Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
File:                     a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json)
Hash identifier:          A6vPgUVcIe/CJvACFxAwa9EAtWnwMQHZmrfmVrjMD4o=
Subject key identifier:   C8:69:8F:7D:C5:F4:E0:2F:EE:F1:F1:8E:92:73:3F:6E:C2:AF:75:40
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       0196A051E3F52B54F3B8B92F2EF550E210F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
Manifest number:          164E
Signing time:             Mon 05 May 2025 12:00:42 +0000
Manifest this update:     Mon 05 May 2025 12:00:42 +0000
Manifest next update:     Tue 06 May 2025 12:00:42 +0000
Files and hashes:         1: 1-5eUrXFS-mBvBFAzMBYr7thfm9g.roa (hash: RJYu6dco2QdzYib1CpLJ1XzU7TkYn7kM5vZDgj+Qfq4=)
                          2: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (hash: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=)
                          3: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (hash: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=)
                          4: 78ZyjDbZyNkN3FayuEyUnAtYdcE.roa (hash: g83O/P/9cvke2YEidLAvWtlDZVwvBFKTQOM7WmikfAk=)
                          5: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (hash: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=)
                          6: B4BNXoWv6BLTWTeZGtI5U2CT80A.roa (hash: RWTYaNXBqgx2XoY5aeQKw+K8rG7+FL9119pzltEHdlo=)
                          7: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (hash: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=)
                          8: Bi-w2vQ6q7Paqeb-8FWxe--YcbU.roa (hash: 9bBFk/y11iYrmgN87LW1/x7IiYYmSf4cmU0eu0rkk44=)
                          9: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (hash: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=)
                          10: DtbO94ZUzuSPpx9yxSPeQtDP6ug.roa (hash: qjfE506/LE++wXn51miEjUwj17Sr2ybeumy+gVqUMd4=)
                          11: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (hash: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=)
                          12: HMpahg815y5dLvRLadSLI9aRsZg.roa (hash: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=)
                          13: IcFuQIouJCuWuHO_yiXsv9D-BsM.roa (hash: 85qJOiM2ad9ExmakxtoyKPLzM0B0skhvz9w/Rt90g4E=)
                          14: KeNSVcNIveDRNN0Eoyb056mMz44.roa (hash: KxKJclC3t7SyZCwcHAS4oMcneZIsejj+HibsNh2NOPM=)
                          15: N994a833bc2uIsA--2ZFV_U7vK0.roa (hash: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=)
                          16: NZf1BQiUDKtWtE2Xd6M21Zpld5o.roa (hash: ciIYo1WWgTHNmZv/oFlR3MFFYdVGmi3hobKY1DepR2A=)
                          17: ODFUWKpYaPLOOmJRIlRL0pQTI-w.roa (hash: HpDjnMyeNXyUzKx7D/ZEuNgQ0V3sG7+U1ei4TAQZwOE=)
                          18: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (hash: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=)
                          19: P7jpQYz_dktvYEApQ1HG4zZwUEc.roa (hash: NEeXpDKrquu4iF+gLfu51Lrnztx6B+hCuEcppqklv9o=)
                          20: Qg7YRAm5mzDF88r95rLP78GgSr8.roa (hash: mWW99hX2DywiuWdo27sg/nYSe3OqMGkXa5/1syY9LvI=)
                          21: RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa (hash: VExSYS2yUuqfk1LC6juwXPrWXoN/wolLvgvP0orlLd4=)
                          22: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (hash: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=)
                          23: YYUKAK2F8cmjIDogLRScyFjxA3s.roa (hash: u5QuMtNIXq5Bh4ROu+k9IjhVvTjPtCkjIDCr4jQWPME=)
                          24: YrcaUlVHW2fyltCzVxW5srb_t8s.roa (hash: YyEdnBQrxhTsz3EF/MLdt6wJMANAV3iBNjSWCoo0bHQ=)
                          25: Z9-pCHbukVnLD87CbKvdfqMcjp8.roa (hash: 1VKomI6H8eJxRas/I2A1OFxgdNoUgegMh0Wu5FVC1Ac=)
                          26: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (hash: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=)
                          27: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (hash: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=)
                          28: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (hash: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=)
                          29: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: fgcl96qOLWL+A1y+Pv5A5KoNgclsxVxMCh2k6o1V3gM=)
                          30: bL4QpEkGhQ7SFvt1p4570f2wAjw.roa (hash: VLEwmnAxRkzaJysdwmNToFGvk98WHCrz2Guz8+uOcTM=)
                          31: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (hash: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=)
