Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
File:                     z86tOQYl7boUCBCN9XzqRxYNcOU.mft (raw, json)
Hash identifier:          sXBIDp3T8AR8F0ZgGYFEre7ohFGZohmgL7vuA6WJAO4=
Subject key identifier:   80:46:13:EB:7D:CE:81:45:DF:37:CA:07:2E:88:4D:23:30:A9:A7:0D
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       01936255E29B45DFD0CA0287033920E43B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
Manifest number:          061E
Signing time:             Mon 25 Nov 2024 08:00:15 +0000
Manifest this update:     Mon 25 Nov 2024 08:00:15 +0000
Manifest next update:     Tue 26 Nov 2024 08:00:15 +0000
Files and hashes:         1: 0QDRaJbpTIb-C4KaPbRku14K_T0.roa (hash: f1UMut3ZjkM7CLPyqsOW1jU1P7SrXCbM0X2h5tOnpp0=)
                          2: 1-ltg6U4MIlMTj35QXoVxdW8EGjs.roa (hash: K6wFeAeyd4dUp3EE54OmBCoppWTKid9qI0zK2T3u9TI=)
                          3: 1-nqAxegdrMdqbS68zmb9dWWkP4E.roa (hash: gTPSMCLSgGySrBvRFhtEPFWhZ1lH2E8Hd/iXlwjui1I=)
                          4: 1Movp0VeGhtuN5XXKtUBchptVN0.roa (hash: renImUIcIzt+eLPFYXi91sv2cucC8h+TdGY1AkcEkrI=)
                          5: 2E111CEUC4UDQ0ae2LhnxNwre64.roa (hash: ezBu1i97qBo0kK/Vv5Uo6vG/5BTSmunz68fEj2q2T30=)
                          6: 337VcgnK0NQHbdDdCyOVwIBrYss.roa (hash: kCl8fC0YITxAMBEyUobjioALCGJewx23T4Vnxj1xkUQ=)
                          7: 3CP5wZ5vg88P3PV1A5qdobUuJ2g.roa (hash: wivp9gK67ST4AFrNMVa51lkAJchyjW4EVPOvn0sMCCM=)
                          8: 4G3d8roaupAClgqlaGXfHk-fNlA.roa (hash: X0dYR9bwXIvGPEqMIIMIU+Ev2QthBam6AI2fNe9oNN0=)
                          9: 4Qlv2Ygw8FtBY951VYPkZwa_1lc.roa (hash: PwVdzGcgoHg57zDouUmke2uwWAwmwG1REODjD29pgL4=)
                          10: 76vZSYfE3virRiHCto6oGP6c8HA.roa (hash: JCPCSIw45EDyYpGbE7udaXa7sK6Ig1lYWjznp/ygfJk=)
                          11: 80HHmgB4kN4l7E0-poCi6WhJuRU.roa (hash: oDALHnxaNQtgtD99hto/qFRwndKBhBnEe8NpHZmUB4E=)
                          12: 8mapcWNXwgPO8hoJZzDASndPq-Q.roa (hash: YYEFhsMS7jgq8RuMd4W+WbyogZE2vv4GKBF6C5HB3LI=)
                          13: A6MPHW-ry3IMd8vrIoLbU-EA5CU.roa (hash: jjmjrEztQ8EexAKYkMRDSFsqiMlwhssDjvTnC0ha+gE=)
                          14: BTd6aueMfJjiVH5hJV12_5glpSk.roa (hash: UFFwOobIvPr5KHXb4QrjyLntgm8PHx51UF+Nc4ynPh4=)
                          15: CVs8OwBEt5LSTy02Gmm2nEQoc6Y.roa (hash: r0KDtpYvp6ZkplvxOP+6momfyMxg4NZqR2oxwkwrG/Y=)
                          16: Egt-d83CcFNcDr33icWcGimJX1Q.roa (hash: Q+Q3GmXisv6JU9gym07auBKGQk4oHQXielXhxEAhxqw=)
