Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          GuspFiTQfvysAelpwj5PF9VQOSE7Szpkf/D20yHst78=
Subject key identifier:   0C:CA:F1:B8:FD:BC:A4:44:C4:19:CB:7A:A1:59:33:96:C9:16:42:9A
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       0196C5A7F217E043100B686D065D1AD5820B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          1609
Signing time:             Mon 12 May 2025 18:00:40 +0000
Manifest this update:     Mon 12 May 2025 18:00:40 +0000
Manifest next update:     Tue 13 May 2025 18:00:40 +0000
Files and hashes:         1: 1gHYW02m8wuDxRJvz0LBSVkV_ug.roa (hash: CJ+bxguZgm0WfWv2+aS7+Xb+H+xqOH2X8SpFwbtpdcM=)
                          2: 3B7NNbeKRnZEKDmHNY1KeC1srmc.roa (hash: b9ZXFcLIXXCFjVrGvvhUY9iQ4k5SaEKXRcy7m/BXZ+U=)
                          3: 4owpySNgzrf6v-2VVQAYWn-pSWg.roa (hash: JUakx+KjR2vT5hqODYhVy0j3ze4uAyKV+BYjGjKGsiI=)
                          4: 5C4YA50fBN7vcdBY1HqNC2bmMjc.roa (hash: sc/YMsXU3PgkkGc1oSkpeF8aFtzCCD0ar7drCdMUnQA=)
                          5: 5s5qGQoGev1jAV5c8T8dWS5HMq8.roa (hash: Br7JXU0oIeq94AWaj70g/oHJ4lU7FSYUKqT+ZWnKc5Y=)
                          6: 8IPQNKsJPkOpGC12sFlkQtMsYXw.roa (hash: Xs5ZWXQSLJ1Z58EHx7MQM3/jp/D+3KjEPCMs5TWn1es=)
                          7: 9GT9JJ3NQPGYhQ8veU5LdxHQVus.roa (hash: UBa7hSTFPahRK5n0WLcYKVjlEuqviO4o2tPIFJ++zTg=)
                          8: 9XV7PV-zT0NQ3uZmMVwK2FfVyc4.roa (hash: u+icYkT6O1GXqZHgV8iFPlgLQe9AYTs46MWAhb+d+n8=)
                          9: AJXSyfymc0ZNXaBD4wQ_CXojrNU.roa (hash: IEKfVlGCNO0k9/PEwkKVpaVd+QI7iET2CIAUyaqWhoM=)
                          10: CS3fkAwQa6jbpAuBFjvlkhT4QM4.roa (hash: B07gzww+qg1cGY1+Noy7EqGS0qu6LsylkSmHxbsB5UI=)
                          11: CihCYCcRfHmYDycxhVRrCslM7wU.roa (hash: 8EK8gvioDzV5jlwA4y5lAA/cSLy5nx2+QcBlr4T3sHc=)
                          12: D8Npx5yQG7Ze4tcNJRq2T-3oN70.roa (hash: oSyETx06tyNiiNec4JR5AXYmY/qLJxXp2+L6i3DOKho=)
                          13: DNBsRV7t2HVO8env59jVAjOxkhU.roa (hash: u04P8i3SwISYkJ0oEkWX35FdtSG4l2gXii7MGpdcKHE=)
                          14: DnfvoHk26uQBqwY74iVEkovhu-M.roa (hash: 9tTGtdywgLWpzwmGeYwYvgljB4fpp7EYWgdsqvOXikE=)
                          15: EC8RWNFJCuwwTQncl5DfzFYSaJU.roa (hash: /nklMpYhc5zKONNBtCKuXizg/to5ABQr9axNt5+yLCw=)
                          16: ElR1tFIaY2PsVDpiTByrXvXqpxo.roa (hash: iq5gGlEdNdHsXyZVWv/MPVHohphUvsytP0Ty+022UbU=)
                          17: GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa (hash: /r6B9YtsSkz5HiiZQ3D0LND5TwPnz38Pp1G53PkZKrg=)
                          18: GMmKt-5baeZVQ82hbvBrxYFlQXM.roa (hash: s5iUX/ExHm3pVTZBNgXMVP9bcmV8hfTJwbyd8w5AgEI=)
                          19: I6fa7upvk-8lxJh8Xg3J12wgh5s.roa (hash: bov/2d/GEEG2qFtvTVuW6lrqmm4nh/Cfgdq8NX02hTc=)
