Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          Yy/FXnKoWohYZ6iyFC3q7bVmWdZobhJf/aeOb3Pa66c=
Subject key identifier:   1D:68:22:DA:40:22:E3:A6:6F:BA:74:BD:B2:52:1D:61:0F:EF:C5:EB
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       0198D54E83DEC5A8894FD49629670A012659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          17CD
Signing time:             Sat 23 Aug 2025 05:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:29 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 1tf4gDn3E8oQJBa1P8YsiAEqDhM.roa (hash: 79Cfn4DIphA5rCTAyXxPmRPIy+pQ3OnQkEroI7+/vWI=)
                          3: 3GpFaqQcQN9oMifABgrQUFoG0kE.roa (hash: WY/ivhDoFD/EbNKAvaxEqHPsDCFDZM/+fS+MHyM0i7w=)
                          4: 67Mxj3KpQWipNpMlLApfSyTCvC0.roa (hash: Fv9QcoJhLdt0inevu/XCAdGmMRCdZt4H9qb4Kzk/RZ4=)
                          5: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          6: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          7: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          8: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          9: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          10: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          11: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          12: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          13: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: dRE1in+gKY/C0/JNcTXVLrW1A1ggmXsuIkOESn8dU28=)
                          14: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          15: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          16: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          17: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          18: SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa (hash: 0t61EacIVCgeyWoWNgl6pkppBifI3GCHVv8rPuzvXjg=)
                          19: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          20: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          21: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=)
                          22: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          23: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=)
                          24: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          25: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          26: dbVfA_fXprSS4i2QZkFruITo2AE.roa (hash: rakhWVMFHWlUieRihs0aD8m0Lp0z1R0bTv8p0JLqNxw=)
                          27: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          28: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          29: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          30: jglHMQosHm5EePmNaCszZnbBZOs.roa (hash: R0FPP1nLh3wCW9tN4EPA/+UY2zsuEsyvpDHM+ViEarg=)
                          31: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          32: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          33: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          34: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          35: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          36: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:83:de:c5:a8:89:4f:d4:96:29:67:0a:01:26:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Aug 23 05:02:29 2025 GMT
            Not After : Aug 24 05:02:29 2025 GMT
