw, json)
Hash identifier:          aF7nxbYugTcNne9sDiwIw5rHkYbRBVuo5L1DhbFe0Sc=
Subject key identifier:   4D:02:30:89:7F:5B:4B:5C:9C:33:23:34:E4:58:32:90:C6:AE:5F:82
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       019355E476907DF32670DF76BCF6C2871E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
Manifest number:          1423
Signing time:             Fri 22 Nov 2024 22:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:56 +0000
Files and hashes:         1: 0Nzx4AGL6vWp9FXNQ9zGyuLP3C8.roa (hash: tJtVpD0Ife7e5B+Fqp0DKlorNoGCHGFSFPkuBXs5md8=)
                          2: 15qg7jnuR170dIKjd6OzjguEeTM.roa (hash: DS609YLThLt1NKuh2BCSkoQXm86Ct4DVxPTIZ5GafZg=)
                          3: 3QjnnSj1hQKsP-1ylInbcvLdMk0.roa (hash: zz3CyqKYwm0d17bXCrPvu/U3EBbv/3gWWRjOkuZzlt4=)
                          4: 7XLY1mk3sVQTp8lPI_XekeZ6xmA.roa (hash: 2JK9dyjgn7WMvsSZBWNkYPGkVFn8sDtCyJU60ov12cg=)
                          5: 8jyJkG0cHiEgO53L0BQEbStP710.roa (hash: nrp8TB0+XKfMkXKMWT/I9qOg7u9dET21trlCQmUVIlk=)
                          6: 9XyqkNLr-mevA3UmIbH9TrO68xg.roa (hash: VGU54+8uXoyWHYz12f4S6IrUngFaTSMoSSIVdDdsuac=)
                          7: Asho6Lt9UFNkMNTZHrtDar00MrI.roa (hash: AbFTamjmE6I3tFRcII5LYb549HZWVDdBi+RZkFFJbZQ=)
                          8: BT8p-L77CGXCV9vBdtuVoPlh_sI.roa (hash: 7hjpAyNp1rCCI61PZcpjXBgPTONPGoNeDskhmr8KqPU=)
                          9: CYfA2djZ-zBbRadgswdiFQKo1iM.roa (hash: ueWFdLpx55FZEaLakBKBCKMy6P4RNOpnuNVyD6XgsIE=)
                          10: Ev7J1skRttFcJ8IRy-HPPiyVtFk.roa (hash: UvH5R+zSkpY4/3hm6aApKU8hh6CIxf+bWBFwJ67tWKk=)
                          11: F2PLeUANNpspMSr8eJYmZ7NekGc.roa (hash: ik3fXJneDZoA5uFWGdQDNmEUuBPol2zqeTpdwLY8KLQ=)
                          12: GHohaZ6qQHXebmxSLUPTnfYmkH4.roa (hash: 7AVxkcbvsizdbMhqKuZ1Q0LZ8izbAd/QOE8haKkJG+Q=)
                          13: HES4Nxn9cJqassutKS6TwNOuBXc.roa (hash: 17g3MzTbU1Bj72rJWmGooVFBFwQHP5SPNLcCVhLoP0Q=)
                          14: INXaSaWJYoYCwcnXubjE5R50sdw.roa (hash: NBnhZnaFuebxUQlhx9RHTAqqeKqnbIp63z1KIrKvO8E=)
                          15: IZLTmqwMCwHAsgacnkhFsSfV154.roa (hash: L1MwWKG3ICZNjOTbGQQTZQWNXVl/NE/sRNBLKaBSM7M=)
                          16: JuKV-1EqJmhibO4oDxSe5apZvow.roa (hash: HyPk849xXtFyEg26Rf8iA1Jad8WNBopJtcQi23GcWZs=)
                          17: K_tZh5hwaL_P9EXtRbfXDYPxqlM.roa (hash: 3yTv+IdZIBisdHU1pRHHfhUUYdkASqWorON+ZRsi/M4=)
                          18: MH9f4nQKK23kw3CdKWQRWzyWfaE.crl (hash: HaMbUXbB3wII0JE/D2jUGwFkEpI4wfRYqmUoA1iN/GU=)