                          20: OkxhKGO3hHLaH6qZ2vA9JlrGREw.roa (hash: ytFzHiABycaJCtimxiXolzufiSd4PWYGRqD/u4TM94w=)
                          21: PegLLGDkYvs3XF-Lv9hiNho74dc.roa (hash: Vpb3C6Es4ErLDrckTZZ10f34MzLAYRtZRdftTDQsoSA=)
                          22: RMWbYdHceZbtSP3kPPphiVqhjKU.roa (hash: ZmPZq83tjvYdJrT/qGKDeRtwLFHx3yIuGdy+p00AfUY=)
                          23: S-O3TbcstTKMug___VSvS3cgrog.roa (hash: 3ebQ/8RxqwDIFEsCdZKDawRwthwgLIDNt8oqNlSOX+8=)
                          24: TeTlCFhRmBWsP7NVZyOUSwULl_M.roa (hash: mg3r9BXAscolOOydLk1rXM5DK7srxmHtjMbydFKmjt8=)
                          25: UiJFgj53HRUljcsaPw_C3xHQ8sw.roa (hash: jdXS9rwe9fXCo5Cr0EwDavykrLDXeQzgKvuqbRIkEqg=)
                          26: Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa (hash: rWWNSNbf0TpPeCx9vIr9DCtT6kmAFEPWocJVPgJZlfk=)
                          27: bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa (hash: CYGIK7KvoAnIIXqAQFMxwpkIsLNOXXwRLcfsIwViZMg=)
                          28: cfR-hVEEWkEUwMw2M1V8-p4d8xk.roa (hash: wz/4Xbt1g81a52SFupsdpkNdqPVC6kO1L1AiSoDnAFg=)
                          29: eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa (hash: 7jK6GTgtOsW5ejSEUTMjmjF5N1YX94yuMyrHsebyc8U=)
                          30: fjv84iNlQrNIDl434ECeTTwr0W4.roa (hash: szzjxRTRI27CfDncELIdzVynm65szTrVvcBwbAR/+k0=)
                          31: hJ_BTbBrrE1DP__8DDhe52SVKU4.roa (hash: vQOjBEpXapD1L5OKTFCIZsaTYTd3BkhoB3Yz7me/w6A=)
                          32: j4X9hBaVyPVDHygvq-fZETVve70.roa (hash: z5G+VRr3oGmuSXVR1HckqXgI/DsnIY/XOw0j8sDgvBc=)
                          33: jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa (hash: /ylqB7KyfpIhWFWFpFGMmmVvMNfolX67eNrbZDEUJW4=)
                          34: mYW0ZahOVTcrAzTqNxYilfPfhxE.roa (hash: BwKgVg49yd12fGRJhBfLrcNhvxj8bT+foLtZZc8PITk=)
                          35: okLiPnx_37wLDBmkCPiMjbS6_g8.roa (hash: ASj3E5a6QDi3UoVchGVURUpzI7Z729JGPp26Uv4mP4w=)
                          36: p9HNpLognCCdHpHcYdvL_iHpKxE.roa (hash: ZQpCWRnEBpNVDW3N93TuNSYypf5jM4Miv6wnoSLZgOc=)
                          37: q7b7nVWpkVbr40N_Opdu9wphH-A.roa (hash: qMPucfrLKsdpwIUrrq74FwUiMd/2EJmaJ5bJL+xDKak=)
                          38: sLqJ03Mzd2paUSWl89cFwcc4aoc.roa (hash: BdXE5xoW2k/8wUIc6tmTtpZOZ6amVghYGgF4PwTsgmo=)
                          39: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: IpfZ6U1tsJNwuchWujjopcjVeZ70mkmZeBkL9AEtY6A=)
                          40: tb3kec3C_AdEd3PbwhtotVTRyPE.roa (hash: 4jjavH36yHIelt71HPqT5lLNi8LGIY/f55sh9UE2dJM=)
                          41: vZ4v2lo2-sXeStle6vqKr87Cnyw.roa (hash: iuW5h9zDLSCcSeiWR+xV0dE4RiZoDLZqiq7ZP9qa/2g=)
                          42: xLGDaC118LcfUDYtMnB3DY44_sc.roa (hash: 4ZP2Bk0aJ3rot/Ut/uex6Y+e07pNyyqnsZS0TCsrmZk=)
