Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File:                     bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier:          f5NRrhu7lQKw0fQWVsHZE+P4hCFTdL27pzyAfAZJCgE=
Subject key identifier:   CF:0E:AB:A1:19:04:FC:7E:3F:06:11:C5:D9:1F:92:C9:2B:54:2A:17
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       0196B710BB949298F93D3526A213D7D3CF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number:          1088
Signing time:             Fri 09 May 2025 22:00:49 +0000
Manifest this update:     Fri 09 May 2025 22:00:49 +0000
Manifest next update:     Sat 10 May 2025 22:00:49 +0000
Files and hashes:         1: 0iVORbOC1yn1RU9MN-6NZSBLcv4.roa (hash: aAZ8Vbm4cCzopF3xvPSupzXl+Rmg+Qp1HP2+eIZg+u4=)
                          2: 1-H13vHXEt9msMsZOvqU-otxUOt0.roa (hash: Rgvq55zT5NBnfacf+JQZp1RRodipw94BIRoWgM8C2KI=)
                          3: 22sayLqNyf5mmpCVeQfzZdU0M-g.roa (hash: e7Nt6HxM+ugqjVxazGJZ+P+EJnvj8/9HUK9NFvnb4H4=)
                          4: 27vDklW69EuEanWUTFWokMvWngM.roa (hash: JTo44FsFJ95zRcPH3bpI8cZXGr6nvq17sMlCIIfDD2o=)
                          5: 4N5uvrjuNShBNQqLwhxizj6hANA.roa (hash: BFvgUFid4pNJNh+Ye7fkewmppaTZod7uXDSv4LNR8OI=)
                          6: 67KS9uxohx5qywMfA7rxHH4YscU.roa (hash: lir9AF6THQKzGsNxxFLnf0F3SF63YVXFyWaZJXVDD+M=)
                          7: 8uredMj8h3YjqCz_3qhRUfcmpH8.roa (hash: 1sowdSGLgJiTPdLnVohTfhP5Vbailn5G+CpDuDGgJG8=)
                          8: 9INEJHy8ZUQsZkXJ3LToNxX8kZ4.roa (hash: KdS2sZMTtBI8DBanSx1tGmEyybopPJ/MA5ChS1PT+v0=)
                          9: 9bhpfQDLK302U3knqtNmpJUpoPA.roa (hash: bXmps9yNq4FnxJIrnc0Thg5iHt4hnwjCatzHO0SOKMA=)
                          10: AakZT8or1GzInGy_tZL_isQHHpA.roa (hash: rRCm9/MqXVvaZCgh1nfobAIEngUpqyrVoic6KsvUUnw=)
                          11: E4X29T5PIFttxKq8EE38HPjpzXo.roa (hash: xJD9cI/sTuw6YTXkaJSB88L1OwC4kEF2x+8kBxXooCk=)
                          12: FkEOeGCG6FOuT4U--JFdO1PewE8.roa (hash: eIbVZKlSGWPsJMIug3qSSnFjSdzCZQjxpUdDU4xeYbs=)
                          13: G79ZiP6DiuUmY7VmAtFD-2XkciI.roa (hash: QDU7EzIuPmX+SWvEl9yqhqLoetJzobkYRy/XDVVVI0Q=)
                          14: GQRXBMJLMJNUUoma4HkgBT7BJxo.roa (hash: vKY8BuLe5EuiohNF61YwmiR0yQcH0fmBnvvbjEVqHls=)
                          15: H8pLB57z5fPmVJMGj4akuTzBZ6U.roa (hash: KmqtvAKbOi2oAuL7c2rlf27e4ou+eIO58ZJSGtiydqo=)
                          16: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=)
                          17: Kwv1yUwYtcWcaNBZ6KPO95MKyTE.roa (hash: 8EFmYGHa2Ca7QupSPS4pv/DIhNTQn0ESKQFXQFpdKM4=)
