Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          xsw2tqePzeqkCpYEZMMNqlRz/PTjPcSDOXFS5jkZ7R0=
Subject key identifier:   0A:50:B0:44:02:AB:63:0F:EE:32:CA:E3:B3:C9:07:1C:4B:FB:A2:C1
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       018F3CD4076F2E76D6803F9E8F66DB66A93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0778
Signing time:             Fri 03 May 2024 05:01:19 +0000
Manifest this update:     Fri 03 May 2024 05:01:19 +0000
Manifest next update:     Sat 04 May 2024 05:01:19 +0000
Files and hashes:         1: 0FmTnBMnuM8CqJKRzbeXAkp0I4o.roa (hash: i629uKssaNv3QUt1y581X9Lg1jqct2mganKXsSuOIGA=)
                          2: 1-VJwgbKCQbjnWsAOmvQzwQQL2I.roa (hash: 1cSJCbLXLvV56b+3dPMZhn5LwzCYtSYMBQw2dOKqS1I=)
                          3: 1-iHgS7mD3dzHH1w8lcnayA3cmmU.roa (hash: 6goMk1Kr7rz810o84x0pUgRnU14FKOLkmHsz+YXSL3o=)
                          4: 61Z_0Yl1Ls-nqVgKYxVDPpYV6MA.roa (hash: ddla1jqlqBDLe80bR0Y1WoLELnKy80MfpN9DNdZ/xao=)
                          5: 97OsD3yI58_k6wsFCud8i7hhIhY.roa (hash: ZqG8JmykGF5hsCwxyVm1KVGMWLog90mSmx3+LJlh2JM=)
                          6: CWf_qK9Xms_E5BzAHckc9nJFJoQ.roa (hash: peq/pAWODx6eOku2RmbnvEUO7g3/C6DE5qNC+zODJjE=)
                          7: ERH0M8rBZY63h5hGwmwrgI0jkUQ.roa (hash: 2AULkqQRDVYaR9FJ2OUk2FKylspp1AqXmGZcuJi6gsw=)
                          8: G2uYqyKdzHx8Ts-CoIv7al2Q3RY.roa (hash: ReXyvqIbYYC4U0IB3LS0BjlhdA3A6DRbPO3zdzNEV4g=)
                          9: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: wBExdZXZCTp8u74JIoTTVissPJ1PXw/AoVvs+2/ICl0=)
                          10: V_t8dxwfbbAmHrUMP0owL-KHOyI.roa (hash: nYXqPGGa+VpMEzCTf5skAH0H2zY6c2C3bfYxubFQzrI=)
                          11: WzNFl30SpTGro4t1aTCIojupjOk.roa (hash: igNH8Jfb+KjGNL+hvMQ+ENVPWn2UsTTD7oMm+mKGLjQ=)
                          12: ZzulzD395cBSoKuykRMGZIjsMfs.roa (hash: TXF2QL7kNoMHjVcEZ34yU4bm/vfjsSnRV79piYD8Kbs=)
                          13: a2WW0_7N8tPOLevidLaWxdzOVCo.roa (hash: s3Yc575DPaM3Q5O//GaVHB1jatiXf1PeLam3YIIiuIg=)
                          14: dmHMJaRnXcooVoAGEmQNVEEkj-c.roa (hash: lSIVb2yGgPGT4Lw+8aYfejS0fIyMOajul31WaxiAuMo=)
                          15: gewsFfibh95H4MSKhsDnj393ozg.roa (hash: JzEG6jVuV+4DaqtNuVMqfAbXRmPwWOszoeMuYYqG4co=)
                          16: iyfQ4fQn8FUSvWOQoTRQwotwxhs.roa (hash: 0EHWFey/1Qz7WrE2ehGnf95LJeN8UUGRJFFSyYNNKqo=)
                          17: jLgR7wU8jpfqYagjR4kV3UJaZQE.roa (hash: mE5Qrrp0Eqmz1hXxUIs82XsIjX902aX34pfC20ak1bc=)
                          18: jsgLkfgxBptAvj17kkDR4qjAyLk.roa (hash: 6lWgM9untHlAdvo2Avy6egquV0IHp63V7w7n9lOYQu0=)
                          19: kKL50WbZsD6OfQmp80uotWvJNpo.roa (hash: OH3QSN4bN2jDTNJBfAyXQrq98x0xm0sOK3vvWf693YM=)
                          20: wbXZXmDtfX06mZznQ42RomlcMh4.roa (hash: JtwXSk0P9RPCgrVpsPf+QRdS3FAcDJdV4Cu0CCdyd+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:07:6f:2e:76:d6:80:3f:9e:8f:66:db:66:a9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: May  3 05:01:19 2024 GMT
            Not After : May  4 05:01:19 2024 GMT
        Subject: CN=0a50b04402ab630fee32cae3b3c9071c4bfba2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:64:e5:bd:8d:46:ba:f9:79:57:98:e2:52:
                    a3:74:67:66:78:1c:79:f8:40:02:06:31:ba:3e:46:
                    77:24:2d:24:f0:1f:d1:ec:79:f4:da:5a:e5:48:2f:
                    e9:0e:01:23:4c:c6:bf:2a:37:25:c0:fd:ab:27:22:
                    7c:89:14:61:19:17:84:1b:7c:bc:3a:cd:cf:cc:38:
                    f0:0d:4e:03:da:5e:85:bf:65:23:01:6c:4a:64:25:
                    43:67:c4:59:75:e8:d3:15:11:66:72:e4:b5:aa:6a:
                    67:7b:56:60:41:c6:47:dc:ed:44:de:01:55:62:31:
                    14:87:63:31:90:94:43:e8:fc:c9:9c:cf:eb:fa:5e:
                    09:60:a0:71:38:09:9f:f8:ac:dc:c3:11:87:ee:c0:
                    84:89:05:4b:36:25:46:de:69:4c:6f:41:0d:d9:8c:
                    cc:68:5d:19:e9:1a:0e:5f:2d:c9:81:52:0f:09:21:
                    4a:49:2a:4c:8c:f8:14:ba:4f:ec:d4:5a:a3:bb:2d:
                    5a:45:45:01:5a:48:ea:e9:5a:78:37:11:22:75:84:
                    8d:be:fa:e4:ec:a6:65:df:88:ad:0f:ba:29:fc:68:
                    69:c2:1d:33:71:55:8a:5c:80:fa:4b:39:cc:7c:2c:
                    6a:8c:8e:7a:ee:66:3d:ee:d3:85:83:51:c8:d1:62:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:50:B0:44:02:AB:63:0F:EE:32:CA:E3:B3:C9:07:1C:4B:FB:A2:C1
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:70:8d:ea:ae:15:6f:ec:2f:87:87:0d:5f:38:d8:70:0f:91:
         02:33:4d:d5:d5:38:63:f4:21:a3:ba:79:4c:ca:24:33:67:26:
         d3:95:fb:9d:ab:1a:b1:9f:ee:86:c5:fb:a2:d4:d0:eb:87:35:
         89:77:de:51:3e:21:0a:80:8f:5d:ab:a1:20:a6:3e:86:a7:f1:
         28:e5:4b:21:26:97:8b:66:1f:b0:88:57:3b:18:cd:5c:81:78:
         fd:85:9b:a8:7e:16:89:e8:59:d7:46:57:0f:4f:bf:f0:83:e1:
         e4:2a:57:70:72:0c:21:5a:6b:54:48:fd:48:3f:3e:35:87:c6:
         a7:de:41:03:bb:b8:c1:e7:3a:77:33:b6:11:31:fe:0d:14:19:
         35:80:92:49:3c:61:a9:67:26:3e:f2:0c:63:e9:b1:69:54:af:
         a4:21:81:31:37:27:9c:46:2f:9c:fb:99:c3:5a:61:96:99:75:
         87:e7:0f:56:af:1e:6a:01:79:67:3a:d2:f9:e6:7b:81:b2:64:
         de:99:ba:4b:df:82:67:87:ed:29:85:73:43:86:ce:a8:04:c2:
         57:2c:aa:f5:89:89:5b:66:eb:b6:ba:e9:91:a5:46:e4:69:19:
         b8:c7:8d:15:b2:27:18:98:d4:ea:6c:2a:56:c1:30:73:b6:01:
         4d:80:2e:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY881AdvLnbWgD+ej2bbZqk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjQwNTAzMDUwMTE5WhcNMjQwNTA0MDUwMTE5WjAzMTEwLwYDVQQD
EygwYTUwYjA0NDAyYWI2MzBmZWUzMmNhZTNiM2M5MDcxYzRiZmJhMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjBk5b2NRrr5eVeY4lKjdGdmeBx5
+EACBjG6PkZ3JC0k8B/R7Hn02lrlSC/pDgEjTMa/KjclwP2rJyJ8iRRhGReEG3y8
Os3PzDjwDU4D2l6Fv2UjAWxKZCVDZ8RZdejTFRFmcuS1qmpne1ZgQcZH3O1E3gFV
YjEUh2MxkJRD6PzJnM/r+l4JYKBxOAmf+KzcwxGH7sCEiQVLNiVG3mlMb0EN2YzM
aF0Z6RoOXy3JgVIPCSFKSSpMjPgUuk/s1Fqjuy1aRUUBWkjq6Vp4NxEidYSNvvrk
7KZl34itD7op/Ghpwh0zcVWKXID6SznMfCxqjI567mY97tOFg1HI0WK4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApQsEQCq2MP7jLK47PJBxxL+6LBMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnCN6q4V
b+wvh4cNXzjYcA+RAjNN1dU4Y/Qho7p5TMokM2cm05X7nasasZ/uhsX7otTQ64c1
iXfeUT4hCoCPXauhIKY+hqfxKOVLISaXi2YfsIhXOxjNXIF4/YWbqH4WiehZ10ZX
D0+/8IPh5CpXcHIMIVprVEj9SD8+NYfGp95BA7u4wec6dzO2ETH+DRQZNYCSSTxh
qWcmPvIMY+mxaVSvpCGBMTcnnEYvnPuZw1phlpl1h+cPVq8eagF5ZzrS+eZ7gbJk
3pm6S9+CZ4ftKYVzQ4bOqATCVyyq9YmJW2brtrrpkaVG5GkZuMeNFbInGJjU6mwq
VsEwc7YBTYAu6Q==
-----END CERTIFICATE-----
Generated at Fri May 3 07:17:58 2024 by rpki-client on console-ams.rpki-client.org