Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          htgHlAIihpDvEL+Th/Pfs608nymj4dpkiHfaYGE5c+4=
Subject key identifier:   A3:0D:3C:3B:64:29:42:56:29:8D:2B:C3:C8:E5:5D:C8:A1:A8:B7:6A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       018E874BC4D780504EAC324DDF71EE668D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          0DC9
Signing time:             Thu 28 Mar 2024 23:01:13 +0000
Manifest this update:     Thu 28 Mar 2024 23:01:13 +0000
Manifest next update:     Fri 29 Mar 2024 23:01:13 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: jyK4RzTs8L4qWOJDw4cygMMDQs0leOtZ2sAlOcRUHqE=)
                          2: 1di0SHoAl2So5qpWSQx5lv_aE8Q.roa (hash: O9M0JVoOzlE04yGK0Z8G0D0nabgqZhVoWHJNLliVBos=)
                          3: 9eRLttLKX9aaoX3cBUiU1_4oq2s.roa (hash: rJLnY8IeXYDtDtuW5/p5kSMdT/VgapfsGeJbjzQoOZk=)
                          4: DI8duCW76071m7AyYASnqXfmulc.roa (hash: Wx+rBA3oWSxWuTGDtAaAZtO2DuVvCJk+kPoyRK9lsVs=)
                          5: DqcjcKl6dm5ywICzUJzxEgP5pnY.roa (hash: X70bJsFT2ae+IchS2c8+ElmUpkbyeRwwGDtIcMYEpeI=)
                          6: GMdYD1gZjTT--L-XjLXnAt0aSpE.roa (hash: HJ9cyMuYEmwS6q5jmT9nfUukiObn/2fBkEo3zVpPQuo=)
                          7: HQYbe_-Sx3CzD3NtTm4sxYbxiY0.roa (hash: eotqCZY7+68gCvV7weUhzYf7Y17m9eYTG80yQlvY0og=)
                          8: JD7qqSlETTih7CpgOICwdI3mlSM.roa (hash: Ux+beEXh74k8b44mOn/cRwnpXbQLWXrka72JkHiC7pw=)
                          9: NJkAG0smHPwLJvBxd33DEC2x70o.roa (hash: YFZGhY6FyN085NdJstWBq5YomTP6xa8VqZ7+C0OH62Q=)
                          10: O5fY0dSox26D7GpBl6WYeHCXWtY.roa (hash: AcH/wkg0XO9teSKf+gsva1aJzG/hvqGDEc/bEu19Wbc=)
                          11: P5LEslOWOFS_TEUDdJu5_bWioHU.roa (hash: 9vMYZslUktrljripeCiTFEV9AQsgxJGANEzqRzAlqFQ=)
                          12: PyUxaWOGMjNI4CPYCq0P2TXHufo.roa (hash: HUecMyXCqgcAuQNF7OoOABKoVC3GFnpISGe142ET5rs=)
                          13: SHz5XfWi0MsdPS8zsi7AdSGKfmQ.roa (hash: 9zCPIq+NeESF3ZV47dfbpBxS7JePPAWc8r597uu2tX0=)
                          14: SxQiwl9wBCssmwPLiGBIskaNcHU.roa (hash: JHWP1S2txDI9Eyb7YHcVGUvbqcHn/f8GMdaq9f/MpLc=)
                          15: T_IuZ6Idwt5WwKkbtWPNPQm7ZLs.roa (hash: Uyl84L/mqoMC639+8r0Y0GUuyYAjPCMAh7Wt8Rcr//g=)
                          16: UxR31cTLFHAROLkRctwNU5PMLGE.roa (hash: JFE1iMSdxGdqGmUD3xsAqICrGjnNVAmqkT6HcrPwo3I=)
                          17: WS2XOWLR_RTbvcpzD4nzIsX0cLI.roa (hash: RHw5MaSTIPHXjIzLMkX/D7CQ10eDnTJb8xuGeDnG0x4=)
                          18: XDQYkplGvEwobT9wL6phiHMawho.roa (hash: ZSIPJghoaAEei45qHKTMqiIYssAU0Ng0OfGpi0Go1S8=)
                          19: YLv3CkeXxaWijin8d94LCfLR7zI.roa (hash: Zukf61MrHFBHY3KUte8hIKAvgod77p6XjHrJFDXwg6Q=)
                          20: _EvqZGMEFvAEt0MPdCjDQjmeSjI.roa (hash: /2RdANr5Uvf/wEEq1HMYYHMg3XqAYzAlqZUbNES3q1s=)
