Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File:                     crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier:          4O0f6dnUHdMXPGINGv3JoY5c60vPDE80irFn+PosfJY=
Subject key identifier:   F0:3A:27:1A:72:15:FC:E9:12:0E:B1:9A:F3:5A:B7:78:03:47:8A:DB
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer:       /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial:       018F576FB47627E55DA9396D6E210DC5B950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number:          11CB
Signing time:             Wed 08 May 2024 09:01:29 +0000
Manifest this update:     Wed 08 May 2024 09:01:29 +0000
Manifest next update:     Thu 09 May 2024 09:01:29 +0000
Files and hashes:         1: 38op26Ug3xTUscX891usud_9BzU.roa (hash: ogSXZZRo/rmFLLtLpbDS2WCTQGG5mp5q4uazkbb30pY=)
                          2: 4M9yg_dsm1v4BydHszIDPWrsjbA.roa (hash: 1cCwWr5q98F1kJnZXlj6cY8mYpj2DUdYWrPng07jaNo=)
                          3: 4Sn5rMJFzBRKO-muU43nfawra2E.roa (hash: BpTzuIAlTWbDuYvLW2Z7bfCLkKNBqK4FLOwlJYoxt3w=)
                          4: 5USrZDcaCRqXDZy4lWignjNtBd0.roa (hash: PrDLaOOq7R9Y8YKU3xl9915ZspB1HIL0Uw6Wt+PDsFo=)
                          5: 8HrJMj-3EwbTe5PAP7uaZzeYyQs.roa (hash: 1JYvv4Rir5akvH5mwtJdbVQ2jo8/LZ2rB9ucMwrxWao=)
                          6: 9Bq1A3YekyN8lQDEf8OOmkoUlTI.roa (hash: 9kJqnP4VQaxpMNP19ssVbLQqfGICCPjiShgpFFSQxEI=)
                          7: CwqBrRz-50amkrfRz4hWAo630tw.roa (hash: eBGprO0thuWZly2K4h3SRyNtLFQSc/g3o29mSUBUkMg=)
                          8: EryKrNhV2BVs9wnUgOovwO3VgNY.roa (hash: I+Tt8UGh10uukOo+fZMNFIj+7OE5oxTZ9+6lX0afsVY=)
                          9: GYBtBjzFTOXOycrTeTTfuH5bCiI.roa (hash: mB9e5geLld4q93zB8sAWowhK/VAm4MOzXMOSJJcglQg=)
                          10: J9JFcTug4aDbEAaCh_WNoXIc_mk.roa (hash: VXNdRLCMnNLcYGgo+Bmet9LQMcm6lKgrD8I4GWqkDwQ=)
                          11: MFJP6kljlBi2CgU-HHfOuiv2eiw.roa (hash: ZZ6HxlDIwyAB1Ba4lXIArpNhGTXHZYR4j/CZahTRpWw=)
                          12: NadwFsH7DnF--Z7YKqXLOkWyTLw.roa (hash: 0kMqklkMrYUHwed3xIJqSPTLutbTM31A4r3BRvQLS40=)
                          13: PfdeupmmKQ_cfAYYgRHnKLdOLsE.roa (hash: KORTmSK16kj5G/nFrBwLA6aHfGD2F7A5Ud3Mjsm/zSI=)
                          14: QFs_s0Gk8PtY4HDJ9d56hio_YiI.roa (hash: TerotV7LIESVp62SjZx09wuo2doDPH+J6W/0QJDwsTo=)
                          15: QvsA-s2whxkOVzmYHn_bm1UTWH0.roa (hash: iG6mzeAvCUYAv2UGDCbzJCE1sSuvZz+Ko/v7jBzxDHA=)
                          16: RDTGvX0IjzIDHadAXQQcDmxtYaA.roa (hash: CNmh2R3zz8Ztcf2UalIXYdHE/K14cMxtDHkw8Cp38RU=)
                          17: SXiy2k6puSinXEh0377cBqpup18.roa (hash: zaI3yHbXWRKQeAAOKXGw4SQg2hJ8SBUTGFNLq2n4tV8=)
                          18: VFz2cnXSJCcHU5Qf5iBO5VHCB9U.roa (hash: 2O9hLw0zcozr1s0ldUqZfVGdyOExpaTT1Ss8y8wd0Gc=)
