Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File:                     zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier:          c/aboVfgMRkfaRA2oDwlxv67u82XlgXGdwflIdpkffk=
Subject key identifier:   88:F3:F9:85:EC:DF:8C:35:EF:27:8D:8D:9B:B5:DD:D0:02:C8:BC:7C
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer:       /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial:       018F877F325E868A24EE6E830AAF95E6B92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number:          0965
Signing time:             Fri 17 May 2024 17:00:10 +0000
Manifest this update:     Fri 17 May 2024 17:00:10 +0000
Manifest next update:     Sat 18 May 2024 17:00:10 +0000
Files and hashes:         1: 1KPRYiPqNgQkD01y-4yIJyq1o-w.roa (hash: vYNmtXPqjQQxCJ3MQHJ0qJWlREkvvbPGFOjD9GAfJTM=)
                          2: 6c37zfN0inDJdqY3dKyontcC8e4.roa (hash: tAEVHarb7ccO9o50JmGcQPkkYRnm3kEJUfLc0wIPuKk=)
                          3: 8T-3kj-ea0P6832Po8m37l7g5i4.roa (hash: DIuLz4hzZyXpmZuN+HLumeezsf/kGkCUT8yIXGW4xCY=)
                          4: F3MZSDWeKid3bsLP36qSLG0IpHM.roa (hash: kYQFN+ZbFUs34L8IykJsu3VxIakyCfmo0o+SDshxmcQ=)
                          5: FJzF1hW9v32Ym5H36iECqRmU7as.roa (hash: goiI78EHgKwIEEiPjKH6BSY/HBZ9h/E7GQfXq8RDQc4=)
                          6: GwJgUCh_gQio_BcTsdi44InbgV0.roa (hash: arXwf568yHQjcKdbHYWZPuCqSIB3W1mwN8P5KvdxddA=)
                          7: HlITixtRJA5B8_rN76oqz12cZNY.roa (hash: FYJbj0dEjph4PtdhNdd6lbDbwuY0kwH2cPLA1Y4Gb5c=)
                          8: L8OdT17jJApyEKqWvbgR95D1d8g.roa (hash: 4D+01V42oCIHdZuqog5TSo1Wa9t0OYVPj8pBW3i2Mns=)
                          9: N9KhVYv5q1aYK2lEFm5ALon_FVo.roa (hash: OrTYsfrtUv1QeMpmG50KNUVl2zhE6msN7jeoSZQiuDg=)
                          10: NTVBx724Tv7AtucWSPXlbPS5EcI.roa (hash: 30S+akiraRQ9uW475SfIVytCQb+bVdR5BCYv90StXbg=)
                          11: NhaR-iPFFcSWJvtUaRuIP-ZULNg.roa (hash: R5ydMgwhbJwPLRXjezPN0UVvbP6FH9z33P63YOFbih4=)
                          12: OBlw2ayty3_ztay60BQM-4Nw6iI.roa (hash: 9F1q/lB7dKAgfTq6ogDoFurEnR4ZQUin1yKfZQVyKGk=)
                          13: On6A-OohhpReF0z-NR1oEXLBVT4.roa (hash: EeKnZk+tKU7cHkW4jIudGBehdwSUy6jG4ZHtAFD9m+I=)
                          14: U1fUr2EyxVTU50U1hrSZo8nGFmE.roa (hash: 5Y5WY7bIErp5QxDnlVkn4ydYbD2vk8m+PA3d/v86+Ak=)
                          15: b8D2gfkJBD67VX7mQztlyBtaZbY.roa (hash: unCoS1wqNhhJRTVJ6bLCLDXVLUOtTcNsAmmvkB6iFFk=)
                          16: jtblYKaJyb_WeousNAe0tZYnZbs.roa (hash: eewzgTb1tzD8wCe5l+N0nD8fxE6FsxJFJVhVjHQItTY=)
                          17: kuwbf96A9rw2pbo7uPM40Rl8CC0.roa (hash: a2L9elBFo9A8yoERXaG6fpRoICxNShtECkHlwZ/4P+I=)
                          18: lL6YsvPnlwMo1Lxlp4GV2Jwb5tw.roa (hash: D6jnnGijHDcQqcFcjTIMS4dyUy06NUz/giAwJVBGr4E=)
                          19: p5yYJq700BobK9jLhXTNrsv5bL0.roa (hash: e81TR5f32uyYUqv5tcNLrlL7sZIm/pLpm5hLIvWVeIo=)
                          20: tiihDyggTlNrGs7qGS_6CynTVm0.roa (hash: 8R7q3JLHdHLUCTjCQJJQM9lDPx9qJ9zgL03pV3gIHvs=)
                          21: uVYCwA9OuZbcSScp-zoQmH5isBA.roa (hash: xghGco4z4yZj6nmJqZPMUehS8IhcqMHjFRbMEsmFbY4=)
