Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
File:                     tCU8TyM86YR2ma5o7L9ddRSw-ts.mft (raw, json)
Hash identifier:          YBVyv1OLW2L+gFZhO3WfMhSpZ3gg1nXIeen7KlC5kqA=
Subject key identifier:   00:9A:B7:E1:54:1C:29:28:19:E4:32:21:70:07:E0:DF:D2:C0:84:DF
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018F170F1B4A8649E5344B618C775EA6A173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
Manifest number:          1174
Signing time:             Thu 25 Apr 2024 21:00:17 +0000
Manifest this update:     Thu 25 Apr 2024 21:00:17 +0000
Manifest next update:     Fri 26 Apr 2024 21:00:17 +0000
Files and hashes:         1: 0DcdSzskbvvrnDb0eVK9aLuF0E0.roa (hash: 1ND5dd6lvRwPd5CMasj5TcfRKZ95zTuF8uc7hK7qxYk=)
                          2: 1-sTGYdagkvzPjuSriqp_nUgDRKA.roa (hash: sQIjfJ8EHWHy+vbL0C9uoNym8oHIKFhTuf8fPaXwPtk=)
                          3: 1i_W-Sdh6oqWN1UdoLn81np-ang.roa (hash: 8nW5zHP+p59mGxPXAEh+eF7IzShcwZYQhcd3qAjrrZA=)
                          4: 3xg7CsKP2-0fLuzpgkT04Y8a-3M.roa (hash: aSCMjlfhkHwpXbd03pHjtnRNOVmzv+BP8vvKdf8a3nU=)
                          5: 4wcsnbuQg9lisLfF66Jln3tVgj0.roa (hash: hLnZVohBENwlvnzoaX/kvPxPY3BdcbOl80iXDJUvS+8=)
                          6: 6tWiJdFWQ3Y2HJrlgU2aBlnrAM0.roa (hash: eNg2BVuEhuWeohzsOiVz21dvtijl+jIwpCkNEEOtufY=)
                          7: 7AZyDQ9k9gGnG2MDQYhxAyN7P00.roa (hash: +Ud1wc1As7AoGp6+G2OAZajPuJtyOblQpBfWZz7lRdw=)
                          8: CTsLMxKtd4nTsrax3wxxXl6Gqw4.roa (hash: AdhlkssLcS2VcbBcvou/o1WZpGIeELsxaLqm4ZjfLio=)
                          9: D-yI77ti83IqbpODkRizmsORm0k.roa (hash: 0i3yTH37LxQtrr6zZb35VHrid54rCobMkOGDbafwOiw=)
                          10: DAVewJ6fOLeEu9jPqILsvQV7Gzs.roa (hash: MzHMRZZXK51G71Z4nznycsJBlhpmE2UaZ9yYlPdzfYc=)
                          11: Fa1CJ--zJYD73xJh_iOQtnXbllw.roa (hash: WO85CT2uE69tuHtBQAuqr7l7zwz529GfkWpeFP02VPo=)
                          12: Id5wc7K2k2BZ_lTwphWlmy3X_fk.roa (hash: F7U+X1N7IzdunJ8+jBr140/SI5ZhZIcFBwZ4YwFHkEE=)
                          13: LeZrfRWI0Pa-Z9NpikPOJXzHz00.roa (hash: Iyz/ACIwRduwA587+SUDNqy/vq7hHxyqxVynLaEuUn8=)
                          14: My4AjSIjL6XG2ko3xj8GECvD3q8.roa (hash: 936pUQx9uw/KBzn1BPdYkG0NDFD6BOsajwBE2iUyo2s=)
                          15: N3pN_uFg2H4dDlRphgNZhQI1xlo.roa (hash: SBbDdiUDiekX6U4DljER1TpBwkpl8poq8kqr0w7bx08=)
