Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          QiS+EynQVGlUoNKNPkGFkiK2Ft7IMPq4/t1Ewi7IyM4=
Subject key identifier:   1A:31:F8:32:CF:46:B2:AE:C8:58:7F:38:7B:2D:00:84:30:94:43:63
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       0196A21ED0583E96F30C29AB6A50CDBFC967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          16A0
Signing time:             Mon 05 May 2025 20:24:10 +0000
Manifest this update:     Mon 05 May 2025 20:24:10 +0000
Manifest next update:     Tue 06 May 2025 20:24:10 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=)
                          3: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          4: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          5: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          6: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          7: A-wYO1V25BmLo0MsHi5nmxFBtNs.roa (hash: 5u6QBAUHLc9J4zz+xTjRrOjjBGudY0Jw5svecWsktYk=)
                          8: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          10: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          11: ID4trGdaWKJu5BbNXALaxIjZ31k.roa (hash: Pkv6z01q9dvGXVnFDwkYMbgGkDFgHerMyDhgKR/xJeg=)
                          12: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          13: MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa (hash: 2cRjKiLLq409oV3H3w03WuAOBjBM+sqVFpy4OKfY030=)
                          14: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: 9GlsCLgYJfL0t3TRVTfRda55ic363aIYNqKNLXQb7Ds=)
                          15: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          16: ObZzYN2E0kdZNeSLF4XNFHQWZK0.roa (hash: 85PbvghxphTHomH9hrjntHu2TbF8oiO3c8zwpKmiEd4=)
                          17: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          18: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          19: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          20: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          21: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          22: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          23: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          24: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          25: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          26: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          27: jglHMQosHm5EePmNaCszZnbBZOs.roa (hash: R0FPP1nLh3wCW9tN4EPA/+UY2zsuEsyvpDHM+ViEarg=)
                          28: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          29: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          30: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          31: o-h2A957dlcPkUpwvfVIlQ19QGk.roa (hash: TLWzVDizEQzpjZ25+tu4lXknyJozTbrV/Wbt2G8zyy8=)
                          32: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          33: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          34: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          35: uCyH2-fPRpFibOOxTNl7u6CXQas.roa (hash: tlDsieQUw597/PTZ8W1911q4kuRCKAdlDdwHG1Otktc=)
                          36: ub7eAvnfR4ZiQITF3sMjpi7lfGE.roa (hash: ajIgv3DeLJWeIu/ip8kkCgpS0+03JhEo2dJdFFgn7RQ=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 20:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:1e:d0:58:3e:96:f3:0c:29:ab:6a:50:cd:bf:c9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: May  5 20:24:10 2025 GMT
