Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File:                     mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier:          f6S/IAf75qizxGqR7ODgyEN3iKibQybMHKyHdG1se6c=
Subject key identifier:   2B:FD:6C:76:03:6E:C7:9A:3F:24:7D:9C:1E:79:61:11:BC:FC:F3:03
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       01935274F35C5B51618DCD52D77E36D38E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number:          1395
Signing time:             Fri 22 Nov 2024 06:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:16 +0000
Files and hashes:         1: 4riMgpMhOKG6iawRe8kx1uZaZKg.roa (hash: LO4eoKksBQQ/PfZ6/ICRgrMj+iGb9wILdMfFOXea5do=)
                          2: 5NuHOnzLoKnzgNsAZlwllczl__k.roa (hash: o0UErmVgqHwHTMMxfxFyTLEJtk8XMfXkeRHNi2jxxcU=)
                          3: 84oJ6n6M8NMMes9pS0zkO5TL5gk.roa (hash: KJogACzFMuAjwcMsXI2TSNukYqA9tMD6yzbEmumAJ68=)
                          4: 8Kn64p9snod_KH5IARhDTMSStFM.roa (hash: VPFAcFWNDQ9JUnshlVnJz1ZsNUbwE7QCayQ40+VhM6E=)
                          5: 8r8gE7GPa98NgZkWQQGCGc3Sdlk.roa (hash: k8aE/QQNQh7UhiBtx81uNLOF0yA1bjrJY/A3YQ+J6ik=)
                          6: AKOAS8cNtxGkJ05cyz6fYi56zD4.roa (hash: Ap+9uDg7BnaVNpxl/VkdC3mYGsY5rHt+pNKu8PpsLfo=)
                          7: Lp2wU-2_p02-fowkymKNoi5ss8A.roa (hash: REuCLFljvfT+zm9+rpJErZlrBF1aViwlph/c54wtD5A=)
                          8: N7I6jERELvP39feK1qT4QHy21Uc.roa (hash: j+ATirEgAa4Fyiu3lQE01izQ3qVrcPX6BoVjqofABts=)
                          9: PsYiU5i3UM_TqQSahz3kLVdr8Ps.roa (hash: q1jP+gnFdKe5oIIcxhjHw+uup8ag6ORZ9O/zIyD957w=)
                          10: S-RZogmO9eOg7wvY8qpho0ZDBJw.roa (hash: VixBu6QgDFc5DCWX6FQX65MqOElfwl6wcnfqENZMKHI=)
                          11: T6mR3-KFJeRRNbnjA0MdG-paCZM.roa (hash: azKsQr1mx6zSrNZ5zF8QjQ+sG8Wu38uyyO9Q0GKkGN0=)
                          12: WyaTch93nnuUdKJN676HRr095bU.roa (hash: Lq0svvJRjDqd0Lj2Bse0EnlI2MLeVnRy4c6hCJasXu0=)
                          13: XbmHThqhegm3X2CpGaMeQwTQLRw.roa (hash: vLDcTRAExrtdUtuPUwQldeFrqz6FW7qGQVqQCCDw+hE=)
                          14: XlNKfL16XJLPa_aGq5XyGVCB66U.roa (hash: qisC7CG7W1z1XIcYgakJYJ8pS61h2tca3avFBdT1zWY=)
                          15: YF43CkXEz9n6jjpPRyM7kL2KdiQ.roa (hash: kwKXCe+A1PK8Edfga2H2uQuROxdgB1rv6d266H5MrDw=)
                          16: _gbiPfZ8FyMzwDJvDLcftg6qJOM.roa (hash: gNtlvEL87RY6L6TtulzX4Y6NiqiYyWaOKGidxBFmYP0=)
                          17: bl3h6ZfVwEVOk_eL1exW7PNMl50.roa (hash: M12cQClWea/9NN++58y0yTG/Rzc4VSzz8tlCaFI/s2E=)
                          18: cYyXk7kqoqCwbvbiOiTfwTPMNtQ.roa (hash: oh+QaFKfmT9iedFpWPEyuDNQ6Z1C+pyX0dwE9FaP6HM=)
                          19: fHJfbQdVy1c65w7yyFVXm8CE80A.roa (hash: mKYkkvRSiuIw83pBbnPFZlZiLjClCJ+nO6ayljch6fA=)
                          20: gFixDlHRxhs9l3gI2hC7tj3UHyE.roa (hash: R8TbSDDv9rdtcyRQNsV8pcnaZZi5Lt350XAIr87koq4=)
                          21: iqqeYY51DTF9rkXLQFuDyzmvEvg.roa (hash: j1zsk7JGZWdA28UJWEKsdttbruSv3qHTp0B9SarXgrA=)
                          22: kcJja4UdLWJwAhLbKjnkUPQ9NgM.roa (hash: 2dDz9plUd17/hvHhEQ5jBYYpMizQpCnsUxz+BelEswE=)
                          23: lpQJ0qgVLgSuy9rBbxxcGYhCyHI.roa (hash: WoCaTTJgXc93Rqn0Rd/9gOZautxVx5b3MaXCSXe5t4Y=)
                          24: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: RpeoaY4Le8ULJUoNObXi/gbA+sPdWX7zkzh+BzpFCIk=)
                          25: nTnCm9KTHVHV28qEkmz_WyNeDCE.roa (hash: fCgdtVWlO0IJDLwgHRAS3Wo9IPBdMJPjQW6+hymNx6o=)