                          17: FIF6mjIjRWT5SS7m8A6SC0XW270.roa (hash: le9oplmZoqUEh6w8LPvC5vUImP/20WTi6YYgZ3H7Gho=)
                          18: IOQ5z1_3Ey-Hst4lhBc2BZkzvKc.roa (hash: OENMFmGXS5v6r3EsJUf143faV41gz/zbYMgEDMP97qs=)
                          19: Jwm1aDJVaDqgmIXNd8NeSkpbNWc.roa (hash: ZedZaWM1LKV5JBtsZOKql3EHlZQrOK/Q4X+Eb+7I+lw=)
                          20: L0-_xPYGlr9KTSwbZTPNBF_wVYc.roa (hash: 0X86YtAntoTcB7M8XWOZMUlDB7JM72+321gbc2EcByw=)
                          21: MSN2byCvEk1gJiD9IO7TJlMJiTQ.roa (hash: xd2I/eTuZZSqMt5E6+0c5FYEF65aI0PBcz8PNBdaL04=)
                          22: MXOdUCvuEFwbSMJQSk-lj8STNRE.roa (hash: lXJiZ3GXchvXtSuYcs9f6PKRrt4YOHod1oxYbRGsZj8=)
                          23: OCcnlbCu2hEcy3T7AzG9gRMGEf0.roa (hash: 7NMLFHh49RjpZgZPYZPDSEC7gEYgodldTCMz4jiOS/s=)
                          24: PSke3DXH3xVvwGvbIObk1H6K3D4.roa (hash: aXCBT1NaTAeU1PsrnEqzm8DlkGz8uGJrcbTXU7BdTr0=)
                          25: RqLglfQmhgd6zxuVoOoB7Hcym0M.roa (hash: RebARMhaQXf+uHFFkW9likec4a7mrCx0k6u0gEfD8Rk=)
                          26: TVyy6AvkP1QocIxunIZuIJu3SBw.roa (hash: p/OTNsY6xvfY9O24/vQyrEVykKSgyiWBC/sHU25jmnQ=)
                          27: VyP27KPblI1bWFxi2D-maMd1pAo.roa (hash: f5vEtc2JpRlFT0wUa/OxLCjh5jfQHwl/1QeMs+Dhtg4=)
                          28: YKJp2-icJw7Xjp8pT1ZKhU0SUos.roa (hash: QY6G7twubM/A4mqqLWajgq70b10rCv69e8JbaIg7ttc=)
                          29: YmbAp04IiC7UpMW1SFVPcyAiiBQ.roa (hash: y+ZutVsJPYaomEPGEWtwSfP1rv2jlNPGcBGUe545rZo=)
                          30: ZxwjsK6DMOiEUDkdxJxVe0oANFo.roa (hash: m0+M1+t7SWvKPI6JN4oO7w9hzdBhMySBJEOQOhg+hOQ=)
                          31: aC4-FI8kd6GlMgUF4O_4l8fo0tc.roa (hash: R8A2hUHqaa8gvbEDe6QQXMIn2VtbiJoYVGi0HMrluP8=)
                          32: coIHIgxOWZV4Y-zK1C6E1z73qA0.roa (hash: wOIH7o09lQaLD++lBrtg5h6V7rDCYTYEWQ7xeXJscZ0=)
                          33: dOxXJVjRxZouiKvEZLmfiZWLwFs.roa (hash: NeYBSDSUF6CDppwLjJvE4k6uCtG+7GJuYWaWRKYAQk0=)
                          34: e79HhdxL-HNXY413RCHJjDOusgQ.roa (hash: YyXd9qCskrVyikY9KAxhYoiMTyWW/mwHcHoBS8ET1SI=)
                          35: er3hE85P8bfzLY4Ef-Hp7-NmwHY.roa (hash: ljz3Xk6z9N+bt7FCTpg9hub7GM6qpYMEzA1t8etifVY=)
                          36: fH9dkv_8XfMck0mXlU1Ttl3pG0M.roa (hash: jgh8i3yx0l5ylsJWKXPIRJm4Dj+NYdJ4euoBrH+i+r4=)
                          37: hKgwkH8SAhASx0Ku0LRcxI8ocG0.roa (hash: B3E0rj1wcwgasOsIapHDRwdKSOYMP0mq5kzShBC44vQ=)
                          38: iGm6g0FhbaTJLjMqsEcHi_-AC3A.roa (hash: H6y5B9C04jNiEBwcveU89BwC3L1yOHX6d/bagQquc+M=)
