Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
File:                     1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json)
Hash identifier:          EjLSacVZD0pQNss1uAv6KZ0sGBJe2Z6Zt8Lb4DPqg1U=
Subject key identifier:   BF:1A:8E:3F:EE:02:D5:05:29:30:02:03:C9:C2:BA:AC:95:BE:8D:83
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       0197B70F4F11F663BA5D70630BF9E31FA946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
Manifest number:          0A3F
Signing time:             Sat 28 Jun 2025 15:02:03 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:03 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:03 +0000
Files and hashes:         1: 0O8PsfQQ837HZC6vH8HZdjQhz9k.roa (hash: Xwa6CcyNtMqGwJ8SwiL0+ATMW4k6h9G4j8VyDVTQCuQ=)
                          2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: mgQrksigWJaUwEuuB1TzRDyZRuCgy3vyyYD3cIR53JQ=)
                          3: 1NsIqndst_On9nYnvKQbaIFnFBo.roa (hash: ygRz+eSAvso8HH5S7ovVpP8CDuvADuXq1qx+4OzSDkg=)
                          4: 6DKPMNriuuz5czJiETGvSTeZJTk.roa (hash: Won6pxgmbG/3Nyt61zaGAHF2tGR423C85mRCMrJv3/8=)
                          5: 8wn9fj0PqtCdtrjvVjs-x_2PjzQ.roa (hash: 7UcC6PjtAm8ZGmqmm7X7V/2fmUSDRZoPvvaJOMKRRsE=)
                          6: A3pbn3ekni2GhddhB21U3DXwZ-Y.roa (hash: w6w3+UNeqriZJvvRJht0jP6LNOMWu7OkSkQqxZTL6Tk=)
                          7: Am3EHuazR5NKapUc7shNSbJ3YpE.roa (hash: WkPWDqODhGSWdXqV4LXZ2J8aMXMEbvI2EsaFMtrCqo0=)
                          8: C-vYvlFYfUXiwi5hu4BNg-H_RfU.roa (hash: Nlk7WgRdvB30t6f6caFVZOFs3Kxbuk6ZqeclTDKzs84=)
                          9: CX2cBCOKzOh_qypbeFmBGdlhLuM.roa (hash: TjA4S9ihv8gxn1r6FtZzJugsqz7gJ5qJNI/t8P7H7gE=)
                          10: DRxPV7g-J1aJlfjrCz40pEPhzQ8.roa (hash: 4fR+vAgAShrw7d32oea15u7iZSKphaePuUR6Y5wxMPQ=)
                          11: EZnxg9to9tj_CGFbyqX0_Anjt-g.roa (hash: bS+3tO9zhYQpPnZP8Cd0s84+g/0K57qgcaxrjbHpLjM=)
                          12: F-Xx3vyPK6Zuw2ickEOsmn77QZ0.roa (hash: TfUjlNMx1vYLh3UKPXaRyW/cNRHghaWp6CGNxQmhNw0=)
                          13: FfGr-un4M5qS3iAEhkFV09RmhD8.roa (hash: SGHONQWGkA5uEdcNNdqrKuafMozrB3z7UJ8XpLHd4+I=)
                          14: Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa (hash: xuz0ZazQYPtF7LGAYIk414qfYlSUwXjrvvWKQZrz71k=)
                          15: G5WWLoCilurJtT83Z6OKohBsBO4.roa (hash: yrvQGqXcqmotE0jktBW27N2NGwSBmRmPOC7tbdNT0K0=)
