Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
File:                     LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft (raw, json)
Hash identifier:          F9z0ISb3Q/WVh+XnlMEgIMYHxKT4Go3UAwwuRhVE1K4=
Subject key identifier:   86:51:0A:BF:DA:7F:F6:22:6C:06:D8:CC:C6:FD:41:B8:06:45:7F:98
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       019A01D4A0E3EEDA2B485E14535471A0BBBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
Manifest number:          03AE
Signing time:             Mon 20 Oct 2025 13:35:03 +0000
Manifest this update:     Mon 20 Oct 2025 13:35:03 +0000
Manifest next update:     Tue 21 Oct 2025 13:35:03 +0000
Files and hashes:         1: 6YptvqcamYTZ_KBTU9csAqY6tgo.roa (hash: b2mIkimTPZ7wOnnbfmxNhh6ixTmHJqic0dQrw6jmK+Y=)
                          2: 9liVjtEMtIrsR62kZDaM0kPGr1Y.roa (hash: NpGZmh+iD4/mONqK53GDxQAq8P3AfIUxbgPUthLhiP8=)
                          3: 9ufXbM9venYhxl-SvGpc6GfgiXw.roa (hash: Ac/t4dFO//WUk7pf4os6/uGOArEztMkq7kLNqY6xpWY=)
                          4: AB92dx88kwkSwu7Vgo9mUoYS2mM.roa (hash: xfYe7WhB9hj3Mo9Nrb0oxMXvvqAhWC7nfl2Fz9yUq1E=)
                          5: AVOZwt7rD6b7Uri_ABiPDQpVEfI.roa (hash: b9VwteSH9jzWkD/sUFoJ908X1ZJ27VVPFPrv/2J6P6Y=)
                          6: BXgVouFdoBZH9PxQN6YZC-UNnp8.roa (hash: IG8ZE4QQHca+u7/RIuaDccmD8aLVhSHwZtoLhRiyOnk=)
                          7: CXVYpKG4rYJRkylDT3bVF6tVtQ8.roa (hash: 8dnunwYTmbdBcISMaBOmWVUnLZvmfrP9LO3Dw7YOYAA=)
                          8: CwU0SOZBpBqv8FHTt6eeF_Wcyj0.roa (hash: PENuzYa45HfkD020G2egovGi2TZ8J0hHbb327XH4aW4=)
                          9: ECiS1gBfM-Rzlscv8rvcHsfQ-hs.roa (hash: xWByB/LFMByrlYZWNJZy6Ey0qnW6TMMOuEUJN0eHmb8=)
                          10: Ew2u4fx_aQ9zMEtqOWMhDa5V7nE.roa (hash: x28lvMc0qdwGJwKWszESdc/fXn/X5nd+KMthC+H7owI=)
                          11: FzlbF55iXTRmTdbUqTxfXI0Zask.roa (hash: 1HXzUwlCGbnQFUFl3hhCNjhPpgO5yZtuxbH9itEHFWs=)
                          12: Iss03fxG183Ad8Zh0e8rI5Yq8wU.roa (hash: SK8n2+G902FJsAuRdbQgfQwMqnoWcReHIQgfCseee8o=)
                          13: LUMsiBwdcGbHz3sqHevDts_86dk.roa (hash: RYUBfXKXvhD4f55RRnElIkcQIz6j1lXdBKVJowUCv20=)
                          14: LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl (hash: 5r8C/G9Tzyw4U6tnpk6m8k766cgrvP0aR2J0TEMav+k=)
                          15: NwU8hI1qGvuTrLRz9doXxOfU-ic.roa (hash: uPzfnmuMOWT9fjCFZJcxLXfz0ZTVPu0alfKcT93uFzc=)
                          16: O6xvWCBUga7-FqiTkcbjjkERn3M.roa (hash: Ex9I/KCofpGYJuPcYtZo8RdLUREkSkzCY/zq/L57QkE=)
                          17: OJTYVCe6Nl2AMokqA_ZhaYOcXsg.roa (hash: L52uPLShR43RNNFlhE29oNP/bVVxexGxpYNZAJRAog8=)
                          18: OoN59isFo_rAN_zj36QjJukTo8Q.roa (hash: QW7f2AvJV/DOzN/xGJTfHNMIRsNFwzDwCNvJ2spqNQU=)
                          19: QGxCdf3TLB2h2_ZUOVvSFq1o2IY.roa (hash: A6DCigtRmmzHqMF35lYFek3GT8mHkaajXI6C/anG7uo=)
                          20: SN5BTYTNTFuSG-XV8Eq1EVBgxqo.roa (hash: LJ6KxYfmF4geK0eP2B+fQuqJaneWWfaKHDJbXYR5Gw0=)
