Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
File:                     Gspj3ySLet893QfowtPu3QLO-TM.mft (raw, json)
Hash identifier:          RPrROOeE3X8ehKvLn+SpCztx0AC07r6k0hDOF2w07zs=
Subject key identifier:   9E:94:58:3F:41:2A:73:77:E4:72:A5:C9:15:7A:5D:EA:3B:99:6B:1B
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       018F3AAEB4AC8FFF4D7C3B56CDFC24739B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
Manifest number:          1159
Signing time:             Thu 02 May 2024 19:01:18 +0000
Manifest this update:     Thu 02 May 2024 19:01:18 +0000
Manifest next update:     Fri 03 May 2024 19:01:18 +0000
Files and hashes:         1: 0OBxd8SFkIxwoixxbT6lyMz8dao.roa (hash: YS3pIOrJQ3JT1QMhjZ4nPaF87z4RzDIIazOX70uaOwI=)
                          2: 2BUHJKu9oiYpWufCjKmqrUKhHac.roa (hash: QSmIK+9NA7scuFctg21uF7/fqhghrehEg3EVmlhROGs=)
                          3: 3Wm2ORAuZy-MJVTC7E_n_J8fZ5U.roa (hash: sxEPcIj3WfBFUJMVTs2yjIzVT1Ak94puatI22k0+XT4=)
                          4: 3soqAOyD4tkoYZ9b3ULzUTC8Fjw.roa (hash: QTEAFJBQ/edsTWa18AAlwRx6LUpziZhCg4uxr7hjrZQ=)
                          5: 5Gsk8M6y6oeqBdfajNFr-_m_icg.roa (hash: EDn3xPyZllZVC0VyExUs+YbyW+n8VNYyZH+6E5upsrs=)
                          6: 5HqASf1cVS2Sg1t9mJUP8nDaNwY.roa (hash: xqV+ryG3h1+U00j562da6IRP6JDC0K+F5snkZ2co3rw=)
                          7: 5q8-y0aLZcrJtKQnqTBnqavEgdM.roa (hash: yPI1jyOJrP67JU0FmGdTvfkfoowgo85j99/sWIwg3Og=)
                          8: 8f8oLNRZd_mUIbLFPz8R601E5Qc.roa (hash: 3Ge1gZhcgGFultrkH/hNM66mioy08dRMJZ66KjYM2S8=)
                          9: 9HsEk_R2alFX3Sz2n__gX0Wc93k.roa (hash: c5QYgjNaVOFx/8Fvu2RBHqahaM2N2CxPM5byQKG6bcU=)
                          10: ABZQJf7mDAkYLxryaCtg0RWZaCI.roa (hash: /KuYonm5DZaQOzvHrbggq8k83H2JZU+Iu4gn++HBdI4=)
                          11: BEPls_IglJKia6MctKJFF42dBcQ.roa (hash: sdy4kAISvw3c2CNK9WBl4qYoT9uxsEy1dXycHnHXajw=)
                          12: BFV2iJrQGv7Rnzg_bQYS-99dOsQ.roa (hash: +O7HzzzynJg08fNnHcMJ7lS3fWLijD4pVpBtQkdQ86c=)
                          13: BOrjA6kqX_FPUoK3iCKQDxW62dw.roa (hash: ovAXeSd+KlHSNzpmGEn/SjSiw3A8o4WDMjvoRWoFQKo=)
                          14: C-ejcqONB8RKMh892EwclnAVQxc.roa (hash: d28W9YT8CdHc7KvPKUhOzqBI18ZAdF+IM3c910OPA1o=)
                          15: CAGsaOsw8xFwzyfMzpJrltup8rs.roa (hash: wFzGivLfxPWXK5bgGBKoyHpwKFsapu0Y3I5GqgtTeRA=)
                          16: CrGdpXgTuf02goHaQMdrHmgiMh4.roa (hash: P4Y2s6EvMiCe8UTex18Ec+BhXrpXezCR4RjM4YSsx88=)
                          17: E1Neqv8xQBn3BfjxhPqbUqbt6ro.roa (hash: 2wPXg13daF7F8Z4bsyuRpFpJw3G4DZfxFp93KZpk7Us=)
                          18: EUaiMtyAgaHdToIs5OLwzpTZp4Q.roa (hash: sLU5XJKxFlmt4ejZiXlkYG7KT9QAQEjoymC+klGd+Ds=)
                          19: FV5HW0YPDTk0HB7WSRipjCk4-u0.roa (hash: GcsN3KFBAxEdJOwETwZREtmxGDfLzK1ReNksTgLB+lU=)
                          20: Fnh83GP0yq6CkozT9XORnvIuRhQ.roa (hash: fgDE+bwGAyU78EyVU85Y6lJE6LjDXTSsKFraZ6OULz4=)
