Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
File:                     ffEy3xPkvlPYJQyMSEICZO72wUw.mft (raw, json)
Hash identifier:          mSrDjutOpo2pKLAN3lICrczsBwfj9K/+3BwoXnPtiDA=
Subject key identifier:   60:5E:47:8E:EF:12:C2:7D:15:D9:9E:89:4E:04:EE:29:70:E2:EB:4D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       019355E486DBA0642CB113A36716A1FB55FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
Manifest number:          139D
Signing time:             Fri 22 Nov 2024 22:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:00 +0000
Files and hashes:         1: 05K1cQvbrJIg1duqgokCfFe7oww.roa (hash: GXOG4Vba0ses+/HOddlBb7vjvh0yzjZ3uuv3WiZKQ8E=)
                          2: 0_v3KPV3VXC2qxFSZpJE6VO67_4.roa (hash: IZXVR49yqsc3yTn8BZ9XR5TLgn2GE2UrLt9exwzsq/o=)
                          3: 1-CU_sVeHKK4yEFclKnay4ZZuhMI.roa (hash: lF+uJ0CJkXNjOyrOMuIw05O1L1+cVi5q0bgO+94alfo=)
                          4: 2zV_ea94pAzBetHTuu9Dly46S34.roa (hash: 6eYpiesMeSHeh3ORVKxpdbSkwTWmOvcHweO8pjBy3ug=)
                          5: 3udgh7II_50YBleEf6fkE6-EKpw.roa (hash: OrL+N1GjNTiKDY1fJY420WL+rO1dVX6qpnS9nuDKZt4=)
                          6: 4iHRyEi4oML9qF8_4SWac0QPN7E.roa (hash: rRiJg8iO1A+UhEODSfZ94GbymzhOMFniuGiiIyh2vxk=)
                          7: 7Qn70K6sKN07RLab4rdz2Df-CNQ.roa (hash: AJyttIS04Ok58Lx6NF0ts2j3z/4shXqx2wbtnj8YMqw=)
                          8: 9HOZwuwciw4t4YVtyQK7BR_iy9E.roa (hash: Qvmk0Stc8bG1b+jg+A3GVvi14qOFkaTOjZlMXxStHwY=)
                          9: AUAIwYcf6czzjIyur-Zi-9C6nAc.roa (hash: 0KyzJ5+f7LXHxb1EzUQ83pWlC0FKH+QqHGyRhp6bYiI=)
                          10: Bp-wq2iZMB4jZelkyrY6dwkJTqk.roa (hash: 3IfnWFaO0MuqSCzy4RC8igmjorFrbmiPsAGGotBGdG8=)
                          11: CuU16V8Dhahw5mBm_Ou9Bv6JCHE.roa (hash: EvsI6YtxgVvk7rzVpg8PjvIe1I6azHUnsRWLOUwtt/s=)
                          12: I7WPke6phqGy60alAJ7fN3_qw-0.roa (hash: A6OeYnnQGnAqRQSppNNrqbdU/WQ/36Zx5jlnXPXp6+s=)
                          13: K_3IVe5L0tXIV163oDqL8Y3B5hI.roa (hash: CPaqOfLgWpKs9U+riNxntjiUGDTOMlckxg1No45/fvo=)
                          14: NWwM2glIy9wqh-AWA1u9n4EaEQ8.roa (hash: Zj8hQlXepkEYozvfvVz/575G0zFuFL36npISXMVQc4g=)
                          15: OhTT53wuLcFTwIrc0j9lXaa6yTc.roa (hash: kmsud4V05HXBR8CPyg9lsAJH3hgRknXObHXEBzlV/Lg=)
                          16: QcYGkUZQy1qA6g_5B02vFTvPF0Y.roa (hash: Dpc9owQam5QRzvUv5gtycFjm/ejDcxRmcYrwHR0hX0c=)
                          17: SOp32_XkLV7lNpMmoJDecdFvUZM.roa (hash: qhRi1D9r1Ca6TDL80mckaNm9oFIu3svreiREzP2MD8c=)
                          18: TDEYvJXOLiDsw60g0gNUG0UAdGE.roa (hash: W/AoG5Cfi91eepgJT0W4OqDF+v5whCTi//VFkYRRzdk=)
                          19: X8ojefN1Ia01LicnfI2KyYPoezo.roa (hash: u+slpedS8WzqL5PGpjY/g9RNBpjdTtQ1pXqyCMtIDiA=)
                          20: XPgfv-ujqrEeZt8LZn_h273T0gY.roa (hash: ZIy4Lm/Kp5Eph83IAUCFvoDtZu1Tp/nPXqU2NKz2wyc=)