                          16: NJdInHVRQG94cx6Vk8961T33AMI.roa (hash: fPUyiymgZ005RWxtA/N3uKKvkqGa1H7eB4XYg3eFCYw=)
                          17: NZ2lAQlurwxTjnE_j91IZ7K3fsQ.roa (hash: EYrIGPZXCNwVwWu9nm2DlCU0yGomEzDG6Oe3XuXtqvg=)
                          18: OXpiQQa6ioZPONtojB1BzHkqmqQ.roa (hash: 19/DNXzgQ8IXvYDUCJbXnvpo8mIWJboTjRNBRxFwbEA=)
                          19: PWSdE_c0-RlSucQACG2CEUu8Lr8.roa (hash: Fx1XmOCwg0ymss1Tt5oxYP8NlSI+OTEawb6zcMwSTd0=)
                          20: Q-Y1ZNDtu2Z5ZiXooLtg08Vs_bg.roa (hash: GXov3MZOWKn87Q3UdFr4SZXrB7X7crVXUjG2IMN1GpY=)
                          21: SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa (hash: qruLv7GbD/rjHFFTvxf0rS+ZwmlvivgrQTS6Bw6Bpfw=)
                          22: SYLEBNN-hxmvQWmMMRT9c5HFrKs.roa (hash: JtaTlFmtVAIU6aB3/LF0eB8bycPONMcAIZxJ0do7yzI=)
                          23: TV3O3dls5f5iPyU8D71GjDaxxsU.roa (hash: Fr8jaHi7kGjWhrDHyTY1ilkOU4SURPbfiywJuIlBtns=)
                          24: U4kjOAp2yc88l9uHqSe8JdJLFho.roa (hash: cGwq/X5HPrboJTZVACqizfBbgfAx0feHyEjWFex0G/A=)
                          25: W-Y2grS-B5ODpSaDIdfXUWE8gMA.roa (hash: iHnuZQJkI+y6tY8wOXoyGxpDVC8XZeLR8cEATzyZLRQ=)
                          26: WlXWy3G8gsSAY98ihrUQRIwx-wk.roa (hash: tolEd43SxzC2ORFt5HBUIBkKLYFZtqOHntP2syaLYOs=)
                          27: XLfaZoR-9t2KtGJhzABTrdiOdos.roa (hash: RFyTj3o4ZOFjRvvmEVLHf8KmO/w7/t5mRsY9fTzMdDA=)
                          28: XWAfMIrbHXEKOC2GaCDngDJTUFk.roa (hash: AvWAYYMnFGxb2SvfYDS3TPO+NBjNQxqKBLMg7PuEtyY=)
                          29: Xw48Hx4p4iDHQzbUcLv5syDBUAw.roa (hash: nZqjgMD6uCyLaTrxxje62RLUcHsepT9pAZrFp6r3bJg=)
                          30: _5L-PSEIDBPcMxHjH3njgGI3qug.roa (hash: YHVJ+ihk5IXL/87/OCwC3VOP8A/OfNo+PfVVHtFFOUQ=)
                          31: b0kRhhsd_ne9Iv92CoNoQZuY1Io.roa (hash: fvLos1F6m5DYw1J41j8sGsjmx8NGfFZ6xdHukjz5Oo0=)
                          32: cNo1bCGYMiDkItxsJNuy7nB5twU.roa (hash: SSNDQPvXkiqzrzPnH/lthWLwvUPA/OWFAGikxyJOauw=)
                          33: cZ1RrjnYo1sEt1boz5-T9Qy-oz4.roa (hash: Oqe/plm9DdvKEYyuorStDXgi1eva187WZQQOJcm/FaM=)
                          34: cvhQ4qmG5FAnAkcMsJMUBkLhAXQ.roa (hash: QDRB6HWlwCrgco/n6mgOcZGJW8/O5SU2QIV2J3mgOEg=)
                          35: d6ubA2lQHckYmvj-x8m0dB0QyQE.roa (hash: 0f/sB0sPR/6A6zXbkuFbUmXNSLlWIs2mILrHMGJ3ZEg=)
                          36: eA_GH8ZzEPqGhL3VzqFmdGIFm0U.roa (hash: HG7bo1vPf0hYjMPef0tyqu/1bKFTkqgh5gU9rP2dHag=)