                          22: wiv9ohIfO88AdDjHXiP2id1UPWA.roa (hash: b7MEyRIl3D8G2gcd1nEeLfNMlpms9v7oYChebhQJqik=)
                          23: zsy_lbSEvqNTGmvTRX44Y6Vzb8o.roa (hash: ekFnkI66YVxFkSg+glTclvDPNEE8lHAbbrvtxQNJQgk=)
                          24: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: GzsswadMXd/QYwTqoqtfYT9wXWHL6nlrl8yX+GqicMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:32:5e:86:8a:24:ee:6e:83:0a:af:95:e6:b9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
        Validity
            Not Before: May 17 17:00:10 2024 GMT
            Not After : May 18 17:00:10 2024 GMT
        Subject: CN=88f3f985ecdf8c35ef278d8d9bb5ddd002c8bc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:3a:6d:ab:be:f8:82:fc:ad:f9:2f:5c:e4:
                    71:ac:2e:46:45:84:45:4e:1a:41:15:f7:46:b2:2b:
                    b7:86:7d:1f:a6:42:07:b9:ef:27:31:c1:d3:90:e2:
                    f1:97:9b:f1:1b:c8:e3:cb:f5:3c:09:45:2b:f4:d7:
                    d7:90:30:95:16:62:09:a6:9d:71:ac:77:6f:15:b4:
                    6a:14:4a:73:55:7d:4c:ab:b5:6c:c8:c9:d9:fc:cd:
                    79:76:3f:5b:86:0c:db:00:ed:e7:5f:b4:59:48:73:
                    3f:20:e7:76:f7:3c:29:50:a3:e6:a9:64:f4:be:67:
                    74:5c:a1:9a:71:b2:55:b3:60:8c:db:b5:cb:e1:20:
                    7c:01:15:50:9a:b9:f3:71:25:4b:ac:90:72:89:36:
                    53:bf:b3:f2:1f:5d:ef:62:9f:40:5e:16:f2:11:cf:
                    95:9b:96:c9:d4:e7:22:f7:2f:cf:17:f9:e6:62:44:
                    03:ae:8d:76:32:b0:1e:00:20:7f:53:e4:57:95:24:
                    22:74:01:96:4d:db:17:32:c6:64:95:56:fc:b3:22:
                    7e:be:04:e3:b1:d4:c4:36:e9:f8:e2:00:55:e8:9f:
                    d6:10:cb:89:19:aa:de:42:dc:60:75:0d:e3:d2:c4:
                    36:b0:50:19:ae:94:8c:2c:32:17:05:56:11:45:5a:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:F9:85:EC:DF:8C:35:EF:27:8D:8D:9B:B5:DD:D0:02:C8:BC:7C
            X509v3 Authority Key Identifier:
                keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a9:d5:a4:2c:22:73:a9:89:f1:e9:e9:94:82:86:55:0a:b5:
         8b:f0:6a:46:39:c6:b7:e8:57:12:6c:b9:14:4d:28:2b:e5:05:
         71:8a:13:c8:30:d7:22:2b:f1:5e:e1:82:ea:e7:45:d9:a9:52:
         4d:5d:ce:de:3e:41:ba:03:38:87:5d:9e:9f:9c:7c:dd:d2:e9:
         2e:d4:14:42:7b:a7:61:68:ea:f7:ea:e4:9c:dc:53:ec:a8:c3:
         33:e4:f4:2a:0e:87:f6:a7:19:c2:08:c1:35:0c:09:06:27:63:
         8a:9c:1f:3e:25:82:de:65:38:de:1b:0d:98:2f:62:aa:bf:a6:
         a9:8c:b0:98:16:3c:e8:c0:db:b3:7a:18:2c:15:f4:1c:5f:85:
         ae:6c:0f:c4:ba:a7:7f:8e:10:ab:cd:99:82:61:37:fe:75:0f:
         4a:16:de:1f:f7:52:35:9b:ce:c6:37:b0:8b:1f:51:54:f2:9c:
         37:90:f0:b8:d4:44:59:01:ea:cf:8e:fa:79:4d:4d:99:c7:a8:
         e0:16:77:5f:79:a1:88:70:19:41:cc:a2:b5:7b:c5:a6:24:e1:
         a0:85:d3:8f:63:e2:5f:fe:8f:1b:bb:41:78:84:13:d0:57:c1:
         54:0e:15:c2:1e:21:b4:62:aa:2b:44:67:fa:ac:89:82:5c:d7:
         fd:f9:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:17 2024 by rpki-client on console-fra.rpki-client.org