Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          8PCfH5nn6+wkYFnnT+lVu9XcSaEZ4jHfo0RCrNAeLXw=
Subject key identifier:   86:EA:50:BF:25:B5:B1:B4:D2:BE:F4:BC:21:B1:E5:AD:08:29:83:E3
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       0196A61CED7EB9B67C29675B823FB46CE6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0BB3
Signing time:             Tue 06 May 2025 15:00:35 +0000
Manifest this update:     Tue 06 May 2025 15:00:35 +0000
Manifest next update:     Wed 07 May 2025 15:00:35 +0000
Files and hashes:         1: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          2: 2dufQoC5Jb0ve5IYehtGosKqu7Y.roa (hash: fBd1JLy+BQuX/FeJIoa6E39ivAOuTftwa/xPQ5dGjI8=)
                          3: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          4: 5ti7bWWeuzgJf0KBwaFhK0N9KRo.roa (hash: EtFUfmsrngVXtCd/OFRb3dSYVWsGdEV54+GYkoeqeqQ=)
                          5: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          6: 9vfmUm9RByccnOb6XlV_ph-gPk4.roa (hash: LNn9kutR9BeTRKC/HK+uI/57S0lDbgwp5ZsR1e9YOBA=)
                          7: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=)
                          8: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=)
                          9: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          10: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=)
                          11: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=)
                          12: GfzIravp1A-qM950EcQKAfu63d4.roa (hash: 4qKKF5LJkw69+LTSlZgQCwePECc0VCX/55ZPOTYfHHQ=)
                          13: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          14: M8D_IMJ533cPCluNicEkqGqEqIA.roa (hash: f3oUXP011dcel1hy6/puj6WHzfVrVmIF21BprGdwKQo=)
                          15: MQQNQpnOLo7xjqCOz6nT8mwPN1c.roa (hash: 2PaPwlupHN5M6LnrEQtTQs0LPCM/gyDxtY5UHvVEJSQ=)
                          16: U2PFthxJ7F2mSel2S5VEsWL5cds.roa (hash: VnmR6rK0a23jDw7iX8IiRVNjnkuvKH5yp7AMU/VwSYg=)
                          17: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          18: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          19: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          20: YuzK84yE-VeaDfqQ6O3J9o15Kv0.roa (hash: EVKp3DpwGwk3zHFDB6I7C6vUQecOQerB/cDYFjxLfg8=)
                          21: Z_9aQ9yajBZ2JLgMPuP-5DT5zd0.roa (hash: 4CGz9OtQ1X/4la1NVBt5q/Fx1Bc3qLuZdDjOQydgtOs=)
                          22: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          23: alg23em52u81qKf3TWMm9rQtp00.crl (hash: IILVJF60fAGxsenJytsUkXrRXxSk1Us6uKvHBuHSxlA=)
                          24: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=)
                          25: eGDtP2QEnUAkQBFVgFoKhO3sxWc.roa (hash: FrppCVzjWf0RGrTLLO4uwCbbCzE9ofdGKinEGM8+zy4=)
                          26: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          27: ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa (hash: 4VUp3SMe9rs+Z7Hbxzz7UGL7lgkBSmttJcCWABv87SU=)
                          28: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          29: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          30: tdrOV3y46CrlF70UMGPfRoCn2j8.roa (hash: nIA0fLDpgoUGtNCZuxY6Jfjz2U/gZnlLBrv5XztTHEI=)
                          31: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
                          32: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1c:ed:7e:b9:b6:7c:29:67:5b:82:3f:b4:6c:e6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: May  6 15:00:35 2025 GMT