            Not After : May  6 20:24:10 2025 GMT
        Subject: CN=1a31f832cf46b2aec8587f387b2d008430944363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:33:2c:b3:e3:cb:2d:0a:a5:99:fb:1b:76:
                    62:96:9d:4c:cf:31:27:f5:1d:42:20:a2:2b:16:9e:
                    dc:70:5f:50:4a:5c:38:6f:ef:85:d7:b7:e2:78:88:
                    88:f9:11:f9:0e:2a:96:5f:ee:bc:ec:54:58:31:47:
                    f7:b2:16:a4:0c:e3:2e:64:b6:da:9c:ef:76:34:17:
                    e0:2f:fa:e4:19:d5:1c:45:c8:81:48:e9:b4:c8:a1:
                    89:c7:94:bd:47:9d:32:19:a6:59:e2:a5:72:f6:17:
                    d5:00:f3:93:af:95:80:ce:b3:f8:00:14:48:e2:cd:
                    80:a9:1f:74:e3:9f:b6:3d:2a:5a:a2:55:15:78:0a:
                    1f:0b:4e:3c:8d:9d:2f:e4:c5:6f:19:1b:9d:b5:2d:
                    40:fd:ce:8c:9b:7b:e3:36:0d:d1:44:82:ad:30:f7:
                    b8:d2:c5:a3:d5:00:75:30:a2:c6:a4:af:44:55:b1:
                    65:5e:cb:9a:b5:36:25:1c:f6:1e:3f:5f:26:3b:16:
                    41:73:fe:d2:9c:e9:ad:7d:b9:0d:e8:a0:37:5c:f2:
                    06:f3:4a:a3:c7:92:80:af:61:65:32:f8:93:8f:32:
                    54:28:be:09:c9:60:06:3e:2c:2a:65:52:62:c3:a8:
                    fa:1e:ca:4e:ab:db:77:51:e7:5c:42:2a:8c:ae:97:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:31:F8:32:CF:46:B2:AE:C8:58:7F:38:7B:2D:00:84:30:94:43:63
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e3:05:f8:e5:f1:de:36:ad:0d:1e:0e:0f:36:ac:4b:34:f4:
         7c:ed:a1:0c:a4:59:f1:4a:0a:c3:7d:16:92:f6:aa:84:38:b4:
         bb:4f:c7:e0:b0:f9:e5:c8:f7:8f:ac:ca:ce:c4:1b:12:c1:18:
         cd:a7:b2:29:38:19:c3:62:01:75:86:5d:0b:37:92:d7:2c:38:
         ac:56:13:5c:cf:3f:a5:b9:c5:03:a7:83:3f:f7:95:f8:9b:ee:
         89:96:5a:58:c2:a6:18:63:56:82:6c:bf:55:42:28:da:55:98:
         86:51:c6:e5:86:7a:e8:75:78:46:8c:29:67:4d:90:e6:e7:53:
         1e:0c:1c:c9:e0:16:14:ed:7e:5b:ab:98:14:90:de:e9:25:8e:
         c0:5d:dd:f0:8b:4d:14:10:5f:f8:5d:64:27:0d:2e:d5:7c:b1:
         dd:2f:30:94:ba:9b:0a:65:19:7d:27:3a:dc:c3:65:7d:e4:5a:
         c8:33:60:48:04:2d:0e:50:35:76:8f:54:52:53:5f:02:d3:1f:
         1c:3d:98:c5:c4:89:09:02:95:81:e7:ba:6f:e1:2b:bb:12:34:
         43:6c:00:c8:69:d4:cf:97:7d:b4:ec:3e:c8:ad:82:b1:5a:33:
         95:ea:bd:1a:81:2b:bb:95:22:96:33:20:a0:41:c4:a3:9e:6f:
         60:e6:b5:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiHtBYPpbzDCmralDNv8lnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwNTA1MjAyNDEwWhcNMjUwNTA2MjAyNDEwWjAzMTEwLwYDVQQD
EygxYTMxZjgzMmNmNDZiMmFlYzg1ODdmMzg3YjJkMDA4NDMwOTQ0MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD4zLLPjyy0KpZn7G3Zilp1MzzEn
9R1CIKIrFp7ccF9QSlw4b++F17fieIiI+RH5DiqWX+687FRYMUf3shakDOMuZLba
nO92NBfgL/rkGdUcRciBSOm0yKGJx5S9R50yGaZZ4qVy9hfVAPOTr5WAzrP4ABRI
4s2AqR9045+2PSpaolUVeAofC048jZ0v5MVvGRudtS1A/c6Mm3vjNg3RRIKtMPe4
0sWj1QB1MKLGpK9EVbFlXsuatTYlHPYeP18mOxZBc/7SnOmtfbkN6KA3XPIG80qj
x5KAr2FlMviTjzJUKL4JyWAGPiwqZVJiw6j6HspOq9t3UedcQiqMrpckpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBox+DLPRrKuyFh/OHstAIQwlENjMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuMF+OXx
3jatDR4ODzasSzT0fO2hDKRZ8UoKw30WkvaqhDi0u0/H4LD55cj3j6zKzsQbEsEY
zaeyKTgZw2IBdYZdCzeS1yw4rFYTXM8/pbnFA6eDP/eV+JvuiZZaWMKmGGNWgmy/
VUIo2lWYhlHG5YZ66HV4RowpZ02Q5udTHgwcyeAWFO1+W6uYFJDe6SWOwF3d8ItN
FBBf+F1kJw0u1Xyx3S8wlLqbCmUZfSc63MNlfeRayDNgSAQtDlA1do9UUlNfAtMf
HD2YxcSJCQKVgee6b+EruxI0Q2wAyGnUz5d9tOw+yK2CsVozleq9GoEru5UiljMg
oEHEo55vYOa1IA==
-----END CERTIFICATE-----