Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          5LPxZJp+rlTPXhtcFJelmDqZyqNsjBHzymdTDCnRhSs=
Subject key identifier:   9E:7F:86:42:C4:86:64:3F:F0:21:4A:C8:BC:84:4C:DD:7D:F6:7D:62
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       018F527FDA0A0687050DB2FD7FA763C88D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          11AC
Signing time:             Tue 07 May 2024 10:01:01 +0000
Manifest this update:     Tue 07 May 2024 10:01:01 +0000
Manifest next update:     Wed 08 May 2024 10:01:01 +0000
Files and hashes:         1: 0M8dHOR3N6Yqs8c7D9SXQVKoeuo.roa (hash: 7PI6J6p+AI140d65/Vv8UoW9lS1OX2GTolBAhKPWS8I=)
                          2: 0THHlFhvudsWJA3WEX0HVTrJJ94.roa (hash: nkKdFOeUVfOn1DZqVKoq0bIZBl3qp8Q1Ceh3aCvm+aY=)
                          3: 1-5Or1skQaOMZiKEq5SJSLGOpVqQ.roa (hash: Doqm/GzZcC8e464VUOHTG92LAb80U7tiAlp8evsRpYE=)
                          4: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: itYd2GQs377jCYVeSyj+7aF74Bs2sC5kURPNT5FrDJY=)
                          5: 43M6XtH0N9krXh_JN3jZOWOBd1s.roa (hash: ZDfvI4PPOnsbJp/YQ7aPXAVjkSnVLk2nXpjbceLvXAI=)
                          6: 49Za3blXOjp8GCnz8bABQyC7_dA.roa (hash: k8/bbPZAqw5dk6tmtvy67B3qtKPZxLl+fxBLZbUpPeM=)
                          7: 7gFne-1PqUcABtA1v1Pb2dm69Wg.roa (hash: aqfZ4/kRxjZJBnnIGcEnCycjg+IhGiINXChoDLU5oD4=)
                          8: C5ef8rW2_73O_BUyMDsBz1j3dKw.roa (hash: LIKwHQ5iuEKbKwIeGhU7KNUmHIKpFBoAMTrm5uuPxfg=)
                          9: DR-HuXEICOc7JGgtKLOnnWgFkyI.roa (hash: z62iSeKbYQECpTNixoU8sU83ED/EDF4AIfgDNk0fryc=)
                          10: Ec9reM2nUGASOFcJnvgSSYfpHdU.roa (hash: E+fzwblQi9lt/nfsRh06Nk/N5PbL02/A3YmlOwy0DtM=)
                          11: GMb1FTJUsyEhvCMLVNqgU0Jabjo.roa (hash: /r4OdjndLWOXXQEIOfDEz+oGq467Gr3uh+KnWjJKcjw=)
                          12: GR9JIYL-GwHYKwF_F3fI5cVYHIw.roa (hash: HCucHems+RldWH46hS7ILhnK+ZZ509STqsRHwqhwOvM=)
                          13: QRVhwubhTibIe73r-9jKpkQoPVs.roa (hash: Mmf5lF/NMDS3mDElX6bkZc7sEYFTrSjbET/BLIhIxSE=)
                          14: R2wgyTd7ibQ1MGlwUyY261WjTdk.roa (hash: Az+5cbV50c0dQ3ghd0d3XId3jctmopubRikbfkat8Gc=)
                          15: TDJGIu5IJsBzwPORP3bWEKQt0xg.roa (hash: FFgbKX5mMXH/8E5HLXzK3kaVMNhBYqdgDvPbVm350G4=)
                          16: WRURZ90iORUowsL9eiGN4bsYrJ8.roa (hash: 9I7u9k/Qo8C6EsT62C9LgA+v9MOHPI8TB1jm7hcIfHU=)
                          17: bCySHOdChuhPGPbj9pU3K2CrVFs.roa (hash: 7vh7kCBZ/fwbD0QWDSHqo+QjwefnW0fS1wMEzVRvSvw=)
                          18: ctgoqT_Y1tUMH4mKIOLBliE8kKM.roa (hash: QVDxyBAhZvc6avwPRODzMq6pIUzD1LVHTmyl5zbU6vs=)
                          19: ddiWfPNCeXdfgl5dwPDag1NmkHE.roa (hash: qUNNF6kTLXeVlWpMfyPieSTUv6Zida4rHy4r5EpD7MQ=)
                          20: gngOYDeihWoZ9_i87i_K2TzuLv8.roa (hash: aZMTNPynVs4XsOmtSt173kPg9jJEKkQYVwyFGaMUVh0=)
                          21: iUbxsceCmjTiCPz5tfZxcCG-8Ns.roa (hash: yU8lXGJCLTB9K3+97zOL7j/6oevs6suWud2yUV91lCU=)