                          21: dftdL0t-EXs-lONPKB-773pXyAU.roa (hash: avVYs7GuiW3qZEbevEySaxe43oBQGD8AcC9UIUIOqtY=)
                          22: eWCKoH-fvQB_ToRur7hJiXAzZDU.roa (hash: 7IdX1+cwrP2leEyw5r7pX7/DO2yywooqopDvYVMkBkc=)
                          23: gsr-g8Tt1IU9iQG0YBOQnq-D-Sc.roa (hash: S1i16IvCMbfXU0FJMGWtt5fyZxqDv2z6a7GPuONUXd8=)
                          24: k2I-tCQUegInI91o0QfatWm7goM.roa (hash: XK0fY7HdngcoVbvV7SzMMWnk08U8DhCnM34ppF8gNL8=)
                          25: kGf9S_SXeiln6TJ4MXQGLIzpdmw.roa (hash: S6dws2zcDJOaPp/Hd51NbdK/0ZoBjPyoc/lilY1Qb9o=)
                          26: kTPZtToleQ3PYh2UVJDfDaerGzw.roa (hash: tsahNYkSlVf+9r8GH/w53gDbVu8Bv1AkOsdNByL602c=)
                          27: k_sLAon_QYyYoj6_EaRBBIDujYU.roa (hash: HoHym3yuH1YLAqw9Pl8rMG+KrpLJP08AatrxeboOI60=)
                          28: lS_7IMF-p_OtU3DTUIjtws51RJg.roa (hash: rexSeLCdQgG/bo4ZfFHDlDDCRhszOmEu8h+czqWrXA8=)
                          29: mwjhL5HFtacyVGVbKcI7bmas5yU.roa (hash: LaMHrF/LZ7s+HKxG2dFzWGjhVDG5NxT2dGU6xMcM2jA=)
                          30: pNnbLGV3WqSDn3Z1OVzi4lBgvMg.roa (hash: QBvE6oayJXqk4CtF0Epv7/8CquYet7d9TBM79by7pPA=)
                          31: qUMrjkhliwdLPVM5HlicbGyp6Jw.roa (hash: iwiQ1XsPUb85br17My9zlyueZWdPJGLF1gbTSo4twJs=)
                          32: rVQkk2NuniU-ouxqYLiRmvOXpyQ.roa (hash: RTF+qgHFIX0oHl9UdBY8NZR+A7k0SHqraUlrdiDODys=)
                          33: sXwbp-RpnCKD8z5fBl0oWopo3nM.roa (hash: uW6Al6dL6zpFJ4tENjtKoBJ5iSchnT+dEEpPgOrX/kE=)
                          34: v8ZOjgKR38oCOBFX_BeNfMIVvtU.roa (hash: lcHIZVbiyymk5MiO2QEQCqViJcaXgwpNXBbpT4Yr3hQ=)
                          35: vAF6sleE-od_mzkjUN7qaU3Blm8.roa (hash: MAHiZDHbKlUdrozq8vby5YgZPE3FjM6MPm9MJSQ49NA=)
                          36: vHHc1rYjeLS5tRcSyobhnibNJKo.roa (hash: vxhlBu/I7O2alnWz/l+vVxCLK+Xe8FgT8vzBeVXV1pc=)
                          37: x1nPvChO1kszahrTOEMfbrKOz6g.roa (hash: 7323Ixgg+ylx6l31xKsyYud9ekAGaB5BCYMRGopKhUM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:87:4b:c4:d7:80:50:4e:ac:32:4d:df:71:ee:66:8d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Mar 28 23:01:13 2024 GMT
            Not After : Mar 29 23:01:13 2024 GMT
        Subject: CN=a30d3c3b64294256298d2bc3c8e55dc8a1a8b76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:72:c1:e3:11:b2:47:ee:c4:9a:26:52:9a:
                    aa:d6:da:f6:5e:5d:b6:53:3b:f1:be:aa:7d:ed:c8:
                    8e:63:62:35:33:b6:bd:57:ef:4c:7d:32:50:d2:b5:
                    c1:50:01:28:ec:37:23:1b:34:b2:bc:ac:da:ad:18:
                    7e:3d:34:b9:5c:d1:32:41:5c:c9:89:41:66:55:df:
                    fc:cb:27:a3:99:f0:a8:55:42:c0:d5:e4:cd:8b:4c:
                    73:4d:0e:79:0f:3d:cd:29:9c:1e:d7:c1:2c:4b:1c:
                    1b:7b:35:07:47:9d:0a:3a:15:70:bc:a6:3b:da:49:
                    8d:95:45:71:ab:12:88:4d:5c:97:3d:13:25:2f:c4:
                    0c:ce:ed:64:6b:44:6b:8a:45:1d:b0:fd:99:12:5a:
                    03:af:d0:e2:25:c4:3f:25:62:d6:95:5a:0e:f7:b6:
                    3c:8d:13:8a:97:f4:eb:61:b4:99:24:50:c7:29:e2:
                    1b:e3:23:f6:68:30:73:5e:38:ee:86:d7:64:69:8b:
                    a4:0e:0d:b5:96:48:3c:71:09:51:20:aa:07:cf:f4:
                    7b:fe:9d:c2:06:0f:30:77:36:ad:66:ac:d7:02:1f:
                    d9:a1:a4:9e:1f:bb:71:f5:2a:d1:e5:4c:c9:6f:a9:
                    fb:fa:2d:16:cb:3e:85:b9:33:a9:cb:cd:3a:2d:84:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0D:3C:3B:64:29:42:56:29:8D:2B:C3:C8:E5:5D:C8:A1:A8:B7:6A
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:22:b3:60:57:43:42:ba:c9:00:0f:28:04:16:85:48:c0:
         38:0e:61:aa:30:ae:72:9c:1c:dc:94:d4:60:c1:d5:ec:c6:26:
         63:f7:52:eb:cb:6a:49:c5:f1:11:1c:6a:34:6c:34:48:38:e3:
         6e:36:84:99:33:c2:74:ed:e6:91:82:a3:2d:33:8a:e4:03:e6:
         40:fb:38:3c:9f:20:ef:5b:e7:9e:77:34:0c:f8:33:c9:03:74:
         3b:6d:42:08:19:17:30:92:9b:49:6d:81:38:50:2b:bc:18:82:
         ec:67:8e:c5:d7:26:17:32:2a:63:4e:a9:57:15:ad:e6:36:1c:
         fa:96:78:a5:f6:99:11:04:33:f6:72:b2:c6:48:cf:20:13:e8:
         db:87:30:76:68:47:54:f0:46:90:20:79:79:f8:8a:14:4a:5c:
         26:ef:70:6d:5f:6a:94:c9:f8:e0:2f:3e:96:d0:97:74:d1:dd:
         a6:d4:7b:5c:64:b4:ea:fa:42:f7:0d:07:b7:37:52:b9:a2:d1:
         d9:da:48:69:17:46:de:fa:54:72:d4:56:f5:d4:bd:01:74:fe:
         af:ef:f8:c6:c1:d7:6b:82:4d:55:04:c0:12:17:78:57:f8:e7:
         bd:41:e4:84:b1:e2:08:01:5f:f6:9d:8d:64:62:7c:e3:31:81:
         9b:27:54:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY6HS8TXgFBOrDJN33HuZo1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwMzI4MjMwMTEzWhcNMjQwMzI5MjMwMTEzWjAzMTEwLwYDVQQD
EyhhMzBkM2MzYjY0Mjk0MjU2Mjk4ZDJiYzNjOGU1NWRjOGExYThiNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBFyweMRskfuxJomUpqq1tr2Xl22
Uzvxvqp97ciOY2I1M7a9V+9MfTJQ0rXBUAEo7DcjGzSyvKzarRh+PTS5XNEyQVzJ
iUFmVd/8yyejmfCoVULA1eTNi0xzTQ55Dz3NKZwe18EsSxwbezUHR50KOhVwvKY7
2kmNlUVxqxKITVyXPRMlL8QMzu1ka0RrikUdsP2ZEloDr9DiJcQ/JWLWlVoO97Y8
jROKl/TrYbSZJFDHKeIb4yP2aDBzXjjuhtdkaYukDg21lkg8cQlRIKoHz/R7/p3C
Bg8wdzatZqzXAh/ZoaSeH7tx9SrR5UzJb6n7+i0Wyz6FuTOpy806LYSmpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMNPDtkKUJWKY0rw8jlXcihqLdqMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNcis2BX
Q0K6yQAPKAQWhUjAOA5hqjCucpwc3JTUYMHV7MYmY/dS68tqScXxERxqNGw0SDjj
bjaEmTPCdO3mkYKjLTOK5APmQPs4PJ8g71vnnnc0DPgzyQN0O21CCBkXMJKbSW2B
OFArvBiC7GeOxdcmFzIqY06pVxWt5jYc+pZ4pfaZEQQz9nKyxkjPIBPo24cwdmhH
VPBGkCB5efiKFEpcJu9wbV9qlMn44C8+ltCXdNHdptR7XGS06vpC9w0HtzdSuaLR
2dpIaRdG3vpUctRW9dS9AXT+r+/4xsHXa4JNVQTAEhd4V/jnvUHkhLHiCAFf9p2N
ZGJ84zGBmydU/w==
-----END CERTIFICATE-----
Generated at Fri Mar 29 01:13:29 2024 by rpki-client on console-ams.rpki-client.org