                          19: MWxJmS0pRLVZE6EDmf2FTThEfaw.roa (hash: T6wlEzjJICKYZC1Wj6jNpFSe2I8+CP2jriIYGIRSaXo=)
                          20: P6I4LIe2olUf3NjJXkfLNSBas94.roa (hash: Hv9k3pAhVSyxosbAH7guzz2BgWc0lXLc60uuV+niuQE=)
                          21: SBT7n6aYstIWvSOzaQMQYt-pzkc.roa (hash: mZAvl3m3azR19U5DbBz+2IhcP8WG9YnifBbiH63uBF8=)
                          22: T88hGFTPP89gz5ghn9t50LrGfrs.roa (hash: e9eQ0tq+mU/HHAkoWAn3Gcs0kFuruauTIL/FEV76kq4=)
                          23: VVGaZzzbQj6Sfm0ovPyC_oLs-B0.roa (hash: VYjSvTasRZ6H/B8SjKR33CHEm9ZrkDISPWwSsnDl/dI=)
                          24: WDKJrg-r-YLZBgDdeo9-9FUripQ.roa (hash: aDaS0bswlZA0YEs3tj575Uvt8fjAdHkB26zQ1pZ8Qio=)
                          25: YveZ-RhuAtNzmPQjob_Nrtt17n8.roa (hash: LgN8vB4iddrvQtRnMutlS61UmEw4qglDMWCuLZUvQUs=)
                          26: a0cjBqxlKDEfkReE5_XQHoVTicw.roa (hash: igGzFAQsr5tupcD11Py6TMUzp0+Vh+1as5ldw2Bmkyc=)
                          27: aDojIrdnZeJN1-3vwkIJmjOknLU.roa (hash: 3PjkTD/irKx2kOykKRsXjewpJnXbl07PPP00ffpmH/Y=)
                          28: cE9bE0DbBFiJtgFp5l_L4EmE-C8.roa (hash: wrhJ7rIsl0rYMGwnyUcqPv7K1lDPs4dvqvP8LI7lQP4=)
                          29: eU9DpB9WG3VMaUYxRnssLSSPOBg.roa (hash: eC27puyGDsbNTcoSFkgVMARUWvVloovfdYC8qKeuXNA=)
                          30: i5bJ_HA73cQOL37JMgVYntaR11M.roa (hash: Y21nVq7MxKyPBbqpvixN288xuuzVKkROgO8AJccp6sk=)
                          31: kfmPdwWjBshMBMEZFeRRjN7qA9Q.roa (hash: EFjJIWaiUPbAlU4mHg0x/o0uPDtVekPGiOeV7pjCFlA=)
                          32: l1Ly9C_3G_-C_voxfMpgPOAp5Zc.roa (hash: yKN4xaGgWyv6hCtswgrTXvsxw1iCslnDDfNwMenixFo=)
                          33: mdQips-eFeq5ObQ7sJg2_yVld28.roa (hash: FqBc08l9ffHFv5WXGoAnuz3Qp7ChLKbEwdUFznNGOGs=)
                          34: mp4016q5-g0c--TNNsUS4DpPe8Y.roa (hash: r7sMc9zwEAhIKkOnr1pg2Q2W/fohAEyrMGF3/f2OI2w=)
                          35: pyENSwNXacYp-GSA6zHg15BohmI.roa (hash: 4cnbjDmyqOXWh6qhAgAueyS1YaZXTsmFfg4+/hjotYw=)
                          36: uzjizYh2Y8ohoxQbZqk1JQj3hdc.roa (hash: DNdh4gCZn6kHB5Yk86TA3cwjcrUqHnRkRc7jiNlA95g=)
                          37: weqeyiOHVsou7kz948_1DCWId6I.roa (hash: aB9gPT/+PDZLfO60AeZLeSqijJQhMvBRdoYXXLGCW/E=)
                          38: x8wP9aFLF72un0CMfOv-C_sQ3q0.roa (hash: vsEUpnd+n36nagq3NxTjUu5muEEb3q82niuWfK+FG78=)
                          39: yRMx67NEg2-zEMiewi4j3QkHYss.roa (hash: cNHa6Dg3tM7/S8NhUrYWbCcVZbXKW0D2QmYLIqwbqL8=)
                          40: zPM9GfHy98U9zH-SAMVAO4Qy8g8.roa (hash: sclq9MeDF6Eg9iMO+MrAmUbc7KUVL5uYY+V0a2aDxXk=)