                          43: yuuB2KONhG_4U4b8x6sLfT_QyK8.roa (hash: nmT4hg/orDDfGbLVfXOBmgugDkVcFUxF1FfArL2tLbY=)
                          44: zbIR0kzSnqsQppAEnVlytUjNxzs.roa (hash: A5R4DtRsqGNnQjc0WtD6M5DgyLoDVTlkGrAxxgOsLFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:f2:17:e0:43:10:0b:68:6d:06:5d:1a:d5:82:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: May 12 18:00:40 2025 GMT
            Not After : May 13 18:00:40 2025 GMT
        Subject: CN=0ccaf1b8fdbca444c419cb7aa1593396c916429a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:a8:0a:32:72:26:f7:c5:d0:f1:a0:97:a2:
                    e3:20:93:fc:d3:4a:5c:f9:b2:66:3c:a4:f8:9e:41:
                    a8:31:aa:67:f1:4a:b0:df:5d:79:b3:2e:6f:2d:80:
                    5e:34:19:45:f2:19:44:f3:9e:8b:07:b0:42:eb:17:
                    b4:64:af:95:f5:2a:ec:7f:1c:e1:21:76:8f:42:23:
                    e1:ab:ec:9b:b8:cf:2b:b6:05:82:5a:8c:ee:66:62:
                    90:22:25:fd:d0:32:3e:a9:8c:15:7f:aa:95:72:9b:
                    6c:84:4b:a6:a0:09:cc:49:2e:94:e1:bb:a8:36:d8:
                    d6:f4:15:b3:89:44:b8:22:0c:19:ca:bf:2e:9b:89:
                    96:69:7e:b8:45:d8:69:67:04:42:7c:a0:c8:c2:d2:
                    31:c8:71:82:58:2b:16:a3:9d:2c:01:99:a5:3e:85:
                    db:4c:28:bb:4a:3c:67:eb:8a:b0:43:7f:b2:a5:c2:
                    ce:b2:84:2b:e7:a9:d6:d0:26:18:4a:ab:2c:d1:e2:
                    a4:cc:dd:49:d0:08:f2:35:67:48:05:14:fa:02:85:
                    1b:ce:ba:16:18:f1:0c:be:e5:42:15:d1:f8:81:93:
                    28:25:6b:4a:06:8c:2e:7e:32:46:ff:36:b9:8d:02:
                    85:29:6c:34:cb:ff:fb:b3:64:d6:77:95:05:2a:8c:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:F1:B8:FD:BC:A4:44:C4:19:CB:7A:A1:59:33:96:C9:16:42:9A
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d1:28:31:7d:4c:e1:21:07:04:07:35:df:79:f9:15:0c:72:
         16:48:6e:a2:57:83:7f:8c:b5:bf:31:c1:53:6f:29:88:08:68:
         16:e6:99:f2:4b:d4:77:20:b5:e0:1c:4c:df:bf:1b:8b:fc:70:
         34:4a:65:d4:fd:eb:6f:06:5a:21:a6:f9:4c:a0:a6:70:b9:12:
         31:41:81:c8:45:aa:d2:df:5b:0c:fa:53:af:69:79:ae:7c:b6:
         fe:74:30:86:5a:3a:46:ea:83:6f:e1:f3:7e:f0:6a:e1:84:b4:
         33:29:df:0c:ac:84:d9:78:dc:76:08:97:3d:dd:de:88:fb:48:
         e6:80:c6:12:39:6f:e9:2f:0d:03:fe:e3:7f:54:1f:da:e3:16:
         1a:37:b8:e5:2f:ba:68:ab:e0:5c:42:97:43:4b:69:7e:5a:db:
         fc:0c:be:a3:82:27:84:20:7a:8c:3c:d4:55:83:dc:c8:b0:87:
         e2:51:f3:b9:a7:b9:00:7a:a1:53:50:91:9a:7a:61:60:80:23:
         fb:49:8c:29:1b:1d:76:55:02:be:0b:51:05:bb:2e:2b:bb:bd:
         9b:f8:57:33:7e:57:c7:16:99:af:d3:87:39:3b:c3:f2:23:e1:
         e5:8b:cf:c7:98:66:7e:a5:2c:78:43:61:21:2c:20:1c:ec:13:
         5f:16:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----