            Not After : May  7 15:00:35 2025 GMT
        Subject: CN=86ea50bf25b5b1b4d2bef4bc21b1e5ad082983e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5e:e5:c7:8d:46:eb:de:d3:fc:43:26:eb:73:
                    aa:80:56:7b:d2:fb:a5:17:0a:ae:ed:6e:48:a7:73:
                    35:37:c5:aa:1c:ce:61:a2:d3:0b:31:16:6b:1e:06:
                    9b:a3:90:d0:34:37:67:e5:66:16:24:46:c6:d8:ca:
                    aa:38:71:d7:c3:10:e7:11:40:df:57:ab:f4:3f:a5:
                    58:58:33:40:5b:e9:59:d7:8a:03:8b:96:d7:e5:ab:
                    b9:48:38:98:c4:07:be:61:82:1a:1a:3c:0b:bf:dc:
                    1a:e2:34:d8:66:00:22:83:08:48:74:41:55:40:c3:
                    ca:2d:ba:0d:7a:55:b9:cf:89:b2:0d:7b:4f:cb:e5:
                    1f:1e:76:fd:37:e9:9e:40:c6:29:e0:32:9d:7b:60:
                    4c:15:e9:6d:da:c5:f4:a7:9f:7e:47:c1:b8:50:3f:
                    82:15:70:12:08:c3:f1:12:16:fe:68:b2:1c:fa:38:
                    19:21:c2:48:7d:8b:a7:c9:89:0b:8e:0f:64:3d:d2:
                    a8:90:2a:56:03:02:a4:31:3b:dd:2a:f9:77:08:bd:
                    b0:cf:81:c1:4b:0d:02:e3:56:96:e5:b5:8c:76:35:
                    df:76:f1:e2:df:6e:04:c8:20:3c:40:72:74:a0:13:
                    a2:63:31:78:ac:92:83:79:09:5b:85:44:d7:9b:ab:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:50:BF:25:B5:B1:B4:D2:BE:F4:BC:21:B1:E5:AD:08:29:83:E3
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:ef:6e:f5:1e:d6:b5:06:50:e0:57:c0:16:15:7e:a4:51:
         84:b3:aa:6e:cd:3b:84:6c:bb:c7:73:f4:d6:09:8c:46:31:b8:
         d5:82:ae:4c:ee:b9:99:c5:a6:64:fe:37:a0:d6:00:73:5c:3d:
         7a:50:6c:09:b3:51:08:2f:c0:75:ea:9b:19:52:9d:bf:e0:b6:
         c2:aa:f0:e3:c8:64:6d:0c:07:a0:75:36:9b:48:63:9b:a1:0d:
         9c:ea:10:16:0e:7f:ce:5c:04:44:17:ea:1a:66:5c:5a:f7:64:
         4c:73:17:7c:36:9c:6f:a9:4e:88:80:2d:f0:54:e9:b7:16:e7:
         9c:e8:f6:06:b3:6a:fe:79:08:0f:81:d2:9e:15:08:8e:c8:93:
         c5:4b:ff:f6:d2:0b:be:a2:3c:c4:a6:c7:aa:3a:ff:e2:b8:d4:
         cc:8e:09:12:7b:6d:50:92:58:4f:d0:92:84:8d:1b:0d:34:0d:
         23:45:d9:41:5e:4d:c5:6f:cb:8a:eb:74:c5:d4:3e:af:f5:8c:
         3c:da:2b:37:3c:f7:f3:16:e7:0e:24:cb:8b:13:f3:44:26:64:
         c8:5f:e5:9e:22:bf:e4:66:7e:5b:aa:ab:05:63:d1:a0:a0:b3:
         b8:ae:dc:f1:83:d4:ed:a6:1b:c8:54:30:0b:51:4b:23:b4:cb:
         02:a5:f8:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamHO1+ubZ8KWdbgj+0bOb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwNTA2MTUwMDM1WhcNMjUwNTA3MTUwMDM1WjAzMTEwLwYDVQQD
Eyg4NmVhNTBiZjI1YjViMWI0ZDJiZWY0YmMyMWIxZTVhZDA4Mjk4M2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V7lx41G697T/EMm63OqgFZ70vul
Fwqu7W5Ip3M1N8WqHM5hotMLMRZrHgabo5DQNDdn5WYWJEbG2MqqOHHXwxDnEUDf
V6v0P6VYWDNAW+lZ14oDi5bX5au5SDiYxAe+YYIaGjwLv9wa4jTYZgAigwhIdEFV
QMPKLboNelW5z4myDXtPy+UfHnb9N+meQMYp4DKde2BMFelt2sX0p59+R8G4UD+C
FXASCMPxEhb+aLIc+jgZIcJIfYunyYkLjg9kPdKokCpWAwKkMTvdKvl3CL2wz4HB
Sw0C41aW5bWMdjXfdvHi324EyCA8QHJ0oBOiYzF4rJKDeQlbhUTXm6tFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbqUL8ltbG00r70vCGx5a0IKYPjMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9XvbvUe
1rUGUOBXwBYVfqRRhLOqbs07hGy7x3P01gmMRjG41YKuTO65mcWmZP43oNYAc1w9
elBsCbNRCC/AdeqbGVKdv+C2wqrw48hkbQwHoHU2m0hjm6ENnOoQFg5/zlwERBfq
GmZcWvdkTHMXfDacb6lOiIAt8FTptxbnnOj2BrNq/nkID4HSnhUIjsiTxUv/9tIL
vqI8xKbHqjr/4rjUzI4JEnttUJJYT9CShI0bDTQNI0XZQV5NxW/Liut0xdQ+r/WM
PNorNzz38xbnDiTLixPzRCZkyF/lniK/5GZ+W6qrBWPRoKCzuK7c8YPU7aYbyFQw
C1FLI7TLAqX4Vw==
-----END CERTIFICATE-----
Generated at Tue May 6 22:56:42 2025 by rpki-client