                          21: TModgO_PU5OnnkGE6q0_vI2aPqc.roa (hash: AXNbtSpjk74wJYzTSlOP5KukS8xXVwQ3OiqFq5D3FaY=)
                          22: T_okiph1wkfxGvnl69V0bdiWVCg.roa (hash: K3keo5b5zdM51KQzReKtnCXMirlw2e9xT7eFLcgRzhw=)
                          23: VGEwlpw6asPFFV1n9StUJyzTfEw.roa (hash: 0pGkhMEO1QwaF1im3FAN2BXHbxw9cb9Bu1sg/fKOeVk=)
                          24: VWXUtPP-EA7bklFBJKhwAHylxdI.roa (hash: uo05tkwCR+OwjX2SQhG6kgZeLpSiB4XzGba/1RV5qI4=)
                          25: WA8uP_bOWezCzKXq9ZUN4orCVjw.roa (hash: rl53XJ9RakCyWqzOi8U9JX5WoO2P/xY4FpYY/oeCwW0=)
                          26: ZOB8mRwvmjDZwR71AwCsvVbjPBo.roa (hash: N4lgmqpJykHEHqqfmOzwZlQAUm1uN50itlJ4VrMgHm0=)
                          27: _aA4Wyjvr1KQI6MZRuulqWfOG_I.roa (hash: 7oXyPxkh0Mrcry896ICdX0g6fme5Uz30QIaBxhiaDzs=)
                          28: apuSX4_xVK2C0NA4ZV73mzFZRoQ.roa (hash: NqfBhuOwQWOxil/tC7HLfuFs6fFmvk9JXrZ09wIGjfs=)
                          29: caVacysfCbUohZAFhJ9JHYKlAdc.roa (hash: Zqdbo50w3LDDMJoG4kkuVsWzKZ9yVmJ3kItXM7dfw30=)
                          30: eqLpbadI6DxIbhRZupEXKudotjY.roa (hash: bux+bpeo/gdPPfSH3/vhv2aBjG031fUkKa1/SZmYLY0=)
                          31: h6_op7Q5Ix8vSmay-nirXKw5O4Q.roa (hash: ssjHUNmRf1BGgmfrRS5+UsRnjZIdURkOh30ODXF2xp8=)
                          32: hV0xmLCbVI0Z_lGTFBFJ_1EjqIw.roa (hash: RD3HFxDZxmlQMlFFIU1sLkxHbAxzrxh/5RzNMozB7Tg=)
                          33: iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa (hash: pEFIpnuch1qRnOFnkvakcOhoMdolz6e61+pO/vjQc1g=)
                          34: ivxyQ0VDy1QRWUlTro9dtAob9bs.roa (hash: uQtt4sSWpP1bdpa6GwajaXb2fLEN/kuqua6WgKuzLvM=)
                          35: kIpWtrsK7_kFV_34HuBgdHo2heY.roa (hash: cmh2HCbUPRleCRkC25jh5gcUSKAeBoZfRXmSZmlskDw=)
                          36: kLbwtoR1-PJ1iVx7zIS8OZRHmbo.roa (hash: zzpiAI5dZ3DlISifut9W8VJhobMr0FAEbnu/KPId+O8=)
                          37: kPwbkEdWtW3oHjMcm6HoAoktglw.roa (hash: f7J8PYacDR6ERvzPBTS31NFGOxGEHO5Zm7rwEwz5mF4=)
                          38: lSPQiFcamFwrOMXbm4_0wnYLO1k.roa (hash: wxkgrrI+lESZWSenzZcj+dm/I17XrlGhsPr/T4Nhz8A=)
                          39: ls8GmpeT1B3YYCfRd0krF8wi7eQ.roa (hash: 0ddHz6E3qozuG71ukMuH+oYDD4RF0Lruu/ta2q80rNM=)
                          40: lye9DokwTKdkE_FKJTqvZZffwac.roa (hash: wQ8QQHVuRZRKcv813Ugt9RlXSf4ssdTxNCPs6S3sxSI=)
                          41: mOZNGctp3EsvRu4hpTryr_uaewA.roa (hash: puhCKO+m+eBOV3k1DR7imdSPzQ9zEzyyXVrCFpI9spg=)
                          42: mll4rTtrUdS49oNy9TXy47duZkU.roa (hash: zt/IH5lAQiU9R9DC31GhwrOzct751ez6ym+faJYcz0E=)
                          43: n9JcdAJk_0CmQbAcIsk5OQf4rEg.roa (hash: EJz2V8je5D8ufjc+9LcNLrHnDG0vfZWOkD5XW3OJi+w=)
                          44: nXybJsFL4j5LMPPKi8QoIMg_Sj0.roa (hash: GakzKhW3+IghhsdVP7qvmniDLOx3RIlModwIj2icuec=)
                          45: pD7pEymknzkUjbwQgBvMF1uo8oY.roa (hash: 5l5ShUzOFfyQQajUSuac6KbfafY4wLPXiMTzwJGTLV0=)
                          46: rzq199fZhDX4Cc8b8HUXyKGHh0E.roa (hash: N/ksDgvXEt9GD0GA+U9O8KGTZ3RLHe23yCW5y1ZB8wA=)