                          37: fEkTt7B2Z94_GsoZ48IB1ZQKD7Q.roa (hash: 95elQxDB6dkna/tlq5eDmncNxeDUfkQLmKBHXiD/AeU=)
                          38: ffrDAfuXA8J-xVLNEbkZL6ZXn2k.roa (hash: Yw8ijT/qhV4OTq+EdI5mzef32+gknJ6JYZrlBh3JRKI=)
                          39: h-4JgoW8cePDQsr4Y41aL-HEhO4.roa (hash: Pf8UnqeWNljFosubAZhvmQsLJBI/RyuwenZii+62S08=)
                          40: i8nOPQaacnS7mhmAqAOBIPPAjxU.roa (hash: iVnV0ZBGMmsmIJzorQHb9QMEZK4AjPozFYoiB0GlcWY=)
                          41: iGksZEIMtuJZNC9O0H-Kiggvfdc.roa (hash: L/8khsLhPbnMbKmbGuohMmqVrxXU+NBHfE75uRG1G70=)
                          42: ikUSsnrw7KtGUqj4uBBWpADs8nQ.roa (hash: vnt9WcEN6f467pFeh5sYlWF2qvfe8JdyTerZGzOVeno=)
                          43: k6vtNgF_GhN6-OrHsMo74ukOKZQ.roa (hash: yuKRlzVD8CJOPcgeDTO4EyyVh4eZj+we8G/z6E5iMLA=)
                          44: k7i31sZuCYM1xh8RD1SCSShRKyI.roa (hash: zRQE8vYTX2abKgDovVUVM6MGQVie4+bu3bOz6u/BdQM=)
                          45: ki4-4_6vgC9JxUtTgITql0-gK4c.roa (hash: +048V9TSoELjwfbiWURw3JmNw1zyvDPVPe2yT/DyNDU=)
                          46: n8dFJ-T1GfZmwYd3yR2qVOUfwD8.roa (hash: wwLjvHboV0pk5l8aIa21kLZzR5E+CCz+d0ln6UPclIA=)
                          47: nUcgGuUqQu9qYPX5N19gWJUV1mo.roa (hash: 8piDS5wgoOqhP5D+ySakOP6YcnARu5pk8pyMObgkf1g=)
                          48: ppjW9v7GVQl4C1lgkoQOIpYIhC0.roa (hash: Y4dnIV10g3K0pnDCr5W0lkA8YdR8+t4UQVXq6DCxc9I=)
                          49: pulzv1BBQg-WxDdYs-z_e1iU_uk.roa (hash: c4YYk9+eiku5xdH8NKuQvoYBO6YhOwndmc26zUPUpQ4=)
                          50: tCU8TyM86YR2ma5o7L9ddRSw-ts.crl (hash: T7bDIiceSzI7rOkZXpBq0h2NLjJLQ2rbVyiLznss3Ic=)
                          51: tfmT8Y6ipl0AfGfPBfunayYaC80.roa (hash: ElXH4tfnqfsR9aNeYOS5jlZVvrrXNoc/3xjb8P0E/fE=)
                          52: vkCuASlPIQYhvvG-J4vmgBfe0L8.roa (hash: W2iLF7ZYNIgPwTocWi9/YyA2QpCLfC5wq7OKWmjbYqY=)
                          53: x__IpEA6u7M8OdiN4GCNRCPzGls.roa (hash: JVje4Mbt4we8TpiGHbDSoHqbC/RFPmHKqDhMlvKisKE=)
                          54: xtQCLwvph03Y6ll6CoiYsZZVA6w.roa (hash: eU6g+ISX0RREuSUfnwxmqbeUtnL3CAU7cSWA5RtUgDw=)
                          55: zUfetoVe1Qb7MOBguI3ZTyxboB8.roa (hash: YxRCGsAd56b5H+5Vw23tncgfYEHFAHwBgG+xoOiIB4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:0f:1b:4a:86:49:e5:34:4b:61:8c:77:5e:a6:a1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Apr 25 21:00:17 2024 GMT
            Not After : Apr 26 21:00:17 2024 GMT