                          21: YNKKTHLSMgVIbtrarTfYIdcfgGk.roa (hash: O+x18o3vVj/b3rNVFHYtiPoAqnmmxQlnhXJmiaaIDsY=)
                          22: _-a2uCBtXNLRkYZNlUKgwy_SbZU.roa (hash: kdaRcCnY9+6a7aMKO3v6oSd2SOzX+DrYAJlaq1mXU9Y=)
                          23: aXyBCyDzTxopE8BUQQ4oeX2Ohi4.roa (hash: xK6JzIWIvQO35XXB5Xfwe++PsL3AqOo9xOzrjReAysc=)
                          24: cgwOYMZbMiIXty70J3dB3CuWWMc.roa (hash: yUvS3UBOL6gsQTpFHR5b2+KGwYp2Sj/lAv+PWZ1GuqE=)
                          25: dF1pgPQgZvs-7XHrFzpRmWd_5Q0.roa (hash: aXFcSf2sl+R1kOTNV6O5fS6nRsNyJ9CvCwkgkmhs4+w=)
                          26: fHgqkvwnGW62xi-NhIh58vZFG1s.roa (hash: YDrkf+Po1hvs0G3SOFumLMTYn0KPY8UEC/6PRv0ULtk=)
                          27: fPU9lcrebTQARYlqEE8XbKXDr_8.roa (hash: rvdpvlS5ATfv8h5/tVxotcY2undopd3YSmoEug4Zgyw=)
                          28: ffEy3xPkvlPYJQyMSEICZO72wUw.crl (hash: AM5aO9349nEx5JM6PzZnHjkXFt5V45vqUAU+mOR6MoI=)
                          29: gx6HDqgLG3lsGot5QgBKAc0p7wo.roa (hash: s7DVwxCOoKaLyttboBrqd1ICDVg0L3+LwjtqQF1ndLg=)
                          30: h2j9vtSlQ7YfKQQ0U_1LuTXMdrg.roa (hash: 8kHWvhzWZEJndm1Q3iaTlRTIyR6Nd3QMGXqpS/eUaNU=)
                          31: h8lbxpX3XJJE6EndWXLR3kYQHPM.roa (hash: WI6ZFSW+U0slah/K2+zq+xAvb0eTDKCte5Q3GVSEmss=)
                          32: i5tcN0wINtPntcKE99CAitvnCP0.roa (hash: 6ZzsKJlf9VidRQsmrKmmLD0XkrNB8JLUn7Rf8agzoOs=)
                          33: iSjKDaY4PMW8nzIwlVjBAKhlTu0.roa (hash: rQaZ1JiSO6L46UOC5kHRygGwbM1F7pLyZ3uuttOKEP4=)
                          34: ioO7ERl2REXw9trMFmGfNfT3A_M.roa (hash: wv2DodFtd2kthehJlXU1W1kDEP+4WysPwI1Id1rLTy0=)
                          35: jUFgdBX5rD3MENENkgXqm3SJhuY.roa (hash: EaGUZevQmOD82G6c0ayf5iJgSzABS2sIBnSZQ3UMVbw=)
                          36: jmBqW6-9KltgNcwW4OWEOWsBjig.roa (hash: Ooz4jtTJm6ARx8GQABljeoxm6nWfk0Uoydd5VlF/bO4=)
                          37: lzkstto_3MMLUoiNn5WwGTJX7rg.roa (hash: FBck5t3XMNajnroy9EeH8CG8HANfXdlvXuyRD9cnh0U=)
                          38: mloZgsTp31pDJeebtyv94uSwJ6c.roa (hash: m0nnlXwCJF4p9t73u7gvP2dRRim8pPRt3OaJSN1z56U=)
                          39: qCTZs4pkJ3I9_nP1JQYovfdD8Mg.roa (hash: fgcqVZTm9wM2BGle2YZisMGnKfL1b8mMu13gbClm+Lw=)
                          40: qTz8o5q6RHvrllZV0ZRds49dgYY.roa (hash: TQXvuCy7cN+IOzB/rtqVP1gfd7HbrzoS2YS1T+aCETA=)
                          41: qgUV1e86XOOPBb9S_1Gq0NYoF2s.roa (hash: cCUFNwkfuzUlxd7LyRz0hwlC26S9VxYyUr/XDuNGrxA=)
                          42: tm75d7UHp23H7aoWpP-AQYgEFc4.roa (hash: TYFG7iqBZqiqL4SkaB+PZiwskzCiH+Zj0Oqa6Xlkyjs=)
                          43: u4awNQpZQiwWJzbtSZYtsKyAFko.roa (hash: /18DmacthD3MzpNmYdLGmgxV55gbyWg5PxnCn5m7bb4=)
                          44: uG7wRm1aGqhffKRDAdUE78H8Ero.roa (hash: P0lupswySQWleP6U7DAkVYJZ1Tt6KHhvX9K8kt1nIVc=)
                          45: uWKuw_5u-lDYO2qz3XrKdTikjN8.roa (hash: 6q0oBafwTTLALyUlrkYDTK42ajL0csBsE+jevpo8Ik8=)
