Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          xv8JtBU9/L9Xrv0/KRRE7yh3qIevZg7amQ3fmlVuKBI=
Subject key identifier:   CB:DB:B1:5A:7D:D6:65:73:25:4C:61:39:94:BF:9A:50:D1:63:66:2F
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       018F61177E798F97D4DD9C85316AE3F1166C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          03B0
Signing time:             Fri 10 May 2024 06:01:20 +0000
Manifest this update:     Fri 10 May 2024 06:01:20 +0000
Manifest next update:     Sat 11 May 2024 06:01:20 +0000
Files and hashes:         1: 0EvSFreksu_GIr4rNjuMjUj2o1I.roa (hash: cmhITTfDl3J7aUEvl6qE5GahNOUAImUXyVpNGOQwaXg=)
                          2: 1wVxE5GX7AJptrxDz02u6-CMHgo.roa (hash: WXuG3OrrTmHmJwSfv02VhsrJAxf8cxZnlv7hfTWPhQE=)
                          3: 7FVzExg5k288F3KMcJps14w0KJE.roa (hash: BZJSa1VhXWNONuR9Z+Hx4l0TFL5JRbIJhm6z2IgmIJ8=)
                          4: 7RdUDs9nX9kJETR5_swpn680nCw.roa (hash: GOwemjRhHwKWmfQEF+/yquOjMIbGLnvL2l1cMKdMvdA=)
                          5: 7vo8zoFpy5lPQTg-PqsS7Uh9x-8.roa (hash: yFuAylcjFhfwI7lj2y2jMW5pRcHUjLX+AzJFprv9xq8=)
                          6: 9RO-JsnKBxw4QvhVU7cQ6qEYNuw.roa (hash: ob+RjOwyWWJYiPxyhujGHYRU1ZWo8h/XibI82XIuNjQ=)
                          7: 9wDi6i1bK9tafrc9UjQFUfh-YbM.roa (hash: q97zd4me3LcB16j0aQAymfEKCCGT0mN6dUPn43T0IT8=)
                          8: Ah9wqMvEOM1dCxgW5U56W0TpTss.roa (hash: 0/GhANhsHFzvJEm1yX5Ubv1iMBCLxfcVc3OcP1xvMmc=)
                          9: FI0w7KJuOncIYB6DF0_bJ9l72MQ.roa (hash: oAmbxXXuip9OTF1Di0TutSwCv0JkJYeQi6qlS9yptC8=)
                          10: KxrfeqpcRL18J221wmTKdBQisD8.roa (hash: jgUXHh298rZSAu8MRkE4TQiJriRCi1dWel/BrugmFK4=)
                          11: SDIIRj6dJIeOKSXg5YRDFsLj2Ro.roa (hash: vxRTDMb3LcJVh6J0sPYAJ57ysOQwYsEnHgjqcvk8jOk=)
                          12: U2CJ5dyxPhWWgWkKP6COVXs1Jpc.roa (hash: KbXKttHuKMXln6TPafAMvta5YLVLDb0Kpr/j7yuCvaM=)
                          13: XWZ9dMbpcNB7b5vDcemxipItwSw.roa (hash: 6LCFb4sESaw+PwOi1Re3vRaETGh9GtTxjJvYuPF/rRM=)
                          14: Xbpa_t0Aqf7Ao2Ke0kdZEjTJZT4.roa (hash: e8/B6vIihKuer33Gn3NaqyAQQIQ0Ei9kP42cg1OTLKQ=)
                          15: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: qafNzYrd8W7HPO9nymkBrLLLy5zcgMMkT5H4SJHgAo4=)
                          16: aOq2wfkT9lrq9a1dJkDaHaK0cxQ.roa (hash: jmUwZWG8BTnxxcKMtlycoRTUsrbHKGCX6/JFiaVT/q4=)
                          17: lVVchs12xJ05lpxK5TODIlvsFsU.roa (hash: Cn6tOyiXlSdkMA7RUJXAD0u+Qn0nGrtXiS6scNDP8H0=)
                          18: mE7PG5h5fV2S7d7VsRZTQN_R1MQ.roa (hash: wkfoEcnSqD3sSSOvsZ5AupoylsYnEau+TdfilUoKJkE=)
                          19: qL_MT8XvZ8QRRW5KWSMB1J_plBw.roa (hash: 7UtaNF+27K+p4ctTT9/QGTU5Ep/A2KY2nEn4fr73Syo=)