                          21: Gspj3ySLet893QfowtPu3QLO-TM.crl (hash: IANj3nUEiIi/D5Ss5b0cSVIv8hLgbtp7DT78NrGMAkQ=)
                          22: HCGOvR2IFIulqK7x_RgHm2WmwEQ.roa (hash: tzWBjKbSCsLvCvpRTVNPlcXjkVfyR5TXbLfCjtVdQbI=)
                          23: HoLKJkGi-zgPxRe7w4bMHFkGnSs.roa (hash: 4wK6QLppqp6fN1bB9p/fhdidUMNmKUaDzRuYXUeXd9w=)
                          24: I4bL5zED6vILjrtcNNx3JVmVd9w.roa (hash: xSIJmjkG9ikTU+otgJcs5IXqrRBKlN2PKmqaCw8O590=)
                          25: KygMgCHcEpkSAg_crkp4ls9iuFc.roa (hash: mu3mmJafU4/HwovE9xXT9qGYJXzHvMJ7aYnSklkm7zk=)
                          26: MJzeiOPgJVqrAeT-D1y760NP77w.roa (hash: xVATwNLkMDnLD8X1VU3mEXBAH+d6K02XA1q09b1x3fE=)
                          27: O9qlvy-VwoUkc_RQ_qbOLstzYu0.roa (hash: cC4el9zipuZ3IIgXA6O7j2IqDILghGyjnL9lo8J2XqA=)
                          28: PeTrHeuGWB3Z7F_-AIJNuI8JCyc.roa (hash: L46I0/FhGivzY2Y326cuo9B26y3hFKZ6vLMukQQKruo=)
                          29: UkAdJxyCfNL9aY4T84uNc_QYh3o.roa (hash: zLsX11fnE9IpjEE7fMTxMYkGQTUYYsWPJNglWFpf7aw=)
                          30: WiFJe8wPbpg0uNO73V6zaCK2sm0.roa (hash: 5RFDWSdds4IR+grrKrZRTHJu09xd19h0rvERqrUALk4=)
                          31: XGCUKSKtO8FN6maPH49WkH68fk4.roa (hash: myC1S7qEF0ZKtBAIhopACYxSjy86zTTyy9/bbWkgAv8=)
                          32: ZY7SlCamUxmlsSiu1-yWxMCHR3o.roa (hash: A5xMOzIe1AjUvxCorElkeGoAEpDpht043yw3rHeIubE=)
                          33: cwCecfKt_BvTHD2jxuf9e0-QM1U.roa (hash: VGPDXUzzojX2CQ5FT52WGLESVmy8d6NcOZH7YAreS1E=)
                          34: ekiSWTuvT1_BXdaMGPSlfya8tIA.roa (hash: 8ReFt2setwXyAus2R65oML27BHNFA2UVVIPXMeAN1Cg=)
                          35: eoLrjU8U5mjo-FyfFGhnnf8JTK4.roa (hash: wvAqaQbUaHrE9hvXqJlolfizZEUpD6sIGhJs8CFvggE=)
                          36: f7S3PdtsgxnRDt-yKh1AugqjdCk.roa (hash: 3mVFnha97DnBiStDLkVzjzI9vPU6Baalo/2VQXXIXWk=)
                          37: i7RvoOLJu5rliZhLiYLPSQJWqLA.roa (hash: ZkBIraxtLjJp7Shf7A0s9e3r+bccqRuL371i1wa7DiQ=)
                          38: i81-UM4-AbOmptLGLOIhMeQkbo0.roa (hash: DksSrgC1UkFVNMbC2CEmYOi3oKinX9V8cyDJyApmrBY=)
                          39: jIJBM_kDYo7AN0_cqm5tVLLvAjs.roa (hash: +cyliIGOSfIr4eWf/s+WxyJ72SnCOl2eMc0eZFqJ6E8=)
                          40: jNRKvQkC1gY10PQNu9YG5XaA1SQ.roa (hash: DOB3XEtSzS+SP4WnuCAGNajVy0L7as8KW2ghfMlD1ek=)
                          41: nxkmRl1JvtBqcOny_32HInB4rXs.roa (hash: e8GzGr9HqJ+AX5U3xmWgpqrLazirQxo0q7H7h43EkTU=)
                          42: pOQFD6olOCMpPVRX7mjtiQFRZ1g.roa (hash: gitoUt2WUl4civIGZzyXtaqZoCK5P6tEdzl8L//nUyg=)
                          43: sbtrBI7x1NJqUM2_PI34m-6dQ1w.roa (hash: hd19p8OgY0lTceAvjsmGJYSYFdPWh0cVZ+1ByxLPyp8=)
                          44: ujm6qaXvtqa33WMkjYanDu1oAl0.roa (hash: y4GE8PJCSOdn4PWJFTrWel6wmZz7mnFbn0mokShc6F4=)
                          45: vU4fjWyLqeUa8NsKzAutKvzHro8.roa (hash: BFiwuaBg3U5tb7rvU9ZX4dDrWdawYz9WTpzLkXi1izE=)
