Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          SXlUOc3HJ0CGsk1zFo9EwIs8T7dX4kUQV8NvgB3f7LU=
Subject key identifier:   60:01:81:78:14:9B:47:61:1F:5C:21:1A:BA:CF:CB:7D:13:C8:3D:22
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       01969E6345CE5D33B03682E25A29DCF75696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          016A
Signing time:             Mon 05 May 2025 03:00:28 +0000
Manifest this update:     Mon 05 May 2025 03:00:28 +0000
Manifest next update:     Tue 06 May 2025 03:00:28 +0000
Files and hashes:         1: 1-FLwx-Jy20x9TsKTgVra0VDGLCI.roa (hash: wYExt0oEgJsljCXxJYDrQQFL3A/9soRSgwhaFbNC2m0=)
                          2: 1Q0UXkJd-TfRbK7BKgSoSPbozUI.roa (hash: QAHfJOYxgI+kMM+oWSa3whwte9TS5mi9F2v/jezbaTs=)
                          3: 3hAgBvDGSMT_l9ox3L_p9jf-T9A.roa (hash: 0YI1GCFO83+XAPwsaYqpDxr2GgHzNz2wso9ALQPXTRA=)
                          4: 3r80YRRCMWUbRMdMpLfHbiOlbfY.roa (hash: H258573yULGCyQ//7b3dYX7AdntI0XJVVhAGkNnlimQ=)
                          5: 6ogVQUHBYYTz25iaBADgawv60yQ.roa (hash: 6hElMUOlfb8OLrcKTvUV6O0D4gV1WFXbakb6RG/fQjY=)
                          6: 6sKepJ27UpBLjSdqmn3KBLPniMI.roa (hash: WCLetK9JTDdG4/uZYX9DMnQXhs5gvrvw80YDnmEgPTI=)
                          7: 7ktGOCiuaxNVf6xdAfkeuisyla0.roa (hash: Cf1BWWAsGXAZCHjkjhZN3wO4tojImkJt3W6WEZhY+MU=)
                          8: 9PSapFMTPNk4IdNW9y6poBt9F-8.roa (hash: 8bpN1GnvHuxF0OMzhkYo8NajNlF4XsVoLSST5wsn0Zk=)
                          9: Bq_bmxbtCoj574nrr-P_sU_UnH8.roa (hash: ep0kklezsEsm6fyrAzHrNiZIZJ18JWgZ7crTbymB5hE=)
                          10: CX1FqPz_rB1rFYm-Mpz-D8387mU.roa (hash: wCnxW0V26P20vCB284mcfIA47doSr/9lS3o6lcuYrfI=)
                          11: EKGpGQHoAZjHd9Nvg2r3sp523lI.roa (hash: L5XLIobFq44kbAJ5nVhGWfhQCToybP4gMKFg8103kqQ=)
                          12: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: LpL8UCvQWAWTXXcRR0b+5deW6AmjnHq8dCjli5d56EQ=)
                          13: LJzc1LSPgx4QIfexUgZXlPyOsBM.roa (hash: mSfJR87+dxbiNgyu8fxRwqnptgr734BfWL94Ukn195o=)
                          14: M2pVezoeP1XqbhlA1W4rb2r9c8A.roa (hash: 9CvBeLUIHoaPRO/Zpyiw7pu6+iGMnqL1XIixDXxO25c=)
                          15: NInBjN9VmlWR0kM4IJbb35yXX4Q.roa (hash: Xo8oHJvXCsMZHqguc/mGbBAJsi6xT4kk+UYEDvmIVeA=)
                          16: OUUenB6cE4WLgcqCuJFd8IuWKI0.roa (hash: bYUqjF/gzi4PflmRwarPOZmoix/hwBusI2ITPO/AI+4=)
                          17: PHjk7HksQoreVKkNoHfGHx9i_5s.roa (hash: LsNFpMXLkk/tBemYYBeM13khUpwfZGn1bGo9IS0Am88=)
                          18: QrSOGH_LL13bmxtsbtKw1YQWiPI.roa (hash: BtD6o4b8L0Ir3CPJyunXO5nZp0ZvlZq4rP3EM7bOxXI=)