                          39: jKPaexmHabMQSLl0cGG0C8eJ0Q4.roa (hash: o+f1CbdYxRKZnsuNYCbieCKkd/ZH+4XomMWytifbOMU=)
                          40: joPC3I-8SN6RQsWe6Yat1S0GsWg.roa (hash: z1gGEZ9+/0FPrYx5wovrdS8IIMCha459IrfoOuAbFDs=)
                          41: lQ4QGTDKxDhFilCcpVqZ8t0M3h0.roa (hash: k2vVC0i9xdkqlqs6Q/7Jwpayd3NGZzmiXw1tQ7GYqb4=)
                          42: lQxYrNc3yphH6LhsnKfvf4qPTi8.roa (hash: la+OeyAVV7cirGYHqRiznLqPkVW2keF2e1f7O4yIdHI=)
                          43: mprdw6APwZ2STj9h9Cw6BmUT_mI.roa (hash: WRl8RdqNAOyMeFygGHP597bSwc7SjjQUq4KdGxK0SAg=)
                          44: mzlGpu-B3kYJQTzNayXsqkvCQ-k.roa (hash: zfMspkTE+VlOimak/4R2OJ53SaxQnUPfWspwpPsQt4o=)
                          45: pS_3BUOTHnNq05Iba5SHtLggfIU.roa (hash: R3EzVAdovHBOmd50YLuaH+y9wnYZaOMYtpkiwo21HBg=)
                          46: pksjBxVUwoNatcl5Qj_PecG2K5c.roa (hash: bj8Ku/jc4YJbIdBA2LcVDxkuyZeTfMr11ArBGiotPow=)
                          47: qHpGuKgWrNqkpO2PQ60V60SQ4GY.roa (hash: 07Ct6NU3wK7ATIz9/FSoS6xH+0zlCjrrvmP0E8npBS0=)
                          48: rGaYI1r_VRGcetkWnmpkilatIlE.roa (hash: 7CbOSQxPE6/GTsC3wx89DKV5wpQmFpsr+BZXAfZ1av0=)
                          49: ug5UOhwKsysss8p70n3Ynq9MX-s.roa (hash: tNNLZuXuVi3hIqNP/0Cr1X5c9PGwSce/rrD3eCm5Abc=)
                          50: uk60UIfQKHRWAmxHgHZj38D-A18.roa (hash: RCnDAOA6pGgRtR0bwNAk8l08UB7QHOshd1sM7yfTFOI=)
                          51: usXd_oSAX0PM-sst0J_qLa0j9-0.roa (hash: PNkZXvOoRyxuhmU8tVGIQQNJE4V8eMblQ35Aswa6dyg=)
                          52: uyAectNt_m2j8Nejsu-QcNBI7mM.roa (hash: rHyOilKPbuSneFevSnRSEWQ4qZZFUa7oU80/fphs/zs=)
                          53: v9m_saqPwpqE5e0uaC42RFA1lww.roa (hash: F18bhUt2+CChL7OoRCqzNwukdHWAYEPnfj8eoyC/+Ys=)
                          54: wCXyqdYJdhs9PmEJH8nAPq7_kmM.roa (hash: Y6BMP8kAu3MoO6GlcGywAg3HFS8aGDt/Jrp+hXnYN/0=)
                          55: y9lBd5XAXJx5eKtvnJmKmn7wGMQ.roa (hash: z6ah7mFjT6AkKtXO+CMd0pNNCRGSk3SQIZW347vwp80=)
                          56: yjPEy3ddAD8WA755xNtnJArJon4.roa (hash: dCI+PineNmeECh+f2F1qxNIgz2ACMa+MHKcj/6vNSYk=)
                          57: ymdNS9pHrN8VxSdcZq0PVdM-2Uk.roa (hash: khNKYEr6B6OShvzz5iedSUz51r7T7FCwvTwPq+T90Xs=)
                          58: z86tOQYl7boUCBCN9XzqRxYNcOU.crl (hash: wp/3NT95S5CVphlmsm8+BuOgCPqCdYTsNXHAMJDvN0I=)
                          59: zb-Jw-LLP3THAOwUnNG50WX7Cm8.roa (hash: MQoD0IEGeZ2bUQuGH6oOCMY/lhF4Ne84LFdY9g3WtJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:55:e2:9b:45:df:d0:ca:02:87:03:39:20:e4:3b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Nov 25 08:00:15 2024 GMT