                          18: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=)
                          19: PbZXNhzTy44dz4opY7EcI010jng.roa (hash: nmExN6JYMg41fJJNAOXoOlJJ6hB41c5F4k8ZYwAMDF4=)
                          20: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=)
                          21: TPGabRFCyApRYylnzXDE-1EJs9A.roa (hash: EAdDiGEy3TYUqK1VO+A8Od9DJIftaQ1NGNwmoQi5V2s=)
                          22: WG6LyvBNGDffIpI-sro91f49_9w.roa (hash: b/qtnEn82SM9GjcD6krB3YfyzXk8Gafv29kH0MahfZE=)
                          23: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: sqLQen0fuZ8Ywzp6WSp+Dpvjw9hdnArwGotK/GVm7Q8=)
                          24: eknd7AvZ78A2jpsWiLdD7r5PyWo.roa (hash: d0fU0qc8+0HlmnrsMQ3Ex2lp/A6PLPh3xmwGDWTtY/w=)
                          25: f5t7TFFLJ6eVzGO3VPTFIHdhhVo.roa (hash: hVo5HmKPNOyU1ejExC2VR32sZ7GoBIzBwGmWpLsdJ2o=)
                          26: hhE8yqqvIIlpuisRReuT9A6k1f4.roa (hash: J2rXjJaRvfkS0jCe1u8LbpFRxfez9lEpglQHrWMaJxc=)
                          27: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=)
                          28: l5wLjIjXWRZ_KLLADANlYyjPIv0.roa (hash: 1lqRp26N4T5cOIjlVSW2D9Cl4zwT2Ag93NKOMpX6XGg=)
                          29: luNvLtKD-DOQJpBUeL1aF_d3VP0.roa (hash: Q2ygPEhYS7ZGt1PTIM6raLUf+Ho8MzUsRUXw4zHyNlc=)
                          30: mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa (hash: ORm5qRABgNl1N4KGsHAqufuM1fGQIyB3FsBRWB7Oy2E=)
                          31: mu5vQENMQGT62T0XlilUIKP3ZMo.roa (hash: ovlRYMvdugoGVAXo7tSae+HYY/huAzodNxSfsvcMJW0=)
                          32: nENuRIXAPRwlljoVVbVN6tRNaOs.roa (hash: Zxh5bgJ2TquFeY/zYRUT5pMOM0/FFZZry3w70ve4WZ0=)
                          33: njV0BHQiQYQvZM8CvDTZl5TJsjY.roa (hash: 8CMg9ZsNR1wRS36isg5DG5jObGJbe2ocg6d/3kGoSXE=)
                          34: oFK59Q3C9TGh3OjadIioNiBOVT4.roa (hash: LP1kIHI3DX97h8zxZoYZWGIq//mTDS9bTjeGSRHWj7Q=)
                          35: pEq_9GNHyjlivZeD-baP0qm26qc.roa (hash: 9HW2pgKUS/HjiTOdvRQJWkPpcQXgVwsPhReH6Hvz2Ew=)
                          36: rItRPn2tLdB8J0VJiRArmvRDFps.roa (hash: meHFAyu6qCXc646PNr3KW0IVhpOYdjsRkvJ65NNK0Gw=)
                          37: s8S1W4cVAgNOzr7acXkokbSU8JY.roa (hash: /7uzkfFuCMpRspM3FdinCvV4M+jOL4OCx212IeV9ypg=)
                          38: vpLxf1q5-MVmiV39db_Ph6LQBPY.roa (hash: OaQZhrU/Tck25ToiF/+vtK3pQYkkYAQV8AUucgwKr8I=)
                          39: woaauVoxvp4_WNTTTdGC5wmdObI.roa (hash: aMIfD8Bm7z/lNAu1jZ39w8jXOc4ZFrKw8zsUVcyxRTc=)
                          40: xcjIZOA8jY7byP-flru-cibOYXI.roa (hash: Ba1Ow09BLM/CKdmUj9NdR6ItGuQtCUmUpwjnknl0o5c=)
