Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          V3cgHt76HoSUZ2lpTAbHhXncvUyT0CGqiZHV2d5hsxc=
Subject key identifier:   20:1B:16:29:FC:8D:27:C4:E8:C1:CD:BF:31:1D:87:33:DB:A9:64:97
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       0196A2E561C209AEDF46BE8402FC581365A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          1579
Signing time:             Tue 06 May 2025 00:01:03 +0000
Manifest this update:     Tue 06 May 2025 00:01:03 +0000
Manifest next update:     Wed 07 May 2025 00:01:03 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: XsW941s0PnFmZOCqelQ3BvEP+OsEvtjhPrDYoGP2aQE=)
                          3: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          4: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          5: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          6: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          7: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          8: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          9: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          10: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          11: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          12: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          13: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          14: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          15: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          16: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          17: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          18: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          19: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          20: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          21: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          22: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          23: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          24: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          25: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          26: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          27: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          28: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          29: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          30: Xp7xkGck5HfUbla90352EjK1R_4.roa (hash: j33DUUX9yDrQBerlsMfMuiwGPme7s1p3cgAMKdvHfjc=)
                          31: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          32: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          33: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          34: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          35: cT-Ola2sFY3Gtuhwdu5w1yda_QA.roa (hash: MofBarKSY2yCxQ8X6W2qaC1Fi9Ol6cz+o96R8xs/ybk=)
                          36: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          37: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          38: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          39: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          40: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          41: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          42: msTJH3LpvSSJE6Ri3OotLMxDeGA.roa (hash: TnZ7qzgV/HeyXjb0/V/imlQGl0TreqcUD4M56v/jCq8=)
                          43: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          44: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          45: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          46: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          47: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          48: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          49: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          50: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          51: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          52: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          53: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          54: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          55: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
                          56: zZ3LXASmvnU-tG5IFxAXhcytpeY.roa (hash: vauvWlngvw9B9FLlnT3JWLQjDLxvQzC3J5a7IlzCo4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e5:61:c2:09:ae:df:46:be:84:02:fc:58:13:65:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: May  6 00:01:03 2025 GMT
            Not After : May  7 00:01:03 2025 GMT
        Subject: CN=201b1629fc8d27c4e8c1cdbf311d8733dba96497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:ac:23:92:c5:cb:ab:fe:6b:97:f1:22:04:
                    ff:a6:3f:c8:6c:63:d5:f8:3a:6a:f8:8d:b0:2a:f3:
                    18:28:4d:11:9e:c0:7b:35:f0:4a:0e:85:c8:c5:3f:
                    e3:07:49:38:81:da:87:c9:13:31:4a:d8:4f:22:73:
                    6f:e7:56:cf:58:47:91:a2:c0:87:a7:96:7f:1c:b8:
                    36:ec:fa:00:8f:a1:62:15:05:50:cf:d1:97:ac:91:
                    84:d6:56:81:87:e3:28:8e:fa:c4:bd:ca:0b:f6:9d:
                    36:1b:c7:eb:48:f9:38:5e:fb:25:3c:12:a0:33:65:
                    4e:a4:81:b9:4b:f4:e7:3f:44:3e:39:95:31:6b:1e:
                    62:e4:c0:fc:d4:1d:1b:da:08:73:2f:98:da:9f:08:
                    e4:67:84:40:70:2a:97:0b:c1:8a:64:a5:39:82:1d:
                    f7:10:b0:aa:5e:f7:d5:22:9b:be:bc:66:a5:a9:e1:
                    74:67:7d:ac:8d:2e:dd:dd:61:2b:64:4f:8f:6f:de:
                    69:30:ae:d1:00:93:e3:d9:80:17:c1:09:c9:17:9e:
                    11:9f:9a:35:ce:82:eb:42:cc:b2:86:9f:c8:ac:04:
                    df:b3:d1:d8:42:d2:98:27:53:95:41:94:4a:af:08:
                    7c:96:f0:8d:5e:9f:fb:0c:d2:a7:4e:ba:26:e1:a4:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1B:16:29:FC:8D:27:C4:E8:C1:CD:BF:31:1D:87:33:DB:A9:64:97
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:75:36:ce:c2:00:f8:e9:71:2e:51:f1:35:34:ed:cd:61:
         d8:c7:53:bc:23:d3:23:55:00:c9:0d:eb:57:20:84:09:41:7e:
         95:cb:f4:e0:e8:d0:cb:f0:d8:12:f8:90:fc:45:e8:28:56:ec:
         59:5a:68:56:97:75:68:b9:7b:c9:b5:3b:7e:8d:f5:45:f8:13:
         95:fe:c3:c5:a4:e4:5a:6d:6c:04:9c:22:79:74:4d:9d:87:88:
         60:0b:dd:c5:6e:a5:00:24:04:03:9e:23:b3:91:21:05:d9:ba:
         25:e7:a1:5a:30:87:23:99:8f:3f:20:59:92:39:5c:ad:b0:04:
         57:20:66:8a:ed:f4:aa:3b:a5:6c:13:a6:65:7c:8c:84:6f:1f:
         7d:c8:8f:f9:cd:95:e2:4b:33:c7:5c:4b:1d:85:9c:9c:75:21:
         3a:02:9f:6d:86:ce:81:af:77:bf:bb:7e:b0:f0:8e:0f:79:fe:
         45:52:d2:04:e4:88:a2:d9:a8:58:0b:89:b2:f2:fa:b3:94:cb:
         91:f9:a9:61:ee:05:65:ae:06:39:7f:3f:77:2c:84:0a:8a:d8:
         99:74:49:6e:3b:49:1b:9a:f4:85:f3:f9:bc:0b:d2:b4:94:dc:
         e0:9c:54:d3:64:5d:b4:49:08:14:0f:46:76:3b:da:29:6b:bd:
         db:7a:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----