                          20: t25OJGV5NvLRgoxXnJz-deTU6uc.roa (hash: OWcOgM2TqA6qWlRTloEiAGZOkiX5O95wBt/dIiERHpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:61:17:7e:79:8f:97:d4:dd:9c:85:31:6a:e3:f1:16:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: May 10 06:01:20 2024 GMT
            Not After : May 11 06:01:20 2024 GMT
        Subject: CN=cbdbb15a7dd66573254c613994bf9a50d163662f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:cc:30:47:03:ba:b1:e6:c4:3a:c5:d3:fc:
                    7c:04:01:f5:bc:df:d8:47:0c:24:f6:c0:22:3a:18:
                    02:07:96:cb:47:ac:69:e8:95:0f:49:ab:df:30:50:
                    01:45:ff:31:0b:23:ee:54:e2:04:9b:80:4b:51:b3:
                    eb:5d:d3:c4:f2:98:69:0f:09:b2:1e:5e:ef:ac:ae:
                    07:bc:cd:21:2e:12:d9:17:23:78:6e:db:45:ed:4d:
                    d1:c7:b6:75:c4:d7:da:21:a5:29:3f:e5:8d:ee:33:
                    9c:63:04:fc:1a:4e:8c:d9:36:ca:e8:a1:7c:1d:c3:
                    30:b3:9e:2b:31:97:c1:0f:73:a2:22:b1:0a:cb:c5:
                    9a:4b:24:cf:71:be:8b:41:93:2b:d1:b8:e5:91:73:
                    27:0f:1d:10:00:5a:f2:02:fe:3d:75:58:2f:bc:4d:
                    25:3b:a7:75:79:99:9c:2a:af:9a:df:2f:24:e8:79:
                    da:30:72:1a:19:b7:f2:36:22:90:34:2a:f6:96:cd:
                    0a:27:aa:68:0c:4a:01:5d:2a:93:3a:6b:30:3e:20:
                    b5:44:82:17:b4:62:af:2e:75:2d:04:be:5f:8a:15:
                    a0:f0:0e:c5:24:70:21:82:35:a0:f9:72:af:3d:12:
                    3d:b9:de:53:3a:f6:a2:d6:43:c0:12:98:54:ae:a6:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:B1:5A:7D:D6:65:73:25:4C:61:39:94:BF:9A:50:D1:63:66:2F
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:d6:fd:e7:3c:76:60:36:b1:07:cd:8d:82:af:9b:df:13:
         3c:4c:33:57:4e:59:6c:eb:24:0c:93:0f:9b:de:de:94:b1:c8:
         15:fe:bb:dc:3b:a8:bc:bd:b3:47:3a:43:75:f6:76:5e:a3:9e:
         35:7f:4c:a5:4f:6b:eb:2a:7b:f9:93:cd:05:5c:c3:21:12:99:
         07:59:56:41:a3:f1:d3:ef:9b:8d:f7:fc:d9:8f:4d:34:98:e7:
         e1:1b:cd:dd:59:d4:6e:fc:48:bf:c2:94:15:0c:94:9f:94:43:
         09:6f:4d:ca:49:a9:6c:23:cb:7e:da:c4:be:5c:07:5b:ae:8d:
         ce:c7:3c:4a:fb:b0:1a:f6:b5:89:11:2f:ac:da:1a:8a:f3:7e:
         38:d6:c0:06:a2:2d:ea:56:e6:7a:b6:03:46:e7:7b:5b:6e:f3:
         40:94:b1:b6:fc:21:fb:15:31:e1:21:c1:a2:2c:0c:8d:20:e2:
         fc:21:49:eb:3e:75:e8:63:55:8a:7f:3e:d2:2f:bf:d8:e5:8b:
         24:33:64:64:58:97:0e:be:01:93:62:9f:2d:2f:b7:ff:55:c9:
         6c:cd:eb:09:94:cb:15:8a:38:95:8a:73:f1:fd:16:5a:04:07:
         48:cc:97:b4:e6:b4:aa:1a:b3:c8:40:6c:48:3d:71:43:6a:b8:
         3a:04:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:19:19 2024 by rpki-client on console-fra.rpki-client.org