Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
File:                     w16sZOpIAuaCRob3wNIB8shcsqo.mft (raw, json)
Hash identifier:          B2U/5na6u1MO5Au2Ewkn9jc93PrWWw7rLFfnnew21+w=
Subject key identifier:   22:F4:D4:77:8F:72:BE:96:B5:F7:0C:1A:21:FC:EB:6C:FF:E6:71:33
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       0193523E22BA27797FB0940986CB57153046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
Manifest number:          13AC
Signing time:             Fri 22 Nov 2024 05:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:23 +0000
Files and hashes:         1: 1m-c9o2SNEB-jAPh7pAKUNFqHIc.roa (hash: Lmsn4UuRfDPrgfkp/PD5ZbZ35Y9LiXvuMBQWRJnDNf0=)
                          2: 3kIwr-GIb2RYd-gT5mJ16V37kGQ.roa (hash: LUmJ/FSChGJPuIcxSy2cCK13i3Ksffa66hC/aeECaNs=)
                          3: 4tvTbZiqz_FO4tSOMDlYSp_P8SI.roa (hash: 2+B/far9DSn4PdV1l2CUQBQJCKHTzi2TznsHA+xSsfg=)
                          4: 5oY8J0M-94sxAMM7ug-9Tjsykhc.roa (hash: s/26IjleiawX75pPMV30118lv12JRzF8I6U2MtFbAFU=)
                          5: 78Ksif-Gobll5AfoHeykuB2Xcbg.roa (hash: 7gFFZt/t8QVJCVzl1d3GUYimxagClzRq6ozi+1CHVPM=)
                          6: 7i7kveG8_e8tugmv_nzv3AIeeKE.roa (hash: r4IuDlpYLSVVlaO5NmkJFhuZtQjWGpDYGwTqGUNT1Uc=)
                          7: 7mnaIgQpwlQ75UsmXhU-_E3GR6A.roa (hash: 7FSASaD4i7VhHvR2a4/fTMjaRuAqA93yh5Rx3KCtGEs=)
                          8: AoCkH-rDyGMhQMHBqwIXFjJT5Ug.roa (hash: FtKLg5QLN4TdBHn4/feb2TSw2+hhzWbLuE/EvKvpkX8=)
                          9: B_nHZXRqe-VigrzahxODIvE4-Gw.roa (hash: cxhGXgNMWQ3MuSGSOYks8tD2ycCgfzHIhUzHqjfQwYw=)
                          10: CFzxVik7M8py9raxChxiAD_2sGI.roa (hash: t7d0+C0F6RJN9MsIkpFXqWgtMq1pzs7xt9jiY3UphsI=)
                          11: DOaaTvWF3xNS2ufoH2BJE-BENbQ.roa (hash: ImaKZ98Ua+7M6hEbB+mhSXxlwhD9wsousGN1517ZyWA=)
                          12: EOn2SapLD2sTqygNnP2IFwSV7oc.roa (hash: d9fWnfkJC32qPCe8x1ngYt69UMtNDcqq+myFcb3xTrU=)
                          13: F_z9Ny9xRZM31RWQJ_pWbopacTo.roa (hash: 3LS/y5ll1vmmXYG+6AqDCaK+5mkrgpr91jyU0/8F5g0=)
                          14: Fpo-P-MABNVe6j8nRUswGgeNLU4.roa (hash: ScR36rmnqZLphBiAnDC3HBZeKQONhXxvxZ3LpDqXTyI=)
                          15: I_89cpKoA-b3yYOPl0D1J6nQ8Ag.roa (hash: 41ErV6VbNDBgs9tRKu2b77WbZZ2Ce6GqGQ9Zqj4+uEA=)
                          16: Jyip4TVrefgeuF-ZfGIi8kbIS-Q.roa (hash: +8DiJgsF/t+XAOjq/IEiF1OoSv/9b2SP3t8DpBgIzJo=)
                          17: KiRM_YEi9T2A4FO0nYXchVvz84w.roa (hash: giH9TsUrYD4U576OzxqgtYAHt1XhXsGJ7krH3D1LAvM=)
                          18: MBIa8SXcUGoK_adsKxakbZSbwU8.roa (hash: MV57JXUyz9XdjlzzVzebJNoDOCD92usDJ0FKzqJKjYg=)
                          19: Mboz4lPf0Brv_Mbgyxh8M0TnJiU.roa (hash: Iy6h+VOptAcm93eBwlJDyY963X9SfW0CK6BMuZVZEtw=)
                          20: ObLTSVKb_Fq6YAnVh3mDX3OLp_Y.roa (hash: QRqmGSn5v9LxSPflhAd6IcJwKETip/VYzwfObiwl7ws=)