                          26: rNvFjsakbdYO_4qiQ8d-6Wu8ItY.roa (hash: YC7PWz3Mp/Mmu1u8j9XvIsiLkat61Ev5ijQTxDgv90o=)
                          27: s0wC4R286yUnEohDK10Gck80Hqo.roa (hash: /h+hJLaIh7UvEKDll9eHT+h8syLDtHjDRvM5gf9Hyaw=)
                          28: tfTjjOAMSUGwFesB85GwFzVOyOg.roa (hash: DZ01sfyvtKIOAWNrbijdMgZ0Cf0i0izBgKNLMbH9quI=)
                          29: uIurjUgBxRijsZge-_WCNFbE8yo.roa (hash: gDxEyYNu+jNIztEKwbSSR3t7DSic+w+j8CocRM+0phY=)
                          30: uaQl9fIG7wYnk4sEE7D4hHgn1Fo.roa (hash: TXeYVn4gXm7PzuXgFKoniOj7kHYGLsJ+qZWCk6uTAKw=)
                          31: y5SuKmcUemt9OJc8wj1yplgBTMg.roa (hash: 87ru/b996XrJAfTEL9AG3yc21G1405lwgbLevUSPwbE=)
                          32: ypKIw29x8YTg8tnz-vAi4FIsf38.roa (hash: TtYEZ6ZVpvWvP9Y7o87J2muRcefbeQ/2cepoRBTme1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:f3:5c:5b:51:61:8d:cd:52:d7:7e:36:d3:8e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Nov 22 06:00:16 2024 GMT
            Not After : Nov 23 06:00:16 2024 GMT
        Subject: CN=2bfd6c76036ec79a3f247d9c1e796111bcfcf303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fb:86:c4:28:26:21:a5:f7:3f:a8:fa:86:39:
                    b4:1f:8f:cf:eb:a3:52:5e:36:ab:7a:e0:fb:1c:1f:
                    61:93:19:c3:35:e0:c6:da:d0:82:6e:34:06:aa:d9:
                    25:7a:bc:ce:e6:df:c0:ff:fe:d1:96:82:67:e5:17:
                    83:c8:ff:af:64:8f:6a:57:38:31:c7:52:56:ee:67:
                    55:dd:b2:25:db:8d:10:b1:be:60:89:dc:fb:ae:eb:
                    95:7d:5f:6c:fa:66:d3:03:14:28:cc:78:70:a9:5e:
                    86:8b:94:b4:d4:bf:ee:cd:b4:02:6e:ca:b5:23:16:
                    5f:c8:af:2e:ec:cf:f1:79:3b:d8:52:ef:23:b1:d0:
                    f9:6d:1d:64:4d:63:14:3a:5a:35:aa:b6:91:08:79:
                    93:ce:5f:f5:29:fc:89:ba:81:99:a6:52:4e:ab:7b:
                    a8:75:79:4a:33:b6:21:d6:58:bc:59:7d:f8:46:3e:
                    fd:41:d7:a9:ff:74:64:52:8f:1f:29:7e:79:e1:6f:
                    06:04:6d:54:eb:bc:d5:4b:c9:d1:10:c2:7e:55:f1:
                    88:a6:ff:62:de:a4:ab:e2:c3:29:eb:1f:1b:64:3b:
                    e7:4a:ce:71:d6:74:dd:49:6b:87:70:f8:5e:0d:be:
                    d6:19:77:30:4d:04:0b:53:f7:db:d4:8f:21:90:be:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:6C:76:03:6E:C7:9A:3F:24:7D:9C:1E:79:61:11:BC:FC:F3:03
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:00:d5:e0:09:47:34:45:01:4f:47:10:ee:27:18:f0:b8:
         50:ed:77:e5:73:f6:b0:81:05:31:f1:25:df:c4:33:87:16:72:
         46:64:7c:0f:68:65:85:c3:35:f6:9f:d4:d6:47:b6:37:be:a7:
         2b:df:69:9a:f5:15:f7:7d:96:f5:99:02:47:b5:7f:45:a6:f3:
         4a:1b:7b:a4:50:f0:37:42:01:75:76:65:8b:91:9b:d4:59:e5:
         9e:c8:94:d1:61:c7:c2:0e:de:f4:49:b3:d7:e5:c6:84:c4:4f:
         71:d6:40:4d:27:57:03:6c:56:67:b3:d0:06:ac:f5:fc:8a:03:
         5d:60:e6:d8:7e:23:46:ce:5e:c4:50:7b:11:b0:53:34:d7:c1:
         b1:de:20:5b:5c:c6:5a:72:ec:b9:6b:fa:97:c7:42:00:52:77:
         37:c0:1e:ad:f8:9b:d1:b0:87:53:48:b7:b7:d6:69:31:fe:f1:
         cb:c0:20:73:b6:88:46:22:60:9b:3b:63:30:13:0c:d0:93:6f:
         28:b8:6a:7a:b9:98:12:dc:26:94:a9:11:96:60:2b:b6:73:60:
         7e:98:8d:67:2a:ff:57:98:eb:ec:33:5c:be:99:07:c7:b3:bf:
         4c:b9:9e:ba:a0:f4:43:5a:d4:8a:47:d9:a3:ee:08:25:eb:98:
         a5:96:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:26 2024 by rpki-client on console-ams.rpki-client.org