                          47: sHCMS0oJ2DBmSBt5fLAgPpnKcXE.roa (hash: x5bXQoIxg3oYhDL2OLT4GYBfK+xR6iJjuSaHAUUTC2k=)
                          48: th8VIy6ilOjsBnuJs5F-ma3hD5E.roa (hash: /EsPG2U4dQwt3L/d+3LRYLJaWFYWyBa2txVzoihJxU0=)
                          49: uG7dOE8txFbtA083hqiiPmz-wNo.roa (hash: +Kjd4p0Rj4WqNIufiKEaL7E/obgt+Fkv7edrXdKmLVo=)
                          50: uLcYYjiUGHa8NpENnvwfV1IC9to.roa (hash: 1JSDr6r1Hjv3rtoxSbcIMW+PePLBwYMzdBfYAA8vip4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:d4:a0:e3:ee:da:2b:48:5e:14:53:54:71:a0:bb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Oct 20 13:35:03 2025 GMT
            Not After : Oct 21 13:35:03 2025 GMT
        Subject: CN=86510abfda7ff6226c06d8ccc6fd41b806457f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:a7:08:a7:78:68:5f:d2:6c:18:d3:04:25:
                    b2:80:27:21:5b:1c:d9:0a:79:1c:f9:2f:ca:70:eb:
                    d3:07:d7:bc:e2:9f:86:b9:89:99:9d:83:c5:90:58:
                    eb:0f:ff:b3:63:d6:8b:9a:7a:57:33:65:77:c4:28:
                    07:f6:8b:a6:f3:7e:41:3e:45:6a:cc:54:08:2d:73:
                    66:78:af:3d:7b:4a:4f:72:69:23:97:87:2f:34:c1:
                    b7:85:ec:7e:2e:0e:d2:fb:70:cf:e7:19:d0:7d:9c:
                    42:59:7a:e6:a9:41:35:ca:f7:8b:2b:ac:79:0c:7c:
                    42:84:37:5e:5c:12:22:34:e4:9e:3b:84:a6:28:b7:
                    84:f9:7f:22:24:6e:04:17:ae:48:30:31:f2:41:e6:
                    f1:c7:83:83:60:5e:64:8c:86:8e:e8:7e:09:5c:88:
                    5d:be:28:d0:69:2e:d1:29:36:a9:dd:8e:35:33:5e:
                    78:c4:a1:e4:df:5b:e2:57:05:90:f3:ac:98:37:e5:
                    1d:d7:33:bb:a5:21:be:bc:47:d4:b5:60:4a:2b:30:
                    76:b3:6d:04:4c:d7:76:31:07:fc:47:cf:5d:8b:42:
                    65:0a:92:07:fb:b2:19:7d:3c:12:79:14:35:15:b0:
                    5d:83:19:78:6e:9d:ce:9c:f9:8f:4c:c2:bd:cc:68:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:51:0A:BF:DA:7F:F6:22:6C:06:D8:CC:C6:FD:41:B8:06:45:7F:98
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:3e:b2:a7:28:d4:a6:a0:87:64:56:33:66:db:fe:90:43:
         f2:f3:97:5d:58:a8:4c:93:12:f0:28:38:e0:c8:26:4f:73:67:
         b7:79:1b:76:2f:39:b2:46:4f:a2:88:c8:fe:f8:35:83:0f:95:
         65:f2:07:d1:73:fd:cb:fb:19:79:6c:b8:e7:ef:78:e6:19:42:
         89:d7:2b:c4:ea:04:f6:68:01:d4:67:dd:f7:a1:a7:12:79:97:
         70:ed:7d:df:26:f5:0f:13:2c:12:31:3d:1f:90:93:d4:4c:85:
         3d:8e:76:d5:97:7b:ef:ca:8c:f5:62:b1:cb:46:f9:75:af:d6:
         e0:ee:90:ee:11:9f:ce:42:e9:e8:ce:cc:a8:2f:2a:14:96:09:
         28:99:fa:02:92:b7:ac:41:d2:37:75:4f:6a:85:82:bb:95:5c:
         f3:b1:7a:39:10:0f:2a:20:3a:c7:4d:df:9d:6f:c7:1d:ad:21:
         c0:ab:8e:3e:65:ec:ee:11:97:4d:c4:fb:c2:38:b0:04:eb:d9:
         81:c3:2e:37:47:c4:6a:99:4d:6e:7e:9b:8f:5d:b4:7d:bf:a1:
         49:9d:e3:a1:b5:74:05:e7:a2:cd:0b:13:74:b9:15:49:c9:39:
         11:54:49:eb:27:08:e7:91:4a:20:5e:19:2a:56:05:ae:18:8c:
         50:38:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----