            Not After : Nov 26 08:00:15 2024 GMT
        Subject: CN=804613eb7dce8145df37ca072e884d2330a9a70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:30:9c:12:4c:e4:82:53:00:86:28:fb:ec:
                    14:42:9a:d8:4b:3b:58:a1:12:a3:14:95:8b:af:97:
                    f6:79:30:c0:47:14:ab:ed:de:a0:8c:ff:58:49:3b:
                    53:df:57:48:d8:ad:7a:35:76:a6:f4:9b:3f:7e:2a:
                    d9:78:88:5a:54:49:17:f0:ea:5e:0e:80:6a:17:d5:
                    ef:a1:3c:bc:21:c7:28:3f:26:53:50:d0:ae:d0:2a:
                    71:54:f8:71:05:4c:5a:c3:81:dd:b6:46:98:60:f8:
                    3b:0c:56:f3:f1:5f:6d:17:27:ff:7a:af:61:4a:b6:
                    3e:f7:06:05:36:54:24:f8:9f:24:5a:86:9a:91:4d:
                    17:9c:c5:e7:73:f6:36:3f:76:10:ab:f0:f1:7a:e2:
                    55:a9:41:71:01:92:5c:5c:c0:02:7d:3e:28:7e:5a:
                    b5:d6:19:b5:c2:89:e0:7d:2c:5f:2d:20:48:7e:4f:
                    d2:47:71:b9:c2:30:89:1d:14:c2:b3:08:2e:21:2b:
                    44:07:9e:ed:17:42:b5:4d:87:0c:9c:02:b5:16:f3:
                    a6:31:67:1d:d2:20:70:55:bc:cf:95:56:fa:60:a8:
                    68:ef:ce:a3:43:fa:16:16:e7:9e:fe:80:ed:a0:8e:
                    47:c6:58:cb:b4:af:f9:48:63:c7:0b:99:8d:ca:ba:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:13:EB:7D:CE:81:45:DF:37:CA:07:2E:88:4D:23:30:A9:A7:0D
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:70:f6:37:41:50:45:9d:9b:e6:d2:e6:80:e6:69:f7:1b:
         eb:3c:73:46:c1:ad:ff:8c:4e:f3:7d:aa:96:cf:f1:ae:ff:f3:
         d2:de:f9:4b:25:a2:ad:cb:e8:d2:74:f7:4e:58:e2:fc:8a:03:
         cc:b5:66:19:24:cd:9e:d3:26:8c:ab:5b:de:37:9d:50:6f:8d:
         8d:7c:3e:bb:1b:ed:1a:51:a0:3b:2f:5d:9a:eb:42:ed:4d:e3:
         54:31:da:3e:68:eb:4e:aa:4d:5c:50:78:01:4e:cf:e6:71:65:
         95:a0:9e:79:b5:c1:c6:f6:c0:b0:49:e9:17:4a:9c:95:71:5c:
         c2:66:5b:cf:41:4b:a8:41:e3:d3:f6:64:6c:20:d0:5e:e2:b5:
         c8:df:30:41:00:04:f6:c7:40:ff:76:06:a6:ab:44:b5:bf:03:
         61:67:1d:39:82:c8:2f:25:f2:9e:40:60:36:c0:c0:72:db:f2:
         85:9b:48:4f:4b:6a:72:99:28:18:37:cf:4a:4d:7c:df:59:14:
         bc:5a:ee:3a:8d:e7:99:ed:c1:3d:c7:a8:2b:29:6d:43:c0:ad:
         6a:10:dc:e0:dd:d7:e5:f3:6d:ee:df:a9:2a:de:53:d4:19:e3:
         e6:ee:93:cc:48:af:84:9a:f4:3d:83:ba:86:90:58:29:51:e6:
         0c:56:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----