                          46: wp5yZFoEMS2LH7lNimnTyji1WiQ.roa (hash: PysPhXOgy9wBf80Fio4f//IqEDvEXuOE3I/yLDwp+1A=)
                          47: y7YRDPN0jlqnV_gAPr_Bqa8exBs.roa (hash: hNECRBNccd4wnRI4b1O3TrsYIORRTrdFi56IXBvSFJg=)
                          48: yb18tdrYD8nLOGJ7_0rCLAvm8Z8.roa (hash: Vz60rZZ368/i00GQfmzLeZqsOnaqSolitLIThTcsr7U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:86:db:a0:64:2c:b1:13:a3:67:16:a1:fb:55:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Nov 22 22:01:00 2024 GMT
            Not After : Nov 23 22:01:00 2024 GMT
        Subject: CN=605e478eef12c27d15d99e894e04ee2970e2eb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:c4:19:0d:c9:10:72:94:41:2a:eb:c0:85:
                    d8:43:ee:6d:24:d1:2f:85:50:5c:d7:d7:e6:e6:66:
                    6d:0e:bf:d5:bd:90:d1:7a:fd:7b:a2:10:d1:27:eb:
                    9d:91:2f:4a:eb:ec:06:e6:15:5a:26:b5:c0:39:f4:
                    fa:31:4d:f1:65:e3:15:c8:72:c0:cc:9a:b9:a0:31:
                    78:f2:38:3d:2b:7f:20:14:b3:e7:42:10:70:cb:5e:
                    4b:af:7d:13:e8:cd:ef:6f:ca:99:1d:6d:82:51:de:
                    5e:29:14:c2:b9:e9:3f:63:61:b5:b4:f0:b4:67:cb:
                    ec:50:e2:90:07:eb:b8:0e:6a:44:05:13:2b:79:41:
                    6b:bb:c3:81:4e:8a:a9:00:5a:d7:e4:f5:97:3d:96:
                    76:29:c4:bb:39:8b:b2:ad:0c:d1:9d:eb:e8:6b:80:
                    7f:4d:c1:00:9d:ca:4a:55:d4:17:ef:ed:38:ef:b1:
                    9e:03:aa:7d:db:a4:fa:d1:7c:6f:2f:a0:89:59:d7:
                    d6:ba:fc:54:f2:24:be:1e:81:f6:f9:0d:71:3e:1b:
                    59:bc:f9:23:8a:1c:0a:be:e5:d9:4e:84:8e:2d:41:
                    3a:30:e5:02:b3:8c:92:2a:f2:ef:05:3e:70:c4:ba:
                    4a:5c:9f:9a:97:69:f6:10:0e:9f:b2:7b:64:e3:24:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5E:47:8E:EF:12:C2:7D:15:D9:9E:89:4E:04:EE:29:70:E2:EB:4D
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:b9:0b:2d:34:a5:61:90:75:51:16:0c:52:60:90:94:d1:
         52:62:51:a4:fe:27:4c:20:e9:ac:b1:ae:9e:c3:29:6d:e6:63:
         98:ea:fd:87:d1:fc:da:7d:32:2c:7e:52:1e:d0:98:14:16:73:
         ba:d5:6d:f1:ec:3d:25:c3:cd:50:be:16:45:3e:ab:b0:c4:29:
         d2:f2:56:94:7a:16:9d:b5:14:f8:f6:1d:69:79:6e:8a:ac:3b:
         eb:a9:18:02:21:a8:f7:53:31:df:f2:6d:1a:8a:be:4b:9d:17:
         06:d0:6c:61:ef:60:84:0e:ef:a5:2e:52:3d:13:23:89:76:56:
         52:c7:72:a2:7b:b1:a1:03:aa:5c:0b:0e:90:7a:a4:c3:b7:0e:
         0d:a3:26:25:9e:49:f3:3b:21:67:f4:49:b2:01:1a:d3:c9:a5:
         91:5a:87:80:d5:79:ed:b9:ed:68:bc:cd:b3:1d:ac:e3:9e:c2:
         be:95:39:03:fa:70:3a:44:5c:69:60:76:43:91:ae:b0:48:6d:
         c5:3a:93:ab:5d:bc:3b:e5:46:46:99:6c:f5:62:cb:98:c4:c3:
         1c:1a:ff:33:27:ff:3f:a6:83:78:aa:f0:02:d3:76:5d:b0:93:
         bd:e8:0c:93:09:e6:1a:99:24:ca:6b:e4:ea:b0:8f:2c:51:0c:
         8e:b7:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----