                          16: GiXPWO_M5_Qz7chgSaADKYyKdjQ.roa (hash: CR+t2FWeT4iCGvfmEuW7cscv5yFtp2gnGfSh1BKnw8o=)
                          17: GuBQqiW-LmEg8stIC6E4AIYuJEs.roa (hash: aTYnjaPKY9lXYdKDON5qB0M/NwQWopdVxCa+5FBEevo=)
                          18: JCdeVSQVLryQs_floRfjIOg1IdA.roa (hash: JMyYzR5Ytfu3qGv+sDPU3QLbpcRzcLEVb4d/DbF5OQk=)
                          19: Joxb-Ov4mOMwVlcCtX9JgcTGC7E.roa (hash: Yl9ue+rBszk7UzJ2CKvzC8soiMg6PpgsbcWehzUF2xc=)
                          20: KJ5M5xCQash8uZRKDjM1gqM6_GA.roa (hash: bGI5aTy4U/ATecO9V+TMfmED/aVfz5oBChs2Drp8ZoA=)
                          21: Kg3SmAND62QL3-SDQn-IRWTqb5U.roa (hash: e+aNLlkluG412rP8rKU5tgRjVlTnT3Y7a6yQ2b8GkaI=)
                          22: NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa (hash: ZIpNbtJtajAkg9tTb3DzFwtmkDZ5B+a0yULTgfFJCGM=)
                          23: NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa (hash: bd0jFVShVRoxlQ2yZQX5k4g9HNjTW4iyAU7DLnrdQJs=)
                          24: OCl4O_g8kh_MMdyOLYMnZrJN_o0.roa (hash: i1wR3mlRtlouSF3tMzR6qf6WRAKsPfUQiKuxrhK0qNU=)
                          25: OTTrSlclWCrRRWM2xxMcTqVQjHg.roa (hash: WiU4r6HmQH1aEfbGFidApr+E2bNSyNZEaoF5S1MwslA=)
                          26: PAdijC34nr5oNMfrJ7fBKertBW0.roa (hash: gutQFHA8Ql/o1ne5M+dpU0TQTfal0TR6oWI0g8prBRA=)
                          27: QiI8gDDw-xAJA3ePxVIRRlGEYdI.roa (hash: C246FPX5mXJCm4V+/x93EQQYecFpNkWeuxla6G3+Gtw=)
                          28: RhTgRnEQVN7BS8zCeDKIuJodexE.roa (hash: kwTo3MfM5TV/NqXvs58S+K2AnfxciliE0IO9j6jlzFA=)
                          29: YIr3E_d8xjFFjCfVVE2xSLJ0-QI.roa (hash: mEm19hWHY9ASBemN4SZReP3DohObdxjngjK7Zv6yXiM=)
                          30: ZsPTXd00YGXAGdlpQHp_4GAJnk8.roa (hash: DOJ94Y4TwJdMVROCCdwmA1CtWDnmA8oBApNpI/15z7o=)
                          31: _KiSxOPdlZjyAMKBUu2shVHXjhI.roa (hash: CeCeupQAOIztWol191+Mn81JbkZ17ESdQ65PUeIBGfE=)
                          32: _Tj_i-7N5zda7qA59iJy4uEXNzI.roa (hash: W1tQMO9u06xEh1f8Nq/CqIAgu1ldZc1/hVaRm3iVhR8=)
                          33: aM8ocR3q8EE7bdbXGv-dz1oPpSc.roa (hash: dnMtZt2ON0ayr7vduG77kGmQK0ucTfTmT1qnf7SK3u8=)
                          34: bFfYuWF2ASD_WhaKHcwniE-EJhc.roa (hash: 7I4u+C+7dGPFU5Dq9B4FirGYzRrbhUT5p5jlp8mFRMc=)
                          35: ctfmZD0DW9qLyBcmD6so3A9jsHU.roa (hash: aC0ussEPUWct/6A8nTu63p7949dtbgKcUheJu2lhu0Q=)