                          19: Wm3dC_FyJmD6CVkXd4WKuoX-bOI.roa (hash: jIr4zaGZA04aBiHgPBng3Hx85KnMB0l3Yuubg1SG59c=)
                          20: ZvxiRYSIFBVFPup1qmysEjVY4p8.roa (hash: Asr0DLp61S5RmixULZWsypPbegtk4hGBHxzhVqKyMzA=)
                          21: ZzyodQ_t-gkqMp1qIj5zmmtQmNE.roa (hash: CLsGQ9lVCDMndJ3ZfQGxegEdUaAwtfvTsDOx1a9Ba+Q=)
                          22: _oTJ1kaOzR-KubalwdjyAOI1ib8.roa (hash: L3CKLqeH5L8NTveenV7ZuYMtXciQAKolCXYgZucvInE=)
                          23: aRJHTMl7b3B3myknXCXzXNJVj-0.roa (hash: DBizTHqgjgCok7B0ROhAi/+azefmC7Rl8i5iHlodNFU=)
                          24: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: riFzQbVlmIs1gRtjD/bmq7JrPxNJyghAUnomC2wkm9s=)
                          25: ghuqRfYijSqDy6vvmfL30Nn92e8.roa (hash: KhIYd7KFVuhhPrTQrQQd2vSORMH9DNKUFVo9ZPyNLHk=)
                          26: mqnhS2G6f9cuAHJGo_YWrriL86g.roa (hash: 4HKZzljGfF+4Oqx/OvhnvmG7ASXJCuY2xLPr/n2qm/U=)
                          27: r0LRX32UNIPoeB9T8-jyrQqFmuE.roa (hash: Epzs9HmV4ZZp1D1yZmMFQ2lMH1d8x3qIYT2mWXlbOyI=)
                          28: sFHh2Dll6KVCk0DaDMJpBcdAZj4.roa (hash: kmtQEfHolRUpUiNiYSUGpNicWpudkLkSJbrZYLebBHg=)
                          29: w_8_xF9VWs_r2Krpl-1PCEYD450.roa (hash: +oml7IUvEh89KNgXJdwh5oQmZF1E6hMbzG/4m8MdGaw=)
                          30: xl8SWKLJPy2SIiOudBw6HhOnpAE.roa (hash: e+PlLjmserIJkByAQPPopBB3qpUHryAFoxi4Yp38U2k=)
                          31: zEAumq5hcKcqxLAYH0m3FCyGoKY.roa (hash: +tYFJLvhB9DlFgH6px3IpGngCVja2uddRJh9U0C8ICs=)
                          32: zlamTACZtcuy7qN_hwNeewkha-c.roa (hash: 6b5E7XDhrcjPM+jaAXtYgCgEoL4pKHLY0vvJ7DhuL9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:6f:b4:76:27:e5:5d:a9:39:6d:6e:21:0d:c5:b9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Validity
            Not Before: May  8 09:01:29 2024 GMT
            Not After : May  9 09:01:29 2024 GMT
        Subject: CN=f03a271a7215fce9120eb19af35ab77803478adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:75:37:d5:14:ed:34:50:59:01:62:df:32:
                    f2:b5:dd:c5:73:2e:e8:f8:37:66:bd:37:18:d4:7e:
                    ef:04:82:ec:90:77:7c:24:59:17:78:48:66:12:22:
                    73:9e:e7:36:5e:c1:80:c9:b4:a8:b4:b6:6c:3a:c6:
                    da:c7:ea:cd:59:5b:23:81:66:6d:de:06:10:54:b7:
                    9e:d7:50:72:75:cd:97:e6:8d:4e:fb:09:10:54:de:
                    1d:01:54:29:6d:bd:76:e0:68:0a:8b:95:60:bb:36:
                    48:73:11:83:0a:27:c2:2b:95:07:3a:a6:c1:3b:81:
                    1a:c0:9c:8f:88:8b:d5:4b:be:af:75:b9:7b:32:67:
                    29:15:56:3d:15:a0:38:29:24:79:43:da:b8:fa:25:
                    b2:f8:4d:7a:9a:30:c9:dd:c3:ef:86:a0:39:88:47:
                    60:af:83:52:c8:d2:63:11:a3:03:26:b9:72:1e:70:
                    78:b5:45:14:14:2c:0c:d2:1d:8b:59:1f:a7:73:40:
                    b6:a4:be:cd:6e:a1:f8:58:44:3d:bd:c4:94:c6:7f:
                    c7:a4:40:c6:d5:da:0e:8e:40:fe:cc:e8:a9:3a:95:
                    41:4a:17:a4:d4:c0:f3:5b:02:1f:5f:8d:6c:aa:da:
                    27:09:ff:df:2d:b3:63:8b:a2:fa:13:4f:4f:b8:4e:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3A:27:1A:72:15:FC:E9:12:0E:B1:9A:F3:5A:B7:78:03:47:8A:DB
            X509v3 Authority Key Identifier:
                keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:c8:b2:23:62:bf:eb:8d:0e:c6:1f:e9:9c:21:3c:05:bc:
         b9:7e:03:c3:d8:d4:b9:38:5d:46:62:f9:2e:cf:e7:b5:c7:50:
         e7:d4:18:79:89:55:45:43:98:3b:27:72:41:e7:b6:ad:cd:33:
         7e:bf:fd:8a:29:95:aa:b1:f6:99:a1:55:eb:ba:77:2e:cd:c8:
         8c:0d:61:28:59:99:42:53:0d:21:f4:b2:11:8f:d9:17:1b:5c:
         1c:ff:01:c8:dd:39:15:a3:be:d6:d5:86:e8:d3:49:cc:81:2a:
         47:57:94:94:2a:61:52:70:bd:9c:e1:08:94:5c:ee:14:a7:3e:
         be:9b:35:a9:32:30:bd:0f:62:cb:ac:54:02:9a:72:d0:7a:0b:
         c8:64:09:4d:d4:fe:06:1b:c5:f5:5f:ea:25:e7:36:39:49:b8:
         24:63:5c:6d:e7:d3:32:22:09:89:4a:23:e6:5d:41:e5:b0:ae:
         88:eb:a9:48:a6:26:c3:3f:de:9c:80:bc:3f:07:14:1d:0a:a1:
         19:dd:82:40:d8:ad:88:0a:11:2c:01:aa:a7:70:8c:10:30:76:
         a6:3f:c9:c4:5f:6e:cf:76:dc:b9:06:61:96:70:71:29:cb:db:
         27:6c:9c:c1:71:8f:3c:f6:6b:97:bc:20:40:5c:b4:6e:e2:ae:
         6c:34:57:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Xb7R2J+VdqTltbiENxblQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwNTA4MDkwMTI5WhcNMjQwNTA5MDkwMTI5WjAzMTEwLwYDVQQD
EyhmMDNhMjcxYTcyMTVmY2U5MTIwZWIxOWFmMzVhYjc3ODAzNDc4YWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Z1N9UU7TRQWQFi3zLytd3Fcy7o
+DdmvTcY1H7vBILskHd8JFkXeEhmEiJznuc2XsGAybSotLZsOsbax+rNWVsjgWZt
3gYQVLee11Bydc2X5o1O+wkQVN4dAVQpbb124GgKi5VguzZIcxGDCifCK5UHOqbB
O4EawJyPiIvVS76vdbl7MmcpFVY9FaA4KSR5Q9q4+iWy+E16mjDJ3cPvhqA5iEdg
r4NSyNJjEaMDJrlyHnB4tUUUFCwM0h2LWR+nc0C2pL7NbqH4WEQ9vcSUxn/HpEDG
1doOjkD+zOipOpVBShek1MDzWwIfX41sqtonCf/fLbNji6L6E09PuE7RFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA6JxpyFfzpEg6xmvNat3gDR4rbMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQi/IsiNi
v+uNDsYf6ZwhPAW8uX4Dw9jUuThdRmL5Ls/ntcdQ59QYeYlVRUOYOydyQee2rc0z
fr/9iimVqrH2maFV67p3Ls3IjA1hKFmZQlMNIfSyEY/ZFxtcHP8ByN05FaO+1tWG
6NNJzIEqR1eUlCphUnC9nOEIlFzuFKc+vps1qTIwvQ9iy6xUAppy0HoLyGQJTdT+
BhvF9V/qJec2OUm4JGNcbefTMiIJiUoj5l1B5bCuiOupSKYmwz/enIC8PwcUHQqh
Gd2CQNitiAoRLAGqp3CMEDB2pj/JxF9uz3bcuQZhlnBxKcvbJ2ycwXGPPPZrl7wg
QFy0buKubDRX5Q==
-----END CERTIFICATE-----
Generated at Wed May 8 11:21:10 2024 by rpki-client on console-fra.rpki-client.org