Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          48pXw3vyWf4bJ/9HHI1QnrVonJdt+76E1jRJfS0WU0E=
Subject key identifier:   24:F4:68:9F:C3:81:A7:C4:D6:4F:AA:CA:98:EF:EA:C2:26:FF:1D:B3
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       0197B7B31200DB3A1D983D5698CB264B8504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0C49
Signing time:             Sat 28 Jun 2025 18:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:55 +0000
Files and hashes:         1: 2-gxvLC050rPyg0pBIuwjLWc1Cw.roa (hash: 1U8YnoACqQJDMJE5uRSPEGgs7vpW8J6WOx9xshbIsPE=)
                          2: 2GgxymSj789RBZZH6Qr311JOO3c.roa (hash: xxHGIN8RcP18Ff052v35zzO1Qu2FWHnYm7uLj+9oo4s=)
                          3: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          4: 2dufQoC5Jb0ve5IYehtGosKqu7Y.roa (hash: fBd1JLy+BQuX/FeJIoa6E39ivAOuTftwa/xPQ5dGjI8=)
                          5: 3JMEDtnuA6v8KKf4FVCxgbK4oN4.roa (hash: 0Qub+blZcyz/QgTRuTxgkxRc1Gc2PwuMNSOrgkAIbcQ=)
                          6: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          7: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          8: 7LfZ34jkVj6-hsL2r7ECksqembM.roa (hash: KK5qcoPr8RyUr7Oi3j2Zv7SSNXcoriOx3nxYfmh17TY=)
                          9: 9iiCvQxUod6DvEnzFdFsdupl_0o.roa (hash: vWfISYW79jvaDXYphE6gmSfEJChmyi+tOmRMgdqGhOE=)
                          10: 9vfmUm9RByccnOb6XlV_ph-gPk4.roa (hash: LNn9kutR9BeTRKC/HK+uI/57S0lDbgwp5ZsR1e9YOBA=)
                          11: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=)
                          12: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=)
                          13: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          14: EWRNmBQ7aB3XmUOecA52fy9YpXQ.roa (hash: ShVFz76WbjvkfVYqTT9SDbFD+pW+R3pcWgkit4QeGKc=)
                          15: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=)
                          16: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=)
                          17: GfzIravp1A-qM950EcQKAfu63d4.roa (hash: 4qKKF5LJkw69+LTSlZgQCwePECc0VCX/55ZPOTYfHHQ=)
                          18: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          19: MQQNQpnOLo7xjqCOz6nT8mwPN1c.roa (hash: 2PaPwlupHN5M6LnrEQtTQs0LPCM/gyDxtY5UHvVEJSQ=)
                          20: Sxy6K7e73qOvfCbb9KneoPvXeRI.roa (hash: IE71fGGjPNEzI1bTXZSPWcPLR3j32S+b4osxDkIoySw=)
                          21: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          22: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          23: XHtpEQoraqRFRPdlAEW9sCe6_rY.roa (hash: soXr8YiLhiu6P10YvfCxOODOvjvRErlJJgNef/tqi0c=)
                          24: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          25: Z_9aQ9yajBZ2JLgMPuP-5DT5zd0.roa (hash: 4CGz9OtQ1X/4la1NVBt5q/Fx1Bc3qLuZdDjOQydgtOs=)
                          26: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          27: alg23em52u81qKf3TWMm9rQtp00.crl (hash: JyUBjf4d/fxTefGeh8lNReL4tSE4YaPADCBAAnzuJVI=)
                          28: c4vYqF1tYFnE7ufF7Vande4OrQk.roa (hash: SGC5C7DpLVwd//1nD74m+Qyq9Cj3MluNv7n0feydZ0c=)
                          29: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=)