                          32: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (hash: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=)
                          33: fcBtCebpi-4K7X5NIslu13uDUsk.roa (hash: NUsnoh1mbJaQ/OI9xchtIzhWSkl4onfdWCVKXM/qj88=)
                          34: iQM89N-8pmdX0FKn2_ZUBdzCshE.roa (hash: NTnxEBzWzfIQmnb4pTpW6WXtbroKOIVyfaC55jLlJKo=)
                          35: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (hash: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=)
                          36: jNqX84RRwICbOmOsyyyD8-SEETQ.roa (hash: BYwZ6wAb4yTmr6zei/Clsy11v9hbMtuZ/ZmhoS0Qe4o=)
                          37: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (hash: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=)
                          38: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (hash: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=)
                          39: tOXM1ArNi_WlT9YM3bcgjCEuYiE.roa (hash: WoZWnVDNekQ1pmAx1W3mwlUwZGDjKwmVnvBatyWe8dU=)
                          40: tlKn03Ch2n039rtBjA5ofqd299w.roa (hash: 9PuwizLdWImEnrfTYLu1uBixtkLMu3z0UocdkAE0/2k=)
                          41: uu8Trj_lWMJjlVPGVumowwLMRzk.roa (hash: Vija8CoIjrBT0gbQz3cogP7Dm+Z4weUwiVE+n23x8Pg=)
                          42: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (hash: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=)
                          43: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (hash: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=)
                          44: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (hash: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=)
                          45: wdcRzGakLe3jtYKRAcXH-gjC00w.roa (hash: duKEk5GHM/r1VrV4PFuMXDPuM6unFH0pIjUwPANnOzU=)
                          46: xFV94mhycLMDkO1NS4j7t6HntvE.roa (hash: A9Prynd/URC1jVssoaAU0w6tIKnFpphaGal/8eTJRlM=)
                          47: zf6pdNUpGphO6Df4cNnwGf8vsno.roa (hash: ECJKSpVkmXvbPK0APqCdCGrsrVqyutvoFLDEiGmDUxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:51:e3:f5:2b:54:f3:b8:b9:2f:2e:f5:50:e2:10:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: May  5 12:00:42 2025 GMT
            Not After : May  6 12:00:42 2025 GMT
        Subject: CN=c8698f7dc5f4e02feef1f18e92733f6ec2af7540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:00:51:8f:6a:58:81:dc:f3:00:19:bd:0a:
                    74:39:fd:a8:c2:cf:25:de:e2:fd:7e:45:98:af:f0:
                    4f:39:2a:1e:a8:8a:36:7c:45:4f:b2:e9:a2:95:cd:
                    16:37:99:fb:8e:de:07:ef:06:34:e5:17:de:d4:03:
                    ae:89:52:04:c9:46:ca:42:de:5f:41:25:b9:d5:f8:
                    53:d8:d3:a1:84:07:f5:29:b9:1a:11:f2:d5:92:73:
                    2e:45:aa:0a:ec:4c:a7:79:37:fa:be:64:d6:5b:4e:
                    a6:5e:7e:15:ed:86:96:8c:de:73:d1:d7:6f:50:86:
                    9c:88:6b:8e:c6:95:1d:83:ce:b7:fd:d3:4a:74:e0:
                    ab:f3:0d:2b:82:3d:0b:58:85:c8:de:f3:29:dd:39:
                    25:ad:46:58:0a:44:17:5b:8d:11:52:89:40:d5:87:
                    f3:50:41:0f:06:80:51:75:8c:f6:b5:53:ab:41:b9:
                    78:06:b8:91:9a:66:30:8c:87:28:3a:8c:ff:00:30:
                    f2:ed:14:aa:e6:1b:c5:f9:a9:38:0e:41:63:88:50:
                    02:23:b2:ec:fe:fd:38:3c:f5:25:56:72:07:06:c4:
                    01:38:8a:a8:6d:d7:f2:59:00:92:cd:6b:ac:4c:17:
                    14:58:14:b6:ae:21:3a:75:a7:32:94:18:5a:cb:7b:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:8F:7D:C5:F4:E0:2F:EE:F1:F1:8E:92:73:3F:6E:C2:AF:75:40
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6a:b9:3a:2a:84:29:81:bc:43:1a:50:d7:f3:ee:32:fb:77:
         27:21:37:8e:fd:17:d3:0d:c6:b3:89:fb:2f:2e:e7:2d:3d:fe:
         27:7c:ce:ec:2c:db:07:c1:f3:01:ae:ec:73:cd:05:12:0f:98:
         b8:8a:48:40:93:69:5f:7e:4e:30:52:a6:ba:7b:63:c0:b6:89:
         2b:ba:ce:6f:f1:84:d4:9d:0b:a7:0f:38:06:a7:10:85:54:14:
         cc:24:cd:15:b2:53:ae:d4:91:e4:52:33:f8:e0:43:ea:dc:02:
         de:c1:a5:42:4f:86:d0:63:b9:81:09:62:b8:43:82:1b:ad:34:
         c2:7f:d2:fc:b9:e2:49:ac:2e:5f:e3:b3:95:37:72:d5:45:30:
         c3:39:77:c6:05:54:7c:57:ca:74:c3:ee:a0:8d:4c:be:15:10:
         f5:4b:6c:50:f2:07:b0:ca:1e:87:3f:82:bb:12:f2:b2:49:2e:
         6c:59:f3:c9:2c:2b:dc:f8:d7:a1:b2:e1:f5:84:01:e1:42:bc:
         e5:e6:fb:74:8d:79:d9:b6:89:d0:1e:75:87:1a:6a:e3:14:a0:
         6f:8e:d0:ee:60:b7:1b:2b:eb:ba:dc:6e:db:d7:92:02:79:49:
         77:ee:9c:da:0e:41:62:4d:28:62:6b:69:6d:6a:94:b0:ef:82:
         f9:26:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:24 2025 by rpki-client