Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          JZD+lE8QIttHInedi3PoFAChLjltDH6pXvkVlZw6vMg=
Subject key identifier:   94:3D:BC:65:3F:98:8D:CF:78:D7:B7:1D:4B:49:C8:85:36:F9:4B:A1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       0197B6D7A199DC6280CA43A686F978B65023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1737
Signing time:             Sat 28 Jun 2025 14:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:14 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 1tf4gDn3E8oQJBa1P8YsiAEqDhM.roa (hash: 79Cfn4DIphA5rCTAyXxPmRPIy+pQ3OnQkEroI7+/vWI=)
                          3: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=)
                          4: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          5: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          6: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          7: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          8: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          10: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          11: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          12: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: F8/M5yLhvxv5UK4cWCK8u8O3JXbnHep44HhRxnmDRNc=)
                          13: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          14: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          15: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          16: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          17: SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa (hash: 0t61EacIVCgeyWoWNgl6pkppBifI3GCHVv8rPuzvXjg=)
                          18: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          19: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          20: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=)
                          21: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          22: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=)
                          23: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          24: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          25: dbVfA_fXprSS4i2QZkFruITo2AE.roa (hash: rakhWVMFHWlUieRihs0aD8m0Lp0z1R0bTv8p0JLqNxw=)
                          26: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          27: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          28: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          29: jglHMQosHm5EePmNaCszZnbBZOs.roa (hash: R0FPP1nLh3wCW9tN4EPA/+UY2zsuEsyvpDHM+ViEarg=)
                          30: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          31: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          32: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          33: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          34: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          36: xWbPdMVEmuZApYkV6k6Ner-NdoM.roa (hash: SYfabwgoXXnYkPob3pQZnw3i3utOCTQGZ5zR8DFtm3s=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:a1:99:dc:62:80:ca:43:a6:86:f9:78:b6:50:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jun 28 14:01:14 2025 GMT
            Not After : Jun 29 14:01:14 2025 GMT
        Subject: CN=943dbc653f988dcf78d7b71d4b49c88536f94ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:21:3b:a5:9d:24:49:e6:f5:46:82:c5:1b:
                    f7:63:45:cb:d4:ff:56:e9:a3:24:21:e6:35:6d:c3:
                    50:44:eb:ba:b8:8a:2b:90:9a:75:f7:8b:7a:9c:68:
                    28:f5:75:4b:f7:02:3f:3e:4f:71:3f:c0:b9:c7:a1:
                    19:91:08:a4:c9:61:4e:cd:30:d7:25:d3:cc:39:2a:
                    5a:20:d5:20:07:df:49:b1:df:29:d1:fd:3f:ab:89:
                    34:7e:05:18:6a:e9:fb:2f:b7:ac:5d:3b:78:64:bf:
                    a7:c4:08:27:85:cc:a9:1c:c4:76:02:0c:d7:f4:56:
                    20:58:40:d3:9b:60:af:07:4f:e0:0c:9a:f8:86:11:
                    e1:02:ce:1f:63:d1:91:bc:62:3f:83:bc:b1:47:89:
                    91:5c:2f:c5:6d:1a:39:8a:d9:23:f3:2d:ec:e8:b4:
                    29:ac:cd:b6:9a:01:e1:e6:79:5d:0a:e0:09:bd:72:
                    b4:f0:6b:36:89:57:39:3a:5c:86:23:66:44:3c:8d:
                    36:e3:fd:8b:bd:0b:2c:fc:df:ee:16:b4:bd:fe:06:
                    70:c7:46:33:f0:99:9e:ba:ae:68:a7:1c:30:eb:5f:
                    b8:ba:a9:c9:a8:61:e7:08:83:c8:da:1f:89:a5:40:
                    6d:6f:a0:68:34:d4:55:fb:0b:12:21:1b:86:53:24:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3D:BC:65:3F:98:8D:CF:78:D7:B7:1D:4B:49:C8:85:36:F9:4B:A1
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:41:b2:a7:b6:21:b2:2c:f6:bb:7e:e8:46:74:cb:08:bf:56:
         89:98:4f:b3:68:e0:b0:61:c0:26:59:77:b1:96:90:86:82:02:
         34:5a:c8:2d:49:70:2e:0c:a3:41:19:62:23:c7:bf:0d:e2:bb:
         f0:19:f6:0d:69:16:8e:3d:15:04:ee:65:02:3d:48:de:08:69:
         33:f6:96:e6:b8:48:f7:8a:61:54:f5:99:7f:25:4d:86:d5:3f:
         48:77:80:dc:d5:bc:24:d6:98:3e:89:f4:6c:45:59:e2:6c:7d:
         24:73:34:b6:2a:64:b9:ed:20:d1:bc:98:2c:f9:44:4d:b7:6f:
         8b:67:e3:6e:ad:9a:5e:1b:79:ce:48:59:60:2b:fb:24:54:df:
         b5:e7:3a:9c:71:6f:78:db:9d:4b:50:e9:78:e6:10:ab:31:2b:
         11:3e:e8:0c:aa:a7:ea:8d:8f:84:3a:7f:f4:b6:b9:e7:20:dd:
         d0:42:70:e3:06:2d:d8:8c:32:14:47:b9:88:76:6b:ea:09:52:
         e9:0d:cd:2f:ae:36:41:fd:d8:1f:91:3d:aa:e5:78:81:ae:bf:
         3d:ca:18:5b:75:4f:6d:77:d3:9e:72:17:9f:a4:6e:27:70:5a:
         e8:b2:6b:f3:14:72:30:57:07:d6:50:ab:7a:a2:61:85:3b:f6:
         3b:ce:34:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216GZ3GKAykOmhvl4tlAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwNjI4MTQwMTE0WhcNMjUwNjI5MTQwMTE0WjAzMTEwLwYDVQQD
Eyg5NDNkYmM2NTNmOTg4ZGNmNzhkN2I3MWQ0YjQ5Yzg4NTM2Zjk0YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhwhO6WdJEnm9UaCxRv3Y0XL1P9W
6aMkIeY1bcNQROu6uIorkJp194t6nGgo9XVL9wI/Pk9xP8C5x6EZkQikyWFOzTDX
JdPMOSpaINUgB99Jsd8p0f0/q4k0fgUYaun7L7esXTt4ZL+nxAgnhcypHMR2AgzX
9FYgWEDTm2CvB0/gDJr4hhHhAs4fY9GRvGI/g7yxR4mRXC/FbRo5itkj8y3s6LQp
rM22mgHh5nldCuAJvXK08Gs2iVc5OlyGI2ZEPI024/2LvQss/N/uFrS9/gZwx0Yz
8Jmeuq5opxww61+4uqnJqGHnCIPI2h+JpUBtb6BoNNRV+wsSIRuGUyRJZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ9vGU/mI3PeNe3HUtJyIU2+UuhMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUGyp7Yh
siz2u37oRnTLCL9WiZhPs2jgsGHAJll3sZaQhoICNFrILUlwLgyjQRliI8e/DeK7
8Bn2DWkWjj0VBO5lAj1I3ghpM/aW5rhI94phVPWZfyVNhtU/SHeA3NW8JNaYPon0
bEVZ4mx9JHM0tipkue0g0byYLPlETbdvi2fjbq2aXht5zkhZYCv7JFTftec6nHFv
eNudS1DpeOYQqzErET7oDKqn6o2PhDp/9La55yDd0EJw4wYt2IwyFEe5iHZr6glS
6Q3NL642Qf3YH5E9quV4ga6/PcoYW3VPbXfTnnIXn6RuJ3Ba6LJr8xRyMFcH1lCr
eqJhhTv2O840gA==
-----END CERTIFICATE-----