                          21: PsCKguq9NMuEmqoFq_7oMFd1PGo.roa (hash: ExFaAXgi192dFJ6yIxd5g9kIQ+dHOMKUTdDfPQDouSc=)
                          22: QTIrB7ChLY4mWleknUzGts0GiNY.roa (hash: 9SPBpVLQCdRGHZldeBlgVdJJnWukF3L/SA14lgwVUmw=)
                          23: RwNWNeP7p9nPRKqggG5Fg-0dg1Y.roa (hash: 59jBGNzoYGa3BqlojYEKq27Q4+sxpkOeSZT0UVOjspM=)
                          24: TnuGfKJT39q-VDDWTO4697U8X9o.roa (hash: whjP7rpSO1SwxJLKXRl302i37UiSi+x7YA3FtF1HbqY=)
                          25: TqLMXfTjuOSHQGIaFhsXsMCJ3nE.roa (hash: mjJdcDjwmVBYXe14uPG8csm2rGOs8dm9HZK4oDuNHWE=)
                          26: Tzerg0S1WMYTx_0HTv5G5MAtv0w.roa (hash: eyktjfYm8zQq02yWR7SfUZUGRF3tkiNxtUi8O/CzLOs=)
                          27: WVD3Ads3Pf52KRspoZX6s1W_JTw.roa (hash: 7ARmlvDhkN9eEqdQprCsoNmp0inWQH1wV0KO1qW2rqU=)
                          28: YBEWrf_Ea1YwvqO6CqFs50BYRl8.roa (hash: TZg31OEZWdnEuE2eHA2+oG4sSem6abvJXvpBSY37Cao=)
                          29: YOufse4Ll1c_LGFLt5uUPHdab_o.roa (hash: HTMMYSQEJJwcudEGO3DiNdLsmBqOabkn/GeS306iWws=)
                          30: YzlhqxTXlZJt_ccJL_8xYEo3RpQ.roa (hash: VMynD3IVNA2HmWLE0yQohNn0wYN+CXXLpPiN6FXb1zA=)
                          31: _cFCrVctLYuFKzGEHNmFwY6IIos.roa (hash: rHDheU+Y/7uAPmdybxVPw/HjQrzvvrxLstkC7vrdkT0=)
                          32: fpPwsEgm6bN9ChQqH9QpRYNwL6c.roa (hash: Hicy3mF6IJwMqdkpIWA7aEzpwkacdU0nlovl+ytXeGI=)
                          33: gZz_I8e48u-u_E6xxR_0mpjLcOk.roa (hash: eI19LyjXOnYYUP2Dz6SzKV1VDGWiXRHzHzigKL/Sjvg=)
                          34: jZXIG4EcXhTJ6ElVxgLlUuFQI0E.roa (hash: Y/DYrRyGgIRWWyt9/A2N3cxR7E4gmvKLeTvyMRMWVnk=)
                          35: jzkfrHONfS3MdQQ6Vif8BDidNjc.roa (hash: lppNvvht0GHj1SDYnKpFZ/cjiJWliSvKpKGqeYk/Ntg=)
                          36: kWF8A18UdYVQ8u9o0QT23NzfKQg.roa (hash: m192F/bhbhxu0SAF7qOWY+jF1lVPehZ7/BSnMEiJ69c=)
                          37: kdK0FOtxaSQwSMnn_frZospjkRs.roa (hash: FBfnRqk713WqFbtko/shSav2i0hkwl/rd+d3jTLvidk=)
                          38: nr485oa9hU9dbZ3WQBoi9pBDb_0.roa (hash: OFHuTk8VUAez8ar5sXFCaaxn6bwOsjA3DBhbBTgA5k0=)
                          39: ptjcTu-tESn60qZfjZd0JPaNT10.roa (hash: 6frVPWpXXwH/q9Xn3ZOGQutTluKtn6+nd/mAb1rvx08=)
                          40: sOqkT52q2y8_4TKssShrZspZWFI.roa (hash: jeLJlTqaie9PNsIJJMfi8r+2oa+gqPjhK7AYM+EOyrA=)
                          41: u8KUkpCA5MZBZEf4Gx55WxHopbk.roa (hash: bYi8b27bm34eh0JABqmVhbNv9qGEBNcZ/yw6GWjgK70=)
                          42: v6gS8zPvP8H3jqU4gO5TIz2cy3w.roa (hash: hYmTUOC57Bn2H3DotGVsZqr+vXI8dVd1MdA2yEqwLhs=)
                          43: vTYhzm9QBHf0K7aEtWsExZUhcmE.roa (hash: 9sGrDQaxg80I52sSADmRZumsOEXVsOkJtUcFYVk8Ve8=)
                          44: w16sZOpIAuaCRob3wNIB8shcsqo.crl (hash: KrIaMgAOV/gMJ6P68pINplPEqF9IlJYc2w729jZpfGg=)
                          45: wvlPj2xk10XbWzXr5-d-Ykl3BCo.roa (hash: IQ17bYPF14cO86hGgk6a4QGZ0VXENSstwJDcL8CRvyM=)
                          46: xgMuiGrA6UKr6Q1pDP0wykAgULU.roa (hash: beJm1HCscODfQh7CezaE3yYKHRgfaOJy9/8veFzJVVc=)