        Subject: CN=009ab7e1541c292819e432217007e0dfd2c084df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:5f:55:34:29:a1:78:7b:77:5d:f0:4b:00:
                    38:db:4c:87:7c:0d:9e:41:02:9d:a5:12:7d:bf:f3:
                    f2:44:2c:91:fc:17:cb:47:d9:6e:2b:66:22:9e:35:
                    3b:55:a1:39:69:7d:55:c7:67:00:2e:e1:94:f8:79:
                    b4:42:d2:c2:c5:98:ee:16:04:5f:3f:4f:19:3e:84:
                    65:5c:de:fd:70:8a:84:6a:b8:08:2c:60:f2:3c:c8:
                    7f:b7:c7:05:53:59:da:ae:02:4a:a4:e5:e1:62:20:
                    df:73:b3:31:0a:84:6a:88:8c:4e:8f:5d:5c:9a:41:
                    d3:f6:1f:e2:f3:3e:e4:17:ba:dd:7d:a6:bc:b0:02:
                    40:ea:12:32:63:2e:c6:6c:a0:3f:70:bb:c6:69:9b:
                    43:97:88:75:7e:0f:5a:14:e2:5c:78:1b:26:8c:6f:
                    20:11:c4:60:43:d3:1c:bc:bf:8b:99:a0:f7:bb:2a:
                    3c:19:b2:7b:20:e0:6a:f8:88:26:70:1c:07:b3:a5:
                    f3:44:da:68:5d:99:9e:3a:d8:9d:ea:12:72:ef:1f:
                    a5:ec:77:73:9f:36:29:6c:96:a7:3d:0c:41:4a:e2:
                    5e:b3:76:20:6d:6e:e5:e7:77:28:6f:35:0a:f8:f7:
                    6c:5f:c8:9d:5b:f1:62:b7:0c:c2:1d:c4:ac:68:af:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:B7:E1:54:1C:29:28:19:E4:32:21:70:07:E0:DF:D2:C0:84:DF
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:85:0e:b6:a2:9e:77:8e:c3:43:35:57:52:44:de:99:fd:
         35:60:ed:7b:9d:79:5a:06:08:bf:e9:22:06:0b:05:f6:ca:50:
         54:5d:9e:4f:57:41:b7:6c:ed:73:27:07:7c:03:e2:9c:0e:a1:
         f5:ef:21:4f:6b:37:d8:4d:89:6f:25:8d:67:69:c0:7f:d1:5b:
         f9:e0:2d:2b:ff:51:18:e7:d0:80:eb:f8:c0:da:02:3c:96:45:
         39:b1:62:d9:92:6b:08:f4:36:ef:b6:f6:15:1d:d6:d3:43:58:
         80:3c:65:a7:da:55:e0:e1:87:e2:91:a3:86:4d:b9:41:b3:82:
         32:77:3c:1c:1f:30:98:a5:1b:75:f2:38:e2:35:b9:a8:b6:f5:
         a0:f5:2a:7b:c2:34:ac:87:ad:6f:18:88:d1:5e:f0:d6:c0:8e:
         d8:7e:18:f1:5c:f1:bc:04:7f:01:c8:8a:cb:36:91:9e:e6:4f:
         f5:52:01:d5:01:ca:d3:0b:ea:1b:e3:bf:c3:e2:ca:0d:6a:94:
         72:ea:70:85:77:8e:aa:d1:79:a6:eb:92:86:c7:d7:f5:54:ee:
         3b:9a:8c:32:9e:b7:05:d7:f1:db:45:49:e1:6d:fc:60:f2:e9:
         6e:d0:16:fb:b4:f7:f3:5c:38:87:9d:8d:84:a9:c4:9a:dc:83:
         e9:d0:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:43:45 2024 by rpki-client on console-fra.rpki-client.org