                          36: mwl0r7vx7glziPY_QItxRsSJeAk.roa (hash: 1Ot+hb3FMddnj8lrNQfPiqO4rxPdgpHynBKtjzrIzH4=)
                          37: npPe8XFZ6a2BHwdNHsqb1MolM3s.roa (hash: SYptx1aM+buVWFSsRUXazThSDntWvjmVRSFMm5fwB98=)
                          38: o68Ghde1n_EzeMSw-694dwm9M2o.roa (hash: Y6KCx3LRrw57VbzbPdLVCd2PGVgDxQ3gEG3VGoRjZt0=)
                          39: pUVRAGRxGer_PT9GoNVcHpcoPUc.roa (hash: 9De+mymT+37Q7sJV6Uh4eDoOTy/OcNptGN5ZBYfBFFM=)
                          40: pwoEOeTO5RZHQUnWOLHwrScd5mY.roa (hash: mY6C75sEFICze3RcBiamn1tgNhCa7rp79HYsNFFHVu4=)
                          41: v8DtO9sFqeKg9oTGngfTpCtjaII.roa (hash: JeKCa5d4cZjxM+nA63f6nRxZSxhVJ6hVpgcdWItAlHo=)
                          42: wbdQBewhjGL_o8gz03PFcbQEZfw.roa (hash: 0KEr302c4T/9hrqwNTvBUDuUACLhLVoyeo/Qw/qZOfM=)
                          43: woV9oWvrEJRyOxoXse9vUn_mgHI.roa (hash: ZIXhqfX+KEofmATOkl8AwpHz9QcN0okCG1XU458ix8I=)
                          44: yqHa79yqc_AhTdpIF1z57lBumTw.roa (hash: 3XrQ3wUDbCvMFbRIq0bvRcdv/vcwmJoIo/ROmgZoAgI=)
                          45: z7Kwn4LDCEPgPTaFc4eTapKvf_s.roa (hash: R68ngf3hyKpTSVCx0War1aNzwekx8c09pnwQjDY4JS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:4f:11:f6:63:ba:5d:70:63:0b:f9:e3:1f:a9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Jun 28 15:02:03 2025 GMT
            Not After : Jun 29 15:02:03 2025 GMT
        Subject: CN=bf1a8e3fee02d50529300203c9c2baac95be8d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:da:b6:29:86:46:41:21:5f:27:46:07:37:
                    f1:ff:0d:d9:05:bc:41:02:29:6e:79:31:d4:b5:fc:
                    2f:a2:c9:85:a6:82:60:27:72:f6:23:c0:be:f4:10:
                    6e:40:a8:f7:12:f2:e3:4c:b6:d0:95:9c:dc:5a:75:
                    c6:f2:cb:4b:d0:4c:25:74:b8:4e:d7:a8:76:27:cd:
                    c0:80:c8:7e:6b:bc:5e:64:47:0a:e4:91:7e:0a:bc:
                    5d:d8:cb:d7:d5:17:bb:84:c2:e1:ed:4c:74:38:5f:
                    c0:6e:cd:4d:df:ce:9a:62:52:e3:83:e2:be:0c:cc:
                    2e:10:f8:1f:a0:ec:33:67:81:27:a1:ee:89:e1:a8:
                    87:2b:23:c4:db:5d:95:35:b0:7a:20:66:bf:fe:c5:
                    43:ab:7f:d4:d5:99:d7:a0:d1:30:fb:0b:7a:ec:d6:
                    6c:a5:4e:79:28:9e:9c:02:6b:1c:c8:f8:a3:ef:81:
                    c4:82:1a:27:23:8a:3c:90:4f:83:3c:8f:ea:12:82:
                    ca:d4:3e:46:27:71:da:88:ea:19:95:27:ab:4d:37:
                    6b:d7:bc:22:28:0d:41:29:e3:2e:b0:7f:8b:89:6d:
                    0c:2b:03:e3:c4:c7:25:8b:ea:77:53:c7:68:3d:ee:
                    57:a9:1e:e1:85:e6:3d:92:bc:b5:8c:18:60:e0:c1:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1A:8E:3F:EE:02:D5:05:29:30:02:03:C9:C2:BA:AC:95:BE:8D:83
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:37:47:0e:30:34:4a:a6:4c:11:8f:ae:40:19:d0:dc:ff:
         1a:e9:ab:30:28:ba:6f:1b:94:b2:05:7e:8c:a8:17:13:72:d9:
         e7:f8:cd:e7:13:bf:fb:dc:d8:4d:3c:a8:45:62:18:02:73:ce:
         ae:8a:fa:43:fe:0f:b6:d7:0b:ec:e1:fb:20:f2:e9:55:63:4e:
         92:0c:28:b7:3c:5f:2f:15:f4:bc:f1:e5:f2:fc:d5:52:e1:84:
         82:40:e7:dd:f7:e4:5b:e6:c4:1d:97:5a:77:8b:36:a6:54:a1:
         31:31:49:30:58:39:9c:08:f4:06:dc:c8:36:b4:f1:92:71:0d:
         ca:f4:6c:e8:02:88:18:ae:1b:45:3a:fc:ab:83:7e:c3:e0:f7:
         af:e7:09:6a:8e:f5:28:9b:51:67:72:40:b3:d6:1d:44:fc:c7:
         28:44:a8:73:b1:16:2d:34:a3:2d:be:95:e5:7c:a0:b9:bf:47:
         c4:2e:1d:13:31:b0:19:dc:d7:45:f5:5d:d1:a5:d0:0e:b5:9e:
         8b:a6:3f:8f:20:fe:19:f5:84:1d:7c:18:38:2e:6e:31:a0:c1:
         e6:d5:b2:02:2e:d5:12:fb:8d:ab:73:38:3d:4c:f1:91:e0:0e:
         87:73:7f:01:77:63:f7:10:07:fc:9a:28:f1:44:79:9b:de:c4:
         8f:54:df:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D08R9mO6XXBjC/njH6lGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUwNjI4MTUwMjAzWhcNMjUwNjI5MTUwMjAzWjAzMTEwLwYDVQQD
EyhiZjFhOGUzZmVlMDJkNTA1MjkzMDAyMDNjOWMyYmFhYzk1YmU4ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YzatimGRkEhXydGBzfx/w3ZBbxB
AilueTHUtfwvosmFpoJgJ3L2I8C+9BBuQKj3EvLjTLbQlZzcWnXG8stL0EwldLhO
16h2J83AgMh+a7xeZEcK5JF+Crxd2MvX1Re7hMLh7Ux0OF/Abs1N386aYlLjg+K+
DMwuEPgfoOwzZ4Enoe6J4aiHKyPE212VNbB6IGa//sVDq3/U1ZnXoNEw+wt67NZs
pU55KJ6cAmscyPij74HEghonI4o8kE+DPI/qEoLK1D5GJ3HaiOoZlSerTTdr17wi
KA1BKeMusH+LiW0MKwPjxMcli+p3U8doPe5XqR7hheY9kry1jBhg4MFpIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8ajj/uAtUFKTACA8nCuqyVvo2DMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdI3Rw4w
NEqmTBGPrkAZ0Nz/GumrMCi6bxuUsgV+jKgXE3LZ5/jN5xO/+9zYTTyoRWIYAnPO
ror6Q/4PttcL7OH7IPLpVWNOkgwotzxfLxX0vPHl8vzVUuGEgkDn3ffkW+bEHZda
d4s2plShMTFJMFg5nAj0BtzINrTxknENyvRs6AKIGK4bRTr8q4N+w+D3r+cJao71
KJtRZ3JAs9YdRPzHKESoc7EWLTSjLb6V5Xygub9HxC4dEzGwGdzXRfVd0aXQDrWe
i6Y/jyD+GfWEHXwYOC5uMaDB5tWyAi7VEvuNq3M4PUzxkeAOh3N/AXdj9xAH/Joo
8UR5m97Ej1Tf8w==
-----END CERTIFICATE-----