                          22: mI_3V_JONtrZZfV-JBI2c0n-yTk.roa (hash: jHyPIJPJYZdzohDciFXa+T9ASvQd0GATH+WNQSflCgw=)
                          23: s0O1F1_bWUBWhbNpo_MEBpj6zyc.roa (hash: CN3MNX+Ce+ejGr2Sy6EyOau3fX9NRGsrCCEU1n0PnNQ=)
                          24: xJUmd6mvV4bDtpVNWuuFNHzR07Y.roa (hash: 1dkOgR2PHb2WS5N0ufQq/K8ieSB8OJyMCh5GHeBA15Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:7f:da:0a:06:87:05:0d:b2:fd:7f:a7:63:c8:8d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: May  7 10:01:01 2024 GMT
            Not After : May  8 10:01:01 2024 GMT
        Subject: CN=9e7f8642c486643ff0214ac8bc844cdd7df67d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:e4:af:16:49:62:f9:75:eb:08:1a:46:57:
                    b7:72:68:41:3f:77:c2:0c:7c:82:49:bf:e2:45:0a:
                    c5:df:d3:29:2a:ef:37:98:6c:88:38:ab:0a:a3:f9:
                    93:54:00:31:eb:89:08:39:d9:1e:50:20:d4:45:1a:
                    da:a0:91:ec:fc:49:f1:15:86:4a:7e:f2:1c:4b:37:
                    c8:0a:2c:2e:c7:33:9a:30:98:ed:80:c6:6e:03:0e:
                    85:bb:bd:26:6d:be:9a:93:d6:7f:48:4d:3f:84:c9:
                    1f:a8:d7:21:cb:c1:3a:21:12:0a:06:88:fc:f9:47:
                    0a:d3:bc:8c:3e:8f:ab:e9:b1:ea:de:74:ac:58:78:
                    57:f3:6e:51:f9:63:0c:c9:77:49:03:f2:d2:53:f9:
                    38:7e:39:9d:c6:e3:c6:0e:20:44:2b:e9:2f:7b:0b:
                    5f:1b:da:b8:82:eb:50:68:8a:2c:80:95:ef:f8:a8:
                    3a:72:b4:7c:75:f3:94:6f:d7:20:ce:47:22:a4:12:
                    52:20:77:7a:8d:40:33:1b:18:22:3f:8a:54:06:bd:
                    83:9a:b6:15:50:f4:e8:f8:4d:69:d8:87:24:20:b0:
                    b6:7b:de:1e:1c:0b:16:2b:4d:04:2c:68:da:43:f8:
                    ca:d9:99:14:51:96:5e:56:7c:13:d6:c2:50:9d:b2:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:86:42:C4:86:64:3F:F0:21:4A:C8:BC:84:4C:DD:7D:F6:7D:62
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:df:9c:d6:95:c2:fc:ae:62:96:13:7d:48:48:f8:a4:78:76:
         f6:64:b0:ee:c6:e4:1b:d2:1a:d9:f5:37:2e:5b:6f:91:f5:98:
         49:ea:d4:42:6d:3d:68:26:49:5b:25:92:c3:82:60:24:25:3a:
         f8:b6:e4:9e:b3:50:4c:a8:0e:70:5e:27:7a:ac:35:1b:c3:60:
         80:d9:86:b2:f9:65:29:16:91:fd:0e:e2:03:a1:81:ae:8e:a0:
         6a:db:bb:9e:5e:bc:da:50:6f:dc:50:d7:c0:c6:49:12:40:c6:
         0c:57:1a:45:4c:b2:ac:67:f0:6f:04:54:ac:6f:ce:fa:aa:6e:
         7c:c0:be:c5:05:c8:08:03:da:07:87:d3:93:02:bd:bf:a0:2e:
         07:4e:49:ef:35:08:34:16:02:f1:39:fc:50:32:9a:09:d3:90:
         b0:b8:02:86:59:35:03:ab:5b:d4:85:e5:25:9d:dc:51:b8:d7:
         9d:b5:5f:4b:2b:63:a4:19:c3:f4:54:6b:08:50:0b:b0:a7:86:
         fd:36:75:e3:4d:1d:47:49:c7:31:c8:86:d2:11:a6:89:18:5b:
         ee:8b:1d:a6:07:5f:68:fe:bf:46:d8:1a:65:3a:1e:9b:ac:8d:
         64:54:48:91:65:ab:72:44:db:83:e7:08:42:ef:5d:ff:dd:48:
         77:2f:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:08:02 2024 by rpki-client on console-fra.rpki-client.org