                          46: vmgxE8WZfq3tcV5Dq0vRTDR6_Q4.roa (hash: qwvHnxHi1vLQu+kawNchF/PfejIFICvMNxXLEBZznh0=)
                          47: yuB8xS4ekLnmnd5IS56Mscfzgr4.roa (hash: 7scHuUZtMhJK9S6UjW8KPRWJq++juWIqOIx2IRP46Fw=)
                          48: zm2TqG_LFqBOOesJDWpY1JZBpiE.roa (hash: 1n+gyXugbh3ycdaMNHRWEgWT2TYRF/9/A2tq+nc3WyI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:b4:ac:8f:ff:4d:7c:3b:56:cd:fc:24:73:9b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: May  2 19:01:18 2024 GMT
            Not After : May  3 19:01:18 2024 GMT
        Subject: CN=9e94583f412a7377e472a5c9157a5dea3b996b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:74:82:6b:b6:d7:ff:38:1f:6d:4d:f9:d6:
                    06:8d:f0:98:f2:a7:1a:bb:73:52:10:2c:d5:f3:fb:
                    6e:ff:8e:55:ac:7f:26:11:3f:65:be:eb:65:28:f9:
                    07:d8:c7:35:bc:ee:3c:6c:10:60:8a:d2:f0:0b:25:
                    9b:63:6a:bb:94:89:3e:4a:1e:1b:79:8f:a0:aa:a5:
                    50:5b:25:77:0d:8e:2c:25:c6:f9:a6:fc:72:a5:8c:
                    07:42:3a:3c:85:5d:2b:62:d3:cf:b6:2b:3a:d0:97:
                    bb:9f:b4:c4:dd:b5:4c:5d:28:80:7c:18:6c:20:15:
                    d3:c4:ad:fb:24:41:00:b4:68:e2:b8:6f:e6:cc:69:
                    f3:f0:4a:3c:73:42:ec:be:14:02:39:84:b3:5e:25:
                    75:d7:3b:ad:02:4c:0b:f1:3a:f6:b0:77:37:72:d2:
                    e2:61:1f:96:fa:55:32:c2:01:fe:42:f0:21:d6:34:
                    13:48:d4:21:28:7e:a2:b8:e4:6c:66:3d:69:16:18:
                    75:3d:a0:e2:dd:59:fc:db:13:1c:80:d0:dc:f3:fb:
                    f6:ea:00:03:07:3d:88:32:d3:7e:0c:91:82:4c:31:
                    dc:ee:d0:fe:96:ce:5b:ae:5a:f8:27:01:fd:cf:4b:
                    e6:cd:ea:9c:8e:af:8a:78:70:6e:17:40:9a:0f:b7:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:58:3F:41:2A:73:77:E4:72:A5:C9:15:7A:5D:EA:3B:99:6B:1B
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:f5:9a:d2:34:57:b3:01:69:46:a5:ab:77:68:a1:47:df:
         de:cc:7c:ad:68:82:c2:53:be:d1:b6:50:e4:82:a0:76:41:5f:
         9d:3b:40:52:90:29:aa:3c:ba:ef:4f:31:72:85:75:5e:bb:ec:
         55:11:f4:fb:dd:48:a2:39:3b:ef:b9:db:0d:04:9f:ad:33:40:
         aa:c7:d2:58:14:7b:92:a7:cb:52:db:f3:7b:1c:93:56:ad:ea:
         87:5f:72:c7:45:94:58:9d:f7:9c:c5:36:e9:e0:35:a8:22:9a:
         16:f8:7e:b0:4b:a8:41:d1:86:50:39:07:d5:4c:21:56:e1:a9:
         1f:19:ab:9a:5a:80:16:54:13:78:e0:bb:4c:d5:89:0b:82:4e:
         8f:12:76:3f:58:2d:58:1b:4b:90:33:4d:16:33:17:5a:0d:a6:
         9c:13:08:40:d5:c5:c9:d3:26:b8:6b:95:98:6c:75:c6:f5:36:
         2a:5c:06:eb:66:c4:7f:e0:d8:78:63:72:b7:db:de:07:03:a3:
         14:16:96:c9:78:7c:fc:38:bd:0d:85:d0:e8:39:f2:db:8f:51:
         cc:a4:f4:bd:0a:e7:87:6e:c6:97:d3:7d:58:fa:f5:cc:80:33:
         5e:dc:57:f5:fa:66:35:44:05:e2:99:f9:94:33:d7:48:9d:c3:
         24:22:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:17:38 2024 by rpki-client on console-ams.rpki-client.org