        Subject: CN=1d6822da4022e3a66fba74bdb2521d610fefc5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:c9:52:92:28:7c:4f:f5:be:7a:4b:21:6a:
                    73:19:51:ee:0d:81:40:5d:50:47:d5:15:46:a8:dd:
                    38:1a:f2:51:cc:7b:d0:85:1e:ec:a4:3e:af:43:8f:
                    3a:fe:6f:a6:86:fd:1e:ee:c2:bf:f3:2a:27:40:32:
                    93:8f:07:f8:a1:7f:b7:6b:a2:f0:cf:cb:bd:cb:10:
                    2d:4a:89:58:85:a5:e3:95:e5:52:e3:77:54:80:da:
                    4f:df:1d:37:0c:f9:fe:94:36:0e:c1:06:53:47:6a:
                    b9:11:22:df:46:49:78:b2:77:5a:94:df:ce:b3:40:
                    5c:07:f3:7c:80:c7:10:8c:02:f9:4f:10:5f:d3:fb:
                    3a:8f:33:59:f2:30:69:da:17:3d:60:58:74:02:43:
                    65:34:b9:71:7f:d2:bd:28:9e:4c:08:4d:19:ae:ca:
                    3e:0e:ec:a4:4d:58:74:93:4d:b0:42:dc:96:57:8b:
                    89:67:16:68:00:f3:e4:70:bb:dc:9e:68:71:19:61:
                    d4:f2:28:39:00:3f:fc:2f:c3:a6:cf:8b:c6:a6:ab:
                    8d:23:00:5f:02:e7:71:e2:9b:c7:47:9e:cc:07:e3:
                    57:c6:42:56:27:16:1c:2f:d7:2a:ea:78:79:cb:7e:
                    5d:be:14:c3:b2:5f:e1:cf:de:4e:f9:dc:cf:52:5e:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:68:22:DA:40:22:E3:A6:6F:BA:74:BD:B2:52:1D:61:0F:EF:C5:EB
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:ef:e7:92:54:49:e0:aa:78:c2:c8:e3:27:ee:ba:08:e0:
         4f:1a:85:dd:89:57:8b:99:1d:a2:47:7b:78:3b:4c:f5:94:ce:
         09:24:d8:be:c6:a7:f8:81:73:0b:8a:8f:ba:b0:0c:e8:ae:30:
         bb:79:f2:8f:54:7b:9e:eb:66:60:e8:27:a8:12:b8:50:e5:ba:
         3d:38:0b:8b:82:4e:1f:ee:50:3b:b2:76:5b:e7:40:4d:db:bf:
         17:78:f6:0f:57:be:f9:4c:8f:4c:28:50:07:a2:de:57:d8:4a:
         59:94:7b:b8:6f:f6:44:ab:1b:d1:e7:c7:cb:63:fa:5b:74:61:
         3f:09:19:50:46:45:80:98:e4:6f:e9:52:ad:a3:26:5e:fb:50:
         b3:51:92:1e:b0:b9:6b:09:f3:b4:4a:fb:08:e8:11:a2:3f:81:
         06:3d:17:d2:50:fe:2d:cf:21:eb:80:62:8e:b3:b9:46:cc:63:
         e4:c9:ef:b5:7d:0a:69:df:7d:a4:2e:90:60:81:ad:41:ea:3b:
         fb:ea:01:7f:8b:65:19:ea:5e:56:d4:3a:39:52:f1:59:a2:e8:
         b6:11:76:12:3d:c5:87:67:53:d8:41:08:ab:50:66:d4:67:c8:
         4f:18:8b:06:d7:c0:ed:c0:55:d3:a9:33:dd:e4:79:33:a9:7e:
         8a:72:2f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVToPexaiJT9SWKWcKASZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwODIzMDUwMjI5WhcNMjUwODI0MDUwMjI5WjAzMTEwLwYDVQQD
EygxZDY4MjJkYTQwMjJlM2E2NmZiYTc0YmRiMjUyMWQ2MTBmZWZjNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwELJUpIofE/1vnpLIWpzGVHuDYFA
XVBH1RVGqN04GvJRzHvQhR7spD6vQ486/m+mhv0e7sK/8yonQDKTjwf4oX+3a6Lw
z8u9yxAtSolYhaXjleVS43dUgNpP3x03DPn+lDYOwQZTR2q5ESLfRkl4sndalN/O
s0BcB/N8gMcQjAL5TxBf0/s6jzNZ8jBp2hc9YFh0AkNlNLlxf9K9KJ5MCE0Zrso+
DuykTVh0k02wQtyWV4uJZxZoAPPkcLvcnmhxGWHU8ig5AD/8L8Omz4vGpquNIwBf
Audx4pvHR57MB+NXxkJWJxYcL9cq6nh5y35dvhTDsl/hz95O+dzPUl6P7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1oItpAIuOmb7p0vbJSHWEP78XrMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOvv55JU
SeCqeMLI4yfuugjgTxqF3YlXi5kdokd7eDtM9ZTOCSTYvsan+IFzC4qPurAM6K4w
u3nyj1R7nutmYOgnqBK4UOW6PTgLi4JOH+5QO7J2W+dATdu/F3j2D1e++UyPTChQ
B6LeV9hKWZR7uG/2RKsb0efHy2P6W3RhPwkZUEZFgJjkb+lSraMmXvtQs1GSHrC5
awnztEr7COgRoj+BBj0X0lD+Lc8h64BijrO5Rsxj5MnvtX0Kad99pC6QYIGtQeo7
++oBf4tlGepeVtQ6OVLxWaLothF2Ej3Fh2dT2EEIq1Bm1GfITxiLBtfA7cBV06kz
3eR5M6l+inIvkw==
-----END CERTIFICATE-----