                          41: zhOP3lvrhLmtbsg36PvyJ85A__E.roa (hash: sZEtem4CIZlHTDCbW362jtQcMOQNtmEcK1gF38QKOdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:76:90:7d:f3:26:70:df:76:bc:f6:c2:87:1e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Nov 22 22:00:56 2024 GMT
            Not After : Nov 23 22:00:56 2024 GMT
        Subject: CN=4d0230897f5b4b5c9c332334e4583290c6ae5f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:5c:4f:ea:ee:63:67:2a:2a:01:6d:73:a6:
                    f8:8a:46:8d:c3:97:5b:c4:41:20:84:f8:f5:0b:af:
                    a8:f6:69:08:27:ad:7e:65:a0:48:29:5c:db:21:ab:
                    e7:b3:52:e0:b7:64:cb:25:a3:d5:7c:55:a4:ce:f8:
                    f7:68:f6:5d:e1:3f:d0:d2:05:d9:d1:61:4d:bd:49:
                    97:ce:71:2a:b1:1d:aa:9b:15:c2:71:73:cd:36:fe:
                    41:1a:7f:b3:9c:cf:57:12:9d:73:39:66:a8:62:7a:
                    94:51:dd:2a:da:56:2a:9d:b7:c1:78:c7:78:43:4b:
                    5f:05:31:89:14:2c:6d:46:86:9e:b9:b9:0b:00:d1:
                    66:67:e7:5f:20:d2:7f:9f:79:58:73:d1:c4:ca:c0:
                    88:38:bb:89:bb:8e:e6:16:2f:24:4a:57:2b:cc:52:
                    80:55:02:a2:16:0d:03:34:9f:1d:a9:5e:00:cf:d5:
                    7c:2e:04:cf:31:4b:07:24:c8:7a:f7:9c:10:5e:28:
                    79:c3:6f:3f:94:01:7d:6a:e2:07:30:4c:48:4d:e5:
                    41:27:0e:8b:e8:2e:2c:1c:50:51:86:a4:73:b1:e0:
                    f8:42:0f:6c:ff:34:9e:9d:19:dc:00:a9:b6:c1:46:
                    fb:9d:15:cb:10:9d:6e:48:bc:7a:8d:8e:95:4d:91:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:02:30:89:7F:5B:4B:5C:9C:33:23:34:E4:58:32:90:C6:AE:5F:82
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bb:21:01:26:dc:56:e6:a5:2f:0d:01:4f:2a:83:7b:e1:b9:
         c8:eb:32:ed:89:64:fe:2a:d4:68:8e:ed:78:79:aa:a4:f2:16:
         97:cc:dc:90:41:e1:80:81:c1:93:0a:a9:43:1a:b6:5e:20:d3:
         9d:e4:1b:0a:3d:4b:d1:04:93:05:d9:57:b9:aa:ae:6c:4e:55:
         be:a1:64:5f:45:07:78:22:ba:0b:fa:a4:14:39:01:a4:c6:89:
         41:61:7f:93:96:8f:5f:97:5f:45:5f:42:99:65:5c:84:2f:10:
         e9:69:57:a7:dc:bf:53:6c:01:87:39:cc:84:77:0b:ad:69:54:
         fa:66:93:43:7f:c4:db:10:41:84:56:cc:52:c7:36:95:58:94:
         39:c7:67:14:85:20:41:bc:c0:ef:c5:76:5a:9f:a5:ab:05:bf:
         c0:ff:58:55:2e:a3:1b:c6:f4:b1:68:1e:29:00:84:d3:30:5e:
         0f:f5:2a:b9:00:af:8a:30:3e:a4:07:ea:d7:f7:3e:94:84:27:
         45:6e:de:bb:0f:ff:68:66:d2:81:b4:3a:43:fa:6e:34:03:e1:
         fa:a8:20:fd:ac:f2:30:2d:1c:c3:3b:6d:ef:96:f5:5a:e2:8a:
         9a:b7:c1:29:d0:5b:90:23:02:be:9f:48:0b:fd:f8:c9:60:ad:
         ba:8a:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----