                          30: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          31: g-_U_ZQ6WoPDtEKmmE8KB6VVy50.roa (hash: FKIdBJ4K6Ik/oTZWTfO7K6hztUPX1QWBSTQJtuPCOzE=)
                          32: ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa (hash: 4VUp3SMe9rs+Z7Hbxzz7UGL7lgkBSmttJcCWABv87SU=)
                          33: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          34: lxkVaZIbX7I7bmN6ZBzzOQmtNdQ.roa (hash: LfvYFnIRA3jwfBQfIqqFV40UbcQgxtmN1lVv1rOE5/Q=)
                          35: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          36: sUyAiJFfSegxYPYQ3zI2TQB25y0.roa (hash: M94jlBY0zNafDZ0pmCNUNbPA+zqNkoYyovRQSUTW5xg=)
                          37: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
                          38: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:12:00:db:3a:1d:98:3d:56:98:cb:26:4b:85:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jun 28 18:00:55 2025 GMT
            Not After : Jun 29 18:00:55 2025 GMT
        Subject: CN=24f4689fc381a7c4d64faaca98efeac226ff1db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:7b:a7:12:cb:4a:2f:1b:30:57:c9:10:e1:
                    fc:d3:bb:5b:6b:5b:b4:fc:50:cd:51:55:cd:e6:f1:
                    b4:3c:49:6e:6a:9d:bb:86:cd:55:12:aa:f6:f8:14:
                    51:b9:7c:1e:ec:05:2b:ec:9b:02:86:ec:4b:c0:a3:
                    4b:f1:5b:a8:5e:57:de:04:72:20:f2:31:e9:48:6d:
                    d2:fa:74:f4:71:11:6b:b5:96:a9:41:d2:8d:47:cb:
                    29:1c:a5:c3:49:d3:ab:e2:4d:5d:56:c4:70:77:20:
                    8b:08:16:d4:68:66:59:3e:30:4a:ec:6a:10:68:59:
                    c6:f4:b6:01:69:ac:dc:13:00:62:dd:f4:cf:92:f2:
                    81:e7:77:09:80:d4:33:c3:bc:c9:af:53:71:32:90:
                    3e:86:68:28:88:74:5c:1a:be:53:78:2c:91:19:a5:
                    4d:e4:0e:0a:14:28:96:6c:d5:e9:b1:fb:1c:07:ba:
                    b8:f4:94:b4:e8:96:67:cf:c7:68:2d:fa:46:f7:62:
                    4f:a8:eb:25:ab:64:3a:66:2c:5b:11:e2:22:f0:43:
                    06:21:d3:a3:38:7f:09:a8:5a:19:8f:b8:1e:fd:db:
                    e5:a9:92:58:73:9d:38:32:da:ad:42:d6:ac:6f:a4:
                    0f:e3:e8:7a:ca:eb:df:3c:3f:9c:0c:0d:04:7e:b7:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F4:68:9F:C3:81:A7:C4:D6:4F:AA:CA:98:EF:EA:C2:26:FF:1D:B3
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3d:8c:6e:2e:82:ab:6e:09:14:9a:98:2e:7d:47:a9:dd:b5:
         3a:a3:4f:d9:6d:7d:36:5d:b0:6a:cf:eb:ac:60:8a:40:c8:f5:
         94:98:e6:2a:e5:f1:e7:d6:fa:98:5b:da:8c:91:6f:71:80:ff:
         2a:63:8d:4e:46:c1:29:15:46:f2:6b:9d:4f:48:b3:1e:6e:d3:
         c7:e7:4d:3c:00:0f:f5:29:a4:b2:40:49:19:96:63:0f:72:2a:
         c4:d0:17:c4:b6:7c:3e:58:c8:4e:f9:8f:20:a5:be:d3:f9:42:
         84:e4:ab:12:3a:e1:7e:f2:3f:eb:65:f0:c0:5e:a7:95:b1:22:
         38:ef:e8:54:e5:ed:8a:2f:77:41:1a:d4:3d:6d:97:27:a4:97:
         2b:a8:85:e6:1b:9c:83:83:f4:d4:4d:c9:94:1a:8c:f8:3b:e8:
         b2:ce:39:e7:33:c7:61:ed:23:82:f0:e9:11:d8:37:c5:05:3e:
         9d:4c:e3:db:5f:0d:44:89:4e:ae:d0:0e:21:10:5a:a3:86:2a:
         37:3e:30:97:6a:53:6d:15:7b:2d:5c:f0:83:3c:4f:ee:7d:1c:
         94:2b:cf:92:86:ac:8b:0b:75:52:54:73:62:84:80:72:14:af:
         4e:6d:99:3c:c4:c7:ad:98:c6:e6:30:48:1d:2a:e7:52:08:7c:
         45:f4:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:31 2025 by rpki-client