                          19: R3mRHKwy3JP67VvuFVM4yTcpo_E.roa (hash: 2ClDjZI/s2ADOp7sfR6YP3vc5C899tzn0f8a9Pmogfg=)
                          20: U52mVOk99igqhqPv8HFUemMxWjI.roa (hash: YUEj329L0D9eTRAFxzIGa/94YS4hgP0ffCPrOs2YH8E=)
                          21: VmM3dRQSyheIEs1bfX6FhbZgi4Y.roa (hash: CqVnaJfL1WyuZw1AEmEyn+1VnCcw8/hgNy0BSvot+34=)
                          22: WTNBF_DUhiABbLvBm0Q2E8ST0t4.roa (hash: vnL+M30OJkCVhlLMKx87A1VJIfeesUcrQ6F9e1Y6wIo=)
                          23: Xr9pef6wt6oZMj86bb13WyfgjzU.roa (hash: hxedRL6/r15pw12lUSQwQ/PVriArCwJCc90hVD0tU2Y=)
                          24: YuZ1gy3tlOodeJ0GnL8VDGo65Og.roa (hash: BC3v0Dl3cG1aikvL7OWlvbHbeypg204fJkwz+Gf4ia4=)
                          25: _CpNwsCs8u4x1l-Yk6-tFdixLuE.roa (hash: NucdduJg4PQVBxsaTVCZv2Ciqs6o3dV0eUALrJQNTYM=)
                          26: a3yccHu39bDbDjayjdUBSdHMsHk.roa (hash: UWsANwb7wip87I4+BteXYp81JlejaMjtkdAwaYYW8Co=)
                          27: bwObaSjCJpxHqyn_J2Zc1UyaDpk.roa (hash: 5LCroiKS+KLVcq5iSNcFsFpFOJRUYv9Ix+9NXv0YNEQ=)
                          28: jpAqXna3C0BjwOBpSfF6soVZcO0.roa (hash: d+qMaS9a2yeSfULyHTLZ9m6sHcw2gyPQTuA5wZETi1Q=)
                          29: jpRHBZLf_q4Ab3-HF019A6C7iC0.roa (hash: XPIdJosbQpsOENbhceS7WOOyP4m8ucmeXHipAQ07T6I=)
                          30: lr4DFCAJKtFd-NxgSOwyNda4ukg.roa (hash: QO9i2PupmQrAXsHGKNVS9TO3V5iVOt7g36S98iPKAR8=)
                          31: mDlfzk4wNcANo3pVoYUMvhrU6g4.roa (hash: TrUq+GUBBSXz+fyCZ7h/cGjhjZW08YcEMQLvZ2IOsF4=)
                          32: nW2fx9NHAZYj2U_OZKxWIdlKWdw.roa (hash: Y6FF2n2W4tBg8uDZfppVIhjbKYSuBfjm1W1yzPBYgso=)
                          33: o5PX18oyMa6qVJCJKVS00mHQnqQ.roa (hash: /ctS4mvyxqWrxzGSYOkCadxtEZhp9YKWaqfprngBNaY=)
                          34: ppRNI4iSiOqT1CYaFUSvQhxAmxE.roa (hash: gOucl2Pwo2OrFoobsos5v7pq9g4A69RHIeq7N4KQNRg=)
                          35: qw7p6clS2YhsNdDV7OVEHG57THA.roa (hash: ln6YKQpvxhfRCoiu+0hB/cJGGn3tv26jLKFncu+e4tg=)
                          36: rA7j8bEErgP7AvTsNy_ett5NxTw.roa (hash: G4G3NJoQY5uMbj/h2+BpwuW+DfhWAn3O+FHfXMH3cHE=)
                          37: tZUvv68-yM-usja9DUYIDzAXY2I.roa (hash: Q0hNbY9f430OK9DvoeHPSnA7JLwYZhiJ1vkImwKJv4k=)
                          38: xL-4tERBYhvX8_aDnKV8HCKxXrQ.roa (hash: l0a54sZs7mvO5yVCnHO9BeY5JawFgum/aC2heZYPowk=)
                          39: xL2UhtkQsQl3DQnbY_Ka3_6XQTo.roa (hash: 5eAaxUjgmgkqu4BwWhkZKr/g62runERo/g7IiX+jYqg=)