                          47: y2DVwPWzM2GlfF2nJbq1lpLP0wU.roa (hash: aBkfmeRP40OaHcEHql9wOTQHYd9mX8Q9FRP28SOU81U=)
                          48: ydQPYs6w1Y-c2KMFUpgOeEv1VTQ.roa (hash: eBRIcdLtq/CwrQ1zw5bJwOe32fDm4YwDUBA2XHxvy8g=)
                          49: yu4lJsrHt_wwX2ISROVXu2LmB3o.roa (hash: ayi5H4NpJExk6PzV7scUHEsRngBo3eUlPsNd57mGLYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:22:ba:27:79:7f:b0:94:09:86:cb:57:15:30:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Nov 22 05:00:23 2024 GMT
            Not After : Nov 23 05:00:23 2024 GMT
        Subject: CN=22f4d4778f72be96b5f70c1a21fceb6cffe67133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:76:83:22:a0:df:67:b1:2b:2c:10:61:02:
                    c1:7e:76:1f:bb:98:fb:dc:df:b4:39:ca:c4:cf:f2:
                    67:27:ff:1b:c5:75:5f:53:c8:82:be:8b:5f:70:20:
                    8c:df:cf:7d:84:0d:36:2f:f7:f2:67:ec:1c:77:70:
                    cb:d5:d4:af:7b:93:20:2b:b0:ed:ba:54:56:4f:4c:
                    38:ec:5b:29:ca:70:80:80:3d:71:7f:4b:fe:84:62:
                    eb:09:5e:a0:56:7c:a8:49:16:3b:86:fc:6c:38:ed:
                    3a:35:c9:20:ef:75:84:af:63:57:3f:21:18:81:a8:
                    3c:c5:4b:76:d4:5d:5b:53:70:49:55:1e:bb:f2:45:
                    ad:20:26:f6:ec:28:5c:e5:d7:ff:a1:cf:af:84:3c:
                    67:3d:58:28:85:5a:5c:6d:59:28:c6:14:eb:de:62:
                    12:d5:82:a3:7a:ec:ad:f4:09:45:0f:21:f0:ca:14:
                    96:ad:27:d9:8d:00:75:cf:43:d4:66:0c:f5:22:01:
                    b0:57:8b:3b:af:3a:d3:71:86:70:92:cf:1f:08:37:
                    00:71:3f:7f:aa:af:f6:ef:0f:14:10:e2:15:b3:1c:
                    b7:7f:2f:0e:4d:35:7c:87:f8:e8:8c:05:96:ef:e4:
                    51:0d:f7:a5:46:5c:4d:f7:74:a1:61:1d:c5:b5:26:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:D4:77:8F:72:BE:96:B5:F7:0C:1A:21:FC:EB:6C:FF:E6:71:33
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:58:56:6a:0b:8b:bd:dc:51:6d:c9:6a:74:d6:69:fe:3f:fe:
         70:64:d0:6e:40:df:76:5f:d2:0c:56:09:04:82:93:28:56:e4:
         1b:6f:da:28:d6:24:ed:03:14:c6:89:c7:74:58:a2:62:61:8d:
         87:0c:05:76:61:35:3d:ea:1b:f7:ae:0e:c5:5f:91:41:68:f7:
         30:aa:a3:6f:c0:f7:6e:82:6a:79:3f:91:8b:ef:a3:00:f8:78:
         e0:03:fd:dc:07:54:08:6a:85:f6:1c:34:1b:3f:ac:5d:f2:92:
         77:56:38:b5:21:74:c3:3a:a6:e8:bd:f1:10:3b:19:47:49:da:
         24:dd:b0:f6:35:c8:d4:26:a5:f7:0a:5e:ec:8d:74:c9:37:5a:
         43:48:19:30:e3:1c:ea:47:d8:7b:0c:71:a7:d3:59:35:22:5c:
         79:56:3c:20:84:23:29:61:ac:8d:a8:46:21:52:44:54:44:e5:
         ac:40:6b:83:24:56:35:f8:72:3b:5f:c6:70:c1:e2:5f:53:72:
         03:82:54:33:97:2a:f4:e7:65:37:6c:4c:64:8e:40:b5:72:07:
         a2:32:87:1d:a0:7b:51:f4:c5:a7:5e:71:8c:88:29:01:0a:f0:
         e3:d7:06:c4:bf:9b:57:6a:65:0b:85:6d:2f:6c:ec:b7:f7:5a:
         0b:88:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----