                          41: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:10:bb:94:92:98:f9:3d:35:26:a2:13:d7:d3:cf:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: May  9 22:00:49 2025 GMT
            Not After : May 10 22:00:49 2025 GMT
        Subject: CN=cf0eaba11904fc7e3f0611c5d91f92c92b542a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:e5:24:1b:b6:5d:0f:70:74:a3:13:ad:ff:
                    ce:85:68:da:8d:5b:f5:15:3e:b9:dd:35:64:ba:e3:
                    ae:52:07:33:c3:5d:b6:3d:1b:a5:1d:d9:25:74:28:
                    63:b6:cd:23:a3:b8:89:71:a6:dd:2e:44:ff:a1:fc:
                    b1:cf:4f:f0:ff:8c:3e:f9:1d:37:53:60:45:2c:5d:
                    83:13:75:e9:78:f5:ff:42:99:e4:5b:02:af:5f:02:
                    b0:e7:d1:6b:55:c8:ab:17:a7:7e:e5:f2:58:10:5a:
                    d6:d7:7b:58:72:9d:d5:3a:1f:31:e7:71:c6:26:d4:
                    d2:c9:28:40:6d:d1:32:19:5c:66:55:d6:bd:9f:de:
                    90:32:80:07:f4:bf:50:e8:12:56:74:f6:5f:89:a1:
                    7a:20:f1:be:4d:bb:61:69:c2:33:b1:b7:07:c4:24:
                    d6:b9:bc:eb:fb:e8:e7:4a:e8:36:1d:7f:bf:c8:79:
                    bc:d4:03:da:e4:1a:9d:6f:b5:07:38:39:c3:e1:8a:
                    ad:35:3f:50:c4:0d:4f:78:74:bb:6e:be:ed:1d:67:
                    53:4f:10:1d:bc:f0:26:78:48:b4:a8:e6:90:f3:f7:
                    16:3c:b5:34:f6:a1:1f:ba:bd:e1:14:eb:bc:cc:a0:
                    f7:8b:00:44:48:6d:3a:40:fd:23:22:e1:03:7c:0c:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0E:AB:A1:19:04:FC:7E:3F:06:11:C5:D9:1F:92:C9:2B:54:2A:17
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:cf:7e:f4:7c:2e:3e:10:28:2f:5e:5c:04:cd:d2:6a:a4:
         72:57:ea:a6:32:11:4c:37:1e:4e:44:68:e0:09:ac:15:7e:51:
         4f:6e:77:36:5a:88:e6:66:69:d1:ae:c7:92:15:be:42:7c:90:
         bb:52:ea:e2:89:71:f2:75:90:36:4d:46:bb:02:55:0b:a1:61:
         eb:86:e9:72:86:34:e4:00:5b:69:18:65:44:63:7d:fc:37:8a:
         f6:62:ca:96:ab:7b:4f:8e:0c:7c:3e:8a:ed:25:7d:2b:17:c2:
         4d:3e:5d:8b:6f:c2:48:28:4c:36:38:88:e5:32:8d:ff:dd:cf:
         9d:79:23:5d:75:d5:99:4d:20:40:83:6a:00:d7:b4:31:f0:2b:
         44:ad:4d:10:3a:e9:b1:77:a9:6f:e5:0f:e4:3a:53:a1:4a:4f:
         f2:46:d1:05:c1:43:07:8c:d5:a2:d6:5f:33:08:2a:9c:a5:47:
         36:2b:e3:e8:14:29:a1:a1:cd:42:2c:c8:64:c0:49:2e:33:72:
         aa:8f:ce:f2:ac:3a:39:a8:fb:c0:a4:a8:18:9f:48:77:6b:04:
         6d:93:34:59:6c:5a:fe:55:f8:fe:3c:7f:96:f3:3a:a8:a6:6c:
         db:79:5a:4c:6f:42:ff:d2:6c:8c:9a:f6:34:d9:b0:86:27:40:
         10:d6:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:09:30 2025 by rpki-client