                          40: zyXIQuVTwJxcJ2OHbgjeCLiF9QA.roa (hash: fJ4pbQi6AnVBGDfN/qt0T5SrZQEfXmFu9/ASjbvnGCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:45:ce:5d:33:b0:36:82:e2:5a:29:dc:f7:56:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: May  5 03:00:28 2025 GMT
            Not After : May  6 03:00:28 2025 GMT
        Subject: CN=60018178149b47611f5c211abacfcb7d13c83d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:ab:00:14:6d:48:09:c4:85:a1:6e:3e:ea:
                    a6:71:f9:06:42:95:85:bf:d1:0a:b1:d3:87:08:b6:
                    25:85:f2:1c:40:ad:ec:39:02:2f:d5:2b:62:4b:95:
                    e8:30:c7:81:16:2d:76:58:cf:dd:e2:92:a7:3a:1d:
                    76:12:14:68:f5:22:01:7a:36:b4:c8:9a:07:d8:9c:
                    ec:32:8b:3c:13:c6:8d:6a:87:79:91:6c:26:f4:9b:
                    8b:11:0f:c8:cd:31:06:3e:7e:35:89:51:31:fa:5c:
                    24:b4:72:af:08:15:17:14:d4:90:8a:0a:06:d6:51:
                    07:1c:97:ec:4c:03:75:c0:0d:ce:1e:10:f8:53:31:
                    9e:6a:43:ac:94:7e:be:83:cf:57:2d:fb:c6:c4:a2:
                    99:58:81:07:1e:00:af:41:90:ce:ea:20:fa:42:a3:
                    0a:4f:27:ed:ad:69:57:59:cb:86:1d:ec:f3:16:6b:
                    fc:32:25:cc:bc:70:47:61:aa:e5:b4:a5:e4:76:2f:
                    96:dc:72:0f:f6:82:36:b0:27:6f:3f:fe:30:8f:a9:
                    82:21:b4:96:8d:a3:a4:6a:b7:f9:e9:69:f1:b0:cf:
                    3a:a4:08:cf:6c:ad:38:3b:42:57:07:6d:5d:f4:a2:
                    a8:3a:66:7e:82:98:25:52:5b:7c:f7:f3:b8:fd:2b:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:01:81:78:14:9B:47:61:1F:5C:21:1A:BA:CF:CB:7D:13:C8:3D:22
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ec:dc:8b:59:e2:f5:39:3c:d2:df:0b:38:1e:e2:04:df:4c:
         45:16:5c:1a:d6:12:a1:34:f8:ee:4b:39:80:b3:91:bc:bc:f8:
         50:8a:ff:8c:21:b0:af:3a:f5:1d:a6:aa:f6:49:b2:cc:56:3e:
         fc:b3:04:8a:37:b3:b3:47:5d:ab:ee:f1:c6:00:1e:b0:0f:ae:
         13:a8:d5:e8:b6:6a:f9:64:b9:a5:1d:b5:47:b5:d1:54:8a:d5:
         6f:d8:26:e5:48:0e:c3:50:59:db:13:7b:6f:6f:b7:85:48:56:
         5b:06:d7:d4:eb:aa:d5:70:13:25:c1:dc:90:7b:ae:0f:b0:5a:
         65:5e:87:72:cb:c6:c0:f7:6e:dd:b4:5b:41:67:f5:83:c5:b6:
         21:f5:9a:1f:34:3a:6d:48:02:c5:1b:63:f3:3a:73:c6:0e:e0:
         58:86:e0:7c:7b:97:90:6e:bb:a5:50:4b:36:38:c6:d9:36:03:
         a2:c4:6c:a0:23:9c:35:e2:54:d2:af:a5:af:8a:3d:52:44:af:
         b2:74:c9:c3:21:d9:62:0c:ad:c0:45:fc:51:a5:4c:fe:d6:b5:
         2d:6e:7b:23:9b:52:b2:4c:36:57:31:dd:1c:75:fe:fe:9a:b0:
         30:71:b3:ce:68:57:cf:54:81:51:73:7f:71:d9:77:80:f2:95:
         43:52:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----